kura
kura copied to clipboard
Minimum Password Lenght Ignored and No Limit Set
User can set "Minimum password length" to "999999999", which is a pretty big minimum password lenght. I would change this that the maximum value is something similar to 255, as password with 255 characters is more then enoguh long. Also for now this field is totally ignored when updating password.
Testflow:
- Login to Kura as admin/admin
- Go to WebConsole Service and change "Minimum password length" to "999999999"
- Apply changes
- Try to change password so it contains only couple of characters and try to apply the changes
- Observe how Kura does not chcek the minimal length of password
Expected behavior "Minimum password length" should not be ignored when creating new password.
Screenshot: /
Target Environment (please complete the following information): Board: Raspberry Pi 3 OS version: Linux raspberrypi 4.19.75-v7+ # 1270 SMP Tue Sep 24 18:45:11 BST 2019 armv7l GNU/Linux Kura version: 4.2.0_SNAPSHOT (Link to the specific Kura version -from May 4th 2020)