Bug 478875

Summary:	NetworkManager vpn connection stores my vpn password in keyring without my consent
Product:	[Fedora] Fedora	Reporter:	Jeff Johnston <jjohnstn>
Component:	NetworkManager-vpnc	Assignee:	Dan Williams <dcbw>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	10	CC:	davidz, dcbw, overholt
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-11-06 06:53:39 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jeff Johnston 2009-01-05 19:41:53 UTC

Description of problem:

I am using NetworkManager to make a vpn connection.  I asked NetworkManager to store the VPN group password in my keyring, but not my VPN personal password.  My personal password is my Kerberos password and I don't want it stored anywhere.

What is happening is that the personal password is also being added to the keyring.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Use NetworkManager vpn connection
2. Specify the group and personal password and ask for only the group password to be stored in keyring
3. Relogin at most 2 more times and access the VPN connection in question
  
Actual results:
 
The VPN connection will not query for the VPN password and a listing of the keyring will show it has been stored in the default keyring.

Expected results:

The VPN connection should only store the group password in the keyring.

Additional info:

NetworkManager-vpnc-0.7.0-0.11.svn4326.fc10.i386
vpnc-0.5.1-6.fc10.i386

Comment 1 Andrew Overholt 2009-01-05 19:58:17 UTC

I've been meaning to file this as well.

Comment 2 Dan Williams 2009-11-06 06:53:39 UTC

This should be long fixed in the vpnc packages with 0.7.1; choose "always ask" in the connection editor for that connection and you'll always get asked.