Bug 668555 - User can be updated with a blank password
Summary: User can be updated with a blank password
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Pulp
Classification: Retired
Component: z_other
Version: unspecified
Hardware: Unspecified
OS: Unspecified
low
medium
Target Milestone: ---
: ---
Assignee: Sayli Karmarkar
QA Contact: Preethi Thomas
URL:
Whiteboard:
Depends On:
Blocks: verified-to-close
TreeView+ depends on / blocked
 
Reported: 2011-01-10 19:19 UTC by Jay Dobies
Modified: 2015-03-23 01:10 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2011-08-16 14:20:05 UTC
Embargoed:


Attachments (Terms of Use)

Description Jay Dobies 2011-01-10 19:19:01 UTC
To replicate:

$ pulp-admin user update --username hal --password
Enter new password for user hal: 
Successfully updated [ hal ] with name [  ]

When prompted for the password, don't type anything and simply hit enter. We should add in some validation to make sure we don't allow users to set a password-less user.

Comment 1 Sayli Karmarkar 2011-01-12 18:51:41 UTC
Fixed.

$ pulp-admin user create --username=lea
Enter password for user lea: 
Re-enter password for user lea: 

User password cannot be empty

Enter password for user lea: 
Re-enter password for user lea: 
Successfully created user [ lea ] with name [ None ]

Comment 2 Sayli Karmarkar 2011-01-12 18:54:27 UTC
Made changes to user update as well.

$ pulp-admin user update --username=lea -P
Enter new password for user lea: 
Re-enter new password for user lea: 

User password cannot be empty

Enter new password for user lea: 
Re-enter new password for user lea: 

Passwords do not match

Enter new password for user lea: 
Re-enter new password for user lea: 
Successfully updated [ lea ] with name [  ]

Comment 3 Jay Dobies 2011-01-12 19:36:58 UTC
Fixed in build 0.123.

Comment 4 Preethi Thomas 2011-01-12 20:28:57 UTC
[root@preethi ~]# rpm -q pulp
pulp-0.0.123-1.fc14.noarch


[root@preethi ~]# pulp-admin user create --username=preethi1 --name="Preethi Thomas"
Enter password for user preethi1: 
Re-enter password for user preethi1: 

User password cannot be empty



[root@preethi ~]# pulp-admin user update --username=preethi -P 
Enter new password for user preethi: 
Re-enter new password for user preethi: 

User password cannot be empty

Comment 5 Preethi Thomas 2011-08-16 14:20:05 UTC
Closing with Community Release 15

pulp-0.0.223-4.


Note You need to log in before you can comment on or make changes to this bug.