Bug 719316 - nm-applet is caching openvpn password even though not asked to
Summary: nm-applet is caching openvpn password even though not asked to
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: NetworkManager
Version: 15
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
Assignee: Dan Williams
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-07-06 13:31 UTC by Jay Turner
Modified: 2015-01-08 00:17 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-09-21 07:28:29 UTC
Type: ---


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 711174 0 unspecified CLOSED NM openvpn remembers password even though I tell it not to 2021-02-22 00:41:40 UTC

Internal Links: 711174

Description Jay Turner 2011-07-06 13:31:02 UTC
Description of problem:
I have 2 openvpn connections configured.  For both of them, when I select to enable I am prompted for the password and even though "Remember password for this session" and "Save password in keyring" are not checked, the password is still saved and accessible when viewing the Options for the connection.

Version-Release number of selected component (if applicable):
0.8.9997-5.git20110702.fc15.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Attempt to connect to an openvpn connection
2. Enter a valid password and allow the connection to successfully establish
3. Open up the "Network Settings", click on the openvpn connection then select "Options"
  
Actual results:
Password will be visible (or shown as dots and visible by clicking the "Show passwords" option)

Expected results:
Password should not be cached until explicitly requested by the user.

Additional info:
This same behavior was discovered and resolved in RHEL via bug 692578, so appears that fix never made it upstream.

Comment 1 Dan Williams 2011-07-19 03:20:26 UTC
The NM openvpn plugin was not respecting some password flags that indicate where to store the password.  That's now been fixed upstream in git, and that fix will be deployed to Fedora soon.

Comment 2 Jay Turner 2011-07-25 11:43:45 UTC
NetworkManager-0.8.9997-6.git20110721.fc15 appears to resolve this issue.  Closing out.

Comment 3 Josh Stone 2011-07-25 18:20:06 UTC
I believe you also need NetworkManager-openvpn-0.8.9997-2.git20110721.fc15, then it works for me with an "Always Ask" setting that wasn't there before.

Comment 4 Stephen Herr 2011-08-03 19:04:53 UTC
I've just been a random bystander on this who is very happy to see if fixed. Updating to the version stated above fixes it. Propose you move it to Closed -> CurrentRelease.


Note You need to log in before you can comment on or make changes to this bug.