Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Weak/useless auth_tokens when run from macOS #271

Open
lattwood opened this issue Jul 28, 2023 · 0 comments
Open

Weak/useless auth_tokens when run from macOS #271

lattwood opened this issue Jul 28, 2023 · 0 comments

Comments

@lattwood
Copy link

Issue

Any use of this role from a macOS machine without coreutils installed from Homebrew, with the PATH adjustment added (PATH="$HOMEBREW_PREFIX/opt/coreutils/libexec/gnubin:$PATH") will use BSD tr instead of GNU tr. The role uses tr to read 128 random printable characters from /dev/urandom, by using the -dc flags to remove anything not in the a-zA-Z0-9 character range.

This is an issue, because you can end up with single character auth_tokens.

Suggested Resolution

  • Big warning in the README.md about this issue.
  • Generate the auth_token on one node (guaranteed to be Linux) instead of delegating it to localhost.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant