https://bugs.kde.org/show_bug.cgi?id=519363

--- Comment #2 from Mislav Božičević <[email protected]> ---
(In reply to Thomas Duckworth from comment #1)
> Thank you for the report - however, does this bug present in normal usage
> through the GUI? If not, is there a specific concern you have about this
> behaviour?

Thank you for taking a look. The attached reproducer program does not depend on
the GUI. AuthHelper::createuser method attempts to validate the password
argument to prevent empty passwords (`if (password.isEmpty())` branch) , which
it does not achieve, as demonstrated. If the intention was to allow empty
passwords, then the validation is not necessary. If the intention was to
prevent empty passwords as the error message would suggest ("For security
reasons, creating Samba users with empty passwords is not allowed."), then the
validation needs to account for the demonstrated case ('\n').

Thank you in advance for your effort.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to