Re: [Openstack] password in clear text

2016-03-23 Thread Adam Young
;t have to troubleshoot nasty LDAP Keystone configs for people. Nasty Hobbitses. Tim From: Mike Smith mailto:mism...@overstock.com>> Date: Wednesday 23 March 2016 at 16:28 To: openstack <mailto:openstack@lists.openstack.org>> Subject: Re: [Openstack] password in clear text

Re: [Openstack] password in clear text

2016-03-23 Thread Clint Byrum
Excerpts from Tim Bell's message of 2016-03-23 11:53:38 -0700: > > On 23/03/16 18:41, "Clint Byrum" wrote: > > >Excerpts from Tim Bell's message of 2016-03-23 09:17:20 -0700: > >> > >> The difficulty with the environment variables is that the administrator of > >> the box you are logged into c

Re: [Openstack] password in clear text

2016-03-23 Thread Tim Bell
On 23/03/16 18:41, "Clint Byrum" wrote: >Excerpts from Tim Bell's message of 2016-03-23 09:17:20 -0700: >> >> The difficulty with the environment variables is that the administrator of >> the box you are logged into can read the environment using ps aux. >> >> There has been some work don

Re: [Openstack] password in clear text

2016-03-23 Thread Clint Byrum
Excerpts from CARVER, PAUL's message of 2016-03-23 08:40:43 -0700: > Jagga Soorma wrote: > > >Currently when using the openstack api I have to save my password in clear > >text in > >the OS_PASSWORD environment variable.  Is there a more secure way to use the > >openstack api without having to ei

Re: [Openstack] password in clear text

2016-03-23 Thread Clint Byrum
Excerpts from Tim Bell's message of 2016-03-23 09:17:20 -0700: > > The difficulty with the environment variables is that the administrator of > the box you are logged into can read the environment using ps aux. > > There has been some work done to support storing all the variables in a file

Re: [Openstack] password in clear text

2016-03-23 Thread Tim Bell
penstack@lists.openstack.org>> Subject: Re: [Openstack] password in clear text Thanks for your response Tim. I do have our openstack environment integrated into AD. I basically am trying to see if there is a alternative to storing the password in clear text in a environment variable. W

Re: [Openstack] password in clear text

2016-03-23 Thread Jagga Soorma
Thanks for your response Tim. I do have our openstack environment integrated into AD. I basically am trying to see if there is a alternative to storing the password in clear text in a environment variable. With kerberos or AD are you saying that we would just get a ticket by authenticating once

Re: [Openstack] password in clear text

2016-03-23 Thread Tim Bell
The difficulty with the environment variables is that the administrator of the box you are logged into can read the environment using ps aux. There has been some work done to support storing all the variables in a file (which would be an environment variable) such that the CLIs read from th

Re: [Openstack] password in clear text

2016-03-23 Thread Tim Bell
nstack mailto:openstack@lists.openstack.org>> Subject: Re: [Openstack] password in clear text Piggybacking on this question, I also would like to know if there is a solution to prevent storing passwords in the various service config files. We store our configs in subversion, and I hate that

Re: [Openstack] password in clear text

2016-03-23 Thread CARVER, PAUL
Jagga Soorma wrote: >Currently when using the openstack api I have to save my password in clear >text in >the OS_PASSWORD environment variable.  Is there a more secure way to use the >openstack api without having to either store this password in clear text or >enter the >password manually every

Re: [Openstack] password in clear text

2016-03-23 Thread Mike Smith
Piggybacking on this question, I also would like to know if there is a solution to prevent storing passwords in the various service config files. We store our configs in subversion, and I hate that I have those passwords in there. Mike Smith Lead Cloud Systems Architect Overstock.com

[Openstack] password in clear text

2016-03-23 Thread Jagga Soorma
Hi Guys, Currently when using the openstack api I have to save my password in clear text in the OS_PASSWORD environment variable. Is there a more secure way to use the openstack api without having to either store this password in clear text or enter the password manually every time I run a openst