Keystone doesn't require passwords on user creation because the authentication methods used by keystone are configurable [0]. It is possible for a keystone deployment to use another authentication method in-place of traditional password authentication. Because we can't guarantee the way in which keystone is deployed, we shouldn't require passwords be supplied for deployments that don't use or need them.
Let me know if you have any additional questions, or just swing by the #openstack-keystone channel on Freenode (if you haven't already).
Hi Karan,
Keystone doesn't require passwords on user creation because the authentication methods used by keystone are configurable [0]. It is possible for a keystone deployment to use another authentication method in-place of traditional password authentication. Because we can't guarantee the way in which keystone is deployed, we shouldn't require passwords be supplied for deployments that don't use or need them.
Let me know if you have any additional questions, or just swing by the #openstack-keystone channel on Freenode (if you haven't already).
[0] https:/ /github. com/openstack/ keystone/ blob/8dd27d3368 ce0aa396386010f 6aec5ed6304d687 /etc/keystone. conf.sample# L333-L357