Possible Duplicate:
Is there any added security benefit to username complexity requirements?Is there any added security benefit to username complexity requirements?
Are there any good security reasons for a web application to limit the length of a username?
If there is, what should be the minimum and maximum length allowed?