)]}'
{"security-guide/source/dashboard/passwords.rst":[{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"045cd928b0432487f6ed00ac978842e176c78f98","unresolved":false,"context_lines":[{"line_number":5,"context_line":"Password management should be an integral part of your cloud administration"},{"line_number":6,"context_line":"plan. A definitive tutorial about passwords is beyond the scope of this book,"},{"line_number":7,"context_line":"however, cloud administrators can learn basic recommendations about passwords"},{"line_number":8,"context_line":"and password management reading the the NIST document"},{"line_number":9,"context_line":"`Guide to Enterprise Password Management \u003chttp://csrc.nist.gov/publications/drafts/800-118/draft-sp800-118.pdf\u003e`_."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Browser-based access to the OpenStack cloud, whether through Horizon or other"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da6ed579_0dbc7ab9","line":8,"updated":"2016-01-15 18:01:03.000000000","message":"s/the the/the/","commit_id":"e12d42aee0888ca9d99a77cd60794a9488819889"},{"author":{"_account_id":6587,"name":"Patrick Amor","email":"pamor@cisco.com","username":"pamor"},"change_message_id":"aa6f699d2af4fc16f0a235cbe99d6e36db79e0b0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"Password management should be an integral part of your cloud administration"},{"line_number":6,"context_line":"plan. A definitive tutorial about passwords is beyond the scope of this book,"},{"line_number":7,"context_line":"however, cloud administrators can learn basic recommendations about passwords"},{"line_number":8,"context_line":"and password management reading the the NIST document"},{"line_number":9,"context_line":"`Guide to Enterprise Password Management \u003chttp://csrc.nist.gov/publications/drafts/800-118/draft-sp800-118.pdf\u003e`_."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Browser-based access to the OpenStack cloud, whether through Horizon or other"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da6ed579_d9c94427","line":8,"in_reply_to":"da6ed579_0dbc7ab9","updated":"2016-01-15 19:19:18.000000000","message":"Done","commit_id":"e12d42aee0888ca9d99a77cd60794a9488819889"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"045cd928b0432487f6ed00ac978842e176c78f98","unresolved":false,"context_lines":[{"line_number":22,"context_line":"of strong passwords and periodic reminders to generate new passwords and most"},{"line_number":23,"context_line":"importantly the password store remains unlocked only briefly reducing the"},{"line_number":24,"context_line":"risk of unattended host misuse."},{"line_number":25,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"da6ed579_0d0a3a8a","line":25,"updated":"2016-01-15 18:01:03.000000000","message":"should we link to some common F/OSS managers here? (for example KeePassX)","commit_id":"e12d42aee0888ca9d99a77cd60794a9488819889"},{"author":{"_account_id":6587,"name":"Patrick Amor","email":"pamor@cisco.com","username":"pamor"},"change_message_id":"aa6f699d2af4fc16f0a235cbe99d6e36db79e0b0","unresolved":false,"context_lines":[{"line_number":22,"context_line":"of strong passwords and periodic reminders to generate new passwords and most"},{"line_number":23,"context_line":"importantly the password store remains unlocked only briefly reducing the"},{"line_number":24,"context_line":"risk of unattended host misuse."},{"line_number":25,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"da6ed579_f9f3e870","line":25,"in_reply_to":"da6ed579_0d0a3a8a","updated":"2016-01-15 19:19:18.000000000","message":"Good idea. I\u0027ll add KeePassX and Password Safe as examples so the reader gets the idea of what sort of pw management app we are talking about.","commit_id":"e12d42aee0888ca9d99a77cd60794a9488819889"},{"author":{"_account_id":18729,"name":"Matt Valdes","email":"matthew.valdes@rackspace.com","username":"mvaldes"},"change_message_id":"9c4af49a5e19dd021053d6c2cb8a59ac756ca8fb","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Password management should be an integral part of your cloud administration"},{"line_number":6,"context_line":"plan. A definitive tutorial about passwords is beyond the scope of this book,"},{"line_number":7,"context_line":"however, cloud administrators can learn basic recommendations about passwords"},{"line_number":8,"context_line":"and password management reading the NIST document"},{"line_number":9,"context_line":"`Guide to Enterprise Password Management \u003chttp://csrc.nist.gov/publications/drafts/800-118/draft-sp800-118.pdf\u003e`_."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Browser-based access to the OpenStack cloud, whether through Horizon or other"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_114f5cbe","line":8,"range":{"start_line":6,"start_character":76,"end_line":8,"end_character":49},"updated":"2016-01-19 23:11:20.000000000","message":";however, cloud administrators should refer to the best practices\nrecommended in Chapter 4 of NIST Special Publication","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":6587,"name":"Patrick Amor","email":"pamor@cisco.com","username":"pamor"},"change_message_id":"676073db26e944d3f06baa8ca05281ae273a1b44","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Password management should be an integral part of your cloud administration"},{"line_number":6,"context_line":"plan. A definitive tutorial about passwords is beyond the scope of this book,"},{"line_number":7,"context_line":"however, cloud administrators can learn basic recommendations about passwords"},{"line_number":8,"context_line":"and password management reading the NIST document"},{"line_number":9,"context_line":"`Guide to Enterprise Password Management \u003chttp://csrc.nist.gov/publications/drafts/800-118/draft-sp800-118.pdf\u003e`_."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Browser-based access to the OpenStack cloud, whether through Horizon or other"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_ac6e3694","line":8,"range":{"start_line":6,"start_character":76,"end_line":8,"end_character":49},"in_reply_to":"ba63e191_114f5cbe","updated":"2016-01-20 00:31:12.000000000","message":"Done","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":18729,"name":"Matt Valdes","email":"matthew.valdes@rackspace.com","username":"mvaldes"},"change_message_id":"9c4af49a5e19dd021053d6c2cb8a59ac756ca8fb","unresolved":false,"context_lines":[{"line_number":9,"context_line":"`Guide to Enterprise Password Management \u003chttp://csrc.nist.gov/publications/drafts/800-118/draft-sp800-118.pdf\u003e`_."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Browser-based access to the OpenStack cloud, whether through Horizon or other"},{"line_number":12,"context_line":"applications, introduces some additional considerations. Modern browsers all"},{"line_number":13,"context_line":"support some form of password storage and autofilling of"},{"line_number":14,"context_line":"credentials for remembered sites, which can be useful when using strong"},{"line_number":15,"context_line":"passwords that cannot be easily remembered or typed but the browser may become"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_318f00ce","line":12,"range":{"start_line":12,"start_character":25,"end_line":12,"end_character":29},"updated":"2016-01-19 23:11:20.000000000","message":"remove \"some\"","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":6587,"name":"Patrick Amor","email":"pamor@cisco.com","username":"pamor"},"change_message_id":"676073db26e944d3f06baa8ca05281ae273a1b44","unresolved":false,"context_lines":[{"line_number":9,"context_line":"`Guide to Enterprise Password Management \u003chttp://csrc.nist.gov/publications/drafts/800-118/draft-sp800-118.pdf\u003e`_."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Browser-based access to the OpenStack cloud, whether through Horizon or other"},{"line_number":12,"context_line":"applications, introduces some additional considerations. Modern browsers all"},{"line_number":13,"context_line":"support some form of password storage and autofilling of"},{"line_number":14,"context_line":"credentials for remembered sites, which can be useful when using strong"},{"line_number":15,"context_line":"passwords that cannot be easily remembered or typed but the browser may become"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_6c683e88","line":12,"range":{"start_line":12,"start_character":25,"end_line":12,"end_character":29},"in_reply_to":"ba63e191_318f00ce","updated":"2016-01-20 00:31:12.000000000","message":"Done","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":18729,"name":"Matt Valdes","email":"matthew.valdes@rackspace.com","username":"mvaldes"},"change_message_id":"9c4af49a5e19dd021053d6c2cb8a59ac756ca8fb","unresolved":false,"context_lines":[{"line_number":11,"context_line":"Browser-based access to the OpenStack cloud, whether through Horizon or other"},{"line_number":12,"context_line":"applications, introduces some additional considerations. Modern browsers all"},{"line_number":13,"context_line":"support some form of password storage and autofilling of"},{"line_number":14,"context_line":"credentials for remembered sites, which can be useful when using strong"},{"line_number":15,"context_line":"passwords that cannot be easily remembered or typed but the browser may become"},{"line_number":16,"context_line":"the weak link if the physical security of the client is compromised. If the"},{"line_number":17,"context_line":"browser\u0027s password store itself is not protected by a strong password or if"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_71ac9835","line":14,"range":{"start_line":14,"start_character":32,"end_line":14,"end_character":39},"updated":"2016-01-19 23:11:20.000000000","message":"Replace \", which\" with \". This\"","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":6587,"name":"Patrick Amor","email":"pamor@cisco.com","username":"pamor"},"change_message_id":"676073db26e944d3f06baa8ca05281ae273a1b44","unresolved":false,"context_lines":[{"line_number":11,"context_line":"Browser-based access to the OpenStack cloud, whether through Horizon or other"},{"line_number":12,"context_line":"applications, introduces some additional considerations. Modern browsers all"},{"line_number":13,"context_line":"support some form of password storage and autofilling of"},{"line_number":14,"context_line":"credentials for remembered sites, which can be useful when using strong"},{"line_number":15,"context_line":"passwords that cannot be easily remembered or typed but the browser may become"},{"line_number":16,"context_line":"the weak link if the physical security of the client is compromised. If the"},{"line_number":17,"context_line":"browser\u0027s password store itself is not protected by a strong password or if"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_cc0feadf","line":14,"range":{"start_line":14,"start_character":32,"end_line":14,"end_character":39},"in_reply_to":"ba63e191_71ac9835","updated":"2016-01-20 00:31:12.000000000","message":"Done","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":18729,"name":"Matt Valdes","email":"matthew.valdes@rackspace.com","username":"mvaldes"},"change_message_id":"9c4af49a5e19dd021053d6c2cb8a59ac756ca8fb","unresolved":false,"context_lines":[{"line_number":12,"context_line":"applications, introduces some additional considerations. Modern browsers all"},{"line_number":13,"context_line":"support some form of password storage and autofilling of"},{"line_number":14,"context_line":"credentials for remembered sites, which can be useful when using strong"},{"line_number":15,"context_line":"passwords that cannot be easily remembered or typed but the browser may become"},{"line_number":16,"context_line":"the weak link if the physical security of the client is compromised. If the"},{"line_number":17,"context_line":"browser\u0027s password store itself is not protected by a strong password or if"},{"line_number":18,"context_line":"the password store is allowed to remain unlocked for the duration of the"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_317dc0b1","line":15,"range":{"start_line":15,"start_character":51,"end_line":15,"end_character":71},"updated":"2016-01-19 23:11:20.000000000","message":"\", but may cause the browser to become\"","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":6587,"name":"Patrick Amor","email":"pamor@cisco.com","username":"pamor"},"change_message_id":"676073db26e944d3f06baa8ca05281ae273a1b44","unresolved":false,"context_lines":[{"line_number":12,"context_line":"applications, introduces some additional considerations. Modern browsers all"},{"line_number":13,"context_line":"support some form of password storage and autofilling of"},{"line_number":14,"context_line":"credentials for remembered sites, which can be useful when using strong"},{"line_number":15,"context_line":"passwords that cannot be easily remembered or typed but the browser may become"},{"line_number":16,"context_line":"the weak link if the physical security of the client is compromised. If the"},{"line_number":17,"context_line":"browser\u0027s password store itself is not protected by a strong password or if"},{"line_number":18,"context_line":"the password store is allowed to remain unlocked for the duration of the"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_acf5d6cb","line":15,"range":{"start_line":15,"start_character":51,"end_line":15,"end_character":71},"in_reply_to":"ba63e191_317dc0b1","updated":"2016-01-20 00:31:12.000000000","message":"Done","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":18729,"name":"Matt Valdes","email":"matthew.valdes@rackspace.com","username":"mvaldes"},"change_message_id":"9c4af49a5e19dd021053d6c2cb8a59ac756ca8fb","unresolved":false,"context_lines":[{"line_number":14,"context_line":"credentials for remembered sites, which can be useful when using strong"},{"line_number":15,"context_line":"passwords that cannot be easily remembered or typed but the browser may become"},{"line_number":16,"context_line":"the weak link if the physical security of the client is compromised. If the"},{"line_number":17,"context_line":"browser\u0027s password store itself is not protected by a strong password or if"},{"line_number":18,"context_line":"the password store is allowed to remain unlocked for the duration of the"},{"line_number":19,"context_line":"session, unauthorized access to your system can be easily obtained."},{"line_number":20,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_7ce30f06","line":17,"range":{"start_line":17,"start_character":54,"end_line":17,"end_character":72},"updated":"2016-01-19 23:11:20.000000000","message":"add comma \"strong password, or\"","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":6587,"name":"Patrick Amor","email":"pamor@cisco.com","username":"pamor"},"change_message_id":"676073db26e944d3f06baa8ca05281ae273a1b44","unresolved":false,"context_lines":[{"line_number":14,"context_line":"credentials for remembered sites, which can be useful when using strong"},{"line_number":15,"context_line":"passwords that cannot be easily remembered or typed but the browser may become"},{"line_number":16,"context_line":"the weak link if the physical security of the client is compromised. If the"},{"line_number":17,"context_line":"browser\u0027s password store itself is not protected by a strong password or if"},{"line_number":18,"context_line":"the password store is allowed to remain unlocked for the duration of the"},{"line_number":19,"context_line":"session, unauthorized access to your system can be easily obtained."},{"line_number":20,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_0c2d0246","line":17,"range":{"start_line":17,"start_character":54,"end_line":17,"end_character":72},"in_reply_to":"ba63e191_7ce30f06","updated":"2016-01-20 00:31:12.000000000","message":"Done","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":18729,"name":"Matt Valdes","email":"matthew.valdes@rackspace.com","username":"mvaldes"},"change_message_id":"9c4af49a5e19dd021053d6c2cb8a59ac756ca8fb","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Password management applications such as `KeePassX \u003chttp://www.keepassx.org\u003e`_"},{"line_number":22,"context_line":"and `Password Safe \u003chttp://www.pwsafe.org\u003e`_ can be useful as most support the"},{"line_number":23,"context_line":"generation of strong passwords and periodic reminders to generate new"},{"line_number":24,"context_line":"passwords and most importantly the password store remains unlocked only"},{"line_number":25,"context_line":"briefly reducing the risk of unattended host misuse."},{"line_number":26,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_510dd43c","line":24,"range":{"start_line":24,"start_character":9,"end_line":24,"end_character":30},"updated":"2016-01-19 23:11:20.000000000","message":". Most importantly,","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":6587,"name":"Patrick Amor","email":"pamor@cisco.com","username":"pamor"},"change_message_id":"676073db26e944d3f06baa8ca05281ae273a1b44","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Password management applications such as `KeePassX \u003chttp://www.keepassx.org\u003e`_"},{"line_number":22,"context_line":"and `Password Safe \u003chttp://www.pwsafe.org\u003e`_ can be useful as most support the"},{"line_number":23,"context_line":"generation of strong passwords and periodic reminders to generate new"},{"line_number":24,"context_line":"passwords and most importantly the password store remains unlocked only"},{"line_number":25,"context_line":"briefly reducing the risk of unattended host misuse."},{"line_number":26,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_2c30069e","line":24,"range":{"start_line":24,"start_character":9,"end_line":24,"end_character":30},"in_reply_to":"ba63e191_510dd43c","updated":"2016-01-20 00:31:12.000000000","message":"Done","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":18729,"name":"Matt Valdes","email":"matthew.valdes@rackspace.com","username":"mvaldes"},"change_message_id":"9c4af49a5e19dd021053d6c2cb8a59ac756ca8fb","unresolved":false,"context_lines":[{"line_number":22,"context_line":"and `Password Safe \u003chttp://www.pwsafe.org\u003e`_ can be useful as most support the"},{"line_number":23,"context_line":"generation of strong passwords and periodic reminders to generate new"},{"line_number":24,"context_line":"passwords and most importantly the password store remains unlocked only"},{"line_number":25,"context_line":"briefly reducing the risk of unattended host misuse."},{"line_number":26,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_9c09232f","line":25,"range":{"start_line":25,"start_character":0,"end_line":25,"end_character":52},"updated":"2016-01-19 23:11:20.000000000","message":"briefly, which reduces the risk of password exposure through browser or system compromise.","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":6587,"name":"Patrick Amor","email":"pamor@cisco.com","username":"pamor"},"change_message_id":"676073db26e944d3f06baa8ca05281ae273a1b44","unresolved":false,"context_lines":[{"line_number":22,"context_line":"and `Password Safe \u003chttp://www.pwsafe.org\u003e`_ can be useful as most support the"},{"line_number":23,"context_line":"generation of strong passwords and periodic reminders to generate new"},{"line_number":24,"context_line":"passwords and most importantly the password store remains unlocked only"},{"line_number":25,"context_line":"briefly reducing the risk of unattended host misuse."},{"line_number":26,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba63e191_0cb742d9","line":25,"range":{"start_line":25,"start_character":0,"end_line":25,"end_character":52},"in_reply_to":"ba63e191_9c09232f","updated":"2016-01-20 00:31:12.000000000","message":"Done but with an additional change. Since just walking up to somebody\u0027s browser session won\u0027t cough up passwords (unless they don\u0027t protect their browser password cache with a master password) most exploits just involving accessing password protected resources which the browser obligingly auto-fills the credentials.  I\u0027ve modified your suggestion to read:\n\"briefly, which reduces the risk of password exposure and unauthorized resource access through browser or system compromise.\"","commit_id":"26c04821962698aeed2a8463b62ec127f0e1dfbe"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a16387832930e7d065e7c767c463f2709862763c","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in Chapter 4 of NIST Special Publication"},{"line_number":9,"context_line":"`Guide to Enterprise Password Management \u003chttp://csrc.nist.gov/publications/drafts/800-118/draft-sp800-118.pdf\u003e`_."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Browser-based access to the OpenStack cloud, whether through Horizon or other"},{"line_number":12,"context_line":"applications, introduces additional considerations. Modern browsers all"},{"line_number":13,"context_line":"support some form of password storage and autofilling of credentials for"},{"line_number":14,"context_line":"remembered sites. This can be useful when using strong passwords that cannot"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a68dd71_ee7225ad","line":11,"range":{"start_line":11,"start_character":61,"end_line":11,"end_character":68},"updated":"2016-01-20 17:50:43.000000000","message":"Horizon -\u003e the dashboard","commit_id":"53e572722e49f8d9f836809ef2a5712782679185"},{"author":{"_account_id":6587,"name":"Patrick Amor","email":"pamor@cisco.com","username":"pamor"},"change_message_id":"84ecef3f53560e27d15b97463a8fc5ec30c79dc0","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in Chapter 4 of NIST Special Publication"},{"line_number":9,"context_line":"`Guide to Enterprise Password Management \u003chttp://csrc.nist.gov/publications/drafts/800-118/draft-sp800-118.pdf\u003e`_."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Browser-based access to the OpenStack cloud, whether through Horizon or other"},{"line_number":12,"context_line":"applications, introduces additional considerations. Modern browsers all"},{"line_number":13,"context_line":"support some form of password storage and autofilling of credentials for"},{"line_number":14,"context_line":"remembered sites. This can be useful when using strong passwords that cannot"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a68dd71_056d1704","line":11,"range":{"start_line":11,"start_character":61,"end_line":11,"end_character":68},"in_reply_to":"9a68dd71_ee7225ad","updated":"2016-01-20 18:45:34.000000000","message":"Done","commit_id":"53e572722e49f8d9f836809ef2a5712782679185"}]}