Description of problem:

In RHEL-OSP6 (deployed with Installer) the paramater hacluster_pwd in pacemaker::params is left to fall on the default "CHANGEME" value. The web interface of pcsd is available on every controller nodes at https://<ip>:2224

[root@mac005056b04b60 ~]# netstat -tapn | grep 2224
tcp6       0      0 :::2224                 :::*                    LISTEN      15121/ruby

it lets you log in but not add any cluster (presumably because ports  3121, 21064 are not open). I propose to either generate a proper password (or set it to the value set in Staypuft) to lock down that interface; limit pcsd only to the appropriate networks (cluster management).

Alternatively, leverage the interface (as we do with Haproxy stats) and provide a supported management interface for the pacemaker cluster. 

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info: