BMCWeb changes login password
Alexander Tereschenko
aleksandr.v.tereschenko at linux.intel.com
Thu Sep 5 00:57:52 AEST 2019
On 04-Sep-19 04:06, Joseph Reynolds wrote:
> 2. The scenario where we may want to ask for the old password is the
> "password change dialog". This dialog is accessed when the user signs
> into the Web App login page and the web app informs the user that
> their password is expired and must be changed before they can access
> the BMC The dialog asks for their new password (twice) ... and does
> it also ask for the old password? <== That's the question.
FWIW, by the time the BMC is able to determine that user's password is
expired (and make sure that's indeed that user who's accessing the web
app), the user must have entered their password, so asking it once again
sounds like surplus step in this particular scenario.
regards,
Alexander
More information about the openbmc
mailing list