Cluster.conf clear text passwords

adamb

Famous Member
Mar 1, 2012
1,329
77
113
Hey all. We might run into some serious issues with clear text passwords within cluster.conf. Does anyone know of a way around this? Is there any plan to make these clear text passwords more secure?
 
Just attempted to setup ssh equiv between my fence devices and the hosts. Still a no go, the fence agents report a failure without a password feild within cluster.conf. Bummer.
 
Looks like we will handle this with passwd_script, but instead of keeping the passwords within clear text in a bash script, we will write a small program/utility which will have the password compiled within. Not the best but sure is better than clear text passwords.

In case anyone is interested this is all due to hippa/MU guidelines.