Opened 12 years ago

Closed 12 years ago

#48 closed (fixed)

Change FlowVisor admin password

Reported by: jbs@bbn.com Owned by: somebody
Priority: major Milestone:
Component: OpenFlow Version: SPIRAL4
Keywords: Cc:
Dependencies:

Description

The current FlowVisor? admin password is very insecure; change it to something more secure.

Change History (6)

comment:1 Changed 12 years ago by jbs@bbn.com

To do this:

sudo vi /etc/flowvisor/fvpasswd 
(enter the new password)
fvctl changePasswd fvadmin
(enter the old password)
(enter the new password)

python ~jbs/change_foam_fvinfo.py --passwd-file=/opt/foam/etc/foampasswd 
(enter 'localhost' for the hostname, the deafults for the two ports, and the new password for the password)
sudo service foam restart 

I'd like to do this as soon as possible, but have the vague impression that it breaks something related to "Ilia's handler to provision an OpenFlow? slice", whatever that is. Does that have the fvadmin password hardcoded into it? If so, when can it be updated?

comment:2 Changed 12 years ago by jbs@bbn.com

Ilia says that "Orca talks to it and therefore needs to know what the password is. It is set in /opt/orca-12080/cofig/flowvisor.properties and I think it can be modified without restarting anything ."

So, whoever eventually does this, should do that too.

comment:3 Changed 12 years ago by jbs@bbn.com

Jon and I did this on the RENCI rack just now, and everything works. We still need to do it on the BBN rack, once it's back up.

comment:4 Changed 12 years ago by ibaldin@renci.org

Not quite. It has torqued something in orca-flowvisor interface. We're looking into it.

comment:5 Changed 12 years ago by ibaldin@renci.org

OK, it looks like its been resolved.

comment:6 Changed 12 years ago by jbs@bbn.com

Resolution: fixed
Status: newclosed

Jon and I made the same change on the BBN rack as well.

Afterwards, we discovered that there were no FlowVisor? slices; there should have been three, for the three existing FOAM slivers there. I'm not sure if they were deleted when bbn-hn was shut down, or as part of other ORCA/FV related things that folks were doing, or what; I'll bring it up on the exogeni-design list. I think that's it for this one.

Note: See TracTickets for help on using tickets.