Bug 1111591

Summary: User create lets you create a user without a password but login fails
Product: [Retired] Pulp Reporter: Preethi Thomas <pthomas>
Component: z_otherAssignee: amacdona <austin>
Status: CLOSED UPSTREAM QA Contact: Irina Gulina <igulina>
Severity: low Docs Contact:
Priority: medium    
Version: 2.4 BetaCC: austin, cduryee, igulina, skarmark
Target Milestone: ---Keywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-02-28 22:11:14 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Preethi Thomas 2014-06-20 13:25:02 UTC
Description of problem:

A user can be created without any password but trying to  login with that user fails.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Run pulp-admin auth login -u foo and hit enter
2. Hit enter for password and confirm password
3.Run pulp-admin login -u foo

Actual results:
[root@ibm-x3550m3-10 ~]# pulp-admin auth  user create --login user2
Enter password for user [user2] : 
Re-enter password for user [user2]: 
User [user2] successfully created

[root@ibm-x3550m3-10 ~]# pulp-admin login -u user2
Enter password: 
Authentication Failed

Use the login command to authenticate with the server and download a session
certificate for use in future calls to this script. If credentials were
specified, please double check the username and password and attempt the request
again.



Expected results:


Additional info:

Comment 1 amacdona@redhat.com 2014-11-06 15:45:45 UTC
austin@laptop|/home/austin/code/pulp on 2.4-dev?
± pulp-admin auth user create --login user2
Enter password for user [user2] : <no input here>
Re-enter password for user [user2]: <no input here>
User [user2] successfully created

austin@laptop|/home/austin/code/pulp on 2.4-dev?
± pulp-admin login -u user2
Enter password: <no input here>
Successfully logged in. Session certificate will expire at Nov 13 15:40:47 2014
GMT.


Appears to be fixed in both 2.4-dev and 2.5-dev.

Comment 2 Irina Gulina 2014-11-13 14:42:02 UTC
Failed QA

Austin, for you everything is OK, because I think you worked under valid certificate. My certificate was expired. Look what happened: 

>> pulp-admin -u admin -p admin auth user create --login no_pass_user
Enter password for user [no_pass_user] : <enter>
Re-enter password for user [no_pass_user]: <enter>
User [no_pass_user] successfully created

>> pulp-admin login -u no_pass_user
Enter password: 
Session Expired

The session certificate expired on Oct 24 14:51:22 2014 GMT.

>> date 
Thu Nov 13 14:24:50 UTC 2014

>> pulp-admin login --username admin
Enter password: <admin pass>
Successfully logged in. Session certificate will expire at Nov 20 14:25:56 2014
GMT.

>> pulp-admin login --username no_pass_user 
Enter password: <enter>
Successfully logged in. Session certificate will expire at Nov 20 14:26:03 2014
GMT.


...broken pipe

>> pulp-admin rpm repo list
+----------------------------------------------------------------------+
                            RPM Repositories
+----------------------------------------------------------------------+

Id:                  gena
Display Name:        gena
Description:         None
Content Unit Counts: 
  Rpm: 2

Id:                  m1
Display Name:        m1
Description:         None
Content Unit Counts: 


>> pulp-admin logout
Session certificate successfully removed.

>> pulp-admin rpm repo list
+----------------------------------------------------------------------+
                            RPM Repositories
+----------------------------------------------------------------------+

The specified user does not have permission to execute the given command

>> pulp-admin login -u no_pass_user
Enter password: 
The specified user does not have permission to execute the given command

>> pulp-admin -u admin -p admin auth user create --login funtik
Enter password for user [funtik] : <enter>
Re-enter password for user [funtik]: <enter>
User [funtik] successfully created

>> pulp-admin login -u funtik
Enter password: <enter>
The specified user does not have permission to execute the given command

>>rpm -qa | grep pulp-server
pulp-server-2.5.0-0.18.rc.fc20.noarch

Comment 3 amacdona@redhat.com 2014-11-25 19:34:53 UTC
https://github.com/pulp/pulp/pull/1367

Comment 4 Chris Duryee 2014-12-09 00:33:10 UTC
Setting BZ back to ASSIGNED, PR is still in WIP state.

Comment 5 amacdona@redhat.com 2015-01-05 15:44:12 UTC
https://github.com/pulp/pulp/pull/1476

Comment 6 Brian Bouterse 2015-02-28 22:11:14 UTC
Moved to https://pulp.plan.io/issues/458