Project

Profile

Help

Story #275

closed

[RFE] The default admin password should be specified with pulp-manage-db instead of server.conf

Added by rbarlow about 9 years ago. Updated about 5 years ago.

Status:
CLOSED - WONTFIX
Priority:
Normal
Assignee:
-
Category:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:

Description

++ This bug was initially created as a clone of Bugzilla Bug #1171425 ++

Description of problem:

Description of problem:
The default password on every Pulp installation is "admin". This isn't terrible, but it also isn't ideal. We could instead change pulp-manage-db[0] to interactively prompt the user for an admin password when creating the user. This would have a security advantage of every user explicitly setting the initial password, which would help it to be unique across all installations. It is also a little strange to have a setting in server.conf that only matters on the initial install. We could also consider allowing them to choose the username for the admin account. Of course, we want to continue to be machine-friendly, so if we do this we would also need a way to pass the password non-interactively (perhaps by accepting a piped password through stdin).

This is a behavior change, so we'd need to do it with an X release if we choose to do it.

Version-Release number of selected component (if applicable):
2.4.3-1

How reproducible:
Every time.

Steps to Reproduce:
1. Can you set the default password in server.conf?
2. Can you set the default password using pulp-manage-db?

Actual results:
Yes and no.

Expected results:
No and yes.

Additional info:
[0] pulp-manage-db is currently the process that creates the admin user.

Also available in: Atom PDF