max_password_length config and logs inconsistent
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Confirmed
|
Medium
|
David Wilde |
Bug Description
We recently rolled out a config change to update the max_password_length to avoid all the log messages. We set this to 54 as mentioned in the release notes which we discovered was a BIG mistake as this broke everyone authenticating using existing application credentials.
There is a bit of confusion as to what to do here and the code and the release notes are inconsistent.
Upgrading to zed we got a lot of these in the logs [1]:
"Truncating password to algorithm specific maximum length 72 characters."
In the config help [2] for "max_password_
"The bcrypt max_password_length is 72 bytes."
In the release notes [3] it say:
"Currently only bcrypt has fixed allowed lengths defined which is 54 characters."
[1] https:/
[2] https:/
[3] https:/
description: | updated |
Changed in keystone: | |
status: | New → Confirmed |
importance: | Undecided → Low |
assignee: | nobody → David Wilde (dave-wilde) |
importance: | Low → Medium |