Bug 1403310

Summary: Infoblox passwords saved as plain text
Product: Red Hat Satellite Reporter: Renzo Nuccitelli <rnuccite>
Component: DHCP & DNSAssignee: Lukas Zapletal <lzap>
Status: CLOSED WONTFIX QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 6.3.0CC: jcallaha
Target Milestone: UnspecifiedKeywords: Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-08-02 20:57:22 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 1402685    

Description Renzo Nuccitelli 2016-12-09 15:31:25 UTC
Description of problem:

Summary says it all

Version-Release number of selected component (if applicable):


How reproducible:

Always

Steps to Reproduce:
1. Run installer with infoblox parameters using password "infoblox"
2. Check passwords running:
[root@ ~]# grep password /etc/foreman-proxy/settings.d/dns_infoblox.yml 
:password: "infoblox"
[root@ ~]# grep password /etc/foreman-proxy/settings.d/dhcp_infoblox.yml 
:password: "infoblox"

Actual results:

password saved as plaintext

Expected results:

 Token authentication should be used instead (OAuth maybe) if available. Or at least passwords should be encrypted.

Additional info:

Comment 3 Bryan Kearney 2018-08-02 20:57:22 UTC
Thank you for your interest in Satellite 6. We have evaluated this request, and we do not expect this to be implemented in the product in the forseeable future. We are therefore closing this out as WONTFIX. If you have any concerns about this, please feel free to contact Rich Jerrido or Bryan Kearney. Thank you.