Bug 995531

Summary:	When installing via kickstart with encrypted sha512 rootpw line, Anaconda ignores the password and prompts for root password to be set
Product:	Red Hat Enterprise Linux 6	Reporter:	BJ Walker <bwalker>
Component:	anaconda	Assignee:	Chris Lumens <clumens>
Status:	CLOSED ERRATA	QA Contact:	Release Test Team <release-test-team-automation>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.4	CC:	atodorov, mganisin, sbueno
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	anaconda-13.21.232-1	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-07-22 06:21:23 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1075802, 1159928

Description BJ Walker 2013-08-09 15:56:35 UTC

Description of problem:
In RHEL 5, when using a sha512 encryption password on the 'rootpw' line via kickstart RHEL would still prompt to confirm the root password during an interactive install, but would populate the field with the encrypted line, however in RHEL 6, the prompt remains however the encrypted password does not actually populate, causing a new password to have to be chosen.

Version-Release number of selected component (if applicable):
anaconda-13.21.195-1.el6

How reproducible:
100% of the time

Steps to Reproduce:
1. Create a kickstart with the following lines for 'rootpw' and 'authconfig' and for an interactive install:

install
interactive
cdrom
rootpw  --iscrypted $6$l5NetPTsAjasrUal$etQQS2blHKGpF7IzfPHH0PcJi9.z6VaMJowb49i7KdSKPe.as7Pcb1C50gkQxT7O5NNe2dJAjdJYueM69Cf4Q.
authconfig --enableshadow --passalgo=sha512

2. Boot off of RHEL 6.4 installation media
3. Add ks= line for kickstart file (served locally *or* remotely)
4. Let install start, follow prompts during interactive portion and await root password prompt without encrypted password populated

Actual results:
Root password prompt is empty

Expected results:
Root password prompt is populated with encrypted password, similar to RHEL 5 behavior

Additional info:
None

Comment 1 RHEL Program Management 2013-10-14 02:47:35 UTC

This request was not resolved in time for the current release.
Red Hat invites you to ask your support representative to
propose this request, if still desired, for consideration in
the next release of Red Hat Enterprise Linux.

Comment 4 Alexander Todorov 2015-03-25 10:26:34 UTC

(In reply to BJ Walker from comment #0)
> 
> install
> interactive
> cdrom
> rootpw  --iscrypted
> $6$l5NetPTsAjasrUal$etQQS2blHKGpF7IzfPHH0PcJi9.z6VaMJowb49i7KdSKPe.
> as7Pcb1C50gkQxT7O5NNe2dJAjdJYueM69Cf4Q.
> authconfig --enableshadow --passalgo=sha512
> 

With anaconda-13.21.232 and the above kickstart, the user is presented with the root password screen and the password is already populated. I didn't change it and went forward. Installation complated. /etc/shadow uses the same encrypted line. Moving to VERIFIED.

Comment 6 errata-xmlrpc 2015-07-22 06:21:23 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-1297.html