yahoo-eng-team team mailing list archive

[Morgan Fainberg <morgan@xxxxxxxxxxxxx>]

Public bug reported:

When updates to Grants are performed, the KVS assignment backend will
cause a password update for the user to the current hash of the user's
password.

This is because the .get_user method on identity_api includes the password element which is just fed back into .update_user here:
http://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/backends/kvs.py?id=ce5fcb13c5fec5de3eeab58453713a061e40168a#n261

This should have little impact in the grand scheme because KVS is not
suitable for anything except testing.

** Affects: keystone
     Importance: Low
     Assignee: Morgan Fainberg (mdrnstm)
         Status: New

** Changed in: keystone
   Importance: Undecided => Low

** Changed in: keystone
     Assignee: (unassigned) => Morgan Fainberg (mdrnstm)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1265887

Title:
  kvs assignment updates user password

Status in OpenStack Identity (Keystone):
  New

Bug description:
  When updates to Grants are performed, the KVS assignment backend will
  cause a password update for the user to the current hash of the user's
  password.

  This is because the .get_user method on identity_api includes the password element which is just fed back into .update_user here:
  http://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/backends/kvs.py?id=ce5fcb13c5fec5de3eeab58453713a061e40168a#n261

  This should have little impact in the grand scheme because KVS is not
  suitable for anything except testing.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1265887/+subscriptions