[PR #8653/80f48cce backport][stable-9] Redfish: Added steps to allow a user to change their password when their account requires a password change

[patchback]

This is a backport of PR #8653 as merged into main (80f48cc).

SUMMARY

Modifies the flow for the "UpdateUserPassword" command to inspect discovery response data for indicators if the user's password needs to be changed.

Creating as a draft for now to allow users to test.

Fix #8652

ISSUE TYPE

• Feature Pull Request

COMPONENT NAME

redfish_utils

ADDITIONAL INFORMATION

Sample playbook (no changes to the playbook itself)

---
- hosts: all
  gather_facts: false
  vars:
    username: root
    password: defaultpassword
    baseuri: 192.168.1.50
    default_uri_timeout: 5
    default_uri_retries: 5
  tasks:
  - name: Update password
    community.general.redfish_command:
      category: Accounts
      command: UpdateUserPassword
      baseuri: "{{ baseuri }}"
      username: "{{ username }}"
      password: "{{ password }}"
      account_username: root
      account_password: MyNewPassword
    retries: "{{ default_uri_retries }}"
    register: redfish_results
  - debug:
      var: redfish_results

Prior to the changes, if "root" is flagged with "password change required", it would result in the following output:

TASK [Update password] *********************************************************************************************************************************************
fatal: [localhost]: FAILED! => {"ansible_facts": {"discovered_interpreter_python": "/usr/bin/python3"}, "changed": false, "msg": "HTTP Error 403 on GET request to 'https://192.168.1.50/redfish/v1/AccountService', extended message: 'Forbidden'"}

With the change, it handles the 403 response to inspect for the special "PasswordChangeRequired" message. If the user logging into the service is the same account being modified, it'll handle the error and directly PATCH the desired user account with the new password. This clears the "password change required" state on the user.

TASK [Update password] *********************************************************************************************************************************************
changed: [localhost]

TASK [debug] *******************************************************************************************************************************************************
ok: [localhost] => {
    "redfish_results": {
        "ansible_facts": {
            "discovered_interpreter_python": "/usr/bin/python3"
        },
        "changed": true,
        "failed": false,
        "msg": "Action was successful",
        "return_values": {},
        "session": {}
    }
}

[ansibullbot]

cc @TSKushal @Bhavya06 @jyundt @mraineri @rajeevkallur @renxulei @tomasg2012 @xmadsen
click here for bot help