{"action":"created","issue":{"url":"https://api.github.com/repos/seveas/python-hpilo/issues/100","repository_url":"https://api.github.com/repos/seveas/python-hpilo","labels_url":"https://api.github.com/repos/seveas/python-hpilo/issues/100/labels{/name}","comments_url":"https://api.github.com/repos/seveas/python-hpilo/issues/100/comments","events_url":"https://api.github.com/repos/seveas/python-hpilo/issues/100/events","html_url":"https://github.com/seveas/python-hpilo/issues/100","id":132277283,"number":100,"title":"puppet provide doesn't detect password changes necessary when run in local mode","user":{"login":"woneill","id":1393558,"avatar_url":"https://avatars.githubusercontent.com/u/1393558?v=3","gravatar_id":"","url":"https://api.github.com/users/woneill","html_url":"https://github.com/woneill","followers_url":"https://api.github.com/users/woneill/followers","following_url":"https://api.github.com/users/woneill/following{/other_user}","gists_url":"https://api.github.com/users/woneill/gists{/gist_id}","starred_url":"https://api.github.com/users/woneill/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/woneill/subscriptions","organizations_url":"https://api.github.com/users/woneill/orgs","repos_url":"https://api.github.com/users/woneill/repos","events_url":"https://api.github.com/users/woneill/events{/privacy}","received_events_url":"https://api.github.com/users/woneill/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-08T22:38:46Z","updated_at":"2016-02-08T22:42:55Z","closed_at":"2016-02-08T22:42:55Z","body":"When running the puppet provider to manage ILO users, it appears that the password checks will always return 'true' if managing the local ILO:\r\n\r\n```ruby\r\ndef check_password(login, password)\r\n        begin\r\n            @provider.hpilo_cli('-l', login, '-p', password, @hostname, 'get_fw_version')\r\n            true\r\n        rescue\r\n            false\r\n        end\r\nend\r\n```\r\n\r\nI can't think of a workaround even using `hponcfg` directly in local mode that'll force require a password- appears that's the safety net that allows forgotten passwords to be reset."},"comment":{"url":"https://api.github.com/repos/seveas/python-hpilo/issues/comments/181604987","html_url":"https://github.com/seveas/python-hpilo/issues/100#issuecomment-181604987","issue_url":"https://api.github.com/repos/seveas/python-hpilo/issues/100","id":181604987,"user":{"login":"seveas","id":200649,"avatar_url":"https://avatars.githubusercontent.com/u/200649?v=3","gravatar_id":"","url":"https://api.github.com/users/seveas","html_url":"https://github.com/seveas","followers_url":"https://api.github.com/users/seveas/followers","following_url":"https://api.github.com/users/seveas/following{/other_user}","gists_url":"https://api.github.com/users/seveas/gists{/gist_id}","starred_url":"https://api.github.com/users/seveas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/seveas/subscriptions","organizations_url":"https://api.github.com/users/seveas/orgs","repos_url":"https://api.github.com/users/seveas/repos","events_url":"https://api.github.com/users/seveas/events{/privacy}","received_events_url":"https://api.github.com/users/seveas/received_events","type":"User","site_admin":false},"created_at":"2016-02-08T22:42:55Z","updated_at":"2016-02-08T22:42:55Z","body":"Yes, when talking to the iLO via the kernel driver, no authentication is done and any password is accepted. Resetting forgotten passwords is one of the things that is made possible by this. This is a feature of the iLO itself and this cannot be changed. So if you want to manage passwords of the local iLO, you'll need to check them via the network interface I'm afraid. "}}