Account created with empty password cannot request tokens

Bug #1607959 reported by Rob T
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
python-openstackclient
Fix Released
Undecided
QiangTang

Bug Description

http://docs.openstack.org/mitaka/install-guide-rdo/keystone-users.html
Creating the Demo account with an empty password completes successfully. Upon moving to the next page and attempting to request a token, you receive an error:

`No password entered, or found via --os-password or OS_PASSWORD`

Attempting to `export OS_PASSWORD=` also does not work.

-----------------------------------
Release: 0.1 on 2016-07-28 09:39
SHA: b8bad50f386dc84eb8ad666bc217801ea93d91a0
Source: http://git.openstack.org/cgit/openstack/openstack-manuals/tree/doc/install-guide/source/keystone-verify.rst
URL: http://docs.openstack.org/mitaka/install-guide-rdo/keystone-verify.html

Rob T (nostrebor)
summary: - Account created with empty password does not work
+ Account created with empty password cannot request tokens
Revision history for this message
Matt Kassawara (ionosphere80) wrote :

Not a documentation bug. Moving to the python-openstackclient for further evaluation.

Revision history for this message
Matt Kassawara (ionosphere80) wrote :

Err, python-openstackclient project.

affects: openstack-manuals → python-openstackclient
Revision history for this message
Steve Martinelli (stevemar) wrote :

I suppose we could error out if the password is empty

Revision history for this message
QiangTang (qtang) wrote :

Shall we prevent the user create with the empty password?

Changed in python-openstackclient:
assignee: nobody → QiangTang (qtang)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-openstackclient (master)

Fix proposed to branch: master
Review: https://review.openstack.org/379208

Changed in python-openstackclient:
status: New → In Progress
Revision history for this message
Dean Troyer (dtroyer) wrote :

How is this not a documentation bug? In an install guide, I would assume that the steps are intended to lead to a successful installation. A step that leaves out setting a password which then can not be authenticated is not successful. Whether OSC allows empty passwords or not, in what case is that install guide step successful?

Revision history for this message
Steve Martinelli (stevemar) wrote :

The docs are actually OK, they recommend using the password prompt.

-----

$ openstack user create --domain default \
  --password-prompt demo
User Password:
Repeat User Password:

-----

I suppose they prefer this over the --password argument since it's not stored in bash history

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-openstackclient (master)

Reviewed: https://review.openstack.org/379208
Committed: https://git.openstack.org/cgit/openstack/python-openstackclient/commit/?id=3770ad08b21b5ad7dd5430e810f1618435b269d5
Submitter: Jenkins
Branch: master

commit 3770ad08b21b5ad7dd5430e810f1618435b269d5
Author: qtang <email address hidden>
Date: Thu Sep 29 15:00:17 2016 +0800

    Warning for empty password set for user create/set

    Raise warning when empty password set for user

    Change-Id: If03516f3f1290e4c329fe3d1277dee0512de0410
    Closes-Bug: #1607959

Changed in python-openstackclient:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/python-openstackclient 3.4.0

This issue was fixed in the openstack/python-openstackclient 3.4.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.