[pve-devel] nexenta plugin problems

[Dietmar Maurer]

> I don't see any problem here. We can create a new NON UNIX User in
> Nexenta which has just the permissions you need.
> 
> Then choose a long passwort (max. 40 characters are accepted) it's then like
> an api key. Where's the difference if we have an API Key or a password?

I will not allow to store any password inside /etc/pve/storage.cfg.

That file is readable by www-data user, so that is a major security hole.

Any other ideas?