Closed stemid closed 5 years ago
This appears to be a design flaw here.
We're trying to reset a users password by doing the following actions.
And the only input we have is the users new password.
So once all subkeys are disconnected we run the piece of code I linked above and it fails because the input provided is just the users new_password
twice.
Instead of the proper input which should be the users new_password
and the password key password.
Resetting a users password might work better if we;
Only speculation so far, I'm going to try it and see how it goes.
Yes. You are correct. The following error triggered from https://github.com/sii/siptrackd/blob/master/siptrackdlib/user.py#L690
As per the current code, while resetting the password, it should disconnect all subkeys and trying to connect the subkeys with new password instead of old subkey and its actual password keys password.
However, as per my understanding. The current code does not allow to do so. Because, During the initial stage of development , @sii has designed this to reset all the subkeys and user password dependencies while resetting a users password. Because when a user required password reset when he has forgot the old password. Whereas if he knows the old password and still he need to change the password. He can use UpdatePassword utility in the User interface. That works fine.
Also, current web ui has already given a warning while resetting the password.
As @stemid has updated it would work better if we can add subkeys without password keys password. But that will go against the current system logic. We have to redesign the applications password creation functions totally to achieve that. We can do it later. But as a workaround we can change the code as mentioned in pull request #12 . Which will reset the password without any error. But user has to login with the new password and connect all the password keys manually.
Well the merge @lalusvipi did seems to have solved it so I'm closing this case.
In default install with local password manager I am unable to change the admin user password.
The issue seems to be in siptrackd but this is the exception returned by siptrackweb.