Expose and secure Vertica Management Console

Bug #1489167 reported by Mayuri Ganguly
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OpenStack DBaaS (Trove)
In Progress
High
Craig Vyvial

Bug Description

The Management console have a dbadmin user and a builtin password, which is baked into the vertica image. On the instance boot, the prepare function should start the vconsole process and change the vconsole dbadmin user password to the auto generated dbadmin password. This is done to secure the vconsole, so that no one can use the password, that is baked in the image, to login to the vconsole. The first time when the db is created, the MC dbadmin user's password should get changed to the dbadmin password and the db is imported. Also if somehow the dbadmin password fails to change, the vconsole process is stopped, to ensure no one can log in with the baked-in password. After the successful completion of the dbadmin password change process, the auto start feature should be enabled, so that the vconsole process starts automatically on instance reboot.

The first time root is enabled on an instance, a root user should be created in the Management Console with the user supplied password or an auto-generate password. From the next time, whenever the root password is changed, the root user password for the MC should also get changed.

Changed in trove:
assignee: nobody → Mayuri Ganguly (mayuri-ganguly)
Changed in trove:
status: New → In Progress
Changed in trove:
assignee: Mayuri Ganguly (mayuri-ganguly) → Saurabh Surana (saurabh-surana)
Changed in trove:
assignee: Saurabh Surana (saurabh-surana) → Mayuri Ganguly (mayuri-ganguly)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to trove (master)

Fix proposed to branch: master
Review: https://review.openstack.org/220781

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on trove (master)

Change abandoned by Mayuri Ganguly (<email address hidden>) on branch: master
Review: https://review.openstack.org/220781
Reason: This is not supposed to be a new commit. There is another ongoing patch for this ( https://review.openstack.org/#/c/208670/ )

Changed in trove:
importance: Undecided → High
milestone: none → liberty-rc1
Changed in trove:
assignee: Mayuri Ganguly (mayuri-ganguly) → Sharika (sharika-pongubala)
Changed in trove:
assignee: Sharika (sharika-pongubala) → Mayuri Ganguly (mayuri-ganguly)
Changed in trove:
assignee: Mayuri Ganguly (mayuri-ganguly) → Saurabh Surana (saurabh-surana)
Changed in trove:
assignee: Saurabh Surana (saurabh-surana) → Mayuri Ganguly (mayuri-ganguly)
Changed in trove:
assignee: Mayuri Ganguly (mayuri-ganguly) → Sharika (sharika-pongubala)
Revision history for this message
Nikhil Manchanda (slicknik) wrote :

This is not blocking for Liberty-RC1.

Changed in trove:
milestone: liberty-rc1 → next
Changed in trove:
assignee: Sharika (sharika-pongubala) → Mayuri Ganguly (mayuri-ganguly)
Changed in trove:
assignee: Mayuri Ganguly (mayuri-ganguly) → Sharika (sharika-pongubala)
Changed in trove:
assignee: Sharika (sharika-pongubala) → Mayuri Ganguly (mayuri-ganguly)
Changed in trove:
assignee: Mayuri Ganguly (mayuri-ganguly) → Craig Vyvial (cp16net)
Changed in trove:
assignee: Craig Vyvial (cp16net) → Mayuri Ganguly (mayuri-ganguly)
Revision history for this message
Amrith Kumar (amrith) wrote :

Craig has been working on https://review.openstack.org/#/c/208670

Changed in trove:
assignee: Mayuri Ganguly (mayuri-ganguly) → Craig Vyvial (cp16net)
milestone: next → newton-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Change abandoned by amrith (<email address hidden>) on branch: master
Review: https://review.openstack.org/208670
Reason: per trove meeting, August 10th, this is being abandoned for inactivity. If you want to continue work on this you can restore it.

Amrith Kumar (amrith)
Changed in trove:
milestone: newton-1 → ongoing
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.