Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-4681

Encrypted passwords are persisted in plaintext

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 2.5.26, 6.4.7, 22.08.6, 23.02.1
    • 2.5.28, 6.4.9, 22.08.8, 23.02.3
    • Core
    • None
    • Centos 7

    Description

      Hi

      adding a service in maxscale with dynamic change is necessary to add the user and password. Passing the Encrypted password to the command, end up to confirm the service has been created but the password on the /var/lib/maxscale/maxscale.cnf.d/Read-Service.cnf end up to show store as clear password.

      maxctrl create service Read-Service readconnroute user=service_user password=2KVMANFl502A2398E42A8C670825770EED948CCBD764E1B67......
      OK

      cat Read-Service.cnf
      [Read-Service]
      router_options=slave
      password=This_is_my_pwd_clear
      router=readconnroute
      type=service
      user=service_user

      So the encryption is already on. There are few things to clear and update on the documentation as well:

      • can i pass the encrypted pwd ?
      • can i pass the clear pwd?
      • how maxscale undestant if the pwd i am passing is the encrypted or not
      • for sure if the encrypted is on, the file should not store the clear password

      Attachments

        Activity

          People

            markus makela markus makela
            massimo.disaro Massimo
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.