[Crowbar] Username/Password Configuration Locations

[Gregory_Althaus at Dell.com]

Well, lots of places.  There is htdigest file that the web uses for the validation.  It is in /opt/dell/crowbar_framework.

There is a data bag in chef that holds the password specified in the proposal.

Thanks,
Greg

From: crowbar-bounces On Behalf Of Michael Smalley
Sent: Wednesday, November 09, 2011 1:37 PM
To: crowbar
Subject: Re: [Crowbar] Username/Password Configuration Locations

I've been trying to change the Crowbar dashboard password via config files today, and not having much luck.  I can effectively change the password via Proposals->default (in the Crowbar row)->Raw (under
Attributes).  Here I edit the

   "crowbar": {
      "password": "crowbar"
    }

... then I Save and Apply the proposal.  After completing this, the password change takes effect, and upon a reload I'm prompted for credentials (the new password).

My question is, how can this be done via plain-text?  After changing this password in the web interface I tried finding the change while SSHed into my crowbar admin server, and it still showed the old password in /opt/dell/barclamps/crowbar/chef/data_bags/crowbar/bc-template-crowbar.json

Where is the password I'm providing via the web interface being saved?

On Tue, Nov 8, 2011 at 3:53 PM, <Gregory_Althaus at dell.com<mailto:Gregory_Althaus at dell.com>> wrote:
For crowbar, nagios, ganglia (through nagios), and os install (redhat or Ubuntu), these can be changed by modifying the proposal and reapplying.  There is a caveat that the os installs don't change already installed machines.

And yes, Andi, I think you got them all.  Well, except swift - though it can use keystone soon.

Thanks,
Greg

From: crowbar-bounces On Behalf Of Abes, Andi
Sent: Tuesday, November 08, 2011 2:18 PM
To: michaeljsmalley+crowbar at gmail.com<mailto:michaeljsmalley%2Bcrowbar at gmail.com>; crowbar
Subject: Re: [Crowbar] Username/Password Configuration Locations

You are correct about keystone initial data.
In general Each barclamp is responsible for their initial data (and credentials).


*        Nagios use databag items to define their users. See: crowbar/barclamps/nagios/chef/data_bags/users/nagiosadmin.json

*        Ubuntu compute get default user info based on: crowbar/barclamps/ubuntu-install/chef/data_bags/crowbar/bc-template-ubuntu_install.json

*        Ganglia uses the same users as nagios

*        Redhat follows a similar pattern

*        Crowbar itself : crowbar/barclamps/crowbar/chef/data_bags/crowbar/bc-template-crowbar.json

*        The chef-server password is created during installation, based on: crowbar/ubuntu-10.10-extra/debsel.conf


If there are any credentials that I've missed let me know.

a.


From: crowbar-bounces On Behalf Of Michael Smalley
Sent: Tuesday, November 08, 2011 2:28 PM
To: crowbar
Subject: [Crowbar] Username/Password Configuration Locations

I'm working on getting default usernames/passwords changed.  From what I've found, the username/password for the Openstack Dashboard is configured here:
/opt/dell/chef/cookbooks/keystone/templates/default/initial_data.sh.erb

A) Is this correct
B) Where are the remaining usernames/passwords stored (e.g. Nagios, Ganglia, Chef, Crowbar Admin?)

I think documenting this is something that it critical to more widespread production user of Crowbar and Openstack.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.us.dell.com/pipermail/crowbar/attachments/20111109/f571a496/attachment-0001.html