Bug 1339315

Summary:	[[MiqPassword::MiqPasswordError]: can not decrypt v0_key encrypted string] encountered during phase [prepare_provision]
Product:	Red Hat CloudForms Management Engine	Reporter:	John Prause <jprause>
Component:	Provisioning	Assignee:	Drew Bomhof <dbomhof>
Status:	CLOSED ERRATA	QA Contact:	Taras Lehinevych <tlehinev>
Severity:	high	Docs Contact:
Priority:	high
Version:	5.6.0	CC:	cpelland, dajohnso, jhardy, ncatling, obarenbo, tlehinev
Target Milestone:	GA	Keywords:	ZStream
Target Release:	5.5.5
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	provisioning
Fixed In Version:	5.5.5.0	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1334684	Environment:
Last Closed:	2016-07-26 15:34:42 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1334684
Bug Blocks:

Comment 1 CFME Bot 2016-06-14 19:07:05 UTC

New commit detected on cfme/5.5.z:
https://code.engineering.redhat.com/gerrit/gitweb?p=cfme.git;a=commitdiff;h=d524854111e3a006958c0d562820490405742d1b

commit d524854111e3a006958c0d562820490405742d1b
Author:     Drew Bomhof <dbomhof>
AuthorDate: Mon Jun 13 16:50:04 2016 -0400
Commit:     Drew Bomhof <dbomhof>
CommitDate: Mon Jun 13 16:50:04 2016 -0400

    Allow a block to be passed to MiqProvisionVirtWorkflow#initialize
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1339315
    
    This allows us to ensure password_helper is called twice
    1. Decrypt passwords for Automate Requests
    2. ReEncrypt passwords after the provision is finished
    
    If a block isn't passed into the class - it will respond as normal
    
    PR: https://github.com/ManageIQ/manageiq/pull/8665

 app/models/miq_request_workflow.rb       |  2 +-
 app/models/mixins/miq_provision_mixin.rb | 91 +++++++++++++++++++-------------
 2 files changed, 55 insertions(+), 38 deletions(-)

Comment 2 CFME Bot 2016-06-14 19:07:09 UTC

New commit detected on cfme/5.5.z:
https://code.engineering.redhat.com/gerrit/gitweb?p=cfme.git;a=commitdiff;h=76d94407c996f8e63d5835dde365aed5a75c7bcb

commit 76d94407c996f8e63d5835dde365aed5a75c7bcb
Merge: 0bebd66 9542f65
Author:     Greg McCullough <gmccullo>
AuthorDate: Tue Jun 14 15:01:46 2016 -0400
Commit:     Greg McCullough <gmccullo>
CommitDate: Tue Jun 14 15:01:46 2016 -0400

    Merge branch '5.5.z_force_reencrypt' into '5.5.z'
    
    Allow a block to be passed to MiqProvisionVirtWorkflow#initialize
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1339315
    
    This allows us to ensure password_helper is called twice
    1. Decrypt passwords for Automate Requests
    2. ReEncrypt passwords after the provision is finished
    
    If a block isn't passed into the class - it will respond as normal
    
    PR: https://github.com/ManageIQ/manageiq/pull/8665
    
    Cherry Pick was not clean
    
    See merge request !964

 app/models/miq_request_workflow.rb              |  2 +-
 app/models/mixins/miq_provision_mixin.rb        | 87 ++++++++++++++-----------
 spec/models/miq_provision_spec.rb               |  2 +-
 spec/models/miq_provision_virt_workflow_spec.rb | 18 +++++
 spec/models/miq_request_spec.rb                 | 14 ++++
 5 files changed, 84 insertions(+), 39 deletions(-)

Comment 4 Taras Lehinevych 2016-07-07 15:54:02 UTC

Verified in 5.5.5.0

Comment 6 errata-xmlrpc 2016-07-26 15:34:42 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-1488.html