Skip to content

Webapp cronjob should not leak the admin password

i just got this as cron error mail from root@elephant.dev.bitmask.net:

"http://admin:PASSWORD@localhost:4096/tokens_550"
"http://admin:PASSWORD@localhost:4096/tokens_549"
"http://admin:PASSWORD@localhost:4096/tokens_548"
"http://localhost:5984/couchrest_sessions_550"
rake aborted!
Errno::ECONNREFUSED: Connection refused - connect(2)
/srv/leap/webapp/vendor/bundle/ruby/1.9.1/gems/rest-client-1.6.8/lib/restclient/request.rb:206:in `transmit'
/srv/leap/webapp/vendor/bundle/ruby/1.9.1/gems/rest-client-1.6.8/lib/restclient/request.rb:68:in `execute'
/srv/leap/webapp/vendor/bundle/ruby/1.9.1/gems/rest-client-1.6.8/lib/restclient/request.rb:35:in `execute'
/srv/leap/webapp/vendor/bundle/ruby/1.9.1/gems/couchrest-1.1.3/lib/couchrest/rest_api.rb:94:in `execute'
/srv/leap/webapp/vendor/bundle/ruby/1.9.1/gems/couchrest-1.1.3/lib/couchrest/rest_api.rb:74:in `head'
/srv/leap/webapp/vendor/bundle/ruby/1.9.1/bundler/gems/couchrest_session_store-43e41323f643/lib/couchrest/model/database_method.rb:110:in `database_exists?'
/srv/leap/webapp/vendor/bundle/ruby/1.9.1/bundler/gems/couchrest_session_store-43e41323f643/lib/couchrest/model/rotation.rb:75:in `rotate_database_now'
/srv/leap/webapp/lib/tasks/leap_web_core_tasks.rake:42:in `block (2 levels) in '
Tasks: TOP => db:rotate
(See full trace by running task with --trace)

(from redmine: created on 2015-03-12, closed on 2015-03-13)