Bug 810459

Summary: Cannot login after set admin user password in rescue mode.
Product: Red Hat Enterprise Linux 6 Reporter: Guohua Ouyang <gouyang>
Component: ovirt-nodeAssignee: Mike Burns <mburns>
Status: CLOSED ERRATA QA Contact: Virtualization Bugs <virt-bugs>
Severity: high Docs Contact:
Priority: medium    
Version: 6.3CC: acathrow, bsarathy, cshao, gouyang, jboggs, leiwang, mburns, ovirt-maint, sgordon, shcao, ycui, yuachen
Target Milestone: rcKeywords: Regression
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ovirt-node-2.3.0-4.el6 Doc Type: Bug Fix
Doc Text:
Previously, when the Hypervisor was started in rescue mode, a race condition meant changes to the admin password were not always persisted correctly. As a result the password previously set password would still be in effect following a system reboot. An explicit sync operation is now performed to ensure that password changes are persisted across reboots.
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-07-19 14:20:41 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Guohua Ouyang 2012-04-06 09:05:06 UTC
Description of problem:
Cannot login after set admin user password in rescue mode. 
The workaround is boot with rescue mode again, reset admin user passwordn,  but there are two errors during reset password:
unix_chkpwd[1865]: check pass; user unknown
unix_chkpwd[1865]: could not obtain user info (admin)


Version-Release number of selected component (if applicable):
rhev-hypervisor6-6.3-20120330.0.el6 

How reproducible:
100%

Steps to Reproduce:
1. auto install rhevh without adminpw
2. boot with rescue mode
3. run /usr/lib/ovirt-config-password to set admin password.
4. reboot and try login with the new password, failed
5. boot with rescue mode again
6. run /usr/lib/ovirt-config-password to set admin password.
7. reboot and login ok.


Actual results:
Cannot login after set admin password in rescue mode.

Expected results:
Can login after set admin password in rescue mode.

Additional info:
Single mode have no this problem.

Comment 5 Guohua Ouyang 2012-04-10 03:16:46 UTC
I reproduced the issue on my machine several times:
1. auto install with BOOTIF=eth0 storage_init=ata firstboot
2. reboot and add rescue
3. check /etc/shadow admin password was not set
4. set admin passwd with o-c-password.
5. check /etc/shadow admin password was set now. /config/etc/shadow also have the password set.
6. reboot, but failed to login with the passwd. 
7. reboot and enter into rescue mode again, check both /config/etc/shadow and /etc/shadow are empty. 

But if I run sync after step4, reboot can login with the passwd.

Comment 7 Mike Burns 2012-04-11 19:02:59 UTC
upstream commit:  http://gerrit.ovirt.org/3478

Comment 10 Guohua Ouyang 2012-04-28 06:23:19 UTC
verified on rhevh-6.3-20120426.2, can login with the password set in rescue mode.

Comment 11 Mike Burns 2012-06-13 17:06:30 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Previously, a race condition in rescue mode could cause a password set for the admin user to not be persisted correctly.  The script in rescue mode will now do an explicit sync operation to ensure that the changes are persisted.

Comment 12 Stephen Gordon 2012-06-14 15:16:49 UTC
    Technical note updated. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    Diffed Contents:
@@ -1 +1 @@
-Previously, a race condition in rescue mode could cause a password set for the admin user to not be persisted correctly.  The script in rescue mode will now do an explicit sync operation to ensure that the changes are persisted.+Previously, when the Hypervisor was started in rescue mode, a race condition meant changes to the admin password were not always persisted correctly. As a result the password previously set password would still be in effect following a system reboot. An explicit sync operation is now performed to ensure that password changes are persisted across reboots.

Comment 14 errata-xmlrpc 2012-07-19 14:20:41 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0741.html