action #44696
closed[qam] test fails in sshd - user password is weak
100%
Description
Updated by pdostal about 6 years ago
- Status changed from New to In Progress
- % Done changed from 0 to 10
Updated by dimstar about 6 years ago
A note from my end: the password is not 'weak': it is simply missing in the command that would set the password (see echo sshboy: | chpasswd)
the password is supposed to be after sshboy:
Updated by StefanBruens about 6 years ago
dimstar wrote:
A note from my end: the password is not 'weak': it is simply missing in the command that would set the password (see echo sshboy: | chpasswd)
the password is supposed to be after sshboy:
os-autoinst-distri-opensuse/lib/main_common.pm:
sub set_defaults_for_username_and_password {
if (get_var("LIVETEST")) {
$testapi::password = '';
}
$testapi::password = "nots3cr3t";
}
Updated by dimstar about 6 years ago
well, well, well
in the past, we had:
user on livecd has no password, hence $testapi::password = '';
sshboy was generated with an explicit password letmein (or a variant thereof)
my $ssh_testman_passwd = "let3me2in1"; # this was not just decoration
Updated by pdostal about 6 years ago
Yes, I discovered all that. I changed the password because of the exec_and_insert_password
and I'm about to fix that. Please expect the PR later today or tomorrow early morning.
Updated by JERiveraMoya about 6 years ago
Found bad password based on a dictionary in sle15sp1: https://openqa.suse.de/tests/latest?distri=sle&version=15-SP1&flavor=Installer-DVD&machine=svirt-xen-hvm&test=minimal%2Bbase&arch=x86_64#step/sshd/16
Updated by pdostal about 6 years ago
I think it's not about password but about the VirtIO console but I'll look it up.
Thank you for letting me know, @JERiveraMoya
Updated by pdostal about 6 years ago
I managed to fix the test for s390x architecture but there's still a problem in one ppc64le testsuite. I asked Petr Vorel to help me with that.
Updated by osukup about 6 years ago
on SLE12 -> SLE12SP2 this tests fails because 'virtio_console' .. You need add hvc0 + console to /etc/securetty