[AMBARI-10018] Kerberos: Password generator needs to generate passwords based on rules to satisfy password policy

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.1.0
• Component/s: ambari-server
• Labels: kerberos
• Epic Link: Ambari Automated Kerberization
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 10/Mar/15 22:39
• Updated: 07/May/15 20:05
• Resolved: 07/May/15 18:47

Description

The password generator used to generate passwords for identities needs to generate passwords based on a rule set rather than just a random sequence of characters.

In a KDC (MIT or Active Directory), there may be a policy in place requiring a certain characteristics for the password. By creating a password consisting if 18 characters pulled randomly from abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890?.!$%^*()-_+=~, there is no guarantee that any specific policy will be met.

The following rules should be settable:

• Length
• Minimum number of lowercase letters (a-z)
• Minimum number of uppercase letters (A-Z)
• Minimum number of digits (0-9)
• Minimum number of punctuation characters (?.!$%^*()-_+=~)