<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:΢ÈíÑźÚ
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hi All,<div><br></div><div>I have reported bugs in launchpad about those bugs:</div><div><br></div><div><a href="https://bugs.launchpad.net/nova/+bug/1461431" target="_blank">https://bugs.launchpad.net/nova/+bug/1461431</a></div><div><a href="https://bugs.launchpad.net/nova/+bug/1461433" target="_blank">https://bugs.launchpad.net/nova/+bug/1461433</a></div><div><br></div><div>Please have a look if you are interested.</div><div><br></div><div>I also agree that Keystone should at least provide the option of basic password checks, and if the users are not satisfied with the provided solution, then they can choose more advanced products.<br><br>BR,</div><div><br></div><div>Zheng<br><br><div>> Date: Wed, 3 Jun 2015 21:02:19 +0800<br>> From: anlin.kong@gmail.com<br>> To: openstack-dev@lists.openstack.org<br>> Subject: Re: [openstack-dev] [nova][security] Enable user password complexity verification<br>> <br>> On Wed, Jun 3, 2015 at 7:49 PM, David Stanek <dstanek@dstanek.com> wrote:<br>> ><br>> > On Wed, Jun 3, 2015 at 6:04 AM liusheng <liusheng1175@126.com> wrote:<br>> >><br>> >> Thanks for this topic, also, I think it is similar situation when talking<br>> >> about keystone users, not only the instances's password.<br>> >><br>> ><br>> > In the past we've talked about having more advanced password management<br>> > features in Keystone (complexity checks, rotation, etc). The end result is<br>> > that we are not adding them because we would like to get away from managing<br>> > users in Keystone that way. Instead we are pushing for users to integrate<br>> > Keystone with more fully featured identity products.<br>> ><br>> <br>> Hi, David,<br>> <br>> Thanks for the info you provided. Would you please give me some<br>> links(emails or etherpad) about the discussion before?<br>> <br>> IMHO, as an identity management project, with user-faced APIs, Keytone<br>> should provide such security feature options to users, to make it<br>> self-contained, we could not always rely on other compoment or<br>> product(Horizon, 3rd party component, etc.) to do something really<br>> import for Keystoen itself.<br>> <br>> -- <br>> Regards!<br>> -----------------------------------<br>> Lingxian Kong<br>> <br>> __________________________________________________________________________<br>> OpenStack Development Mailing List (not for usage questions)<br>> Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<br></div></div> </div></body>
</html>