PEAP and 802.1x passwords saved plaintext in gconf

Bug #116235 reported by Morten
258
Affects Status Importance Assigned to Milestone
NetworkManager
Fix Released
Unknown
network-manager (Ubuntu)
New
Undecided
Unassigned

Bug Description

Binary package hint: network-manager

Hi,

I use many different wireless networks at work, at home and elsewhere.
On most networks, passwords are saved in the gnome keyring without trouble.
This is not the case on two networks, one which uses PEAP, and one which uses .1x.
On both networks i only enter "Identity" and "Passwords, no certificates etc.

On both mentioned networks i can connect normally, but my identity and passwd
is saved to ~/.gconf/system/networking/wireless/<network name>/%gconf.xml.
They are also visible from gconf-editor, in the same path as under .gconf/.

I am using version 0.6.4-6ubuntu-7 of NM and libpam-keyring 0.0.8-5 under
Ubuntu 7.04. Attached are the gconf files for the networks, stripped of PWs :-)
My hardware is a Dell laptop with an ipw3945 network card.

Revision history for this message
Morten (morethan) wrote :
Revision history for this message
Morten (morethan) wrote :

Hello again,

I found the following in ~/.xsession-errors:
** (nm-applet:6181): WARNING **: <WARNING> nmi_save_network_info (): Error saving secret for wireless network 'eduroam' in keyring: 5

I have no idea as to what kind of error this is, but even
though nm-applet is unable to save the key in the ring,
saving the password in gconf is not desirable behavior..

Morten (morethan)
description: updated
Changed in network-manager:
status: Unknown → Unconfirmed
Revision history for this message
Bhavani Shankar (bhavi) wrote :

Yes the same thing here..

Changed in network-manager:
status: New → Confirmed
Changed in network-manager:
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.