Bug 1445365

Summary: ipa vault-archive doesn't honor password
Product: Red Hat Enterprise Linux 7 Reporter: Abhijeet Kasurde <akasurde>
Component: ipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED DUPLICATE QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.4CC: frenaud, pvoborni, rcritten, tscherf
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-04-28 13:48:27 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Abhijeet Kasurde 2017-04-25 14:28:30 UTC 
Description of problem:
When user tries to archive some data using `ipa vault-archive', it doesn't honor given password.

Using right password
[root@ipaserver01 ~]# ipa vault-archive P --data=$(echo "secret" | base64)
Password:
----------------------------
Archived data into vault "P"
----------------------------

Using wrong password
[root@ipaserver01 ~]# ipa vault-archive P --data=$(echo "secret" | base64)
Password:
----------------------------
Archived data into vault "P"
----------------------------

Version-Release number of selected component (if applicable):
# rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server
package freeipa-server is not installed
package freeipa-client is not installed
ipa-server-4.5.0-8.el7.x86_64
ipa-client-4.5.0-8.el7.x86_64
389-ds-base-1.3.6.1-9.el7.x86_64
pki-ca-10.4.1-2.el7.noarch
krb5-server-1.15.1-7.el7.x86_64

How reproducible:
# rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server
package freeipa-server is not installed
package freeipa-client is not installed
ipa-server-4.5.0-8.el7.x86_64
ipa-client-4.5.0-8.el7.x86_64
389-ds-base-1.3.6.1-9.el7.x86_64
pki-ca-10.4.1-2.el7.noarch
krb5-server-1.15.1-7.el7.x86_64

Steps to Reproduce:
1. Create IPA Vault 
2. Try archiving data using wrong password

Actual results:
Command say "Archived data into Vault" while using wrong password 

Expected results:
Command should complain about wrong password provided by user while archiving data.
Comment 2 Florence Blanc-Renaud 2017-04-28 13:48:27 UTC 
Not reproducible with pki-base 10.4.1-2.el7 and the fix for 1445358:

$ ipa vault-archive P --data=MYSECRET
Password: 
ipa: ERROR: Invalid credentials

*** This bug has been marked as a duplicate of bug 1445358 ***