Avoid error on large passwords

[Dan Prince]

We should put an upper limit on the password length.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/5507

[Robert Clark (robert-clark)]

I don't understand where the requirement to do this has come from.

The proposed fix doesn't limit password length, it truncates it. In my opinion this is bad practice, in any password scheme the strength of the created password should be understood by both parties. Truncating a password before storing/checking leads to a miss-match where a supplied password has more entropy than that which is used for authentication.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/5507
Committed: http://github.com/openstack/keystone/commit/239e4f64c2134338b32ffd6d42c0b6ff70cd040c
Submitter: Jenkins
Branch: master

commit 239e4f64c2134338b32ffd6d42c0b6ff70cd040c
Author: Dan Prince <email address hidden>
Date: Fri Mar 16 21:46:31 2012 -0400

    Add check for MAX_PASSWORD_LENGTH to utils.

    Updates to keystone password hashing and checking functions so
    that a max password length is enforced.

    Fixes LP Bug #959288.

    Change-Id: Id3048f3c916e92c59ac5b063d09c3d612d51c97c