Unable to delete accesskey with double quotes

[JadeVane]

Expected behavior

Unable to delete accesskey with double quotes

Actual behavior

Be able to delete accesskey with double quotes

Steps to reproduce the behavior

1. Add an accesskey with double quotes by the web console, for example, d8fe08"0sd"f08080fes
2. Delete this accesskey in the web console, an error occurred:

The specified service account is not found

3. Try to delete the accesskey using mc tool by ./mc admin user svcacct rm myminio 'd8fe08"0sd"f08080fes', encountered an error again:

mc: <ERROR> Unable to remove the specified service account. The specified service account is not found.

mc --version

• (paste output of mc --version)

mc version RELEASE.2023-12-07T22-13-17Z (commit-id=1ba9435365a772d6b4cab225458306a70dfb2309)
Runtime: go1.21.5 linux/amd64
Copyright (c) 2015-2023 MinIO, Inc.
License GNU AGPLv3 <https://www.gnu.org/licenses/agpl-3.0.html>

System information

Linux version 6.1.0-31-amd64 ([email protected]) (gcc-12 (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #1 SMP PREEMPT_DYNAMIC Debian 6.1.128-1 (2025-02-07)

[taran-p]

I am unable to replicate this, deleting the account in both console and mc worked for me. Does the key appear in mc admin accesskey list myminio?

[JadeVane]

No, the actual command executed is different from expected

[harshavardhana]

With all the unnecessary ways to name your credentials, why do you make your life harder?

[harshavardhana]

It is pefectly fine, you are adding new characters on the command line, just use what is presented.

mc admin user add play/ d8fe08\"0sd\"f08080fes
Enter Secret Key: 
Added user `d8fe08"0sd"f08080fes` successfully.

mc admin user add play/ d8fe08\"0sd\"f08080fes
Enter Secret Key: 
Added user `d8fe08"0sd"f08080fes` successfully.

mc admin user rm play/ d8fe08\"0sd\"f08080fes
Removed user `d8fe08"0sd"f08080fes` successfully.

[JadeVane]

With all the unnecessary ways to name your credentials, why do you make your life harder?

This is not an expected behavior, nor is it the result I desired. I use KeePass to manage passwords and incidentally used it to generate a key. I forgot that this is the usual method for generating passwords containing special characters, so it inadvertently produced this invalid key.

This was a human error, but firstly, MinIO did not validate the key and successfully generated it. However, after successful import, it triggered an error. Therefore, I don't believe this should be considered as working as intended.

[JadeVane]

Moreover, the issue remains unresolved because this wasn't an error caused by hacking—it was a human mistake that could easily occur under normal circumstances, so this problem shouldn't be closed either.

[klauspost]

@JadeVane We are not going to prioritize this, as it is an unreasonable edge case.

You are welcome to debug and send in a fix for it.