Return-Path: X-Original-To: apmail-cloudstack-issues-archive@www.apache.org Delivered-To: apmail-cloudstack-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id B523218C6B for ; Thu, 3 Dec 2015 09:00:20 +0000 (UTC) Received: (qmail 45793 invoked by uid 500); 3 Dec 2015 09:00:20 -0000 Delivered-To: apmail-cloudstack-issues-archive@cloudstack.apache.org Received: (qmail 45686 invoked by uid 500); 3 Dec 2015 09:00:20 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 45637 invoked by uid 500); 3 Dec 2015 09:00:20 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 45629 invoked by uid 99); 3 Dec 2015 09:00:20 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Dec 2015 09:00:20 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id BF24F2C1F6B for ; Thu, 3 Dec 2015 09:00:19 +0000 (UTC) Date: Thu, 3 Dec 2015 09:00:19 +0000 (UTC) From: "ASF subversion and git services (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (CLOUDSTACK-8868) use PasswordGenerator.generateRandomPassword() to generate systemvm passwords MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-8868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15037522#comment-15037522 ] ASF subversion and git services commented on CLOUDSTACK-8868: ------------------------------------------------------------- Commit 97a5d6bd20da8cd4a03b4ea038c1664134f812cc in cloudstack's branch refs/heads/master from [~rajanik] [ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=97a5d6b ] CLOUDSTACK-8868: use same method to generate passwords for system/guest vms generateRandomPassword() is supposed to create root user passwords. Right now it is only used on the guest VMs. The format of the passwords it creates are of the form "random 3-character string with a lowercase character, uppercase character, and a digit" + random n-character string with only lowercase characters". For whatever reason it was that we use generateRandomPassword() for guest VM root user passwords(maybe more secure?) we should use the same function for system VM root user passwords. > use PasswordGenerator.generateRandomPassword() to generate systemvm passwords > ----------------------------------------------------------------------------- > > Key: CLOUDSTACK-8868 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-8868 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the default.) > Affects Versions: 4.5.2, 4.6.0 > Reporter: Rajani Karuturi > Assignee: Rajani Karuturi > > generateRandomPassword() is supposed to create root user passwords. Right now it is only used on the guest VMs. The format of the passwords it creates are of the form "random 3-character string with a lowercase character, uppercase character, and a digit" + random n-character string with only lowercase characters". > For whatever reason it was that we use generateRandomPassword() for guest VM root user passwords(maybe more secure?) we should use the same function for system VM root user passwords. -- This message was sent by Atlassian JIRA (v6.3.4#6332)