EnterpriseDB / edb-installers

PostgreSQL installers packaged by EDB
22 stars 7 forks source link

pgAgent installation: Wrong/Misleading error message/failed installation when the default postgres db user's password doesn't meet window security policy. #7490 #122

Open rdczhzq opened 3 months ago

rdczhzq commented 3 months ago

lease note that security bugs or issues should be reported to security@pgadmin.org.

Describe the bug

During pgAgent installation, when the GUI prompts for a default user: postgres to be created , if the user's windows password is not fulfilling windows security policy, the GUI prompts an error message, saying something like " The password length doesn't meet the requirement".(e.g. if the postgres db user's password is set to 123456).

To Reproduce

DB user postgres, password: 123456

Install the pgagent under adminstrator rights.

When the GUI prompts enter password for the default user: postgres, input:123456, you will never pass with an error message saying something "The posssword length doesn't meet the reqirement".

Then you create another windows user with password fulfilling windows securty policy and during pgagent installation, use admin as the user and also the windows approved password, installation succeeded without any problem.

Expected behavior

A clear and concise description of what you expected to happen.

Error message

If possible, include the full, unedited text of any error messages displayed.

Screenshots

If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

OS: [e.g. Windows 10, OSX monterey] Version: [e.g. 6.15] Mode: [e.g Desktop or Server] Browser (if running in server mode): [e.g. chrome, safari] Package type: [e.g. RPM, DEB, Python, Container, etc.] Additional context

Add any other context about the problem here.

dpage-edb commented 1 month ago

Can you clarify exactly what message you feel is misleading please? The only one that talks about password length that I can find is this: https://github.com/EnterpriseDB/edb-installers/blob/57b0e11ad4970e666a91eb4b34a06ebdf2417f31/pgAgent/scripts/windows/createuser/createuser.cpp#L108