Mask hashed password in VIM response for VIM CRUD APIs

Bug #1594495 reported by Sripriya
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tacker
Fix Released
Medium
Anshu Kumar

Bug Description

VIM REST APIs response contain hashed password in responses similar to [1]. This is not secure and hence needs to masked before sending the response.

Once the server response is fixed, the existing mask_dict_password call in client is unnecessary and should be removed. [2] [3]

[1] "gAAAAABXY0JVWzHvOo-mEFJj9IDLhnjCWzS02v3rc3odsvzp_eq_ztVBQ2yrPq_lW5RGr29YpKk8wnHwSHJPR73ZpcqGAlhzLQ=="
[2] https://github.com/openstack/python-tackerclient/blob/master/tackerclient/tacker/v1_0/__init__.py#L389
[3] https://github.com/openstack/python-tackerclient/blob/master/tackerclient/tacker/v1_0/nfvo/vim.py#L37

Tags: rfe
Sripriya (sseetha)
description: updated
Changed in tacker:
assignee: nobody → Anshu Kumar (anshu-choubey)
Changed in tacker:
importance: Undecided → Medium
Changed in tacker:
status: New → Confirmed
Revision history for this message
Anshu Kumar (anshu-choubey) wrote :

Following patch by Kawaguchi Kentaro aims at removing the masking logic from python-tackerclient:

https://review.openstack.org/#/c/326884/

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tacker (master)

Fix proposed to branch: master
Review: https://review.openstack.org/333751

Changed in tacker:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tacker (master)

Reviewed: https://review.openstack.org/333751
Committed: https://git.openstack.org/cgit/openstack/tacker/commit/?id=4d2ac0a4e529689a71628a3a6115efd362cefaf3
Submitter: Jenkins
Branch: master

commit 4d2ac0a4e529689a71628a3a6115efd362cefaf3
Author: Anshu Choubey <email address hidden>
Date: Fri Jun 24 11:24:09 2016 +0530

    Masks hashed password in VIM CRUD responses

    Implement hashed password masking for VIM CRUD APIs on server-side
    rather than doing it on client-side.

    Change-Id: Ice5c51b6a66cd27f21c144d3a672cf790e4cec41
    Closes-Bug: #1594495

Changed in tacker:
status: In Progress → Fix Released
Revision history for this message
Davanum Srinivas (DIMS) (dims-v) wrote : Fix included in openstack/python-tackerclient 0.5.0

This issue was fixed in the openstack/python-tackerclient 0.5.0 release.

Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/tacker 0.4.0

This issue was fixed in the openstack/tacker 0.4.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.