openstack-ansible-security/doc/source/developer-notes/V-38475.rst

Configuration required

Ubuntu 14.04 does not set a password length requirement by default. The STIG recommends passwords to be a minimum of 14 characters in length. To apply this setting, set the following Ansible variable:

password_minimum_length: 14

Deployers are urged to avoid the use of passwords and rely upon SSH keys if possible.