Red Hat Bugzilla – Bug 1508994
APBs should not display passwords as text.
Last modified: 2017-11-28 17:21:23 EST
Description of problem: Passwords in APBs for MediaWiki, Postgres, MySQL, and MariaDB are currently showing passwords in plain text as you type them in. They should use display_type: password in order to use a double entry with confirmation. Version-Release number of selected component (if applicable): How reproducible: 100% Steps to Reproduce: 1. Login to the web console 2. Select for provision either PostgreSQL (APB), MariaDB (APB), MySql (APB), or MediaWiki (APB) 3. Actual results: password fields show in plain text Expected results: A double entry field with confirmation is shown. If a field is required, it the user cannot progress without entering both matching fields. If a field is not required, both fields can be left blank but must match.
https://github.com/ansibleplaybookbundle/rhscl-postgresql-apb/pull/14 https://github.com/ansibleplaybookbundle/rhscl-mariadb-apb/pull/7 https://github.com/ansibleplaybookbundle/rhscl-mysql-apb/pull/9 https://github.com/ansibleplaybookbundle/mediawiki123-apb/pull/11
Checked following APBs: PostgreSQL (APB) MySQL (APB) Mediawiki (APB) MariaDB (APB) When a fields type is password, an additional Retype option will be provided to request confirmation. Could be verified when ON_QA
Fixed. openshift3/mediawiki-apb:v3.7.0-0.198.0.3 openshift3/mariadb-apb:v3.7.0-0.198.0.3 openshift3/mysql-apb:v3.7.0-0.198.0.3 openshift3/postgresql-apb:v3.7.0-0.198.0.3
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:3188