Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Message-ID: <54061B7E.9090300@widodh.nl>
Date: Tue, 02 Sep 2014 21:33:18 +0200
From: Wido den Hollander <wido@widodh.nl>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Thunderbird/31.0
MIME-Version: 1.0
To: dev@cloudstack.apache.org
Subject: Re: Storing passwords in the DB
References: 
 <CACOnxCjP864cZPm5gpF8wm1rVkiYNkLiLEJcLYTE+KhsjjrJ1g@mail.gmail.com>
	<540619BD.9060506@widodh.nl>
 <CACOnxCg-wq5KJDebTcZPqDjS66LHEhu=Fn9mXTsFahWcoZTL_Q@mail.gmail.com>
In-Reply-To: 
 <CACOnxCg-wq5KJDebTcZPqDjS66LHEhu=Fn9mXTsFahWcoZTL_Q@mail.gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit


On 02-09-14 21:29, Mike Tutkowski wrote:
> Thanks, Wido
>
> Do you happen to know a relevant class off the top of your head?
>

No sorry, but if you search for where it fetches the VNC password for 
KVM VMs you should find it.

It's probably the DB layer which does the encryption and decryption.

Wido

>
> On Tue, Sep 2, 2014 at 1:25 PM, Wido den Hollander <wido@widodh.nl> wrote:
>
>>
>>
>> On 02-09-14 21:22, Mike Tutkowski wrote:
>>
>>> Hi,
>>>
>>> I was wondering what our current "best practices" are around storing
>>> passwords in the DB?
>>>
>>> For example, if you want to store the username and password of a resource
>>> that CloudStack manages, how do we recommend storing the password?
>>>
>>>
>> Using the build-in encryption mechanism? CloudStack also saves the VNC
>> passwords for KVM that way for example.
>>
>> Wido
>>
>>   Thanks!
>>>
>>>
>
>