Bug 1111591 - User create lets you create a user without a password but login fails
Summary: User create lets you create a user without a password but login fails
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Pulp
Classification: Retired
Component: z_other
Version: 2.4 Beta
Hardware: Unspecified
OS: Unspecified
medium
low
Target Milestone: ---
: ---
Assignee: amacdona@redhat.com
QA Contact: Irina Gulina
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-06-20 13:25 UTC by Preethi Thomas
Modified: 2015-02-28 22:11 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-02-28 22:11:14 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Pulp Redmine 458 0 None None None Never

Description Preethi Thomas 2014-06-20 13:25:02 UTC
Description of problem:

A user can be created without any password but trying to  login with that user fails.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Run pulp-admin auth login -u foo and hit enter
2. Hit enter for password and confirm password
3.Run pulp-admin login -u foo

Actual results:
[root@ibm-x3550m3-10 ~]# pulp-admin auth  user create --login user2
Enter password for user [user2] : 
Re-enter password for user [user2]: 
User [user2] successfully created

[root@ibm-x3550m3-10 ~]# pulp-admin login -u user2
Enter password: 
Authentication Failed

Use the login command to authenticate with the server and download a session
certificate for use in future calls to this script. If credentials were
specified, please double check the username and password and attempt the request
again.



Expected results:


Additional info:

Comment 1 amacdona@redhat.com 2014-11-06 15:45:45 UTC
austin@laptop|/home/austin/code/pulp on 2.4-dev?
± pulp-admin auth user create --login user2
Enter password for user [user2] : <no input here>
Re-enter password for user [user2]: <no input here>
User [user2] successfully created

austin@laptop|/home/austin/code/pulp on 2.4-dev?
± pulp-admin login -u user2
Enter password: <no input here>
Successfully logged in. Session certificate will expire at Nov 13 15:40:47 2014
GMT.


Appears to be fixed in both 2.4-dev and 2.5-dev.

Comment 2 Irina Gulina 2014-11-13 14:42:02 UTC
Failed QA

Austin, for you everything is OK, because I think you worked under valid certificate. My certificate was expired. Look what happened: 

>> pulp-admin -u admin -p admin auth user create --login no_pass_user
Enter password for user [no_pass_user] : <enter>
Re-enter password for user [no_pass_user]: <enter>
User [no_pass_user] successfully created

>> pulp-admin login -u no_pass_user
Enter password: 
Session Expired

The session certificate expired on Oct 24 14:51:22 2014 GMT.

>> date 
Thu Nov 13 14:24:50 UTC 2014

>> pulp-admin login --username admin
Enter password: <admin pass>
Successfully logged in. Session certificate will expire at Nov 20 14:25:56 2014
GMT.

>> pulp-admin login --username no_pass_user 
Enter password: <enter>
Successfully logged in. Session certificate will expire at Nov 20 14:26:03 2014
GMT.


...broken pipe

>> pulp-admin rpm repo list
+----------------------------------------------------------------------+
                            RPM Repositories
+----------------------------------------------------------------------+

Id:                  gena
Display Name:        gena
Description:         None
Content Unit Counts: 
  Rpm: 2

Id:                  m1
Display Name:        m1
Description:         None
Content Unit Counts: 


>> pulp-admin logout
Session certificate successfully removed.

>> pulp-admin rpm repo list
+----------------------------------------------------------------------+
                            RPM Repositories
+----------------------------------------------------------------------+

The specified user does not have permission to execute the given command

>> pulp-admin login -u no_pass_user
Enter password: 
The specified user does not have permission to execute the given command

>> pulp-admin -u admin -p admin auth user create --login funtik
Enter password for user [funtik] : <enter>
Re-enter password for user [funtik]: <enter>
User [funtik] successfully created

>> pulp-admin login -u funtik
Enter password: <enter>
The specified user does not have permission to execute the given command

>>rpm -qa | grep pulp-server
pulp-server-2.5.0-0.18.rc.fc20.noarch

Comment 3 amacdona@redhat.com 2014-11-25 19:34:53 UTC
https://github.com/pulp/pulp/pull/1367

Comment 4 Chris Duryee 2014-12-09 00:33:10 UTC
Setting BZ back to ASSIGNED, PR is still in WIP state.

Comment 5 amacdona@redhat.com 2015-01-05 15:44:12 UTC
https://github.com/pulp/pulp/pull/1476

Comment 6 Brian Bouterse 2015-02-28 22:11:14 UTC
Moved to https://pulp.plan.io/issues/458


Note You need to log in before you can comment on or make changes to this bug.