|Summary:||RFE: ovirt-log-collector-analyzer: hide fence passwords via switch|
|Product:||Red Hat Enterprise Virtualization Manager||Reporter:||Douglas Schilling Landgraf <dougsland>|
|Component:||ovirt-log-collector||Assignee:||Douglas Schilling Landgraf <dougsland>|
|Status:||CLOSED ERRATA||QA Contact:||Jiri Belka <jbelka>|
|Version:||4.1.5||CC:||danken, dougsland, jbelka, lsvaty, mkeir, ylavi|
|Target Milestone:||ovirt-4.2.0||Keywords:||EasyFix, FutureFeature, Improvement|
|Fixed In Version:||ovirt-log-collector-4.2.0-1.el7ev||Doc Type:||If docs needed, set a value|
|Doc Text:||Story Points:||---|
|Last Closed:||2018-05-15 17:31:24 UTC||Type:||Bug|
|oVirt Team:||Integration||RHEL 7.3 requirements from Atomic Host:|
|Cloudforms Team:||---||Target Upstream Version:|
Description Douglas Schilling Landgraf 2017-09-25 16:05:45 UTC
Description of problem: User requested to hide encrypted fence passwords information via switch.
Comment 1 Sandro Bonazzola 2017-09-26 05:36:11 UTC
Can you please detail? I've not understood which password needs to be hidden and where.
Comment 2 Mark Keir 2017-09-26 05:44:29 UTC
Section 8 of the report under the heading: "8. Fence agent password per host"
Comment 3 Dan Kenigsberg 2017-09-26 05:53:59 UTC
Why is that needed to be hidden? Another user WANTED us to capture them, so that it is easier to restore them when a host is removed and re-added to the same Engine.
Comment 4 Mark Keir 2017-09-26 06:39:51 UTC
Passwords are not normally exposed in reports shared between groups for analysis. Some companies, Atlassian is an example, provide tools to make data dumps for support anonymous. I'd feel more comfortable if the default behaviour was to not include the fence passwords in the report for security. If they were to be needed, they might be included in the report via a verbose|debug option. When we write ansible code where credentials are involved, we normally use "no_log" to hide the credential. It can be exposed for verification by turning up the "-vvv" level.
Comment 7 Jiri Belka 2018-01-26 13:19:12 UTC
ok, ovirt-log-collector-analyzer-4.2.0-1.el7ev.noarch tested with a sosreport from 4.1 env as with 4.2 env sosreport it has issue - https://bugzilla.redhat.com/show_bug.cgi?id=1539027
Comment 12 errata-xmlrpc 2018-05-15 17:31:24 UTC
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:1465
Comment 13 Franta Kust 2019-05-16 13:05:30 UTC