Bug 1016530

Summary:	Need to click DONE button twice to accept supposedly weak root password
Product:	[Fedora] Fedora	Reporter:	Alexander Todorov <atodorov>
Component:	anaconda	Assignee:	Anaconda Maintenance Team <anaconda-maint-list>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	20	CC:	amulhern, anaconda-maint-list, dshea, g.kaviyarasu, jonathan, mkolman, sbueno, vanmeeuwen+fedora, vpodzime
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-10-08 13:48:47 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Alexander Todorov 2013-10-08 10:20:09 UTC

Description of problem:

When entering the root password Anaconda thinks it is weak (red bar shown, label says weak). I enter it in the two fields and click the Done button. Upon first click the first root password field is highlightened as if to remind me I have to change it. Then I click Done once again and it is accepted. 


Is this by design ? It is very annoying. 

On a related issue: what are the rules for strong passwords in Fedora 20? The password I enter: 

* is 9 chars long
* has upper space characters
* has lower case characters
* has digits



Version-Release number of selected component (if applicable):
anaconda-20.22-1.fc20.x86_64.rpm 
Fedora-20 Beta-TC2


How reproducible:
always


It is very annoying for a QE person who does installation testing (or anyone who installs a lot) to have to click twice this button.

Comment 1 Alexander Todorov 2013-10-08 13:35:14 UTC

OK, I now see the blue strip at the bottom which tells me that I will have to press Done twice. 

However my other question still stands: what is a weak and strong password in Fedora 20? Where can I see the rules used for validation?

Comment 2 David Shea 2013-10-08 13:48:47 UTC

Anaconda uses libpwquality to determine the password strength. Anything with a score less than 75 is considered a weak password. For passwords that fail basic validation checks (length, dictionary words, palindrome) there will be a reason displayed in the error bar at the bottom of the screen.

The error bar will be orange in the next release of anaconda, like it was in F19, so that will at least be more noticeable in the future.

Comment 3 Alexander Todorov 2013-10-09 08:16:47 UTC

(In reply to David Shea from comment #2)
> 
> The error bar will be orange in the next release of anaconda, like it was in
> F19, so that will at least be more noticeable in the future.


Hi David,
I didn't see the error bar because it is at the bottom and my screen height is 768px. Is it possible for this piece to move on top so that everything is visible even on smaller screens ?

Comment 4 Vratislav Podzimek 2013-10-17 11:22:32 UTC

(In reply to Alexander Todorov from comment #3)
> (In reply to David Shea from comment #2)
> > 
> > The error bar will be orange in the next release of anaconda, like it was in
> > F19, so that will at least be more noticeable in the future.
> 
> 
> Hi David,
> I didn't see the error bar because it is at the bottom and my screen height
> is 768px. Is it possible for this piece to move on top so that everything is
> visible even on smaller screens ?
Anaconda supports screens with the minimal resolution 800x600, so 768px should work. If the installation window doesn't fit your 768px screen, please file a bug.