kura icon indicating copy to clipboard operation
kura copied to clipboard

Minimum Password Lenght Ignored and No Limit Set

Open LeoNerdoG opened this issue 4 years ago • 0 comments

User can set "Minimum password length" to "999999999", which is a pretty big minimum password lenght. I would change this that the maximum value is something similar to 255, as password with 255 characters is more then enoguh long. Also for now this field is totally ignored when updating password.

Testflow:

  1. Login to Kura as admin/admin
  2. Go to WebConsole Service and change "Minimum password length" to "999999999"
  3. Apply changes
  4. Try to change password so it contains only couple of characters and try to apply the changes
  5. Observe how Kura does not chcek the minimal length of password

Expected behavior "Minimum password length" should not be ignored when creating new password.

Screenshot: /

Target Environment (please complete the following information): Board: Raspberry Pi 3 OS version: Linux raspberrypi 4.19.75-v7+ # 1270 SMP Tue Sep 24 18:45:11 BST 2019 armv7l GNU/Linux Kura version: 4.2.0_SNAPSHOT (Link to the specific Kura version -from May 4th 2020)

LeoNerdoG avatar May 06 '20 09:05 LeoNerdoG