Bug 1304493 - Memcached not built with SASL support
Summary: Memcached not built with SASL support
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: memcached
Version: 8.0 (Liberty)
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ga
: 8.0 (Liberty)
Assignee: Lon Hohberger
QA Contact: yeylon@redhat.com
URL:
Whiteboard:
Depends On: 1263696 1304473
Blocks: 1252087
TreeView+ depends on / blocked
 
Reported: 2016-02-03 19:51 UTC by Lon Hohberger
Modified: 2016-04-18 07:02 UTC (History)
12 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 1304473
Environment:
Last Closed: 2016-02-03 22:05:52 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Lon Hohberger 2016-02-03 19:51:53 UTC
+++ This bug was initially created as a clone of Bug #1304473 +++

Because RHEL won't update quick enough, cloning to OSP for our version until RHEL picks this up.

+++ This bug was initially created as a clone of Bug #1263696 +++

Description of problem:

Currently memcached in base is not build with SASL support preventing to secure the memcached instance.


Version-Release number of selected component (if applicable):

memcached-1.4.15-9.el7.x86_64


How reproducible:

always


Steps to Reproduce:
1. Spawn a C7 node
2. yum install memcached
3. vi /etc/sysconfig/memcached (add '-S' in OPTIONS="")
4. start memcached 

Actual results:

Service fails to start with error message :

memcached[18804]: This server is not built with SASL support.


Expected results:

Service should start manually

Additional info:

--- Additional comment from Hugh Brock on 2016-02-03 12:11:57 EST ---

We'll need this package rebuilt for secure memcached support in RHELOSP 8.

Comment 1 Lon Hohberger 2016-02-03 21:40:55 UTC
See notes here:

https://bugzilla.redhat.com/show_bug.cgi?id=1304473#c3
https://bugzilla.redhat.com/show_bug.cgi?id=1304473#c4

In addition to above:

openstack-zaqar utilizes memcached.

Comment 2 Lon Hohberger 2016-02-03 21:55:14 UTC
The above clients all seem to use the standard python-memcache API, and do not appear to have SASL support.

Comment 3 Lon Hohberger 2016-02-03 21:57:18 UTC
It also appears that memcached when run with SASL enabled will not work with non-SASL clients.

Comment 4 RHEL Program Management 2016-02-03 22:05:52 UTC
Development Management has reviewed and declined this request.
You may appeal this decision by reopening this request.


Note You need to log in before you can comment on or make changes to this bug.