Red Hat Bugzilla – Bug 159303
Web-based Installer Forms Mangle Passworwd
Last modified: 2009-02-17 15:51:50 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050512 Firefox/1.0.4 Fedora/1.0.4-1
Description of problem:
The web-based installer mangles RHN passwords while registering the server on the RHN network. My userid had a password with a '>' in it. This caused the following error in /var/log/httpd/error_log:
Traceback (most recent call last):
File "/usr/sbin/rhnreg_ks", line 357, in ?
File "/usr/sbin/rhnreg_ks", line 287, in main
ret = rhnreg.reserveUser(username, password)
File "/usr/share/rhn/up2date_client/rhnreg.py", line 249, in reserveUser
up2dateErrors.ValidationError: Error validating data at server:
Error Class Code: 3
Error Class Info: This username is already taken, or the password is incorrect.
An error has occurred while processing your request. If this problem
persists please enter a bug report at bugzilla.redhat.com.
If you choose to submit the bug report, please be sure to include
details of what you were trying to do when this error occurred and
details on how to reproduce this problem.
This should be fixed to allow and properly deal with people who use special characters for strong passwords.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Put a '>' in your password
2. Try to use it in the RHN Satellite server to register with RHN
Closed, Won't fix. Web-based installer was removed long ago.