[Freeipa-devel] [freeipa PR#317][comment] Unify password generation across FreeIPA
mbasti-rh
freeipa-github-notification at redhat.com
Wed Dec 7 12:57:56 UTC 2016
URL: https://github.com/freeipa/freeipa/pull/317
Title: #317: Unify password generation across FreeIPA
mbasti-rh commented:
"""
Please replace this by something sane,
```
return sha1(ipautil.ipa_generate_password()).hexdigest()
```
security by obscurity worked well in Roman empire, but now please generate directly password with entropy 128bits without using sha1
"""
See the full comment at https://github.com/freeipa/freeipa/pull/317#issuecomment-265440651
More information about the Freeipa-devel
mailing list