Return-Path: 
 <cloudstack-dev-return-10627-apmail-incubator-cloudstack-dev-archive=incubator.apache.org@incubator.apache.org>
X-Original-To: apmail-incubator-cloudstack-dev-archive@minotaur.apache.org
Delivered-To: apmail-incubator-cloudstack-dev-archive@minotaur.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 1FDD6D5B8
	for <apmail-incubator-cloudstack-dev-archive@minotaur.apache.org>;
 Fri, 26 Oct 2012 16:09:13 +0000 (UTC)
Received: (qmail 20557 invoked by uid 500); 26 Oct 2012 16:09:12 -0000
Delivered-To: apmail-incubator-cloudstack-dev-archive@incubator.apache.org
Received: (qmail 20516 invoked by uid 500); 26 Oct 2012 16:09:12 -0000
Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:cloudstack-dev-help@incubator.apache.org>
List-Unsubscribe: <mailto:cloudstack-dev-unsubscribe@incubator.apache.org>
List-Post: <mailto:cloudstack-dev@incubator.apache.org>
List-Id: <cloudstack-dev.incubator.apache.org>
Reply-To: cloudstack-dev@incubator.apache.org
Delivered-To: mailing list cloudstack-dev@incubator.apache.org
Received: (qmail 20507 invoked by uid 99); 26 Oct 2012 16:09:12 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 26 Oct 2012 16:09:12 +0000
Date: Fri, 26 Oct 2012 16:09:12 +0000 (UTC)
From: "Rohit Yadav (JIRA)" <jira@apache.org>
To: cloudstack-dev@incubator.apache.org
Message-ID: <1522625739.32481.1351267752733.JavaMail.jiratomcat@arcas>
In-Reply-To: <2097621402.32467.1351267393137.JavaMail.jiratomcat@arcas>
Subject: [jira] [Resolved] (CLOUDSTACK-417) Handle password server securely
 to run on port 8080 on VR
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


     [ https://issues.apache.org/jira/browse/CLOUDSTACK-417?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rohit Yadav resolved CLOUDSTACK-417.
------------------------------------

    Resolution: Fixed

Fixed on master:

commit dbe88c1ed3c120ff0e0f38c67b6a03e3665fe987
Author: Rohit Yadav <bhaisaab@apache.org>
Date:   Fri Oct 26 21:33:25 2012 +0530
                
> Handle password server securely to run on port 8080 on VR
> ---------------------------------------------------------
>
>                 Key: CLOUDSTACK-417
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-417
>             Project: CloudStack
>          Issue Type: Bug
>    Affects Versions: 4.0.0
>            Reporter: Rohit Yadav
>            Assignee: Rohit Yadav
>              Labels: security
>             Fix For: 4.1.0
>
>
> When reset password feature is used, it runs cloud-passwd-srvr on virtual router on eth0, port 8080. By default this port is reachable from all IPs (0.0.0.0/0).
> So, for example:
> % telnet <vr-ip> 8080
> DomU_Request: send_my_password
> <output is password>
> Only guest vms, or vms in the guest cidr should be able to reach this port.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira