Bug 1223246 - Installer does not change password after updating answers file or via installer
Summary: Installer does not change password after updating answers file or via installer
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Installation
Version: 6.1.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: Unspecified
Assignee: satellite6-bugs
QA Contact: Katello QA List
URL:
Whiteboard:
: 1256330 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-05-20 08:24 UTC by Sergio Ocón-Cárdenas
Modified: 2017-08-01 20:34 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-08-01 20:34:09 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 16910 0 None None None 2016-10-13 15:56:02 UTC

Description Sergio Ocón-Cárdenas 2015-05-20 08:24:29 UTC
Description of problem:
If you install using the answers file, the first time the admin password can't be set.
Once you run katello-installer, a random one is created.
If you then update the asnwers file to include a password, the installer does not update it, but the final information given by the installer is the new password and not the old one (the real one)

Version-Release number of selected component (if applicable):
6.1.0 beta

How reproducible:
Always

Steps to Reproduce:
1. katello-installer
2. update answers file with new admin password
3. katello-installer

Actual results:
Admin password is the random one generated in step 1 (that you updated and thus lost)

Expected results:
Admin password is updated to the new password. An options to not update the passwrod is included in the passwrod file. original answers file inclused admin passwrod field.

Additional info:

Comment 1 RHEL Program Management 2015-05-20 08:32:24 UTC
Since this issue was entered in Red Hat Bugzilla, the release flag has been
set to ? to ensure that it is properly evaluated for this release.

Comment 3 Bryan Kearney 2016-07-26 15:25:24 UTC
Moving 6.2 bugs out to sat-backlog.

Comment 4 Bryan Kearney 2016-07-26 15:45:06 UTC
Moving 6.2 bugs out to sat-backlog.

Comment 6 Stephen Benjamin 2016-08-23 16:26:08 UTC
*** Bug 1256330 has been marked as a duplicate of this bug. ***

Comment 7 Stephen Benjamin 2016-10-13 15:56:00 UTC
Created redmine issue http://projects.theforeman.org/issues/16910 from this bug

Comment 8 Craig Donnelly 2017-01-13 05:44:13 UTC
Since we have the `foreman-rake permissions:reset`, is it really necessary to spend time on this one?

To me it makes more sense for it to be more difficult to blow away the admin password on the Satellite. (i.e. not in the open)

Since its simply updating the answers file and reading from it, I understand the incorrect listing of the password after the second installer run.

I already think its silly honestly to allow a user to specify a starting admin password on the command line for the installer. (Why would we want to let the user pass a password to the shell history?)

It make a lot more security sense to force someone to login with the hash provided and change the password after that.

There are several other applications that use methods like this.

Comment 9 Bryan Kearney 2017-08-01 20:34:09 UTC
Thank you for your interest in Satellite 6. We have evaluated this request, and we do not expect this to be implemented in product in the foreseeable future. We are therefore closing this out as WONTFIX. If you have any concerns about this, please feel free to contact Rich Jerrido or Bryan Kearney. Thank you.


Note You need to log in before you can comment on or make changes to this bug.