reset sshkeyforvirtualmachine also resets password

2015-04-01 Thread Nux!
Hi,

I've just noticed resetsshkeyforvirtualmachine also resets the root password. 
This doesn't sound right. Is this supposed to happen?

4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM 

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro


RE: reset sshkeyforvirtualmachine also resets password

2015-04-01 Thread Somesh Naidu
I believe so, since the VM's password (stored in the user_vm_details table) 
needs to be encrypted using the new keys and I believe encryption is a one-way 
hash.

Somesh
CloudPlatform Escalations
Citrix Systems, Inc.


-Original Message-
From: Nux! [mailto:n...@li.nux.ro] 
Sent: Wednesday, April 01, 2015 9:16 AM
To: dev
Subject: reset sshkeyforvirtualmachine also resets password

Hi,

I've just noticed resetsshkeyforvirtualmachine also resets the root password. 
This doesn't sound right. Is this supposed to happen?

4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM 

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro


Re: reset sshkeyforvirtualmachine also resets password

2015-04-01 Thread Nux!
Somesh,

Why wouldn't the root password field in the DB just be left alone?

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

- Original Message -
> From: "Somesh Naidu" 
> To: dev@cloudstack.apache.org
> Sent: Thursday, 2 April, 2015 00:06:54
> Subject: RE: reset sshkeyforvirtualmachine also resets password

> I believe so, since the VM's password (stored in the user_vm_details table)
> needs to be encrypted using the new keys and I believe encryption is a one-way
> hash.
> 
> Somesh
> CloudPlatform Escalations
> Citrix Systems, Inc.
> 
> 
> -Original Message-
> From: Nux! [mailto:n...@li.nux.ro]
> Sent: Wednesday, April 01, 2015 9:16 AM
> To: dev
> Subject: reset sshkeyforvirtualmachine also resets password
> 
> Hi,
> 
> I've just noticed resetsshkeyforvirtualmachine also resets the root password.
> This doesn't sound right. Is this supposed to happen?
> 
> 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro


Re: reset sshkeyforvirtualmachine also resets password

2015-04-01 Thread Harikrishna Patnala
Hi Nux,

As already mentioned we store the encrypted vm password using the ssh key, so 
we need to reset the password also.

Regarding the password field in the DB, we have an API to get the VM password 
(https://cloudstack.apache.org/docs/api/apidocs-4.5/root_admin/getVMPassword.html)
 which gets encrypted password from DB.

Thanks,
Harikrishna

On 02-Apr-2015, at 5:07 am, Nux!  wrote:

> Somesh,
> 
> Why wouldn't the root password field in the DB just be left alone?
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro
> 
> - Original Message -
>> From: "Somesh Naidu" 
>> To: dev@cloudstack.apache.org
>> Sent: Thursday, 2 April, 2015 00:06:54
>> Subject: RE: reset sshkeyforvirtualmachine also resets password
> 
>> I believe so, since the VM's password (stored in the user_vm_details table)
>> needs to be encrypted using the new keys and I believe encryption is a 
>> one-way
>> hash.
>> 
>> Somesh
>> CloudPlatform Escalations
>> Citrix Systems, Inc.
>> 
>> 
>> -Original Message-
>> From: Nux! [mailto:n...@li.nux.ro]
>> Sent: Wednesday, April 01, 2015 9:16 AM
>> To: dev
>> Subject: reset sshkeyforvirtualmachine also resets password
>> 
>> Hi,
>> 
>> I've just noticed resetsshkeyforvirtualmachine also resets the root password.
>> This doesn't sound right. Is this supposed to happen?
>> 
>> 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM
>> 
>> --
>> Sent from the Delta quadrant using Borg technology!
>> 
>> Nux!
>> www.nux.ro



Re: reset sshkeyforvirtualmachine also resets password

2015-04-01 Thread Erik Weber
Could it not simply be reencoded with the new key?

Erik

Den torsdag 2. april 2015 skrev Harikrishna Patnala <
harikrishna.patn...@citrix.com> følgende:

> Hi Nux,
>
> As already mentioned we store the encrypted vm password using the ssh key,
> so we need to reset the password also.
>
> Regarding the password field in the DB, we have an API to get the VM
> password (
> https://cloudstack.apache.org/docs/api/apidocs-4.5/root_admin/getVMPassword.html)
> which gets encrypted password from DB.
>
> Thanks,
> Harikrishna
>
> On 02-Apr-2015, at 5:07 am, Nux! > wrote:
>
> > Somesh,
> >
> > Why wouldn't the root password field in the DB just be left alone?
> >
> > --
> > Sent from the Delta quadrant using Borg technology!
> >
> > Nux!
> > www.nux.ro
> >
> > - Original Message -
> >> From: "Somesh Naidu" >
> >> To: dev@cloudstack.apache.org 
> >> Sent: Thursday, 2 April, 2015 00:06:54
> >> Subject: RE: reset sshkeyforvirtualmachine also resets password
> >
> >> I believe so, since the VM's password (stored in the user_vm_details
> table)
> >> needs to be encrypted using the new keys and I believe encryption is a
> one-way
> >> hash.
> >>
> >> Somesh
> >> CloudPlatform Escalations
> >> Citrix Systems, Inc.
> >>
> >>
> >> -Original Message-
> >> From: Nux! [mailto:n...@li.nux.ro ]
> >> Sent: Wednesday, April 01, 2015 9:16 AM
> >> To: dev
> >> Subject: reset sshkeyforvirtualmachine also resets password
> >>
> >> Hi,
> >>
> >> I've just noticed resetsshkeyforvirtualmachine also resets the root
> password.
> >> This doesn't sound right. Is this supposed to happen?
> >>
> >> 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM
> >>
> >> --
> >> Sent from the Delta quadrant using Borg technology!
> >>
> >> Nux!
> >> www.nux.ro
>
>


Re: reset sshkeyforvirtualmachine also resets password

2015-04-02 Thread Nux!
Thanks Harikrishna, I did not know the password would get encrypted with the 
ssh key.
What happens when there is no ssh key registered, how are the passwords 
encrypted then?

Lucian

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

- Original Message -
> From: "Harikrishna Patnala" 
> To: "" 
> Sent: Thursday, 2 April, 2015 07:17:54
> Subject: Re: reset sshkeyforvirtualmachine also resets password

> Hi Nux,
> 
> As already mentioned we store the encrypted vm password using the ssh key, so 
> we
> need to reset the password also.
> 
> Regarding the password field in the DB, we have an API to get the VM password
> (https://cloudstack.apache.org/docs/api/apidocs-4.5/root_admin/getVMPassword.html)
> which gets encrypted password from DB.
> 
> Thanks,
> Harikrishna
> 
> On 02-Apr-2015, at 5:07 am, Nux!  wrote:
> 
>> Somesh,
>> 
>> Why wouldn't the root password field in the DB just be left alone?
>> 
>> --
>> Sent from the Delta quadrant using Borg technology!
>> 
>> Nux!
>> www.nux.ro
>> 
>> - Original Message -
>>> From: "Somesh Naidu" 
>>> To: dev@cloudstack.apache.org
>>> Sent: Thursday, 2 April, 2015 00:06:54
>>> Subject: RE: reset sshkeyforvirtualmachine also resets password
>> 
>>> I believe so, since the VM's password (stored in the user_vm_details table)
>>> needs to be encrypted using the new keys and I believe encryption is a 
>>> one-way
>>> hash.
>>> 
>>> Somesh
>>> CloudPlatform Escalations
>>> Citrix Systems, Inc.
>>> 
>>> 
>>> -Original Message-
>>> From: Nux! [mailto:n...@li.nux.ro]
>>> Sent: Wednesday, April 01, 2015 9:16 AM
>>> To: dev
>>> Subject: reset sshkeyforvirtualmachine also resets password
>>> 
>>> Hi,
>>> 
>>> I've just noticed resetsshkeyforvirtualmachine also resets the root 
>>> password.
>>> This doesn't sound right. Is this supposed to happen?
>>> 
>>> 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM
>>> 
>>> --
>>> Sent from the Delta quadrant using Borg technology!
>>> 
>>> Nux!
> >> www.nux.ro


Re: reset sshkeyforvirtualmachine also resets password

2015-04-02 Thread Harikrishna Patnala
Password is encrypted and stored only if the vm is deployed from password 
enabled template and ssh public key is provided, 
Otherwise we don’t encrypt or store the password.


-Harikrishna


On 02-Apr-2015, at 1:48 pm, Nux!  wrote:

> Thanks Harikrishna, I did not know the password would get encrypted with the 
> ssh key.
> What happens when there is no ssh key registered, how are the passwords 
> encrypted then?
> 
> Lucian
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro
> 
> - Original Message -
>> From: "Harikrishna Patnala" 
>> To: "" 
>> Sent: Thursday, 2 April, 2015 07:17:54
>> Subject: Re: reset sshkeyforvirtualmachine also resets password
> 
>> Hi Nux,
>> 
>> As already mentioned we store the encrypted vm password using the ssh key, 
>> so we
>> need to reset the password also.
>> 
>> Regarding the password field in the DB, we have an API to get the VM password
>> (https://cloudstack.apache.org/docs/api/apidocs-4.5/root_admin/getVMPassword.html)
>> which gets encrypted password from DB.
>> 
>> Thanks,
>> Harikrishna
>> 
>> On 02-Apr-2015, at 5:07 am, Nux!  wrote:
>> 
>>> Somesh,
>>> 
>>> Why wouldn't the root password field in the DB just be left alone?
>>> 
>>> --
>>> Sent from the Delta quadrant using Borg technology!
>>> 
>>> Nux!
>>> www.nux.ro
>>> 
>>> - Original Message -
>>>> From: "Somesh Naidu" 
>>>> To: dev@cloudstack.apache.org
>>>> Sent: Thursday, 2 April, 2015 00:06:54
>>>> Subject: RE: reset sshkeyforvirtualmachine also resets password
>>> 
>>>> I believe so, since the VM's password (stored in the user_vm_details table)
>>>> needs to be encrypted using the new keys and I believe encryption is a 
>>>> one-way
>>>> hash.
>>>> 
>>>> Somesh
>>>> CloudPlatform Escalations
>>>> Citrix Systems, Inc.
>>>> 
>>>> 
>>>> -Original Message-
>>>> From: Nux! [mailto:n...@li.nux.ro]
>>>> Sent: Wednesday, April 01, 2015 9:16 AM
>>>> To: dev
>>>> Subject: reset sshkeyforvirtualmachine also resets password
>>>> 
>>>> Hi,
>>>> 
>>>> I've just noticed resetsshkeyforvirtualmachine also resets the root 
>>>> password.
>>>> This doesn't sound right. Is this supposed to happen?
>>>> 
>>>> 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM
>>>> 
>>>> --
>>>> Sent from the Delta quadrant using Borg technology!
>>>> 
>>>> Nux!
>>>> www.nux.ro



Re: reset sshkeyforvirtualmachine also resets password

2015-04-02 Thread Harikrishna Patnala
When we create or register ssh key with CS API, CS only stores public key.
So, cloudstack does not know the private key to decrypt the password and 
encrypt it with new ssh key.

Thanks,
Harikrishna
On 02-Apr-2015, at 11:59 am, Erik Weber  wrote:

> Could it not simply be reencoded with the new key?
> 
> Erik
> 
> Den torsdag 2. april 2015 skrev Harikrishna Patnala <
> harikrishna.patn...@citrix.com> følgende:
> 
>> Hi Nux,
>> 
>> As already mentioned we store the encrypted vm password using the ssh key,
>> so we need to reset the password also.
>> 
>> Regarding the password field in the DB, we have an API to get the VM
>> password (
>> https://cloudstack.apache.org/docs/api/apidocs-4.5/root_admin/getVMPassword.html)
>> which gets encrypted password from DB.
>> 
>> Thanks,
>> Harikrishna
>> 
>> On 02-Apr-2015, at 5:07 am, Nux! > wrote:
>> 
>>> Somesh,
>>> 
>>> Why wouldn't the root password field in the DB just be left alone?
>>> 
>>> --
>>> Sent from the Delta quadrant using Borg technology!
>>> 
>>> Nux!
>>> www.nux.ro
>>> 
>>> - Original Message -
>>>> From: "Somesh Naidu" >
>>>> To: dev@cloudstack.apache.org 
>>>> Sent: Thursday, 2 April, 2015 00:06:54
>>>> Subject: RE: reset sshkeyforvirtualmachine also resets password
>>> 
>>>> I believe so, since the VM's password (stored in the user_vm_details
>> table)
>>>> needs to be encrypted using the new keys and I believe encryption is a
>> one-way
>>>> hash.
>>>> 
>>>> Somesh
>>>> CloudPlatform Escalations
>>>> Citrix Systems, Inc.
>>>> 
>>>> 
>>>> -Original Message-
>>>> From: Nux! [mailto:n...@li.nux.ro ]
>>>> Sent: Wednesday, April 01, 2015 9:16 AM
>>>> To: dev
>>>> Subject: reset sshkeyforvirtualmachine also resets password
>>>> 
>>>> Hi,
>>>> 
>>>> I've just noticed resetsshkeyforvirtualmachine also resets the root
>> password.
>>>> This doesn't sound right. Is this supposed to happen?
>>>> 
>>>> 4.4.3 RC2 (4.4-RC20150324T1321) CentOS/KVM
>>>> 
>>>> --
>>>> Sent from the Delta quadrant using Borg technology!
>>>> 
>>>> Nux!
>>>> www.nux.ro
>> 
>>