[Fedora-directory-devel] Request for reviews and comments: [Bug 216983] New: Make random password generation work with policies
by Noriko Hosoi
Summary: Make random password generation work with policies
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216983
Description of problem:
passwd_modify_generate_passwd (passwd_extop.c) always generates 8-bytes random
characters made by PK11_GenerateRandom and ldif_base64_encode. It needs to
generate a password which follows the password policy if it's defined.
------- Additional Comments From nhosoi(a)redhat.com 2006-11-27 14:18 EST -------
Created an attachment (id=142208)
--> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=142208&action=view)
cvs diff (passwd_extop.c)
File:
ldap/servers/slapd/passwd_extop.c
Changes:
1. Renamed passwd_modify_generate_passwd to
passwd_modify_generate_basic_passwd, which algorithm is used when no specific
password rule or just the minimum length is given.
2. If some other rules are set, passwd_modify_generate_policy_passwd is called
and generates a password which fulfills the requirement.
Note: this password generator does not support passwordMin8Bit. If it
generates a password which includes 8-bit characters, most likely they won't be
able to be displayed or input from the users' keyboard. We should note it in the
doc...
------- Additional Comments From nhosoi(a)redhat.com 2006-11-27 14:21 EST -------
Created an attachment (id=142213)
--> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=142213&action=view)
generated password sample
Attached is the sample output from ldappasswd. Do you think this quality of
the randomness satisfies the requirement?
16 years, 10 months
Re: [Fedora-directory-devel] Auto Enrollment Proxy source code
by Steve Parkinson
> Subject: [Fedora-directory-devel] Auto Enrollment Proxy source code
> Date: Mon, 27 Nov 2006 14:14:43 +0000
> From: Christian Brindley <christian.brindley(a)gmail.com>
> Reply-To: Fedora Directory server developer discussion.
> <fedora-directory-devel(a)redhat.com>
> To: fedora-directory-devel(a)redhat.com
>
> I have been looking at the Auto Enrollment Proxy (AEP) wiki pages.
> This is a very interesting area, and I was wondering if the windows
> source code is available.
>
> Thanks,
>
> Christian
Hi Christian,
The current source code is here:
http://cvs.fedora.redhat.com/lxr/dirsec/source/windowsautoenroll/
The DCOM interface implementation is in proxy.cpp.
The source code today will not be building for you. Soon I will publish:
- some crucial items that I wasn't able to ship (dcom proxy and stub code)
- additional functionality in my local tree that need to get merged,
- significant some cleanup
Steve
16 years, 10 months