cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CLOUDSTACK-8868) use PasswordGenerator.generateRandomPassword() to generate systemvm passwords
Date Thu, 03 Dec 2015 09:00:19 GMT

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-8868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15037522#comment-15037522
] 

ASF subversion and git services commented on CLOUDSTACK-8868:
-------------------------------------------------------------

Commit 97a5d6bd20da8cd4a03b4ea038c1664134f812cc in cloudstack's branch refs/heads/master from
[~rajanik]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=97a5d6b ]

CLOUDSTACK-8868: use same method to generate passwords for system/guest vms

generateRandomPassword() is supposed to create root user passwords.
Right now it is only used on the guest VMs. The format of the passwords
it creates are of the form "random 3-character string with a lowercase
character, uppercase character, and a digit" + random n-character string
with only lowercase characters".

For whatever reason it was that we use generateRandomPassword() for
guest VM root user passwords(maybe more secure?) we should use the same
function for system VM root user passwords.


> use PasswordGenerator.generateRandomPassword() to generate systemvm passwords
> -----------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-8868
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-8868
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>    Affects Versions: 4.5.2, 4.6.0
>            Reporter: Rajani Karuturi
>            Assignee: Rajani Karuturi
>
> generateRandomPassword() is supposed to create root user passwords. Right now it is only
used on the guest VMs. The format of the passwords it creates are of the form "random 3-character
string with a lowercase character, uppercase character, and a digit" + random n-character
string with only lowercase characters".
> For whatever reason it was that we use generateRandomPassword() for guest VM root user
passwords(maybe more secure?) we should use the same function for system VM root user passwords.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message