Fuel CLI allows to set empty password

[Łukasz Oleś]

Running
fuel user --change-password

sets empty password for user admin and user is not able to login to GUI or to change password back.

The only way to fix it is to reset password with keystone command using admin_token.

Fuel CLI should not allow setting empty password.

[Aleksey Kasatkin (alekseyk-ru)]

I changed password back with "fuel user --change-password".
I couldn't repeat your situation when user is not able to login to GUI. It didn't show me "login" window. It was newly deployed master node. It seems that some info is cached in browser and UI don't check that password was not entered because of that.

[Aleksey Kasatkin (alekseyk-ru)]

Vitaliy, please check why UI doesn't ask password after node is redeployed. How can it be solved?

[Vitaly Kramskikh (vkramskikh)]

What issue should be solved? UI remembers login/password pair from the previous login and tries to authenticate using it. If it succeeds, no auth window is displayed. What is wrong here?

[Aleksey Kasatkin (alekseyk-ru)]

Sorry. Authorization was switched off on my env.
Actually, after I've changed password with "fuel user --change-password" to anything, not only to empty, it behaves this way. I.e. UI cannot pass authorization and password cannot be changed using CLI.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/110330

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/110330
Committed: https://git.openstack.org/cgit/stackforge/fuel-web/commit/?id=0b28088c002ba9b36e9840b756a66de5ce328914
Submitter: Jenkins
Branch: master

commit 0b28088c002ba9b36e9840b756a66de5ce328914
Author: Kamil Sambor <email address hidden>
Date: Tue Jul 29 17:29:35 2014 +0200

    Added validation of new password during changing in fuel-cli

    Change-Id: I26f1a94d9137b246d248299b4842038ae293b43a
    Closes-Bug: #1349734