This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 80686 - Check for the length of admin password
Summary: Check for the length of admin password
Status: VERIFIED FIXED
Alias: None
Product: serverplugins
Classification: Unclassified
Component: Sun Appserver 9 (show other bugs)
Version: 5.x
Hardware: All All
: P3 blocker (vote)
Assignee: Vince Kraemer
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-07-20 08:49 UTC by Lukas Jungmann
Modified: 2006-07-26 16:26 UTC (History)
0 users

See Also:
Issue Type: DEFECT
Exception Reporter:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Lukas Jungmann 2006-07-20 08:49:24 UTC 
-go to SJS registration wizard
-set platform location and choose Create personal domain
-go to the last panel (the one where user is setting username/password for admin)
-set admin username: "admin", password: "admin" and press finish

=> domain creation will fail because password.lenght() < 8

I think there should be some check for password's lenght directly in the wizard
as we know that admin password must have at least 8 characters
Comment 1 Vince Kraemer 2006-07-24 17:56:13 UTC 
easy fix
Comment 2 Vince Kraemer 2006-07-24 23:06:52 UTC 
Checking in Bundle.properties;
/cvs/serverplugins/sun/appsrv81/src/org/netbeans/modules/j2ee/sun/ide/j2ee/ui/Bundle.properties,v
 <--  Bundle.properties
new revision: 1.2.8.4.2.8; previous revision: 1.2.8.4.2.7
done
Checking in AddDomainNamePasswordPanel.java;
/cvs/serverplugins/sun/appsrv81/src/org/netbeans/modules/j2ee/sun/ide/j2ee/ui/AddDomainNamePasswordPanel.java,v
 <--  AddDomainNamePasswordPanel.java
new revision: 1.1.2.3.2.2; previous revision: 1.1.2.3.2.1
done
Comment 3 Lukas Jungmann 2006-07-24 23:46:41 UTC 
sorry, but fixed only partially - there isn't check for an empty password
Comment 4 Vince Kraemer 2006-07-25 20:41:03 UTC 
Note: the user is allowed to leave the admin username and password blank in the
wizard.  The user is prompted for the name and password later, right before the
instance/domain is created.  If the user enters the values in this "second
query", the values are not written into their user directory.  [security]

Checking in j2ee/ui/Bundle.properties;
/cvs/serverplugins/sun/appsrv81/src/org/netbeans/modules/j2ee/sun/ide/j2ee/ui/Bundle.properties,v
 <--  Bundle.properties
new revision: 1.2.8.4.2.9; previous revision: 1.2.8.4.2.8
done
Checking in j2ee/ui/AddDomainWizardIterator.java;
/cvs/serverplugins/sun/appsrv81/src/org/netbeans/modules/j2ee/sun/ide/j2ee/ui/AddDomainWizardIterator.java,v
 <--  AddDomainWizardIterator.java
new revision: 1.2.2.3.2.8; previous revision: 1.2.2.3.2.7
done
Comment 5 Lukas Jungmann 2006-07-26 16:26:11 UTC 
This is better, thanks :)