Bug 1129413

Summary: installer should ask user to input password twice
Product: [JBoss] JBoss Operations Network Reporter: Viet Nguyen <vnguyen>
Component: InstallerAssignee: John Mazzitelli <mazz>
Status: CLOSED CURRENTRELEASE QA Contact: Armine Hovsepyan <ahovsepy>
Severity: low Docs Contact:
Priority: unspecified    
Version: JON 3.3.0CC: ahovsepy, jshaughn, loleary, mazz, mfoley
Target Milestone: ER04Keywords: Reopened
Target Release: JON 3.3.0   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-12-11 14:02:35 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1141181    
Bug Blocks:    
Attachments:
Description Flags
password_confirmation none

Description Viet Nguyen 2014-08-12 17:18:44 UTC 
Description of problem:

User is now asked visually confirm encoded auto-install password with a yes/no question which is not really easy to do because it's long (try this  OFj2IjCsPJFfMAxmQxLGPw== :)  Most password tools ask user to input the password twice.

Version-Release number of selected component (if applicable):
3.3.DR01
Comment 1 Jay Shaughnessy 2014-08-25 19:42:13 UTC 
It's not asking you to type in an encoded password, it's asking for plain text.  So I think this is OK since you can see what you just typed.

I'll close this, feel free to re-open if you feel there is still a problem.
Comment 2 Viet Nguyen 2014-08-25 20:41:43 UTC 
Clarification: I was confused about the usage. User is actually asked to input *clear text* password, not obfuscated. It is still a good idea to type the password twice.
Comment 3 John Mazzitelli 2014-09-18 20:19:09 UTC 
this is going to be addressed with the fix to bug #1141181 - I'm reopening this and will track it along with that BZ
Comment 4 John Mazzitelli 2014-09-18 20:53:35 UTC 
commit 07151ddb23e6065d5a72ae900b1cbf420b00e27c
Author: John Mazzitelli <mazz>
Date:   Thu Sep 18 16:51:51 2014 -0400

    BZ 1141181 1129413 - don't echo passwords to the console. ask to confirm passwords
Comment 5 John Mazzitelli 2014-09-18 20:55:27 UTC 
commit b5b0e2d18e33b921f4bf57454179efd1707f1a9f
Author: John Mazzitelli <mazz>
Date:   Thu Sep 18 16:51:51 2014 -0400

    BZ 1141181 1129413 - don't echo passwords to the console. ask to confirm passwords
    (cherry picked from commit 07151ddb23e6065d5a72ae900b1cbf420b00e27c)
Comment 6 Simeon Pinder 2014-10-01 21:33:06 UTC 
Moving to ON_QA as available for test with build:
https://brewweb.devel.redhat.com/buildinfo?buildID=388959
Comment 7 Armine Hovsepyan 2014-10-14 08:34:28 UTC 
Created attachment 946733 [details]
password_confirmation
Comment 8 Armine Hovsepyan 2014-10-14 08:34:47 UTC 
verified in JON 3.3 ER04
screen-shot attached