OpenStack Identity (keystone)

  1. Bug #1175906
  2. Comment #20

Comment 20 for bug 1175906

Revision history for this message
Grant Murphy (gmurphy) wrote : Re: passlib long password DoS

Sounds reasonable to me. As long as introducing the per user maxlength doesn't introduce too many other headaches.
FWIW I would also suggest the move towards using passlibs CryptContext instead of embedding the algorithm etc in the code.