Koushik Das created CLOUDSTACK-4964:
---------------------------------------
Summary: Cisco VNMC: Nexus password gets logged in MS logs during
guest n/w implementation with VNMC provider
Key: CLOUDSTACK-4964
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-4964
Project: CloudStack
Issue Type: Bug
Security Level: Public (Anyone can view this level - this is the default.)
Affects Versions: 4.2.0
Reporter: Koushik Das
Assignee: Koushik Das
Fix For: 4.2.1
Setup : Advanced Networking with VMWARE Nexus, ASA firewall
Steps:
1. Create Guest Network with Cisco VNMC provider
3. Try to deploy VM using this guest network.
Observation:
1. During network implementation, CS tries to create Vservice node and updates
the inside port profile.
2. Nexus credentails are logged in clear text while updating inside port
profile with Vservice node
2013-05-27 11:07:21,138 DEBUG [agent.transport.Request] (catalina-exec-6:null)
Seq 5-1442250786: Sending { Cmd , MgmtId: 214053811722752, via: 5, Ver: v1,
Flags: 100011,
[{"ConfigureNexusVsmForAsaCommand":{"_vlanId":809,"_ipAddress":"10.0.64.1","_vsmUsername":"admin","_vsmPassword":"Freebsd@123","_vsmIp":"10.102.192.71","_asaInPortProfile":"asa-in","wait":0}}]
}
2013-05-27 11:07:21,138 DEBUG [agent.transport.Request] (catalina-exec-6:null)
Seq 5-1442250786: Executing: { Cmd , MgmtId: 214053811722752, via: 5, Ver: v1,
Flags: 100011,
[{"ConfigureNexusVsmForAsaCommand":{"_vlanId":809,"_ipAddress":"10.0.64.1","_vsmUsername":"admin","_vsmPassword":"Freebsd@123","_vsmIp":"10.102.192.71","_asaInPortProfile":"asa-in","wait":0}}]
}
2013-05-27 11:07:21,138 DEBUG [agent.manager.DirectAgentAttache]
(DirectAgent-146:null) Seq 5-1442250786: Executing request
2013-05-27 11:07:21,317 DEBUG [agent.manager.AgentManagerImpl]
(AgentManager-Handler-11:null) Ping from 3
2013-05-27 11:07:21,505 DEBUG [agent.manager.AgentManagerImpl]
(AgentManager-Handler-13:null) Ping from 4
2013-05-27 11:07:21,727 DEBUG [network.resource.CiscoVnmcResource]
(DirectAgent-146:null) Connected to Cisco VSM 10.102.192.71
2013-05-27 11:07:23,747 DEBUG [network.resource.CiscoVnmcResource]
(DirectAgent-146:null) Created vservice node for ASA appliance in Cisco VSM for
vlan 809
2013-05-27 11:07:26,918 DEBUG [network.resource.CiscoVnmcResource]
(DirectAgent-146:null) Updated inside port profile for ASA appliance in Cisco
VSM with new vlan 809
--
This message was sent by Atlassian JIRA
(v6.1#6144)
