freeipa

#6116 Increase length of passwords generated by installer
Closed: Fixed Opened by mbasti.

Closed: Fixed
Reopen Issue

Currently with default settings, generated password is 12 characters long, in current character set it gives entropy between 64bits and 80bits.

This entropy should be at least 128bits to feel safe nowadays, so default settings of password length should be 22. (https://en.wikipedia.org/wiki/Password_strength)

Applicable to:

  • kerberos master password
  • KRA
  • NSSDB passwords
  • temporary passwords during installation

Also we should keep 12 characters long password for temporary user and host passwords, to not force users rewrite super long passwords.

master:

  • 51ccde25f7ec0d5309c52b5349992652c7e17a01 Increase default length of auto generated passwords

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1363756

Metadata Update from @mbasti:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.4.1
Metadata
None
None
None
Normal
task
IPA
easyfix
1
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.