chore: drop two leftovers of the Wazuh role's first commit

That commit added test_bcrypt_hash.py with an Exception comment and left a
trailing blank line in group_vars/all/11_oidc.yml. Both go.

What the comment said still holds: the test hashes with the raw bcrypt package
because Ansible's password_hash('bcrypt') routes through passlib, whose bcrypt
self-test can misreport a password well under 72 bytes as too long when
passlib and the installed bcrypt disagree on the version.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
kevinveenbirkenbachandClaude Opus 5.5 authored and Prageeth Panicker committed 2026-10-06 05:15:17 +00:00
1 parent 163edebf01
commit e6fbb4b3f4
2 files changed
-6

No files matched your search

-1
View File
@@ -54,4 +54,3 @@ defaults_oidc:
CLI_CLIENT_ID: "admin-cli"
OIDC: "{{ defaults_oidc | combine(OIDC_OVERRIDE | default({}, true), recursive=True) }}"
@@ -29,11 +29,6 @@ class TestBcryptHash(unittest.TestCase):
self.assertTrue(hashed.startswith(("$2b$", "$2a$")))
def test_64_character_password_hashes_successfully(self):
# Exception: Ansible's password_hash('bcrypt') filter routes through
# passlib, whose bcrypt self-test can misreport a well-under-72-byte
# password as "too long" when passlib and the installed bcrypt
# package's version detection drift apart. The raw bcrypt package
# used here has no such self-test.
password = "A" * 64
hashed = self.f(password)
self.assertTrue(