Clear text admin password assignment in instance creation should be disabled

Bug #1291006 reported by Alessandro Pilotti on 2014-03-11
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
Medium
Alessandro Pilotti

Bug Description

The clear text admin password management available in the instance creation "security" tab should be removed as it has been superseded in both Nova and Horizon by an encrypted password management.

Nova blueprint (Grizzly): https://blueprints.launchpad.net/nova/+spec/get-password
Horizon blueprint (Icehouse): https://blueprints.launchpad.net/horizon/+spec/decrypt-and-display-vm-generated-password

Since this feature is now available in Horizon as well, providing an option for the users to specify the password is both misleading and non secure.

Furthermore, the "old"way of providing a clear text passwords works only on selected hypervisors and it does not work for Windows guests, which represent at the moment the main use case since SSH keypair authentication does not apply

Changed in horizon:
assignee: nobody → Alessandro Pilotti (alexpilotti)

Fix proposed to branch: master
Review: https://review.openstack.org/79736

Changed in horizon:
status: New → In Progress
Paul McMillan (paul-mcmillan) wrote :

Who are we protecting here? Is the goal to protect the users from the cloud admins? The motivations for crypto in this feature seem a bit strange...

I still feel very strongly that users should not be trained to paste private keys into webforms.

Hi Paul,

Don't forget also a very practical issue: the old clear text model does not work with Windows instances, the Nova project took the encrypted password route since Grizzly.

To complete the story, the only way to get those clear text passwords in a Windows instance at the moment is with hypervisor dependent ConfigDrive metadata, which means having a clear text admin password in the cdrom drive, very easily accessible by everybody.

David Lyle (david-lyle) on 2014-03-13
Changed in horizon:
milestone: none → icehouse-rc1
importance: Undecided → Medium
David Lyle (david-lyle) on 2014-03-18
Changed in horizon:
milestone: icehouse-rc1 → next
Matthias Runge (mrunge) on 2014-03-19
Changed in horizon:
milestone: next → icehouse-rc1

Reviewed: https://review.openstack.org/79736
Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=5d6fe4b05f5ee768d353f02ccbe396491ac27135
Submitter: Jenkins
Branch: master

commit 5d6fe4b05f5ee768d353f02ccbe396491ac27135
Author: Alessandro Pilotti <email address hidden>
Date: Tue Mar 11 21:14:34 2014 +0200

    Disables the clear text password UI by default

    The old way of assigning passwords in clear text to instances has been
    superseded by the nova get-password feature. A corresponding UI
    feature has been recently included in Horizon (see blueprint
    "decrypt-and-display-vm-generated-password").

    This commit disables the visualization of the old password UI by default.

    Change-Id: Ia9a8b5c1c398054fb3d726b93f7fecc332b02efe
    Closes-bug: #1291006

Changed in horizon:
status: In Progress → Fix Committed
Thierry Carrez (ttx) on 2014-03-31
Changed in horizon:
status: Fix Committed → Fix Released
Thierry Carrez (ttx) on 2014-04-17
Changed in horizon:
milestone: icehouse-rc1 → 2014.1
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers