← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1391116] Re: keystone user-password-update also accept blank password.

 

CLI for keystoneclient has been deprecated, assigning the bug to
openstackclient.

marking as won't fix for keystoneclient


** Also affects: python-openstackclient
   Importance: Undecided
       Status: New

** Summary changed:

- keystone user-password-update also accept blank password.
+ password prompts should check for empty string

** Changed in: python-openstackclient
       Status: New => Confirmed

** Changed in: python-keystoneclient
       Status: In Progress => Invalid

** Changed in: python-openstackclient
   Importance: Undecided => Medium

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1391116

Title:
  password prompts should check for empty string

Status in OpenStack Identity (keystone):
  Invalid
Status in python-keystoneclient:
  Invalid
Status in python-openstackclient:
  Confirmed

Bug description:
  If we enter blank password for a user than it accepts it and then user
  can not log in using either older password or blank password. I
  reproduce it following way.

  1)   I entered "keystone user-password-update username" this command.
  It prompt for new password then i hit enter without giving any
  password. And during confirmation also i hit enter. Command run
  successfully without any error.

  2) I tried to log in using blank password, i was not able to log in.

  3) I tried with older password also, it did not work either.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1391116/+subscriptions