Bug 627613 - Admin password is stored in plain text in pulp.conf
Summary: Admin password is stored in plain text in pulp.conf
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Pulp
Classification: Retired
Component: z_other
Version: unspecified
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
: ---
Assignee: Mike McCune
QA Contact: wes hayutin
URL:
Whiteboard:
Depends On:
Blocks: verified-to-close
TreeView+ depends on / blocked
 
Reported: 2010-08-26 14:15 UTC by Jay Dobies
Modified: 2011-07-15 19:37 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2011-02-17 16:52:24 UTC
Embargoed:


Attachments (Terms of Use)

Description Jay Dobies 2010-08-26 14:15:50 UTC
We should store a hash instead.

Comment 1 Mike McCune 2010-09-24 19:14:39 UTC
Going to instead actually fix this bug:

https://bugzilla.redhat.com/show_bug.cgi?id=631896

Bug 631896 - No way to change user password

and allow the user to use the CLI to edit the admin's password.

Will update the config file to instruct the user how to change the password.

Comment 2 Mike McCune 2010-10-29 18:47:16 UTC
Fixed 631895 and now you can change the admin password.

Also updated the config:

commit b36c4e326d55f5ffb274c9cd2e1040ba60e11c87
Author: Mike McCune <mmccune>
Date:   Fri Oct 29 11:46:33 2010 -0700

    adding comment to show user how to edit password

diff --git a/etc/pulp/pulp.conf b/etc/pulp/pulp.conf
index b2d21d9..92bae7f 100755
--- a/etc/pulp/pulp.conf
+++ b/etc/pulp/pulp.conf
@@ -2,7 +2,7 @@
 base_url:   http://localhost
 relative_url: /pub
 default_login: admin
-# Highly recommend you change this
+# Highly recommend you change this with "pulp-admin user update" 
 default_password: admin

Comment 3 Jay Dobies 2010-11-03 19:35:39 UTC
Fixed in build 0.78.

Comment 4 Preethi Thomas 2010-11-09 14:37:29 UTC
verified

[root@preethi ~]# cat /etc/pulp/pulp.conf
[server]
base_url:   http://localhost
relative_url: /pub
default_login: admin
# Highly recommend you change this with "pulp-admin user update" 
default_password: admin

Comment 5 Preethi Thomas 2011-02-17 16:52:24 UTC
Closing with community release 

pulp-0.0.139-1.fc14.noarch


Note You need to log in before you can comment on or make changes to this bug.