Bug 719316

Summary:	nm-applet is caching openvpn password even though not asked to
Product:	[Fedora] Fedora	Reporter:	Jay Turner <jturner>
Component:	NetworkManager	Assignee:	Dan Williams <dcbw>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	15	CC:	dcbw, jistone, jklimes, rdassen, srevivo
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-09-21 07:28:29 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Jay Turner 2011-07-06 13:31:02 UTC

Description of problem:
I have 2 openvpn connections configured.  For both of them, when I select to enable I am prompted for the password and even though "Remember password for this session" and "Save password in keyring" are not checked, the password is still saved and accessible when viewing the Options for the connection.

Version-Release number of selected component (if applicable):
0.8.9997-5.git20110702.fc15.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Attempt to connect to an openvpn connection
2. Enter a valid password and allow the connection to successfully establish
3. Open up the "Network Settings", click on the openvpn connection then select "Options"
  
Actual results:
Password will be visible (or shown as dots and visible by clicking the "Show passwords" option)

Expected results:
Password should not be cached until explicitly requested by the user.

Additional info:
This same behavior was discovered and resolved in RHEL via bug 692578, so appears that fix never made it upstream.

Comment 1 Dan Williams 2011-07-19 03:20:26 UTC

The NM openvpn plugin was not respecting some password flags that indicate where to store the password.  That's now been fixed upstream in git, and that fix will be deployed to Fedora soon.

Comment 2 Jay Turner 2011-07-25 11:43:45 UTC

NetworkManager-0.8.9997-6.git20110721.fc15 appears to resolve this issue.  Closing out.

Comment 3 Josh Stone 2011-07-25 18:20:06 UTC

I believe you also need NetworkManager-openvpn-0.8.9997-2.git20110721.fc15, then it works for me with an "Always Ask" setting that wasn't there before.

Comment 4 Stephen Herr 2011-08-03 19:04:53 UTC

I've just been a random bystander on this who is very happy to see if fixed. Updating to the version stated above fixes it. Propose you move it to Closed -> CurrentRelease.