IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Disallow '<' and non-ASCII characters in the DM password

Browse Source 
pkisilent does not handle these properly.

https://fedorahosted.org/freeipa/ticket/2675
This commit is contained in:
Petr Viktorin 2012-05-11 09:08:59 -04:00 committed by Martin Kosek
parent ece68f381a
commit 1de37e8110
1 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
install/tools/ipa-server-install
View File

@ -102,12 +102,14 @@ def validate_dm_password(password):
raise ValueError("Password must be at least 8 characters long")
if any(ord(c) < 0x20 for c in password):
raise ValueError("Password must not contain control characters")
if ' ' in password:
raise ValueError("Password must not contain a space (\" \")")
if '&' in password:
raise ValueError("Password must not contain an ampersand (\"&\")")
if '\\' in password:
raise ValueError("Password must not contain a backslash (\"\\\")")
if any(ord(c) >= 0x7F for c in password):
raise ValueError("Password must only contain ASCII characters")
# Disallow characters that pkisilent doesn't process properly:
bad_characters = ' &\\<'
if any(c in bad_characters for c in password):
raise ValueError('Password must not contain these characters: %s' %
', '.join('"%s"' % c for c in bad_characters))
def parse_options():
# Guaranteed to give a random 200k range below the 2G mark (uint32_t limit)