Bug 2188004 - [RFE] Add a warning about using BASIC auth in insights-client.conf
Summary: [RFE] Add a warning about using BASIC auth in insights-client.conf
Keywords:
Status: NEW
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: insights-client
Version: 9.3
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: rc
: ---
Assignee: CSI Client Tools Bugs
QA Contact: CSI Client Tools Bugs
URL:
Whiteboard:
Depends On:
Blocks: 2226705
TreeView+ depends on / blocked
 
Reported: 2023-04-19 12:49 UTC by Christian Marineau
Modified: 2023-07-26 09:09 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 2226705 (view as bug list)
Environment:
Last Closed:
Type: Bug
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHELPLAN-155191 0 None None None 2023-04-19 12:50:02 UTC

Description Christian Marineau 2023-04-19 12:49:33 UTC
Description of problem:
Overall we are documenting "basic" authentication as an alternative to the "cert" method, however when using basic authentication the username and password remain in plain text.

The goal of this RFE is not to provide encryption, but to add a Warning in the configuration file to encourage customer to stick with "authmethod=BASIC"

Version-Release number of selected component (if applicable):
Focus on RHEL9 and RHEL8

Actual text in insights-client.conf:
~~~
# Change authentication method, valid options BASIC, CERT. Default BASIC
#authmethod=BASIC

# username to use when authmethod is BASIC
#username=

# password to use when authmethod is BASIC
#password=
~~~


Proposed text in insights-client.conf:
~~~
# Change authentication method, valid options BASIC, CERT.
# The recommended and default method is CERT.
# Changing to BASIC is less secure and not recommended as the username and password will be stored in plain text in the configuration file.
#authmethod=BASIC

# username to use when authmethod is BASIC
#username=

# password to use when authmethod is BASIC
#password=
~~~


Additional info:


Note You need to log in before you can comment on or make changes to this bug.