tripleoclient leaves Rabbit MQ with default Userid and password
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| | tripleo |
Undecided
|
Juan Antonio Osorio Robles | ||
Bug Description
Rabbit MQ is the backbone between the services, and as such should be secured. In a default deployment, the UserID and password used by all services is: Guest /Guest.
As a workaround, values can be set in the yaml file passed in to openstack overcloud deploy. For example.
RabbitUserName: fubar
RabbitPassword: fumtu
At a minimum, the Password value should be defaulted to a uuidgen -r based random value
| summary: |
- tripleioclient leaves Rabbit MQ with default Userid and password + tripleoclient leaves Rabbit MQ with default Userid and password |
| information type: | Private Security → Public Security |
| description: | updated |
| Changed in tripleo: | |
| assignee: | nobody → Juan Antonio Osorio Robles (juan-osorio-robles) |
| Changed in tripleo: | |
| status: | New → In Progress |
Fix proposed to branch: master
Review: https:/
Reviewed: https:/
Committed: https:/
Submitter: Jenkins
Branch: master
commit 309eef1005885ba
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Wed Mar 16 11:05:17 2016 +0200
Pass RabbitMQ's password from the client
In the tripleo templates the RabbitMQ password is set as
the default but can be overriden. It's not a good security pratice to
use that default so this change enables the autogeneration of
that parameter.
Bug: #1557688
Change-Id: I9c2f2b82ab2780
| Changed in tripleo: | |
| status: | In Progress → Fix Released |
Fix proposed to branch: stable/liberty
Review: https:/
| OpenStack Infra (hudson-openstack) wrote : Change abandoned on python-tripleoclient (stable/liberty) | #5 |
Change abandoned by Juan Antonio Osorio Robles (<email address hidden>) on branch: stable/liberty
Review: https:/
Reason: temporarily abandoning this.
Reviewed: https:/
Committed: https:/
Submitter: Jenkins
Branch: master
commit 279376fe10d4047
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Wed Mar 16 11:47:14 2016 +0200
Remove default for the RabbitMQ password
Since the password is now autogenerated from the tripleoclient,
there is no need to keep the default value here.
Change-Id: If41cb561349664
Closes-Bug: #1557688
Reviewed: https:/
Committed: https:/
Submitter: Jenkins
Branch: stable/liberty
commit 7a2c7e7b04fa4ba
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Wed Mar 16 11:05:17 2016 +0200
Pass RabbitMQ's password from the client
In the tripleo templates the RabbitMQ password is set as
the default but can be overriden. It's not a good security pratice to
use that default so this change enables the autogeneration of
that parameter.
Conflicts:
Bug: #1557688
Change-Id: I9c2f2b82ab2780
(cherry picked from commit 309eef1005885ba
| tags: | added: in-stable-liberty |
Fix proposed to branch: master
Review: https:/