Bug 1304493

Summary:	Memcached not built with SASL support
Product:	Red Hat OpenStack	Reporter:	Lon Hohberger <lhh>
Component:	memcached	Assignee:	Lon Hohberger <lhh>
Status:	CLOSED WONTFIX	QA Contact:	yeylon <yeylon>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.0 (Liberty)	CC:	apevec, hbrock, jschluet, lars, lhh, markmc, mburns, mlichvar, qe-baseos-daemons, srevivo, yeylon, yguenane
Target Milestone:	ga	Keywords:	ZStream
Target Release:	8.0 (Liberty)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	1304473	Environment:
Last Closed:	2016-02-03 22:05:52 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:	1263696, 1304473
Bug Blocks:	1252087

Description Lon Hohberger 2016-02-03 19:51:53 UTC

+++ This bug was initially created as a clone of Bug #1304473 +++

Because RHEL won't update quick enough, cloning to OSP for our version until RHEL picks this up.

+++ This bug was initially created as a clone of Bug #1263696 +++

Description of problem:

Currently memcached in base is not build with SASL support preventing to secure the memcached instance.


Version-Release number of selected component (if applicable):

memcached-1.4.15-9.el7.x86_64


How reproducible:

always


Steps to Reproduce:
1. Spawn a C7 node
2. yum install memcached
3. vi /etc/sysconfig/memcached (add '-S' in OPTIONS="")
4. start memcached 

Actual results:

Service fails to start with error message :

memcached[18804]: This server is not built with SASL support.


Expected results:

Service should start manually

Additional info:

--- Additional comment from Hugh Brock on 2016-02-03 12:11:57 EST ---

We'll need this package rebuilt for secure memcached support in RHELOSP 8.

Comment 1 Lon Hohberger 2016-02-03 21:40:55 UTC

See notes here:

https://bugzilla.redhat.com/show_bug.cgi?id=1304473#c3
https://bugzilla.redhat.com/show_bug.cgi?id=1304473#c4

In addition to above:

openstack-zaqar utilizes memcached.

Comment 2 Lon Hohberger 2016-02-03 21:55:14 UTC

The above clients all seem to use the standard python-memcache API, and do not appear to have SASL support.

Comment 3 Lon Hohberger 2016-02-03 21:57:18 UTC

It also appears that memcached when run with SASL enabled will not work with non-SASL clients.

Comment 4 RHEL Program Management 2016-02-03 22:05:52 UTC

Development Management has reviewed and declined this request.
You may appeal this decision by reopening this request.