Bug 742937 - Inconsistence between satpasswd and webui rules for creating password
Summary: Inconsistence between satpasswd and webui rules for creating password
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Satellite 5
Classification: Red Hat
Component: Server
Version: 541
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Jan Pazdziora
QA Contact: Red Hat Satellite QA List
URL:
Whiteboard:
Depends On:
Blocks: 462714
TreeView+ depends on / blocked
 
Reported: 2011-10-03 12:40 UTC by Šimon Lukašík
Modified: 2011-10-03 13:36 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-10-03 13:36:11 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Šimon Lukašík 2011-10-03 12:40:07 UTC 
Description of problem:
RHN-Satellite web uses a set of rules for creating password for user
it applies to pages:

    rhn/account/UserDetails.do
    rhn/users/UserDetails.do
    rhn/users/CreateUser.do
    rhn/admin/multiorg/OrgCreate.do
    rhn/newlogin/CreateFirstUser.do

different set of rules is applied, when updating password through 
/usr/bin/satpasswd tool.

Version-Release number of selected component (if applicable):
RHN Satellite 5.4.1
spacewalk-backend-tools-1.2.13-55
spacewalk-java-1.2.39-101.el6sat.noarch

How reproducible:
deterministic

Steps to Reproduce:
1. Create one-letter-long password
2. 
3. 
  
Actual results:
The creation works through satpasswd, while it fails through webui.

Expected results:
The very same set of rules should be applied on each input method.

Additional info:
Comment 1 Jan Pazdziora 2011-10-03 13:36:11 UTC 
I'm terribly sorry to do this but I am going to close your bug report as not-a-bug. The reason being, the satpasswd is like using passwd under root account -- it lets you set any password you want either.

The technical reason is that all the checks you mention are coded in Java while satpasswd is not a Java code, and duplicating all the config option parsing and processing is a no-go.
Note You need to log in before you can comment on or make changes to this bug.