Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1054931

Summary:	Installer: More plaintext password issues.
Product:	[JBoss] JBoss Fuse Service Works 6	Reporter:	Thomas Hauser <thauser>
Component:	Installer	Assignee:	Thomas Hauser <thauser>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Len DiMaggio <ldimaggi>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	6.0.0 GA	CC:	atangrin, dlesage, jpechane, soa-p-jira
Target Milestone:	CR2
Target Release:	---
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Thomas Hauser 2014-01-17 19:00:06 UTC

Description of problem:
If one unzips the installer-jar, certain sensitive strings are present in plain text, namely the default password vault and the SAML keystore.



Steps to Reproduce:
1. Unzip the installer jar.
2. Open res/ProcessPanel.spec.xml
3. Passwords in plaintext.

Expected results:
Passwords are references to izpack variables.

Comment 1 Thomas Hauser 2014-01-17 19:01:20 UTC

Installer will now prompt for these passwords, rather than using defaults.

Comment 3 Jiri Pechanec 2014-01-24 09:21:17 UTC

Verified in CR2-2