Alex Willmer f5aa9df1fd Include '/' & '.' when password_hash generates a new salt ...

The password_hash filter will generate a salt value if none is supplied.
The character set used by Ansible

(upper & lowercase letters, digits)

did not match that used by libc crypt

(upper & lowercase letters, digits, full stop, forward slash).

This resulted in a slightly smaller key space, and hence hashes would be
slightly easier to attack (e.g. by dictionary, brute force).

2017-03-30 12:33:39 -07:00

..

ansible

Include '/' & '.' when password_hash generates a new salt

2017-03-30 12:33:39 -07:00