This is an automated email from the git hooks/post-receive script.
mreynolds pushed a commit to branch 389-ds-base-1.4.1
in repository 389-ds-base.
The following commit(s) were added to refs/heads/389-ds-base-1.4.1 by this push:
new 696c0f3 Issue 50816 - dsconf allows the root password to be set to nothing
696c0f3 is described below
commit 696c0f35e0ec5edb02c4e3ff27066c1fb5258ace
Author: Mark Reynolds <mreynolds(a)redhat.com>
AuthorDate: Mon Jan 13 17:58:52 2020 -0500
Issue 50816 - dsconf allows the root password to be set to nothing
Bug Description: dsconf allows you to set the root DN password to nothing/
Fix Description: Do not allow the root DN password to be set to nothing
relates:
https://pagure.io/389-ds-base/issue/50816
Reviewed by: firstyear(Thanks!)
---
src/lib389/lib389/idm/directorymanager.py | 2 ++
1 file changed, 2 insertions(+)
diff --git a/src/lib389/lib389/idm/directorymanager.py
b/src/lib389/lib389/idm/directorymanager.py
index bb3b583..4c573e7 100644
--- a/src/lib389/lib389/idm/directorymanager.py
+++ b/src/lib389/lib389/idm/directorymanager.py
@@ -31,6 +31,8 @@ class DirectoryManager(Account):
self._protected = True
def change_password(self, new_password):
+ if new_password == "":
+ raise ValueError("You can not set the Directory Manager password to
nothing")
self._instance.config.set('nsslapd-rootpw', new_password)
def bind(self, password=PW_DM, *args, **kwargs):
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.