The testcase is simple.
Delete the lib/LocalSite.cfg so it is like starting on a fresh install.
Run configure. Save a password.
Go back and finish the configure.
When you hit the final next, configure is supposed to ask for the password you set earlier. But instead it gives this error and asks for an initial password to be set.
You have not defined a password. You can set one below
You can repeat this as often as you like. Each time you save in configure it asks for a new password and never writes the password in
LocalSite.cfg
It does however create the
LocalLib.cfg and saves all the other configurations!
This is a security bug = requirement.
--
KJL
Note. I found this when I tested a release that was supposed to be the first beta. But there is no way I will release a beta with this security bug open.
--
KJL
Fixed. Closed, because code has not been released yet.
CC
If you encountered the problem of the password not being saved:
You will need to delete the line
$TWiki::cfg{Password} = '';
from
LocalSite
or the new password will still not be written.
AC