[katello-devel] [tkolhar at redhat.com: Request to change the password for RHN accounts:]

[Tom McKay]

----- Original Message -----
> From: "Tazim Kolhar" <tkolhar at redhat.com>
> To: "Ladislav Jozsa" <ljozsa at redhat.com>
> Cc: katello-devel at redhat.com, infosec at redhat.com
> Sent: Thursday, October 18, 2012 5:10:27 AM
> Subject: Re: [katello-devel] [tkolhar at redhat.com: Request to change the password for RHN accounts:]
> 
> Hi,
> 
>   Sorry, actually I just came to know, there are lot of machines
>   using that account that will stop working if the password is
>   changed.
>   Please, DO NOT change the account passwords to avoid any further
>   issues.
>   Please, ignore the request to change passwords.
> 
> 
> Thanks & Regards,
> Tazim.
> 
> 
> > Please don't change the password, there are hundreds of machines
> > using that account that will stop working if the password is
> > changed.
> 
> >-Jeff

I would bump this a bit higher up the chain. The password went out to a publicly archived email list. You can choose to live with that hole with the potential of anyone registering and subscribing to real Red Hat content, or you can close it.

> 
> ----- Original Message -----
> From: "Ladislav Jozsa" <ljozsa at redhat.com>
> To: infosec at redhat.com
> Cc: tkolhar at redhat.com
> Sent: Thursday, October 18, 2012 2:20:03 PM
> Subject: [tkolhar at redhat.com: Request to change the password for  RHN
> accounts:]
> 
> Hi,
> 
> could you please arrange password change for RHN QA due to its
> compromise in Bugzilla?
> 
> Many thanks,
> Ladislav
> 
> ----- Forwarded message from Tazim Kolhar <tkolhar at redhat.com> -----
> 
> Date: Thu, 18 Oct 2012 04:12:13 -0400 (EDT)
> From: Tazim Kolhar <tkolhar at redhat.com>
> To: Ladislav Jozsa <ljozsa at redhat.com>
> Cc: Tazim Kolhar <tkolhar at redhat.com>
> Subject: Request to change the password for  RHN accounts:
> 
> Hi,
> 
>    I have been using the below doc to register my system to rhn :
>     https://docspace.corp.redhat.com/docs/DOC-64963
> 
>    While, discussing a Bug with the team I somehow made the password
>    'public' by mistake.
>    
>    Requesting, you to please change the password for the above
>    accounts in order to avoid free subscriptions.
>    Also, please modify the doc accordingly.
> 
> 
> Thanks & Regards,
> Tazim.
> 
> ----- End forwarded message -----
> 
> --
> Ladislav Jozsa
> Release Test Team
> Quality Assurance Engineer
> Red Hat, Inc., Brno Office
> +420 608 73 7620
> 
> _______________________________________________
> katello-devel mailing list
> katello-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/katello-devel
>