LDAP user created by manage-local-ldap-account playbook with username set as password

[Karla Felix]

It can be seen in this line how the LDAP user is created by playbook "manage_local_ldap_account.yml": https://opendev.org/starlingx/ansible-playbooks/src/commit/372ad0c72f6aed77bcfb1451aef3e2f8db298416/playbookconfig/src/playbooks/roles/manage-local-ldap-account/create-account/tasks/main.yml#L21 . On first login, the user informs in "Current password" his username and then the right password is set (the playbook does a SSH to localhost using the new user to change the password). It is unnecessary and problematic from security viewpoint to create the LDAP user this way. If the playbook is interrupted after the LDAP user creation, the new LDAP user will stay with a previsible password. In a typical playbook execution, the created LDAP user stays for a brief period of time with this previsible password. It would be better to set the definitive password in the same command that created the LDAP user.

[OpenStack Infra (hudson-openstack)]

Change abandoned by "Karla Felix <email address hidden>" on branch: master
Review: https://review.opendev.org/c/starlingx/integ/+/893693
Reason: Decided to continue with another approach.

[OpenStack Infra (hudson-openstack)]

Change abandoned by "Karla Felix <email address hidden>" on branch: master
Review: https://review.opendev.org/c/starlingx/ansible-playbooks/+/893694
Reason: Decided to continue with another approach.