Rob Crittenden wrote:
Pavel Zůna wrote:
Fix bugs: 510740, 510739, 510735, 510733, 510532

Pavel

A couple of issues with the max values. I checked DS and I think the maxes should shadow it.

krbpwdhistorylength: 24
krbpwdmindiffchars: 6
Ok, I picked most of the max values at random. I'm changing history length max to 24, but I left mindiffchars at 5, because according to `man kpasswd` there's only 5 different character classes.


And I have some further questions for the team.

Do we want to limit password validity to 1 year max? Do we need a limit at all other than maxInt?

Is 30 big enough for a password?

This doesn't seem to enforce that maxlife > minlife.
It does now. :)

rob


Pavel

Attachment: 0002-Rewrite-pwpolicy-plugin-based-on-baseldap.py.patch
Description: application/mbox

_______________________________________________
Freeipa-devel mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to