Bug 719837

Summary: didn't do password validation at all for upgrade
Product: Red Hat Enterprise Linux 6 Reporter: Mohua Li <moli>
Component: ovirt-nodeAssignee: Joey Boggs <jboggs>
Status: CLOSED ERRATA QA Contact: Virtualization Bugs <virt-bugs>
Severity: high Docs Contact:
Priority: medium    
Version: 6.2CC: apevec, gouyang, leiwang, mburns, ovirt-maint
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ovirt-node-2.0.2-0.1.git5dce5f9.el6 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-12-06 19:17:14 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
screenshot none

Description Mohua Li 2011-07-08 06:29:09 UTC
Description of problem:
reinstall rhev-hypervisor to a disk with 6.x installed, user could
enter the old password, and new password to do the upgrade, but enter
a wrong old password also could continue the upgrade



Version-Release number of selected component (if applicable):
rhev-hypervisor 6.2-0.3

How reproducible:
always

Steps to Reproduce:
1,install a old 6.x 
2,boot to the ovirt-node 
3,choose upgrade
4,enter a wrong old password,
  
Actual results:


Expected results:


Additional info:

Comment 3 Guohua Ouyang 2011-08-04 07:43:24 UTC
Upgrade from 6.2-08 to 6.2-09, there is no old passwd field displayed.

Comment 4 Joey Boggs 2011-08-04 18:52:00 UTC
installed 6.2-08 rebooted, used 6.2-09 media and upgrade page has all fields, can you attach a screenshot then?

Comment 5 Joey Boggs 2011-08-04 18:52:40 UTC
Created attachment 516770 [details]
screenshot

Comment 6 Guohua Ouyang 2011-08-05 01:54:02 UTC
Understand the problem now:
1. if installed 6.2-08 and set rootps, then all fiedls displayed there.
2. if only set adminpw, no old passwd fields then.

my steps was auto install 6.2-08 with adminpw and login successfully, then use 6.2-09 media to do upgrade, no old passwd field. 

admin is the recommended user now, so should we cover this?

Comment 12 Guohua Ouyang 2011-08-30 10:06:26 UTC
Base comment #8 & #9:
admin passwd is validated in upgrade, set bug status to be verified.

Comment 13 errata-xmlrpc 2011-12-06 19:17:14 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2011-1783.html