Bug #7696: Telegraf Package Saving Incorrect Password - pfSense Packages - pfSense bugtracker

Actions

Copy link

Bug #7696

closed

Telegraf Package Saving Incorrect Password

Added by Galen POSPISIL over 7 years ago. Updated over 7 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Category:

Target version:

Start date:

07/14/2017

Due date:

% Done:

Estimated time:

Plus Target Version:

Affected Version:

2.4

Affected Plus Version:

Affected Architecture:

Description

The contents of the password field are not being passed properly to the telegraf.conf file. The password is being encoded to sanitize inputs, but is not being decoded before the characters are written to the config file. (See line 78 in telegraf.xml.)

The password in the telegraf.conf file ends up being the base64 encoding of the password entered in the password field. With the wrong password in the configuration file, telegraf fails to connect to the influxdb database. One can work around the error by manually editing the telegraf.conf file located at /usr/local/etc/telegraf.conf to correct the password, but when a new version of pfsense is installed, or the settings on the telegraf configuration page is saved, the correct password will be overwritten.

Note: By default, influxdb does not require username/password authentication. If authentication is not enabled on the influxdb server, then (as far as I know) telegraf will not complain about an incorrect password.