openbmc / pam-ipmi

pam-ipmi

pam-ipmi's Issues

useradd/usermod doesn't update /etc/ipmi_pass

useradd/usermod typically used with EXTRA_USERS_PARAMS to add or change user in the image.
But this doesn't update /etc/ipmi_pass file causes OOB IPMI to fail. But when user credentials are changed with passwd command it works fine.

Looks like pam_sm_chauthtok() is not getting called on useradd/usermod commands.

The rule of user password is not clear.

Hello:
Through ‘/redfish/v1/AccountService’ , we can get the 'MaxPasswordLength' and 'MinPasswordLength' of user password, but no other restrictions.
When create/edit user from WEBUI, some password which matches the rule of length, like '1234abcd', '11111abc', '12345678a', still get the error message of invalid password from backend.
In the /etc/pam.d/common-password, I find some pam modules and there are some limitations about user password.

password	[success=ok default=die]	pam_ipmicheck.so spec_grp_name=ipmi
password	[success=ok default=die]	pam_cracklib.so debug enforce_for_root reject_username minlen=8 difok=0 use_authtok
password	[success=ok ignore=ignore default=die]	pam_pwhistory.so debug enforce_for_root remember=0 use_authtok
password	[success=ok default=die]	pam_unix.so sha512 use_authtok
password	[success=1 default=die] 	pam_ipmisave.so spec_grp_name=ipmi spec_pass_file=/etc/ipmi_pass key_file=/etc/key_file
password	requisite			pam_deny.so
password	required			pam_permit.so

But none of them could explain why the passwords mentioned above are invalid.
So I want to know where to find those definition of user password rules.
THANKS!(please forgive my poor English)