Not able to source openrc file for a wad user after admin password change and reset back to original password.
Severity
--------
Major
Steps to Reproduce
------------------
Add remote AD details using service parameter on the system:
system service-parameter-add identity ldap-domain1 domain_name=ad.domain.com
system service-parameter-add identity ldap-domain1 ldap_uri=ldaps://ad.domain.com
system service-parameter-add identity ldap-domain1 ldap_access_filter=memberOf=CN=users,DC=ad,DC=domain,DC=com
system service-parameter-add identity ldap-domain1 ldap_search_base=CN=users,DC=ad,DC=domain,DC=com
system service-parameter-add identity ldap-domain1 ldap_default_bind_dn=CN=admin_user,CN=users,DC=ad,DC=domain,DC=com
system service-parameter-add identity ldap-domain1 ldap_default_authtok=<authtoken>
system service-parameter-add identity ldap-domain1 ldap_user_search_base=CN=users,DC=ad,DC=domain,DC=com
system service-parameter-add identity ldap-domain1 ldap_group_search_base=CN=groups,DC=ad,DC=domain,DC=com
system service-parameter-apply identity --section ldap-domain1
Install AD cert on the system:
Brief Description
-----------------
Not able to source openrc file for a wad user after admin password change and reset back to original password.
Severity
--------
Major
Steps to Reproduce
------------------
Add remote AD details using service parameter on the system:
system service- parameter- add identity ldap-domain1 domain_ name=ad. domain. com parameter- add identity ldap-domain1 ldap_uri= ldaps:/ /ad.domain. com parameter- add identity ldap-domain1 ldap_access_ filter= memberOf= CN=users, DC=ad,DC= domain, DC=com parameter- add identity ldap-domain1 ldap_search_ base=CN= users,DC= ad,DC=domain, DC=com parameter- add identity ldap-domain1 ldap_default_ bind_dn= CN=admin_ user,CN= users,DC= ad,DC=domain, DC=com parameter- add identity ldap-domain1 ldap_default_ authtok= <authtoken> parameter- add identity ldap-domain1 ldap_user_ search_ base=CN= users,DC= ad,DC=domain, DC=com parameter- add identity ldap-domain1 ldap_group_ search_ base=CN= groups, DC=ad,DC= domain, DC=com parameter- apply identity --section ldap-domain1
system service-
system service-
system service-
system service-
system service-
system service-
system service-
system service-
Install AD cert on the system:
system certificate-install -m ssl_ca <ad.crt>
Login as wad user
[sysadmin@ controller- 0 ~(keystone_admin)]$ ssh <email address hidden> @controller- 0
source openrc file
<email address hidden> @controller- 0:~$ source /etc/platform/ openrc @controller- 0 ~(keystone_admin)]$
[<email address hidden>
Manually change admin passowrd:
[sysadmin@ controller- 0 ~(keystone_admin)]$ openstack user password set --os-region-name RegionOne --password '<passwd_change1' --original-password '<passwd_orig>' controller- 0 ~(keystone_admin)]$ keyring get CGCS admin
[sysadmin@
KVLcix0*
[sysadmin@ controller- 0 ~(keystone_admin)]$ source /etc/platform/ openrc controller- 0 ~(keystone_admin)]$ openstack user password set --os-region-name RegionOne --password '<passwd_change2>' --original-password '<passwd_change1' controller- 0 ~(keystone_admin)]$ keyring get CGCS admin
[sysadmin@
[sysadmin@
Li70nux*
[sysadmin@ controller- 0 ~(keystone_admin)]$ source /etc/platform/ openrc controller- 0 ~(keystone_admin)]$ openstack user password set --os-region-name RegionOne --password '<passwd_change3' --original-password '<passwd_change2' controller- 0 ~(keystone_admin)]$ keyring get CGCS admin
[sysadmin@
[sysadmin@
Li71nux*
Reset back to original password.
[sysadmin@ controller- 0 ~(keystone_admin)]$ source /etc/platform/ openrc controller- 0 ~(keystone_admin)]$ openstack user password set --os-region-name RegionOne --password '<passwd_orig' --original-password '<passwd_change3' controller- 0 ~(keystone_admin)]$ keyring get CGCS admin
[sysadmin@
[sysadmin@
Li69nux*
Expected Behavior
------------------
<email address hidden> @controller- 0:~$ source /etc/platform/ openrc @controller- 0 ~(keystone_admin)]$
[<email address hidden>
Actual Behavior
----------------
<email address hidden> @controller- 0:~$ source /etc/platform/ openrc 0:~${code}
Not enough privileges to read keyring password.
controller-
Reproducibility
---------------
Reproducible
System Configuration ------- ------
-------
System Type: simplex
Last Pass
---------
New test.
Test Activity
-------------
Automated Run: Regression Testing