asa_* modules putting provider password in cleartext

[jainnikhil30]

ISSUE TYPE

• Bug Report

COMPONENT NAME

networking asa_* module

ANSIBLE VERSION

2.4.0

CONFIGURATION

OS / ENVIRONMENT

SUMMARY

asa_* modules puts the provider password in clear text in /var/log/messages

STEPS TO REPRODUCE

1.) Use any asa_* module and check the /var/log/messages after it ran. It puts the provider password in cleartext.

EXPECTED RESULTS

Oct 30 09:21:01 localhost ansible-asa_config: Invoked with authorize=None context=None replace=line port=None before=None auth_pass=NOT_LOGGING_PARAMETER parents=['tunnel-group 1.1.1.1 ipsec-attributes'] provider={'username': 'ec2-user', 'authorize': None, 'passwords': None, 'context': None, 'auth_pass': None, 'host': 'xx.xx.xx.xx', 'timeout': None, 'password': 'NOT_LOGGING_PARAMETER', 'port': None} save=False config=None match=line username=None passwords=None timeout=None after=None host=None password=NOT_LOGGING_PARAMETER src=None ssh_keyfile=None lines=['ikev1 pre-shared-key test']

ACTUAL RESULTS

Oct 30 09:21:01 localhost ansible-asa_config: Invoked with authorize=None context=None replace=line port=None before=None auth_pass=NOT_LOGGING_PARAMETER parents=['tunnel-group 1.1.1.1 ipsec-attributes'] provider={'username': 'ec2-user', 'authorize': None, 'passwords': None, 'context': None, 'auth_pass': None, 'host': 'xx.xx.xx.xx', 'timeout': None, 'password': 'test', 'port': None} save=False config=None match=line username=None passwords=None timeout=None after=None host=None password=NOT_LOGGING_PARAMETER src=None ssh_keyfile=None lines=['ikev1 pre-shared-key test']

[ganeshrn]

Fix will be available in 2.4.2beta2 release