tracker issue : CF-4202713

select a category, or use search below
(searches all categories and all time range)
Title:

Linux Lockdown Installer should not require OS account passwords

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/Fixed

Reporter/Name(from Bugbase): Peter Freitag / ()

Created: 06/04/2018

Components: Installation/Config, Lockdown Installer

Versions: 2018

Failure Type: Incorrectly functioning

Found In Build/Fixed In Build: Public Beta / 310256

Priority/Frequency: Normal / Most users will encounter

Locale/System: English / Linux Red Hat All

Vote Count: 0

Problem Description:  The lockdown installer wants password for root, the cfuser and the apache user. By default on RHEL (Ubuntu, and probably most distros) the apache user does not have a password assigned, it is configured as a system account. Further on many systems the root account does not have a password assigned. The lockdown installer should not force administrators to set passwords for these accounts. It should allow 

Steps to Reproduce: Setup a RHEL 7.5 server then run the lockdown installer.

Actual Result: It will prompt for root, apache and cfuser passwords and does not accept empty string.

Expected Result: Since the installer is to be run as root, it should already have the necessary permission to impersonate each of the user accounts and it can execute commands using runuser or su to do so.

Any Workarounds: You can type in a fake password and it will let you past the prompt but that will probably cause an issue if it tries to roll back the installation.

Attachments:

Comments: