Comment 0 for bug 480783

Nick Barcet (nijaba) wrote :

It seems to be a security issue that Eucalyptus does not allow API connection to happen over and encrypted connection. Currently API calls occur over http on port 8773. As they carry QueryID/SecretKey in clear, anyone that can sniff the network can gain admin privileges on eucalyptus.

As a side effect, in order for landscape to manage a UEC setup, the following ugly workaround needs to be applied