Problem

There are a few problems with the user and root settings that "agama config show" generates.

1. It is not possible to get the root password (it is not exposed). See bsc#1235602.
2. The user section is exported even if a first user does not exist.
3. The root section is exported even if no authentication mechanism has been defined.
4. The hashed_password key is exported even if the root only has an SSH public key.

For instance, here's the output for a just started Agama instance:

{
  "root": {},
  "user": {
    "fullName": "",
    "userName": "",
    "password": "",
    "hashedPassword": false
  }
}

Solution

• Move the password settings to a single struct (UserPassword). The password and the hashedPassword keys are always exported together.
• Do not export the user or root sections unless it is needed.

I decided to not make the changes at HTTP level because it would imply adapting the web client too and we have more urgent things to work on.

Testing

• Updated the unit test
• Tested manually