We start using nightly builds, probably I was wrong about the sqlite database. It seems to go wrong on the domain name I use: b.c.m.e FQDN: overlord001.b.c.m.e. When I change the domain name to e.g. gmail.com and delete the admin user entry the permission reset script works.

yes, foreman requires a domain name to be set to work correctly.

Sorry, maybe I was not clear enough. What I tried to say that Foreman doesn't accept b.c.m.e as a valid domain name. And I know quite some companies, including myself who are using short domain names for internal domains.

Jasper Poppe wrote:

Sorry, maybe I was not clear enough. What I tried to say that Foreman doesn't accept b.c.m.e as a valid domain name. And I know quite some companies, and also including myself who are using short domain names for internal domains.

The error you get when running the reset permissions task is 'mail is invalid'. It is pretty easy to reproduce, Just set the domain name to b.c.m.e and run the script. Or set it hardcoded in the reset permissions script like:
user = User.find_or_create_by_login(:login => "admin", :firstname => "Admin", :lastname => "User", :mail => "root@b.c.m.e")

Clear the user table (important step) and run the reset permissions script:
root@overlord001:~/git/foreman# sudo mysql --defaults-extra-file=/etc/mysql/debian.cnf foreman -e 'DELETE FROM users'

root@overlord001:~/git/foreman# sudo RAILS_ENV=production rake permissions:reset
/root/git/foreman/vendor/ruby/1.8/gems/ruby_parser-2.3.1/lib/ruby_parser_extras.rb:10: warning: already initialized constant ENC_NONE
/root/git/foreman/vendor/ruby/1.8/gems/ruby_parser-2.3.1/lib/ruby_parser_extras.rb:11: warning: already initialized constant ENC_EUC
/root/git/foreman/vendor/ruby/1.8/gems/ruby_parser-2.3.1/lib/ruby_parser_extras.rb:12: warning: already initialized constant ENC_SJIS
/root/git/foreman/vendor/ruby/1.8/gems/ruby_parser-2.3.1/lib/ruby_parser_extras.rb:13: warning: already initialized constant ENC_UTF8
Mail is invalid

Ohad Levy wrote:

I wonder if there is any reason why a domain name won't be one char.

There are currently no 1 character top level domains so it isn't valid as a public mail address (makes sense), but it is fine to have 1 character private domains.