Bug 1230293

Summary: anaconda 23.9-1 has reverted to requiring a complex password
Product: [Fedora] Fedora Reporter: satellitgo
Component: anacondaAssignee: Anaconda Maintenance Team <anaconda-maint-list>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: rawhideCC: anaconda-maint-list, g.kaviyarasu, jonathan, kvolny, lsatenstein, robatino, satellitgo, scottro11, vanmeeuwen+fedora
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-08-11 12:35:53 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description satellitgo 2015-06-10 14:55:05 UTC
Description of problem:
anaconda 23.9-1 has reverted to requiring a complex password

Version-Release number of selected component (if applicable):
anaconda 23.9-1  in boot.iso x86_64  (2015-06-07)

How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:
accept shorter password as fixed in f22 release

Additional info:

Comment 1 David Shea 2015-06-10 14:59:32 UTC
Anaconda added a means of configuring the password policy through the pwpolicy kickstart command, so it is up to the spins to define a password policy. This was discussed in https://fedorahosted.org/fesco/ticket/1412, and the only reason the change was reverted for F22 was because FESCO decided there was not enough time to create a distro- (or products-) wide password policy.

Comment 2 satellitgo 2015-06-10 16:46:50 UTC
however this does not address the boot.iso (netinstall) password usecase which this bug discusses.

Comment 3 David Shea 2015-07-25 17:57:41 UTC
*** Bug 1246771 has been marked as a duplicate of this bug. ***

Comment 4 Karel Volný 2015-08-11 10:45:55 UTC
I believe comment #2 is a valid concern

also, I don't believe something like "write your own kickstart which would let you go without password at all" is a good answer when I just want to do something like 'qemu-kvm -cdrom some-install.iso fedora-scratch.qcow2' and click through, not having to spend half a day studying what is this kickstart thing all about ...

Comment 5 David Shea 2015-08-11 12:35:53 UTC
(In reply to Karel Volný from comment #4)
> I believe comment #2 is a valid concern

Please think via the ongoing discussion that was set up for exactly this purpose instead of harassing people via bug statuses.

*** This bug has been marked as a duplicate of bug 1250746 ***

Comment 6 Leslie Satenstein 2015-08-12 12:39:54 UTC
The password rules in Annaconda should match the default rules from Fedora Linux.
Fedora Linux allows me to enter #xxxxx001 (for example), but anaconda rejects that password.  xxxxx or xxxxxx , when pre-pended with # and post pended by 001, or 002,  are accepted by Fedora Linux, but not by annaconda.

To complete my installation I use password
#montreal001   for root and user.

After booting, I change the root and user passwords to comply with Linux rules. 

Please reopen bug against anaconda password rule adherence.  At least allow done/done to force acceptance of presented password.

Comment 7 Leslie Satenstein 2015-08-12 12:47:32 UTC
The password rules in Annaconda should match the default rules from Fedora Linux.


Fedora Linux allows me to enter #xxxxx001 (for example), but anaconda rejects that password. xxxxx or xxxxxx , even when pre-pended with # and post pended by 001, or 002. The format #xxxxxx00n is accepted by Fedora Linux, but not by annaconda. xxxxxx = eilsel or eirual or guest

To complete my installation with Fedora 23 I use password
#montreal001 for root and user, so as to avoid problems. 

After booting, I change the root and user passwords to comply with and respecting the Linux rules.

Please reopen bug against anaconda password rule adherence. At least allow done/done to force acceptance of presented password.