cloudstack-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Will Chan <will.c...@citrix.com>
Subject RE: user credntials
Date Sat, 28 Apr 2012 23:38:51 GMT
The service provider (or whomever is hosting CloudStack) needs to make that decision.  Using
the default CS installation, we default to the MD5UserAuthenticator which requires passwords
passed to the login command to be MD5 hashed.  This got changed to plain-text in 3.0 and must
be reverted back to MD5 in 3.0.2 when the upgrade patch is released or anyone upgrading could
get affected.  

If the service/hosting provider wants to use a different hashing algorithm -OR- none, he can
create or configure CS to use that adapter.  However, they are responsible for informing their
customer.

Will

________________________________________
From: Abhinandan Prateek [Abhinandan.Prateek@citrix.com]
Sent: Saturday, April 28, 2012 3:28 PM
To: Kevin Kluge; cloudstack-dev@incubator.apache.org
Subject: RE: user credntials

The use of plaintext passwords in API is required for only those cloudstack users who wish
to use an external authentication mechanism and will be documented.
The support for the encoded password has to be kept as is due to existing users of cloudstack.


-----Original Message-----
From: Kevin Kluge
Sent: Sunday, April 29, 2012 1:09 AM
To: Abhinandan Prateek; cloudstack-dev@incubator.apache.org
Subject: RE: user credntials

How would an API client know to use cleartext or MD5 hash?


> -----Original Message-----
> From: Abhinandan Prateek
> Sent: Saturday, April 28, 2012 7:56 AM
> To: Kevin Kluge; cloudstack-dev@incubator.apache.org
> Subject: RE: user credntials
>
> In 2.2.* we were passing MD5 encoded password via UI. For Acton it
> changed to unencrypted password as that was the only way to have
> external systems to authenticate cloudstack users for example external LDAP.
> This is being reverted back to MD5 encoded password in 3.0.2 as it
> was. It will be left to the admin to configure this encryption
> mechanism in case LDAP is in use.
>
> -Abhi
>
> -----Original Message-----
> From: Kevin Kluge
> Sent: Saturday, April 28, 2012 8:16 PM
> To: Abhinandan Prateek; cloudstack-dev@incubator.apache.org
> Subject: RE: user credntials
>
> Abhi, is this a backwards incompatible API change?   Also, what does it mean
> for upgrade?
>
> I thought we always sent MD5 hashed passwords from UI to MS.  Can you
> explain the change a bit more?
>
> -kevin
>
> > -----Original Message-----
> > From: Abhinandan Prateek
> > Sent: Saturday, April 28, 2012 12:14 AM
> > Subject: user credntials
> >
> > Team,
> >    There has been a change in the way passwords are being passed
> > from the cloudstack UI.  In case you have difficulty login with the
> > new 3.* build, clear your browser cache. If you are using API to
> > login then you need to provide
> > MD5 encrypted passwords to login instead of plaintext. In case you
> > still have issues drop me an email.
> > -Abhi
Mime
View raw message