[Openstack-security] [Bug 938315] Re: Updating password via keystoneclient CLI should be done securely.

OpenStack Hudson 938315 at bugs.launchpad.net
Tue May 21 00:08:45 UTC 2013


Reviewed:  https://review.openstack.org/28702
Committed: http://github.com/openstack/python-keystoneclient/commit/f2e0818bc97bfbeba83f6abbb07909a8debcad77
Submitter: Jenkins
Branch:    master

commit f2e0818bc97bfbeba83f6abbb07909a8debcad77
Author: Pradeep Kilambi <pkilambi at cisco.com>
Date:   Thu May 9 09:29:02 2013 -0700

    Allow secure user password update.
    
    This patch allows the ability for user password to be updated via
    a command prompt so the password doesnt show up in the bash history.
    The prompted password is asked twice to verify the match.
    If user cntl-D's the prompt a message appears suggesting user to use
    either of the options to update the password.
    
    Fixes: bug#938315
    
    Change-Id: I4271ae569b922f33c34f9b015a7ee6f760414e39


** Changed in: python-keystoneclient
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of OpenStack
Security Group, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/938315

Title:
  Updating password via keystoneclient CLI should be done securely.

Status in Python client library for Keystone:
  Fix Committed

Bug description:
  Updating password via CLI should be done via a secure password prompt,
  not text.

  current: keystone user-password-update --user=jake --password=foo

  expected: keystone user-password-update --user=jake
                          Password:
                          Repeat Password:

To manage notifications about this bug go to:
https://bugs.launchpad.net/python-keystoneclient/+bug/938315/+subscriptions




More information about the Openstack-security mailing list