Bug 1198539 - TC8: Please specify what you means by strong password in bottom bar
Summary: TC8: Please specify what you means by strong password in bottom bar
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: libpwquality
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Tomas Mraz
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-03-04 10:41 UTC by Pravin Satpute
Modified: 2018-12-20 15:18 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-12-20 15:18:39 UTC
Type: Bug


Attachments (Terms of Use)

Description Pravin Satpute 2015-03-04 10:41:43 UTC
Description of problem:
I tried with 
1. small letter and number. It shows weak.
2. one caps and other small and number. still it shows weak.

then tried one small, caps and special character and numerals then it shows me fair.


Version-Release number of selected component (if applicable):
22.20.1-1

How reproducible:
everytime

Steps to Reproduce:
1. In setup, try to set root password.
2. try above mentioned combinations
3. 

Actual results:
Users do not get any hint on what it means by strong/fair password.

Expected results:
One should inform users what it means by fair/strong password. Else he will keep on searching for strong password all time.

Additional info:
Desktop/Laptop level user does not care much about password, since that machine remains with them all the time. 
I have seen number of people just single character as a password. Since they need to login to machine 100 times a day. 

Good if we can avoid this strong password criteria and ease life of laymen users.

Comment 1 David Shea 2015-03-04 18:58:19 UTC
Anaconda already displays the messages from libpwquality concerning the password. If you feel these messages are insufficient, they would need to be improved in libpwquality.

Comment 2 David Shea 2015-03-04 18:59:32 UTC
(In reply to Pravin Satpute from comment #0)
> Additional info:
> Desktop/Laptop level user does not care much about password, since that
> machine remains with them all the time. 
> I have seen number of people just single character as a password. Since they
> need to login to machine 100 times a day. 
> 
> Good if we can avoid this strong password criteria and ease life of laymen
> users.

There is already an option to create a user with no password at all. Instead of using useless passwords, I would recommend using no passwords.

Comment 3 Pravin Satpute 2015-03-05 07:02:53 UTC
Aha, i missed that option. 
Still there is need to mention what is meant by fair, strong password. I noticed if i increase length of password still it makes it fair password. 

Good to inform that to user.

Comment 4 Pravin Satpute 2015-05-01 07:44:49 UTC
In Fedora Beta, i see user can use his choice of password by pressing "Done" twice. 

If that is final, then we can close this bug.

Comment 5 Tomas Mraz 2018-12-20 15:18:39 UTC
We are not going to pursue this RFE at this point. If anyone wishes to work on this I'd suggest creating pull request on libpwquality upstream.

https://github.com/libpwquality/libpwquality


Note You need to log in before you can comment on or make changes to this bug.