yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: horizon
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1291006

Title:
  Clear text admin password assignment in instance creation should be
  disabled

Status in OpenStack Dashboard (Horizon):
  Fix Released

Bug description:
  The clear text admin password management available in the instance
  creation "security" tab should be removed as it has been superseded in
  both Nova and Horizon by an encrypted password management.

  Nova blueprint (Grizzly): https://blueprints.launchpad.net/nova/+spec/get-password
  Horizon blueprint (Icehouse): https://blueprints.launchpad.net/horizon/+spec/decrypt-and-display-vm-generated-password

  Since this feature is now available in Horizon as well, providing an
  option for the users to specify the password is both misleading and
  non secure.

  Furthermore, the "old"way of providing a clear text passwords works
  only on selected hypervisors and it does not work for Windows guests,
  which represent at the moment the main use case since SSH keypair
  authentication does not apply

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1291006/+subscriptions