Remove the base64 encoded password from IDPS API calls

Products

• VMware Telco Cloud Automation

Issue/Introduction

This KB is mean to provide the means to remove the base64 encoded password from IDPS API calls in Telco Cloud Automation (TCA) 3.0.

Symptoms:
In TCA 3.0, idps API calls can return the base64 encoded password associated to the Identity Provider to an authenticated System Administrator.

Environment

3.0

Resolution

Addressed in TCA 3.1.

Workaround:

1. SSH into the TCA Manager.
2. Confirm there are at least 4 GBs of disk space available by running the following commands:
   df -h | grep vg_system-lv_system
   df -h | grep /tmp
   Note: (Avail is the 3rd column)
3. If there is not sufficient disk space, run the following command:
   echo "" > /opt/vmware/var/log/registry.log
4. Download the attached web.img and update.sh scripts.
5. Copy the web.img and update.sh file to the /tmp directory of the TCA Manager.
6. Execute update.sh as root by running the following commands:
   su
   ./tmp/update.sh