Re: reset sshkeyforvirtualmachine also resets password
Hi Nux, As already mentioned we store the encrypted vm password using the ssh key, so we need to reset the password also. Regarding the password field in the DB, we have an API to get the VM password (https://cloudstack.apache.org/docs/api/apidocs-4.5/root_admin/getVMPassword.html) which gets encrypted password from DB. Thanks, Harikrishna On 02-Apr-2015, at 5:07 am, Nux! n...@li.nux.ro wrote: Somesh, Why wouldn't the root password field in the DB just be left alone? -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Somesh Naidu somesh.na...@citrix.com To: dev@cloudstack.apache.org Sent: Thursday, 2 April, 2015 00:06:54 Subject: RE: reset sshkeyforvirtualmachine also resets password I believe so, since the VM's password (stored in the user_vm_details table) needs to be encrypted using the new keys and I believe encryption is a one-way hash. Somesh CloudPlatform Escalations Citrix Systems, Inc. -Original Message- From: Nux! [mailto:n...@li.nux.ro] Sent: Wednesday, April 01, 2015 9:16 AM To: dev Subject: reset sshkeyforvirtualmachine also resets password Hi, I've just noticed resetsshkeyforvirtualmachine also resets the root password. This doesn't sound right. Is this supposed to happen? 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro
Re: reset sshkeyforvirtualmachine also resets password
Could it not simply be reencoded with the new key? Erik Den torsdag 2. april 2015 skrev Harikrishna Patnala harikrishna.patn...@citrix.com følgende: Hi Nux, As already mentioned we store the encrypted vm password using the ssh key, so we need to reset the password also. Regarding the password field in the DB, we have an API to get the VM password ( https://cloudstack.apache.org/docs/api/apidocs-4.5/root_admin/getVMPassword.html) which gets encrypted password from DB. Thanks, Harikrishna On 02-Apr-2015, at 5:07 am, Nux! n...@li.nux.ro javascript:; wrote: Somesh, Why wouldn't the root password field in the DB just be left alone? -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Somesh Naidu somesh.na...@citrix.com javascript:; To: dev@cloudstack.apache.org javascript:; Sent: Thursday, 2 April, 2015 00:06:54 Subject: RE: reset sshkeyforvirtualmachine also resets password I believe so, since the VM's password (stored in the user_vm_details table) needs to be encrypted using the new keys and I believe encryption is a one-way hash. Somesh CloudPlatform Escalations Citrix Systems, Inc. -Original Message- From: Nux! [mailto:n...@li.nux.ro javascript:;] Sent: Wednesday, April 01, 2015 9:16 AM To: dev Subject: reset sshkeyforvirtualmachine also resets password Hi, I've just noticed resetsshkeyforvirtualmachine also resets the root password. This doesn't sound right. Is this supposed to happen? 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro
Re: reset sshkeyforvirtualmachine also resets password
Thanks Harikrishna, I did not know the password would get encrypted with the ssh key. What happens when there is no ssh key registered, how are the passwords encrypted then? Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Harikrishna Patnala harikrishna.patn...@citrix.com To: dev@cloudstack.apache.org dev@cloudstack.apache.org Sent: Thursday, 2 April, 2015 07:17:54 Subject: Re: reset sshkeyforvirtualmachine also resets password Hi Nux, As already mentioned we store the encrypted vm password using the ssh key, so we need to reset the password also. Regarding the password field in the DB, we have an API to get the VM password (https://cloudstack.apache.org/docs/api/apidocs-4.5/root_admin/getVMPassword.html) which gets encrypted password from DB. Thanks, Harikrishna On 02-Apr-2015, at 5:07 am, Nux! n...@li.nux.ro wrote: Somesh, Why wouldn't the root password field in the DB just be left alone? -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Somesh Naidu somesh.na...@citrix.com To: dev@cloudstack.apache.org Sent: Thursday, 2 April, 2015 00:06:54 Subject: RE: reset sshkeyforvirtualmachine also resets password I believe so, since the VM's password (stored in the user_vm_details table) needs to be encrypted using the new keys and I believe encryption is a one-way hash. Somesh CloudPlatform Escalations Citrix Systems, Inc. -Original Message- From: Nux! [mailto:n...@li.nux.ro] Sent: Wednesday, April 01, 2015 9:16 AM To: dev Subject: reset sshkeyforvirtualmachine also resets password Hi, I've just noticed resetsshkeyforvirtualmachine also resets the root password. This doesn't sound right. Is this supposed to happen? 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro
Re: reset sshkeyforvirtualmachine also resets password
When we create or register ssh key with CS API, CS only stores public key. So, cloudstack does not know the private key to decrypt the password and encrypt it with new ssh key. Thanks, Harikrishna On 02-Apr-2015, at 11:59 am, Erik Weber terbol...@gmail.com wrote: Could it not simply be reencoded with the new key? Erik Den torsdag 2. april 2015 skrev Harikrishna Patnala harikrishna.patn...@citrix.com følgende: Hi Nux, As already mentioned we store the encrypted vm password using the ssh key, so we need to reset the password also. Regarding the password field in the DB, we have an API to get the VM password ( https://cloudstack.apache.org/docs/api/apidocs-4.5/root_admin/getVMPassword.html) which gets encrypted password from DB. Thanks, Harikrishna On 02-Apr-2015, at 5:07 am, Nux! n...@li.nux.ro javascript:; wrote: Somesh, Why wouldn't the root password field in the DB just be left alone? -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Somesh Naidu somesh.na...@citrix.com javascript:; To: dev@cloudstack.apache.org javascript:; Sent: Thursday, 2 April, 2015 00:06:54 Subject: RE: reset sshkeyforvirtualmachine also resets password I believe so, since the VM's password (stored in the user_vm_details table) needs to be encrypted using the new keys and I believe encryption is a one-way hash. Somesh CloudPlatform Escalations Citrix Systems, Inc. -Original Message- From: Nux! [mailto:n...@li.nux.ro javascript:;] Sent: Wednesday, April 01, 2015 9:16 AM To: dev Subject: reset sshkeyforvirtualmachine also resets password Hi, I've just noticed resetsshkeyforvirtualmachine also resets the root password. This doesn't sound right. Is this supposed to happen? 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro
Re: reset sshkeyforvirtualmachine also resets password
Password is encrypted and stored only if the vm is deployed from password enabled template and ssh public key is provided, Otherwise we don’t encrypt or store the password. -Harikrishna On 02-Apr-2015, at 1:48 pm, Nux! n...@li.nux.ro wrote: Thanks Harikrishna, I did not know the password would get encrypted with the ssh key. What happens when there is no ssh key registered, how are the passwords encrypted then? Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Harikrishna Patnala harikrishna.patn...@citrix.com To: dev@cloudstack.apache.org dev@cloudstack.apache.org Sent: Thursday, 2 April, 2015 07:17:54 Subject: Re: reset sshkeyforvirtualmachine also resets password Hi Nux, As already mentioned we store the encrypted vm password using the ssh key, so we need to reset the password also. Regarding the password field in the DB, we have an API to get the VM password (https://cloudstack.apache.org/docs/api/apidocs-4.5/root_admin/getVMPassword.html) which gets encrypted password from DB. Thanks, Harikrishna On 02-Apr-2015, at 5:07 am, Nux! n...@li.nux.ro wrote: Somesh, Why wouldn't the root password field in the DB just be left alone? -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Somesh Naidu somesh.na...@citrix.com To: dev@cloudstack.apache.org Sent: Thursday, 2 April, 2015 00:06:54 Subject: RE: reset sshkeyforvirtualmachine also resets password I believe so, since the VM's password (stored in the user_vm_details table) needs to be encrypted using the new keys and I believe encryption is a one-way hash. Somesh CloudPlatform Escalations Citrix Systems, Inc. -Original Message- From: Nux! [mailto:n...@li.nux.ro] Sent: Wednesday, April 01, 2015 9:16 AM To: dev Subject: reset sshkeyforvirtualmachine also resets password Hi, I've just noticed resetsshkeyforvirtualmachine also resets the root password. This doesn't sound right. Is this supposed to happen? 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro
reset sshkeyforvirtualmachine also resets password
Hi, I've just noticed resetsshkeyforvirtualmachine also resets the root password. This doesn't sound right. Is this supposed to happen? 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro
Re: reset sshkeyforvirtualmachine also resets password
Somesh, Why wouldn't the root password field in the DB just be left alone? -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Somesh Naidu somesh.na...@citrix.com To: dev@cloudstack.apache.org Sent: Thursday, 2 April, 2015 00:06:54 Subject: RE: reset sshkeyforvirtualmachine also resets password I believe so, since the VM's password (stored in the user_vm_details table) needs to be encrypted using the new keys and I believe encryption is a one-way hash. Somesh CloudPlatform Escalations Citrix Systems, Inc. -Original Message- From: Nux! [mailto:n...@li.nux.ro] Sent: Wednesday, April 01, 2015 9:16 AM To: dev Subject: reset sshkeyforvirtualmachine also resets password Hi, I've just noticed resetsshkeyforvirtualmachine also resets the root password. This doesn't sound right. Is this supposed to happen? 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro
RE: reset sshkeyforvirtualmachine also resets password
I believe so, since the VM's password (stored in the user_vm_details table) needs to be encrypted using the new keys and I believe encryption is a one-way hash. Somesh CloudPlatform Escalations Citrix Systems, Inc. -Original Message- From: Nux! [mailto:n...@li.nux.ro] Sent: Wednesday, April 01, 2015 9:16 AM To: dev Subject: reset sshkeyforvirtualmachine also resets password Hi, I've just noticed resetsshkeyforvirtualmachine also resets the root password. This doesn't sound right. Is this supposed to happen? 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro
