Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Password from Env Var Hashed Incorrectly #4771

Open
terryquigleysas opened this issue Oct 3, 2024 · 1 comment · May be fixed by #4773
Open

[BUG] Password from Env Var Hashed Incorrectly #4771

terryquigleysas opened this issue Oct 3, 2024 · 1 comment · May be fixed by #4773
Labels
bug Something isn't working untriaged Require the attention of the repository maintainers and may need to be prioritized

Comments

@terryquigleysas
Copy link
Contributor

What is the bug?
Passwords provided as environment variables are always hashed using BCrypt.

How can one reproduce the bug?
Steps to reproduce the behavior:

  1. Add password env var to internal_users.yaml - hash: ${envbc.ADMIN_PASSWORD}
  2. Change default password hashing algorithm - set plugins.security.password.hashing.algorithm: PBKDF2
  3. Start cluster
  4. Attempt to connect as user and authentication will fail

What is the expected behavior?
User authenticates

What is your host/environment?

  • OpenSearch 2.17
@terryquigleysas terryquigleysas added bug Something isn't working untriaged Require the attention of the repository maintainers and may need to be prioritized labels Oct 3, 2024
@terryquigleysas
Copy link
Contributor Author

Please assign to me. I will provide a PR with the fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working untriaged Require the attention of the repository maintainers and may need to be prioritized
Projects
None yet
1 participant