diff --git a/deployment/login-defs/login-defs-baremetal-ansible.yaml b/deployment/login-defs/login-defs-baremetal-ansible.yaml
index bbd6230c39..bd2439a2fb 100644
--- a/deployment/login-defs/login-defs-baremetal-ansible.yaml
+++ b/deployment/login-defs/login-defs-baremetal-ansible.yaml
@@ -59,6 +59,6 @@ outputs:
       ansible_group_vars:
         tripleo_login_defs_password_max_days: {get_param: PasswordMaxDays}
         tripleo_login_defs_password_min_days: {get_param: PasswordMinDays}
-        tripleo_login_defs_password_min_len: {get_param: PasswordWarnAge}
-        tripleo_login_defs_password_warn_age: {get_param: PasswordMinLen}
+        tripleo_login_defs_password_min_len: {get_param: PasswordMinLen}
+        tripleo_login_defs_password_warn_age: {get_param: PasswordWarnAge}
         tripleo_login_defs_fail_delay: {get_param: FailDelay}
diff --git a/releasenotes/notes/bug-1984222-bd32dbd29741ad51.yaml b/releasenotes/notes/bug-1984222-bd32dbd29741ad51.yaml
new file mode 100644
index 0000000000..79079a075c
--- /dev/null
+++ b/releasenotes/notes/bug-1984222-bd32dbd29741ad51.yaml
@@ -0,0 +1,4 @@
+---
+fixes:
+  - |
+    Fixed wrong usage of the ``PasswordMinLen`` parameter and the ``PasswordWarnAge`` parameter.