Bug 478875 - NetworkManager vpn connection stores my vpn password in keyring without my consent
NetworkManager vpn connection stores my vpn password in keyring without my co...
Product: Fedora
Classification: Fedora
Component: NetworkManager-vpnc (Show other bugs)
All Linux
low Severity medium
: ---
: ---
Assigned To: Dan Williams
Fedora Extras Quality Assurance
Depends On:
  Show dependency treegraph
Reported: 2009-01-05 14:41 EST by Jeff Johnston
Modified: 2009-11-06 01:53 EST (History)
3 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2009-11-06 01:53:39 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Jeff Johnston 2009-01-05 14:41:53 EST
Description of problem:

I am using NetworkManager to make a vpn connection.  I asked NetworkManager to store the VPN group password in my keyring, but not my VPN personal password.  My personal password is my Kerberos password and I don't want it stored anywhere.

What is happening is that the personal password is also being added to the keyring.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. Use NetworkManager vpn connection
2. Specify the group and personal password and ask for only the group password to be stored in keyring
3. Relogin at most 2 more times and access the VPN connection in question
Actual results:
The VPN connection will not query for the VPN password and a listing of the keyring will show it has been stored in the default keyring.

Expected results:

The VPN connection should only store the group password in the keyring.

Additional info:

Comment 1 Andrew Overholt 2009-01-05 14:58:17 EST
I've been meaning to file this as well.
Comment 2 Dan Williams 2009-11-06 01:53:39 EST
This should be long fixed in the vpnc packages with 0.7.1; choose "always ask" in the connection editor for that connection and you'll always get asked.

Note You need to log in before you can comment on or make changes to this bug.