[Spacewalk-list] Passwords sent in clear text!

Stuart Green stuart.green at doccentrics.com
Fri Feb 7 16:08:42 UTC 2014


There's more authentication methods available besides the basic one such 
as LDAP, if it was joined to AD then I guess you wouldn't have the problem.

Potentially you need to move to one of those to avoid this.

Stu

> I created a user with the web interface and an email was sent to the user with a clear text password in the email.  There should be a way to disable the automatic email or create a one time password for users to send.
>
> jeff
>
> On Feb 7, 2014, at 9:28 AM, Robin <robin at chilio.net> wrote:
>
>> Hi Jeff,
>>
>> did you mean the webinterface? I think spacewalk Supports https per default.
>>
>> Robin
>>
>>> Am 07.02.2014 um 16:02 schrieb Jeff Horn - NOAA Affiliate <jeff.horn at noaa.gov>:
>>>
>>> I’ve got a problem with my installation of spacewalk.  I set up a user account for another admin and the password was sent in clear text!  This is a big no-no here.  Can I disable that?
>>>
>>> jeff
>>>
>>>
>>> _______________________________________________
>>> Spacewalk-list mailing list
>>> Spacewalk-list at redhat.com
>>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>> _______________________________________________
>> Spacewalk-list mailing list
>> Spacewalk-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list




More information about the Spacewalk-list mailing list