Project

General

Profile

Actions
Copy link

User story #16620

closed

Add a command to generate user accounts after installation

Added by Alexis Mousset over 4 years ago. Updated almost 4 years ago.

Status:
Released
Priority:
N/A
Assignee:
Benoît PECCATTE
Category:
Security
Target version:
6.1.0~beta1
Pull Request:
https://github.com/Normation/rudder-a...
UX impact:
Suggestion strength:
User visibility:
Getting started - demo | first install | Technique editor and level 1 Techniques
Effort required:
Name check:
To do
Fix check:
Checked
Regression:

Description

We should not open the server with a default password after installation.

It leaves an open window for compromising the server before password change, and we regularly see Rudder servers in the wild with default passwords. It should not be the default behavior.

We should display the password in install output and document how to set it automatically for automated installs.

Subtasks 1 (0 open — 1 closed)

Architecture #17105: Update default rudder-users.xmlReleasedFrançois ARMANDActions

Related issues 2 (0 open — 2 closed)

Related to Rudder - User story #16732: It should be impossible to connect with "admin" password with default configReleasedFrançois ARMANDActions
Related to Rudder - User story #17070: Display a warning in place of login form if no user are definedReleasedRaphael GAUTHIERActions
Actions
Copy link

Also available in: Atom PDF