Mailinglist Archive: opensuse-bugs (12990 mails)

< Previous Next >
[Bug 462606] Wish: Multilingual password option
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Fri, 23 Jan 2009 08:24:02 -0700 (MST)
  • Message-id: <20090123152402.8D4A2CC7CD@xxxxxxxxxxxxxxxxxxxxxx>

User draht@xxxxxxxxxx added comment

Roman Drahtmueller <draht@xxxxxxxxxx> changed:

What |Removed |Added
CC| |draht@xxxxxxxxxx
Info Provider|draht@xxxxxxxxxx |

--- Comment #2 from Roman Drahtmueller <draht@xxxxxxxxxx> 2009-01-23 08:24:01
MST ---
Hello Dotan,

the request certainly makes sense, within its scope, that is. There are however
two issues with it that make it lesser desireable than practical:

1) reduced security. If an automated attack is ran on the password prompting
program, the amount of positively accepted passwords can be drastically fewer
than actually required. Passwords are often not considered secure enough for
many use cases, and minimum lengths as well as varying character classes are
mandated to make dictionary attacks more difficult. Lowering the password
checking mechanisms is certainly going into the opposite direction.

2) The password prompter does not know which type of keyboard is attached, or
if there is one attached in the first place.

As a consequence, a layout-transparent password checking setup would have to be
centrally configured in the pam subsystem. The resulting architecture mix-up
between a security functional layer on one side and higher level prompting
programs such as the kde screenlock or kwallet is clearly not desired.

I kept running into the same problem every now and then, too, when I was using
French or Swiss German keyboards for entering passwords to access my systems
remotely. Not using keyboard layout specific keys is the correct answer to
this problem, a translation or mapping scheme between keyboard layouts within
the scope of the password checking pam subsystem does not seem to be feasible.

There is another solution, though: Switching the keyboard layout using key
combinations or hot keys. Have you tried that out?

Thank you,

Configure bugmail:
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >