Account created with empty password cannot request tokens

Bug #1607959 reported by Rob T on 2016-07-29
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
python-openstackclient
Fix Released
Undecided
QiangTang

Bug Description

http://docs.openstack.org/mitaka/install-guide-rdo/keystone-users.html
Creating the Demo account with an empty password completes successfully. Upon moving to the next page and attempting to request a token, you receive an error:

`No password entered, or found via --os-password or OS_PASSWORD`

Attempting to `export OS_PASSWORD=` also does not work.

-----------------------------------
Release: 0.1 on 2016-07-28 09:39
SHA: b8bad50f386dc84eb8ad666bc217801ea93d91a0
Source: http://git.openstack.org/cgit/openstack/openstack-manuals/tree/doc/install-guide/source/keystone-verify.rst
URL: http://docs.openstack.org/mitaka/install-guide-rdo/keystone-verify.html

Rob T (nostrebor) on 2016-07-29
summary: - Account created with empty password does not work
+ Account created with empty password cannot request tokens
Matt Kassawara (ionosphere80) wrote :

Not a documentation bug. Moving to the python-openstackclient for further evaluation.

Matt Kassawara (ionosphere80) wrote :

Err, python-openstackclient project.

affects: openstack-manuals → python-openstackclient
Steve Martinelli (stevemar) wrote :

I suppose we could error out if the password is empty

QiangTang (qtang) wrote :

Shall we prevent the user create with the empty password?

Changed in python-openstackclient:
assignee: nobody → QiangTang (qtang)

Fix proposed to branch: master
Review: https://review.openstack.org/379208

Changed in python-openstackclient:
status: New → In Progress
Dean Troyer (dtroyer) wrote :

How is this not a documentation bug? In an install guide, I would assume that the steps are intended to lead to a successful installation. A step that leaves out setting a password which then can not be authenticated is not successful. Whether OSC allows empty passwords or not, in what case is that install guide step successful?

Steve Martinelli (stevemar) wrote :

The docs are actually OK, they recommend using the password prompt.

-----

$ openstack user create --domain default \
  --password-prompt demo
User Password:
Repeat User Password:

-----

I suppose they prefer this over the --password argument since it's not stored in bash history

Reviewed: https://review.openstack.org/379208
Committed: https://git.openstack.org/cgit/openstack/python-openstackclient/commit/?id=3770ad08b21b5ad7dd5430e810f1618435b269d5
Submitter: Jenkins
Branch: master

commit 3770ad08b21b5ad7dd5430e810f1618435b269d5
Author: qtang <email address hidden>
Date: Thu Sep 29 15:00:17 2016 +0800

    Warning for empty password set for user create/set

    Raise warning when empty password set for user

    Change-Id: If03516f3f1290e4c329fe3d1277dee0512de0410
    Closes-Bug: #1607959

Changed in python-openstackclient:
status: In Progress → Fix Released

This issue was fixed in the openstack/python-openstackclient 3.4.0 release.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers