Description of problem: Luci does not validate that validate characters are used for the password. If someone uses " " or ":" then login will fail for that user. Luci will not parse correctly the characters: " ", ":" When a user is adding new user of the admin password then luci should error if the characters are present: " ", ":" Version-Release number of selected component (if applicable): luci-0.12.2-6.el5 How reproducible: Everytime Steps to Reproduce: 1. Add a user 2. Give user a password with " " or ":" 3. Then try to login as that user Actual results: Login will fail. Expected results: The password should not be accepted and error given to user as to why. Additional info: Patches that should fix the issue will be attached.
Created attachment 358495 [details] Patch for luci validation in "add user"
Created attachment 358496 [details] luci_admin patch for admin user creation
~~ Attention Customers and Partners - RHEL 5.5 Beta is now available on RHN ~~ RHEL 5.5 Beta has been released! There should be a fix present in this release that addresses your request. Please test and report back results here, by March 3rd 2010 (2010-03-03) or sooner. Upon successful verification of this request, post your results and update the Verified field in Bugzilla with the appropriate value. If you encounter any issues while testing, please describe them and set this bug into NEED_INFO. If you encounter new defects or have additional patch(es) to request for inclusion, please clone this bug per each request and escalate through your support representative.
fix verified in luci-0.12.2-12.el5 a descriptive error message is shown after trying to add a user with password containing spaces or colons
Customer verified fixed issue.
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2010-0289.html