Encryption for Auto Server Setup profiles is undocumented

Originator:MagerValp
Number:rdar://10258157 Date Originated:10-Oct-2011 11:42 AM
Status:Open Resolved:
Product:Mac OS X Server Product Version:10.7.1 11B26
Classification:Enhancement Reproducible:Always
 
Summary:
Server Assistant in 10.6 features the ability to create passphrase encrypted Auto Server Setup profiles. We would like to create our own profiles, in order to use a master template when deploying multiple servers. There is no documentation on how the passphrase is salted and hashed, or which algorithm is used to encrypt the profile.

Steps to Reproduce:
• Install 10.6 Server Admin Tools.
• Create Auto Server Setup Profile…
• Open plist and see a Base64 data blob, and an Encryption value of "2".

Expected Results:
• Some kind of documentation or a readable format.

Actual Results:
• Encrypted plist with no documentation.

Regression:

Notes:
A short comment on how the passphrase is salted and hashed, and which algorithm to use would be extremely helpful!

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!