{"action":"created","issue":{"url":"https://api.github.com/repos/dtag-dev-sec/t-pot-autoinstall/issues/26","repository_url":"https://api.github.com/repos/dtag-dev-sec/t-pot-autoinstall","labels_url":"https://api.github.com/repos/dtag-dev-sec/t-pot-autoinstall/issues/26/labels{/name}","comments_url":"https://api.github.com/repos/dtag-dev-sec/t-pot-autoinstall/issues/26/comments","events_url":"https://api.github.com/repos/dtag-dev-sec/t-pot-autoinstall/issues/26/events","html_url":"https://github.com/dtag-dev-sec/t-pot-autoinstall/issues/26","id":253654201,"number":26,"title":"Input of web access password seems to fail","user":{"login":"musevg","id":29026175,"avatar_url":"https://avatars3.githubusercontent.com/u/29026175?v=4","gravatar_id":"","url":"https://api.github.com/users/musevg","html_url":"https://github.com/musevg","followers_url":"https://api.github.com/users/musevg/followers","following_url":"https://api.github.com/users/musevg/following{/other_user}","gists_url":"https://api.github.com/users/musevg/gists{/gist_id}","starred_url":"https://api.github.com/users/musevg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/musevg/subscriptions","organizations_url":"https://api.github.com/users/musevg/orgs","repos_url":"https://api.github.com/users/musevg/repos","events_url":"https://api.github.com/users/musevg/events{/privacy}","received_events_url":"https://api.github.com/users/musevg/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-08-29T13:11:31Z","updated_at":"2018-05-25T16:21:40Z","closed_at":"2017-08-29T14:33:28Z","author_association":"NONE","body":"Hi there,\r\n\r\nI tried to use the installer do get T-Pot on a Ubuntu 16.04.2 at Kimsufi/OVH.\r\nI installed option 4, and the script failed after unpacking the packages when I entered the \r\nweb access password \"Web Access Password\":\r\n```\r\n0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.\r\n### Removing NGINX default website.\r\n### Please enter a password for your user spx for web access.\r\nPassword:\r\nRepeat password:\r\nUsage:\r\n        htpasswd [-cimBdpsDv] [-C cost] passwordfile username\r\n        htpasswd -b[cmBdpsDv] [-C cost] passwordfile username password\r\n\r\n        htpasswd -n[imBdps] [-C cost] username\r\n        htpasswd -nb[mBdps] [-C cost] username password\r\n -c  Create a new file.\r\n -n  Don't update file; display results on stdout.\r\n -b  Use the password from the command line rather than prompting for it.\r\n -i  Read password from stdin without verification (for script usage).\r\n -m  Force MD5 encryption of the password (default).\r\n -B  Force bcrypt encryption of the password (very secure).\r\n -C  Set the computing time used for the bcrypt algorithm\r\n     (higher is more secure but slower, default: 5, valid: 4 to 31).\r\n -d  Force CRYPT encryption of the password (8 chars max, insecure).\r\n -s  Force SHA encryption of the password (insecure).\r\n -p  Do not encrypt the password (plaintext, insecure).\r\n -D  Delete the specified user.\r\n -v  Verify password for the specified user.\r\nOn other systems than Windows and NetWare the '-p' flag will probably not work.\r\nThe SHA algorithm does not use a salt and is less secure than the MD5 algorithm.\r\n```\r\nThis behaviour is reproducible (at least here), and it seems to be caused by the blanks in \r\nthe quoted password. \r\nSo you may want to add a warning, not to use blanks in the password.\r\n\r\nThanks,\r\nM\r\n"},"comment":{"url":"https://api.github.com/repos/dtag-dev-sec/t-pot-autoinstall/issues/comments/392109664","html_url":"https://github.com/dtag-dev-sec/t-pot-autoinstall/issues/26#issuecomment-392109664","issue_url":"https://api.github.com/repos/dtag-dev-sec/t-pot-autoinstall/issues/26","id":392109664,"user":{"login":"musevg","id":29026175,"avatar_url":"https://avatars3.githubusercontent.com/u/29026175?v=4","gravatar_id":"","url":"https://api.github.com/users/musevg","html_url":"https://github.com/musevg","followers_url":"https://api.github.com/users/musevg/followers","following_url":"https://api.github.com/users/musevg/following{/other_user}","gists_url":"https://api.github.com/users/musevg/gists{/gist_id}","starred_url":"https://api.github.com/users/musevg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/musevg/subscriptions","organizations_url":"https://api.github.com/users/musevg/orgs","repos_url":"https://api.github.com/users/musevg/repos","events_url":"https://api.github.com/users/musevg/events{/privacy}","received_events_url":"https://api.github.com/users/musevg/received_events","type":"User","site_admin":false},"created_at":"2018-05-25T16:21:40Z","updated_at":"2018-05-25T16:21:40Z","author_association":"NONE","body":"Apparently most other users just don't use blanks in their web passwords - I just did once more and the installer failed once more. \r\nI still recommend adding at least a hint like `Don't use blanks in your web password or install.sh will fail` to the install script and/or the documentation."}}
{"actor":{"display_login":"musevg"}}