Failure when bootstrapping a new subcloud with complex password containing open brackets

Bug #2025292 reported by Manoel Benedito Neto
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Low
Manoel Benedito Neto

Bug Description

Brief Description
-----------------
Subcloud bootstrap is failing due to missing single quotes '' around the ${admin_password} at keystone bootstrap stage.

When /usr/local/bin/set_keystone_user_option.sh script is called with quote enclosed password, the execution exits with no failures.

manual_run
root@controller-0:~# /usr/local/bin/set_keystone_user_option.sh admin 'jW1pDd(' http://localhost:5000/v3 admin ignore_lockout_failure_attempts true

{"user": {"email": "admin@localhost", "id": "", "name": "admin", "domain_id": "default", "enabled": true, "password_expires_at": null, "extra": {"email": "admin@localhost"}, "options": {"ignore_lockout_failure_attempts": true}, "links": {"self": "http://localhost:5000/v3/users/a8e1eba681ba4647b9e46cd78eb0f032"}}}

Severity
--------
Critical: Bootstrapping fails

Steps to Reproduce
------------------
Bootstrapping a new sub-cloud with complex password.

Expected Behavior
----------------
Successful bootstrapping

Actual Behavior
--------------
Bootstrapping fails

Reproducibility
---------------
100% reproducible

System Configuration
--------------------
Distributed Cloud 22.12 SW Version

Last Pass
---------
N/A

Timestamp/Logs
--------------
/var/log/puppet/latest/puppet.log

root@controller-0:~# /usr/local/bin/set_keystone_user_option.sh admin jW1pDd( http://localhost:5000/v3 admin ignore_lockout_failure_attempts true
-bash: syntax error near unexpected token `('

Alarms
------
N/A

Test Activity
-------------
Others

Workaround
----------
Workaround is to use a password that doesn't need to be escaped.

Changed in starlingx:
assignee: nobody → Manoel Benedito Neto (mbenedit)
Changed in starlingx:
status: New → In Progress
summary: Failure when bootstrapping a new subcloud with complex password
+ containing open brackets
description: updated
Ghada Khalil (gkhalil)
information type: Private Security → Public Security
Revision history for this message
Ghada Khalil (gkhalil) wrote :
Changed in starlingx:
importance: Undecided → Low
tags: added: stx.9.0 stx.config stx.security
Ghada Khalil (gkhalil)
Changed in starlingx:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.