we should support non-interactive user password reset

[Guang Yee]

Currently user password update require interactive prompting of user's old/original password.

openstack user password set ...

This is problematic because

1) it does not support non-interactive applications so we can't really use it for automation
2) user password update has always be a self-service API (different from admin password reset API) so prompting for the old password is redundant because you need it to get the authorization token to begin with. i.e. the old password is already specified via either OS_PASSWORD env var or --os-password command line arg.

We should prompt for the old password only if we are running openstack CLI in interactive mode or password is not specified via either OS_PASSWORD env var or --os-password arg. Alternatively, we could support an new --os-original-password arg so we continue to allow admin to do password update on behalf of users.

[Steve Martinelli (stevemar)]

yep, makes sense.

[Guang Yee (guang-yee)]

Hi Ramaraja, are you actively working on this? Will you be able to push a patch in the next day? If not, I'll work on it. Please let me know.

[Ramaraja (ramaraja-r)]

Hi Guaug, I will be pushing the patch by today.

[Steve Martinelli (stevemar)]

Hi Ramaraja, looks like guang published a patch: https://review.openstack.org/#/c/265052/
Can you review that patch instead of publishing a new one?

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/265052
Committed: https://git.openstack.org/cgit/openstack/python-openstackclient/commit/?id=5cbecc130ef2aacd5d9bd265b814e6f8140374f9
Submitter: Jenkins
Branch: master

commit 5cbecc130ef2aacd5d9bd265b814e6f8140374f9
Author: Guang Yee <email address hidden>
Date: Thu Jan 7 18:56:44 2016 -0800

    Support non-interactive user password update

    Currently user password update require interactive prompting of user's
    original password. This is problematic because we can't support
    non-interactive applications and therefore hinders automation. This
    patch make it possible by optionally accepting an
    '--original-password' argument. If specified, we would use it instead
    of prompting.

    DocImpact

    Change-Id: I2d994e8c2be949f7ae616ac1d1594fb94e1a27cd
    Closes-Bug: 1531360

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/python-openstackclient 2.1.0 release.