Bug 742937

Summary: Inconsistence between satpasswd and webui rules for creating password
Product: Red Hat Satellite 5 Reporter: Šimon Lukašík <slukasik>
Component: ServerAssignee: Jan Pazdziora <jpazdziora>
Status: CLOSED NOTABUG QA Contact: Red Hat Satellite QA List <satqe-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 541   
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-10-03 13:36:11 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 462714    

Description Šimon Lukašík 2011-10-03 12:40:07 UTC
Description of problem:
RHN-Satellite web uses a set of rules for creating password for user
it applies to pages:

    rhn/account/UserDetails.do
    rhn/users/UserDetails.do
    rhn/users/CreateUser.do
    rhn/admin/multiorg/OrgCreate.do
    rhn/newlogin/CreateFirstUser.do

different set of rules is applied, when updating password through 
/usr/bin/satpasswd tool.

Version-Release number of selected component (if applicable):
RHN Satellite 5.4.1
spacewalk-backend-tools-1.2.13-55
spacewalk-java-1.2.39-101.el6sat.noarch

How reproducible:
deterministic

Steps to Reproduce:
1. Create one-letter-long password
2. 
3. 
  
Actual results:
The creation works through satpasswd, while it fails through webui.

Expected results:
The very same set of rules should be applied on each input method.

Additional info:

Comment 1 Jan Pazdziora 2011-10-03 13:36:11 UTC
I'm terribly sorry to do this but I am going to close your bug report as not-a-bug. The reason being, the satpasswd is like using passwd under root account -- it lets you set any password you want either.

The technical reason is that all the checks you mention are coded in Java while satpasswd is not a Java code, and duplicating all the config option parsing and processing is a no-go.