vcap password not set after stemcell upgrade


Jonathan Stockley
 

Hi,
We have been using ubuntu vsphere stemcell 3263.8 and are now attempting to upgrade a test deployment to 3363.12.
The upgrade went successfully and the application is running.
However, we cannot login to the VM using ssh vcap(a)AA.BB.CC.DD
It seems as if the vcap password has been changed.
Using 'bosh ssh app 0' is successful and checking the /etc/shadow file it show that the vcap entry's password field is '*'.

Switching back to 3263.8 and the vcap password is back.

Is this an intentional change to the stemcell?
How to we get the former behaviour?
Is this documented somewhere?

Thanks,
Jo


Dr Nic Williams
 

Hey Jo,

I believe the vcap password has become randomized... to discourage use.

Instead, simply add the user_add job from os-conf release to create an
explicit user with ssh keys/password you control:

https://github.com/cloudfoundry/os-conf-release/blob/master/jobs/user_add/spec

Nic