Redis I don't know if it's a acl bug

127.0.0.1:6380> acl getuser default
1) "flags"
2) 1) "on"
   2) "allkeys"
   3) "nopass"
3) "passwords"
4) (empty list or set)
5) "commands"
6) "+@all"
7) "keys"
8) 1) "*"
127.0.0.1:6380> acl setuser default >123
OK
127.0.0.1:6380> acl setuser default >123
OK
127.0.0.1:6380> acl getuser default
1) "flags"
2) 1) "on"
   2) "allkeys"
3) "passwords"
4) 1) "a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3"
5) "commands"
6) "+@all"
7) "keys"
8) 1) "*"
127.0.0.1:6380> acl setuser default <123
OK
127.0.0.1:6380> acl getuser default
1) "flags"
2) 1) "on"
   2) "allkeys"
3) "passwords"
4) (empty list or set)
5) "commands"
6) "+@all"
7) "keys"
8) 1) "*"
127.0.0.1:6380> quit
root@ubuntu:/redis-6.0.1# redis-cli -p 6380
127.0.0.1:6380> keys *
(error) NOAUTH Authentication required.

I hope the result of the above operation is that no password is required.:) if it's not bug,what is the user's password? thanks. redis6.0.1 version

Comment From: itamarhaber

Hello @wsyfire

This isn't a bug, you had simply succeeded "locking the car with the keys inside" by removing all passwords from the default user.

Comment From: wsyfire

Hello @wsyfire

This isn't a bug, you had simply succeeded "locking the car with the keys inside" by removing all passwords from the default user.

thanks for your reply!