Hide Forgot
Description of problem: Currently there are a number of user credentials stored in various overlord configuration files. This includes: overlord-idp-users.properties gadget-server.properties rtgov.properties dtgov.properties Version-Release number of selected component (if applicable): How reproducible: Always Steps to Reproduce: 1. Install dtgov/s-ramp/rtgov 2. Observe passwords in cleartext in config files Expected Result: Instead, all of these passwords should be stored in the EAP password vault and instead of a cleartext password in the configs, we should store the vault key.
The overlord apps now support vaulted passwords in their configuration files (e.g. sramp-ui.properties, dtgov.properties, etc). It is up to the installer now to store passwords in the vault and then put the resulting password keys into the overlord configuration files as appropriate. This has been documented elsewhere (mojo) for reference by interested/relevant parties. Assigning to thauser to complete the prod installer changes.
Finalizing changes made to facilitate this in the installer. If the user does not elect to create a Password Vault of their own definition, the installer will generate keystores and create a vault according to the parameters here: https://mojo.redhat.com/docs/DOC-28828 All passwords present in the installer will be put into the vault. This includes: - Database Passwords - If chosen, LDAP passwords - If chosen, SSL Cert password for securing management interfaces If the user does choose to create their own, the installer will change appropriate paths in the S-RAMP config files, and use this user-defined vault to mask all of the aforementioned passwords. These changes will be present in ER7 builds.
Changes are complete for ER7. Need the full build to confirm.
Hello, all passwords are vaulted on ER7-2
When you try to install without RTGov server (just client) you are asked for a password to RTGov server. And this password is stored in overlord-rtgov.properties in plain text (RESTActivityServer.serverPassword).
Reproduced. Fixed in a7fb82ff54b532a3e59e65c2740b9351c3c9e940 and a9c2146a5725412881e34d3431a6002146c24620
Verified in CR1