Bug 17867 - RHN does not check to see if a user exists
Summary: RHN does not check to see if a user exists
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: up2date
Version: 7.0
Hardware: i586
OS: Linux
Target Milestone: ---
Assignee: Preston Brown
QA Contact:
Depends On:
TreeView+ depends on / blocked
Reported: 2000-09-26 19:05 UTC by Panic
Modified: 2008-05-01 15:37 UTC (History)
0 users

Clone Of:
Last Closed: 2000-09-26 19:05:39 UTC

Attachments (Terms of Use)

Description Panic 2000-09-26 19:05:37 UTC

There is no selection for RHN client under component selection, so I used

The RHN registration tool does not check with the website to see if a user
exists.  Therefore, it is possible for someone to submit a username that
already exists (but is not their own). (rhnreg.py, gui.py?)

If an already existing user name is used, the user is blocked from
accessing their RHN account -- they get the error:

Username or password is incorrect

when they attempt to log into the web server to access their RHN pages
(www.redhat.com/network).  This error is true, of course, but there is no
indication that the user account already exists (and doesn't belong to them).


Comment 1 Panic 2000-09-26 19:32:07 UTC
This is wrong -- my fault, it must've been something about the "panic" account
that I tried to use.  I'll close it out.

Note You need to log in before you can comment on or make changes to this bug.