Re: hidden configuration items

2016-05-10 Thread Erik Weber
On Sat, May 7, 2016 at 8:09 AM, Nathan Johnson wrote: > If you hit the /client/console endpoint with a vmid, it sends you back some > data that contains a link to a the console proxy VM and passes an encrypted > json payload that has the user, password and port for a vnc connection. > Normally th

Re: hidden configuration items

2016-05-10 Thread Anshul Gangwar
I know what happens but I am not sure how will you be able to connect to VNC with that info. From the diagram in previous mail which components you want to remove? Basically what I am trying to say here is that json payload is consists of data we get from management server. Only variable there

Re: hidden configuration items revisited

2016-05-09 Thread Erik Weber
Rajani is right, I didn't look at the value in db, just the category. -- Erik On Tue, May 10, 2016 at 8:30 AM, Rajani Karuturi wrote: > 'Hidden' and 'Secure' are both encrypted in db only difference being hidden > values are not shown. > you could just change the category in configuration tabl

Re: hidden configuration items revisited

2016-05-09 Thread Rajani Karuturi
'Hidden' and 'Secure' are both encrypted in db only difference being hidden values are not shown. you could just change the category in configuration table. ~Rajani On Mon, May 9, 2016 at 10:56 PM, Erik Weber wrote: > listConfiguration returns unencrypted values for Secure items, but they > nee

Re: hidden configuration items revisited

2016-05-09 Thread Erik Weber
listConfiguration returns unencrypted values for Secure items, but they need to be stored encrypted in the db. You'd need to check If those values ever change, If they don't you may try encrypting the value and change category to Secure Erik Den mandag 9. mai 2016 skrev Nathan Johnson følgende:

Re: hidden configuration items revisited

2016-05-09 Thread Nathan Johnson
Erik Weber wrote: > I believe Kishan suggested that you could change those Hidden config items > to Secure (an existing category), as Secure items are returned with the > listConfiguration API. This is chicken and egg. I need the unencrypted values so I can decrypt other payloads. I need the

Re: hidden configuration items revisited

2016-05-09 Thread Erik Weber
I believe Kishan suggested that you could change those Hidden config items to Secure (an existing category), as Secure items are returned with the listConfiguration API. I don't know if you can do an in-place switch, or if the value has to be encrypted first for it to work, but you should be able

Re: hidden configuration items

2016-05-09 Thread Nathan Johnson
Anshul Gangwar wrote: > > ms ——authenticate—> CPVM ——for VNC console—>Hypervisor > ^ > | gets images from CPVM > web browser > > Which of the above components you want to keep and which to re

Re: hidden configuration items revisited

2016-05-09 Thread Nathan Johnson
Kishan Kavala wrote: > Nathan, > You can use "Secure" category instead of "Hidden". Config items with > "Secure" category are encrypted and also included in listConfigurations API > response. The data that I need (specifically security.encryption.iv and security.encryption.key) are already

RE: hidden configuration items revisited

2016-05-08 Thread Kishan Kavala
Nathan, You can use "Secure" category instead of "Hidden". Config items with "Secure" category are encrypted and also included in listConfigurations API response. ~kishan -Original Message- From: Nathan Johnson [mailto:njohn...@ena.com] Sent: 08 May 2016 22:01 To: dev@cloudstack.apac

Re: hidden configuration items

2016-05-08 Thread Anshul Gangwar
I didn’t get how will you use that info to connect? There are three connections involved in showing console to user. ms ——authenticate—> CPVM ——for VNC console—>Hypervisor ^ | gets images from CPVM