OpenNebula

I am not able to reproduce de problem, I get the asterisks on error:

Tue Apr  9 15:00:06 2013 [AuM][D]: Message received: LOG I 10 Command execution fail: /Users/jfontan/work/one/install/var/remotes/auth/ldap/authenticate ldap ldapuser ****

Tue Apr  9 15:00:06 2013 [AuM][I]: Command execution fail: /Users/jfontan/work/one/install/var/remotes/auth/ldap/authenticate ldap ldapuser ****

Are there any non alphanumeric characters in the password?

Yes, the problem only shows up for passwords with non alphanumeric characters.
Just try adding a '!' to trigger this.

Laurent

Well, in fact this problem is not related with #1860 as I managed to reproduce the problem with the right group membership attribute.

I am trying to reproduce the bug but I am not able to do so. Can you execute this script in your machine and send me the output? I case both gsub lines have the secret work changed to asterisks, can you change the secret to some password that behaves incorrectly in your setup?:

#!/usr/bin/env ruby

puts "==== #{RUBY_VERSION} ====" 

secret="secret(?!)$!" 
text="some text and #{secret}" 

quoted=Regexp.escape(secret)

reg_a=/ #{quoted}$/
reg_b=Regexp.new(" #{quoted}$")

puts "secret: "+secret.inspect
puts "quoted: "+quoted.inspect
puts "reg_a: "+reg_a.inspect
puts "reg_b: "+reg_b.inspect
puts "gsub a: "+text.gsub(reg_a, ' ***')
puts "gsub b: "+text.gsub(reg_b, ' ***')

I've tested this in ruby 1.8.7, 1.9.3 and 2.0. Works as expected.

Hi,

Ok, here is a very simple (weak) password : azerty!
I'm not able to reproduce the problem with your script.

 ./secret-test.rb 
==== 1.8.7 ====
secret: "azerty!" 
quoted: "azerty!" 
reg_a: / azerty!$/
reg_b: / azerty!$/
gsub a: some text and ***
gsub b: some text and ***

However, here is what I get when I try to log in from sunstone with an existing user and this password (which is not the correct password associated with the user so the authentication fails).
Notice the escaped '!' only present on output.

Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 339 Command execution fail: /var/lib/one/remotes/auth/ldap/authenticate myuser d
e569a0127402de2f1bd6f2a5bb61f2f00626151 azerty\!

Wed Apr 10 18:16:25 2013 [AuM][I]: Command execution fail: /var/lib/one/remotes/auth/ldap/authenticate myuser de569a0127402de2f1bd6f2a5bb61
f2f00626151 azerty\!
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 339 Trying server server 1

Wed Apr 10 18:16:25 2013 [AuM][I]: Trying server server 1
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 339 Bad user/password

Wed Apr 10 18:16:25 2013 [AuM][I]: Bad user/password
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 339 Could not authenticate user myuser

Wed Apr 10 18:16:25 2013 [AuM][I]: Could not authenticate user myuser
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 339 ExitCode: 255

Wed Apr 10 18:16:25 2013 [AuM][I]: ExitCode: 255
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: AUTHENTICATE FAILURE 339 -

Wed Apr 10 18:16:25 2013 [AuM][E]: Auth Error: 
Wed Apr 10 18:16:25 2013 [ReM][D]: Req:2672 UID:- UserInfo invoked, -1
Wed Apr 10 18:16:25 2013 [ReM][E]: Req:2672 UID:- UserInfo result FAILURE [UserInfo] User couldn't be authenticated, aborting call.
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 340 ExitCode: 0

Wed Apr 10 18:16:25 2013 [AuM][I]: ExitCode: 0
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: AUTHENTICATE SUCCESS 340 -

Wed Apr 10 18:16:25 2013 [ReM][D]: Req:2800 UID:1 UserPoolInfo invoked
Wed Apr 10 18:16:25 2013 [ReM][D]: Req:2800 UID:1 UserPoolInfo result SUCCESS, "<USER_POOL><USER><ID..." 
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 341 Command execution fail: /var/lib/one/remotes/auth/ldap/authenticate myuser de569a0127402de2f1bd6f2a5bb61f2f00626151 azerty\!

Wed Apr 10 18:16:25 2013 [AuM][I]: Command execution fail: /var/lib/one/remotes/auth/ldap/authenticate myuser de569a0127402de2f1bd6f2a5bb61f2f00626151 azerty\!
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 341 Trying server server 1

Wed Apr 10 18:16:25 2013 [AuM][I]: Trying server server 1
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 341 Bad user/password

Wed Apr 10 18:16:25 2013 [AuM][I]: Bad user/password
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 341 Could not authenticate user myuser

Wed Apr 10 18:16:25 2013 [AuM][I]: Could not authenticate user myuser
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: LOG I 341 ExitCode: 255

Wed Apr 10 18:16:25 2013 [AuM][I]: ExitCode: 255
Wed Apr 10 18:16:25 2013 [AuM][D]: Message received: AUTHENTICATE FAILURE 341 -

Wed Apr 10 18:16:25 2013 [AuM][E]: Auth Error: 
Wed Apr 10 18:16:25 2013 [ReM][D]: Req:336 UID:- UserInfo invoked, -1
Wed Apr 10 18:16:25 2013 [ReM][E]: Req:336 UID:- UserInfo result FAILURE [UserInfo] User couldn't be authenticated, aborting call.

I think I've found the problem. Can you change the file /usr/lib/one/mads/one_auth_mad.rb line 129, from:

            log_method_no_password(request_id, secret))

to:

            log_method_no_password(request_id, Shellwords.escape(secret)))

Restart OpenNebula and check if this continues to happen.

Thanks

Hi Javi,

Sorry for the delay but for whatever reason, I haven't been notified of the update.
I confirm the issue is gone now.

Thanks a lot.
Have a nice weekend,

Laurent