Remove the base64 encoded password from IDPS API calls in Telco Cloud Automation (TCA) 3.0

Products

• VMware
• VMware Telco Cloud Automation

Issue/Introduction

This KB is mean to provide the means to remove the base64 encoded password from IDPS API calls in Telco Cloud Automation (TCA) 3.0.

Symptoms:
In TCA 3.0, idps API calls can return the base64 encoded password associated to the Identity Provider to an authenticated System Administrator.

Environment

VMware Telco Cloud Automation 3.0

Resolution

Addressed in TCA 3.1.

Workaround:

1. SSH into the TCA Manager.
2. Confirm there are at least 4 GBs of disk space available by running the following commands:
   df -h | grep vg_system-lv_system
   df -h | grep /tmp
   Note: (Avail is the 3rd column)
3. If there is not sufficient disk space, run the following command:
   echo "" > /opt/vmware/var/log/registry.log
4. Download web.img and update.sh .
5. Copy the web.img and update.sh file to the /tmp directory of the TCA Manager.
6. Execute update.sh as root by running the following commands:
   su
   ./tmp/update.sh

Additional Information

Impact/Risks:
Impacts TCA 3.0.