Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

prevent crowbar batch from locking itself and the user out #35

Merged
merged 2 commits into from Sep 15, 2015
Merged

prevent crowbar batch from locking itself and the user out #35

merged 2 commits into from Sep 15, 2015

Conversation

jsuchome
Copy link
Member

Adam Spiers added 2 commits September 14, 2015 11:13
If crowbar batch is used to export the crowbar proposal from one cloud
and apply it to another, it will change the machine-install user's
password, which is typically the one used to run crowbar batch.  This
would break any future HTTP digest authentications against the Crowbar
REST API, including ones invoked immediately after the change, by the
still running crowbar batch process.  So if the user inadvertently
attempts to change the password they're currently relying on, simply
output a warning and ignore the attempt.

(cherry picked from commit 183dd52f8f292d26a37664b903118b6056b61725)
e.g. if the username/password is wrong, it needs to be clear to the user
that authentication failed.

(cherry picked from commit d6e9a9a347c95e16c3aa5429b45a9d354434d3c5)
@aspiers
Copy link
Member

aspiers commented Sep 14, 2015

+1 and this already got two +1s as crowbar/barclamp-crowbar#1336

@vuntz
Copy link
Member

vuntz commented Sep 14, 2015

+1

jsuchome added a commit that referenced this pull request Sep 15, 2015
prevent crowbar batch from locking itself and the user out
@jsuchome jsuchome merged commit cafc8a8 into crowbar:master Sep 15, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
3 participants