cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CLOUDSTACK-6285) Some passwords in the VR would be cleared out by accident due to falsely match in the savepassword.sh
Date Tue, 25 Mar 2014 22:57:15 GMT

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-6285?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13947306#comment-13947306
] 

ASF subversion and git services commented on CLOUDSTACK-6285:
-------------------------------------------------------------

Commit cd7930602146ff51d8d7f510f878d1465b7a9885 in cloudstack's branch refs/heads/master from
[~yasker]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=cd79306 ]

CLOUDSTACK-6285: Fix savepassword.sh script for clear out old entries


> Some passwords in the VR would be cleared out by accident due to falsely match in the
savepassword.sh
> -----------------------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-6285
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6285
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Virtual Router
>    Affects Versions: 4.2.1, 4.4.0, 4.3.1
>            Reporter: Sheng Yang
>            Assignee: Sheng Yang
>             Fix For: 4.2.1, 4.4.0, 4.3.1
>
>
> There is a bug in savepassword.sh since long time ago, that when VR try to update the
passwords file, it may accidentally clear the password of other VRs due to the IP address
it contained.
> +sed -i /$VM_IP/d $PASSWD_FILE
> This line would match 10.1.1.223, 10.1.1.224 etc for 10.1.1.2, thus result in clear them
all.
> It's not critical because user can reset the password again later.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message