Bug 1350717

Summary:	Password change does not apply after reboot in the first time
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	Nelly Credi <ncredi>
Component:	rhev-hypervisor	Assignee:	Douglas Schilling Landgraf <dougsland>
Status:	CLOSED INSUFFICIENT_DATA	QA Contact:	Wei Wang <weiwang>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	3.6.7	CC:	cshao, dguo, fdeutsch, gklein, huzhao, leiwang, lsurette, pstehlik, srevivo, weiwang, yaniwang, ycui, ykaul
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-08-15 16:49:33 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Node	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1354597

Description Nelly Credi 2016-06-28 08:30:04 UTC

Description of problem:
After provisioning we are prompted to change password
I change it and after that I do passwd to change it back
once I restart the machine I can only login with the previous password


Version-Release number of selected component (if applicable):
Red Hat Enterprise Virtualization Hypervisor release 7.2 (20160627.3.el7ev)

How reproducible:
100% ( i tried with 2 hosts)

Steps to Reproduce:
1. for example I have password 123 on my machine
2. ssh the rhevh after provisioning with 123
3. im required to change the password and I change it to ABC
4. passwd to change back to 123
5. reboot the machine
6. ssh the machine - i cannot login with 123, but only with ABC

Actual results:
passwd didnt work after reboot

Expected results:
passwd should change the password

Additional info:
the change password succeeded according to the log:
passwd
Changing password for user root.
New password:
Retype new password:
passwd: all authentication tokens updated successfully.

Comment 1 Ying Cui 2016-06-28 08:47:16 UTC

We encountered a series of password issue during 3.6.z, 
e.g.
Bug 1251867 - Failed to reset the initial password after RHEV-H automatic installation

Comment 2 Ying Cui 2016-06-28 11:21:38 UTC

I can not 100% reproduce it, I tested 5 times, 4 times can change successful password, but failed to change the password once.

Version:
rhev-hypervisor 7.2 (20160627.3.el7ev)

Steps:
1. Automatic installation RHEV-H 3.6.7 build successful.
adminpw=OKr05SbCu3D3g storage_init=/dev/sda reinstall ssh_pwauth=1

2. ssh to host after installation, here ask to change the password
I can not change the password to ABC, I need to provide 8 characters password. e.g: 123qweP1qaz!

3. login with new password successful.

4. reboot rhevh host

5. login with new password successful.

6. change the password via RHEV-H TUI. e.g: 12345678

7. change the password via RHEV-H TUI again. e.g: 87654321

8. reboot RHEV-H

9. login rhevh with password: 87654321 failed(only failed once)

10. if step 9 is failed to login, then login rhevh with password: 12345678 successful.

Comment 6 Douglas Schilling Landgraf 2016-07-29 19:28:44 UTC

I am unable to reproduce the report, I have used the latest iso available: rhev-hypervisor7-7.2-20160711.0.iso

In case you reproduce, please provide the /var/log/ovirt* logs and output of audit2allow -a. From my point of view, a difference sequence might be triggering the selinux or persist/unpersist failure.

Ying raised important point here, via TUI or when doing auto-install (first login) you cannot use 'abc', '123' as password because passwd command will always complain for the short pass and keep the original password.

Thanks!

Comment 7 Douglas Schilling Landgraf 2016-08-15 16:49:33 UTC

Closing this bug for now as I cannot reproduce it, no customer ticket attached and we need logs to analyse. Fell free to re-open the bug in case you can reproduce it again.