Bug 48517 – DevDoc: admin credentials are printed as plaintext in process list

Bug 48517 - DevDoc: admin credentials are printed as plaintext in process list


Summary:	DevDoc: admin credentials are printed as plaintext in process list

Status:	CLOSED FIXED

Product:	UCS extended documentation
Classification:	Unclassified
Component:	Developer documentation
Version:	unspecified
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.x
Assigned To:	Philipp Hahn
QA Contact:	Arvid Requate

URL:
Keywords:

Duplicates:	47497 (view as bug list)
Depends on:	46842
Blocks:
	Show dependency tree / graph

Reported:	2019-01-23 11:00 CET by Philipp Hahn
Modified:	2019-11-01 18:16 CET (History)
CC List:	3 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	2: Improvement: Would be a product improvement
Who will be affected by this bug?:	5: Will affect all installed domains
How will those affected feel about the bug?:	4: A User would return the product
User Pain:	0.229
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Philipp Hahn

2019-01-23 11:00:06 CET

+++ This bug was initially created as a clone of Bug #46842 comment #1 +++
> added "api" for join script arguments, join scripts now can have different
> key words to influence the parameters with which
> univention-join/univention-run-joins-scripts calls the join script
> 
>  -> "^## joinscript api: bindpwdfile$" gets called with binddn and
> bindpwdfile
>  -> "^## joinscript api: nocredentials$" gets called without arguments
>  -> "^## joinscript api: credentialfiles$" gets called withou argumenst
> 
> univention-join/univentionrun-joins-scripts now always creates
> /var/univention-join/binddn and /var/univention-join/bindpwd during the run
> of the joinscripts (maybe we cann get rid of the credential parameters some
> time)

That new API is not documented at <http://docs.software-univention.de/developer-reference-4.3.html#join:minimal>

Comment 1 Philipp Hahn

2019-07-31 19:27:54 CEST

git:phahn/48517-join-api-doc
<https://git.knut.univention.de/univention/ucs/commit/9584f36abc946e1cda3b568064314048eca7896f>

<http://jenkins.knut.univention.de:8080/job/BuildDocBookBranch/132/artifact/webroot/developer-reference-4.4.html#join:minimal>
<http://jenkins.knut.univention.de:8080/job/BuildDocBookBranch/132/artifact/webroot/developer-reference-4.4.html#join:libraries:shell>

(In reply to Philipp Hahn from comment #0)
> >  -> "^## joinscript api: credentialfiles$" gets called withou argumenst

This was removed from the initial implementation and the files are always created.

QA-Hint: search for /--bindpwdfile/ to find all new locations

Comment 2 Philipp Hahn

2019-08-01 08:26:17 CEST

Thanks Arvid for the QA. Merged and pushed.

[4.4-1] fe5b2d8b14 Bug #48517: Document join API
 doc/developer-reference/join/join.xml              | 44 +++++++++++++++++-----
 .../udm/ea/50extended-attribute.inst               |  3 +-
 2 files changed, 36 insertions(+), 11 deletions(-)

<http://jenkins.knut.univention.de:8080/job/UCS-4.4/job/UCS-4.4-1/job/HandbookDeveloper/148/artifact/webroot/developer-reference-4.4.html#join:minimal>

Comment 3 Philipp Hahn

2019-08-01 08:29:14 CEST

*** Bug 47497 has been marked as a duplicate of this bug. ***