Bug 1443645 – User can no longer use API having password with special character "+".

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1443645 - User can no longer use API having password with special character "+".

Summary:	User can no longer use API having password with special character "+".

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Virtualization Manager
Classification:	Red Hat
Component:	ovirt-engine (Show other bugs)
Sub Component:
Version:	4.0.7
Hardware:	Unspecified Unspecified

Priority	unspecified Severity medium
Target Milestone:	ovirt-4.2.0
Target Release:	---
Assigned To:	Ravi Nori
QA Contact:	Lucie Leistnerova
Docs Contact:

URL:
Whiteboard:
Keywords:	Regression, ZStream

Depends On:
Blocks:	1445944
	Show dependency tree / graph

Reported:	2017-04-19 11:33 EDT by Ameya Charekar
Modified:	2018-05-15 13:43 EDT (History)
CC List:	11 users (show)

See Also:	1464140
Fixed In Version:
Doc Type:	No Doc Update
Doc Text:	undefined
Story Points:	---
Clone Of:
Clones:	1445944 (view as bug list)
Environment:
Last Closed:	2018-05-15 13:41:54 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	Infra
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
oVirt gerrit	75668	master	MERGED	aaa: User can no longer use API having password with special character "+"	2017-04-19 17:32 EDT
oVirt gerrit	75694	ovirt-engine-4.1	MERGED	aaa: User can no longer use API having password with special character "+"	2017-04-20 09:58 EDT
Red Hat Product Errata	RHEA-2018:1488	None	None	None	2018-05-15 13:43 EDT

Groups: None (edit)

Description Ameya Charekar 2017-04-19 11:33:27 EDT

Description of problem:
Super user having password with a special character "+" can not use API and it will fail with error:
"HTTP/1.1 401 Unauthorized"


Version-Release number of selected component (if applicable):
rhevm-4.0.7.4-0.1.el7ev.noarch

How reproducible:
Always

Steps to Reproduce:
1. Set password of admin@internal user having special character "+"/
2. Try to connect to API.
3.

Actual results:
401 Unauthorized

Expected results:
Should be able to connect to API.

Additional info:
Works fine in rhev 3.6.

Comment 2 rhev-integ 2017-04-26 06:50:04 EDT

WARN: Bug status wasn't changed from MODIFIED to ON_QA due to the following reason:

[FOUND NON-ACKED FLAGS: {'rhevm-4.1.z': '?'}]

For more info please contact: rhv-devops@redhat.com

Comment 5 Lucie Leistnerova 2017-11-06 05:12:16 EST

login to API successful with '+' in password

verified in ovirt-engine-4.2.0-0.4.master.el7.noarch

Comment 8 errata-xmlrpc 2018-05-15 13:41:54 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:1488

Note You need to log in before you can comment on or make changes to this bug.