Bug 1304493

Summary: Memcached not built with SASL support
Product: Red Hat OpenStack Reporter: Lon Hohberger <lhh>
Component: memcachedAssignee: Lon Hohberger <lhh>
Status: CLOSED WONTFIX QA Contact: yeylon <yeylon>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.0 (Liberty)CC: apevec, hbrock, jschluet, lars, lhh, markmc, mburns, mlichvar, qe-baseos-daemons, srevivo, yeylon, yguenane
Target Milestone: gaKeywords: ZStream
Target Release: 8.0 (Liberty)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 1304473 Environment:
Last Closed: 2016-02-03 22:05:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1263696, 1304473    
Bug Blocks: 1252087    

Description Lon Hohberger 2016-02-03 19:51:53 UTC 
+++ This bug was initially created as a clone of Bug #1304473 +++

Because RHEL won't update quick enough, cloning to OSP for our version until RHEL picks this up.

+++ This bug was initially created as a clone of Bug #1263696 +++

Description of problem:

Currently memcached in base is not build with SASL support preventing to secure the memcached instance.


Version-Release number of selected component (if applicable):

memcached-1.4.15-9.el7.x86_64


How reproducible:

always


Steps to Reproduce:
1. Spawn a C7 node
2. yum install memcached
3. vi /etc/sysconfig/memcached (add '-S' in OPTIONS="")
4. start memcached 

Actual results:

Service fails to start with error message :

memcached[18804]: This server is not built with SASL support.


Expected results:

Service should start manually

Additional info:

--- Additional comment from Hugh Brock on 2016-02-03 12:11:57 EST ---

We'll need this package rebuilt for secure memcached support in RHELOSP 8.
Comment 1 Lon Hohberger 2016-02-03 21:40:55 UTC 
See notes here:

https://bugzilla.redhat.com/show_bug.cgi?id=1304473#c3
https://bugzilla.redhat.com/show_bug.cgi?id=1304473#c4

In addition to above:

openstack-zaqar utilizes memcached.
Comment 2 Lon Hohberger 2016-02-03 21:55:14 UTC 
The above clients all seem to use the standard python-memcache API, and do not appear to have SASL support.
Comment 3 Lon Hohberger 2016-02-03 21:57:18 UTC 
It also appears that memcached when run with SASL enabled will not work with non-SASL clients.
Comment 4 RHEL Program Management 2016-02-03 22:05:52 UTC 
Development Management has reviewed and declined this request.
You may appeal this decision by reopening this request.