[jboss-jira] [JBoss JIRA] (WFLY-2311) Confusing password requirements prompt in add-user.sh

Brian Stansberry (JIRA) jira-events at lists.jboss.org
Tue Oct 15 17:55:35 EDT 2013


Brian Stansberry created WFLY-2311:
--------------------------------------

             Summary: Confusing password requirements prompt in add-user.sh
                 Key: WFLY-2311
                 URL: https://issues.jboss.org/browse/WFLY-2311
             Project: WildFly
          Issue Type: Bug
          Components: Security
    Affects Versions: 8.0.0.Beta1
            Reporter: Brian Stansberry
            Assignee: Darran Lofthouse


The add-user script prompt says the requirements for a password will be listed, but nothing is listed.

What type of user do you wish to add? 
 a) Management User (mgmt-users.properties) 
 b) Application User (application-users.properties)
(a): a

Enter the details of the new user to add.
Using realm 'ManagementRealm' as discovered from the existing property files.
Username : bstansberry
Password requirements are listed below. To modify these restrictions edit the add-user.properties configuration file.
Password : 


If there are no requirements, then some placeholder requirement like <no restrictions on password format> should be output.

It seems there is at least a non-null/empty requirement, as I just created a user with 'b' as the password, but no password at all failed. So that requirement should be reported.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list