From 44e46e0dd71567756928be3f773d09cc2cee22c2 Mon Sep 17 00:00:00 2001 From: Mark Reynolds Date: Mon, 13 Jan 2020 17:58:52 -0500 Subject: [PATCH] Issue 50816 - dsconf allows the root password to be set to nothing Bug Description: dsconf allows you to set the root DN password to nothing/ Fix Description: Do not allow the root DN password to be set to nothing relates: https://pagure.io/389-ds-base/issue/50816 Reviewed by: firstyear(Thanks!) --- src/lib389/lib389/idm/directorymanager.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/lib389/lib389/idm/directorymanager.py b/src/lib389/lib389/idm/directorymanager.py index bb3b58355..4c573e7b4 100644 --- a/src/lib389/lib389/idm/directorymanager.py +++ b/src/lib389/lib389/idm/directorymanager.py @@ -31,6 +31,8 @@ class DirectoryManager(Account): self._protected = True def change_password(self, new_password): + if new_password == "": + raise ValueError("You can not set the Directory Manager password to nothing") self._instance.config.set('nsslapd-rootpw', new_password) def bind(self, password=PW_DM, *args, **kwargs): -- 2.21.1