Username & password

From RPM Wiki

Table of contents

Per user

Allowed characters

Usernames and passwords may consist of only:

abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
1234567890
_ . ! ~ * ' ( ) , "
  • Spaces are allowed, but leading and trailing spaces will be trimmed.
    • As with all HTML display in RPM, consecutive spaces in usernames will only be shown as a single space on the page.
  • All illegal characters are stripped.
  • All character stripping occurs before length is checked (see below).

Length

  • Usernames must be from 1 to 64 characters long (inclusive).
  • Passwords must be from 6 to 64 characters long (inclusive).

Unique

  • Usernames must be unique among across all the users in a deployment.
  • Passwords do not have to be unique.

Case

  • Usernames are case insensitive.
    • Usernames are always saved and displayed in all lowercase.
    • Example: You can't have both a "Jade" user and a "jade" user in the same deployment.
  • Passwords are case sensitive.
    • Example: "mypassword" will not get you in if the password is "myPASSword"

Password display

  • When creating a user the password is entered in plain text.
  • When entering a password to logon or change a password, the characters are hidden.
  • A password in the database is otherwise never displayed.
    • In fact it can't be since it is only stored as a one-way hash. This is why a lost password must be replaced with a new one, and we can't just tell someone what their password is.

History

  • The user and logon infrastructure was among the first parts of RPM to be built.
  • Wolf: Username and password limit increased from 24 to 64.
  • May 31, 2006 hotfix: Many characters added and username and password character list made the same. One reason was to make any valid email address (64 characters or shorter) eligible for use.
  • This page was last modified 16:36, 22 Jun 2009.
  • This page has been accessed 987 times.