Missing Credentials error when uaa client has a blank password

Products

• Operations Manager

Issue/Introduction

UAA version 76.23.0 introduced a regression that causes password token grant to fail if the clients password is blank. 
 

$ uaa get-password-token pw_admin_client -s '' -u uname -p password 
Unable to retrieve token
An error occurred while calling https://om.<FQDN>/uaa/oauth/token
{
  "error": "unauthorized",
  "error_description": "Missing credentials"
}
Retry with --verbose for more information.

This impacts the following product release

• Operations Manager
  • 3.0.18+LTS-T
  • 2.10.64
• Tanzu Application Service for VMs
  • 3.0.19
  • 4.0.11
  • 5.0.1

Resolution

You can workaround this by setting a password which is not blank for the given uaa client. 

This is fixed in UAA release version 76.24.0.  Check opsman and TAS release notes to verify the version of uaa you are upgrading to.