Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Listing secret-id accessors appears to require case sensitive role name. #3643

Closed
melbit-michaelw opened this issue Dec 3, 2017 · 0 comments
Milestone

Comments

@melbit-michaelw
Copy link
Contributor

Listing secret-id accessors appears to require case sensitive role name.

If the approle has been created with some uppercase letters, attempting to display the secret-id accessors fails until the exact same case is used.

Environment:

  • Vault Version: Vault v0.9.0 ('bdac1854478538052ba5b7ec9a9ec688d35a3335')
  • Operating System/Architecture: CentOS 7

Vault Config File:

api_addr = "https://Vault-address:443"

storage "dynamodb" {
ha_enabled = "true"
region = "ap-southeast-2"
table = "vault-poc"
}

listener "tcp" {
address = "0.0.0.0:8200"
tls_disable = 1
}

Startup Log Output:
N/a

Expected Behavior:

The following command should return the list of secret-id accessors for the 779693_vaultASG role, and should be identical in output to the second command (which actually works):

vault list /auth/approle/role/779693_vaultasg/secret-id
Keys
----
2466aa22-239b-ee67-712d-f5ac174c45e7
251dfc70-5a6e-7061-34b1-ff4b2dca04f6

vault list /auth/approle/role/779693_vaultASG/secret-id
Keys
----
2466aa22-239b-ee67-712d-f5ac174c45e7
251dfc70-5a6e-7061-34b1-ff4b2dca04f6

Actual Behavior:

vault list /auth/approle/role/779693_vaultasg/secret-id
No value found at auth/approle/role/779693_vaultasg/secret-id/
vault list /auth/approle/role/779693_vaultASG/secret-id
Keys
----
2466aa22-239b-ee67-712d-f5ac174c45e7
251dfc70-5a6e-7061-34b1-ff4b2dca04f6

Steps to Reproduce:

  1. Create an approle role-name with mixed case.
  2. Create some secret-id's associated with that role.
  3. Attempt to list the secret-id-accessors.

Important Factoids:

References:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants