Project

General

Profile

Actions
Copy link

User story #16730

closed

User story #16674: Use BCrypt by default for storing user's local password

Update users configuration file to add BCrypt support

Added by Elaad FURREEDAN about 4 years ago. Updated almost 4 years ago.

Status:
Released
Priority:
N/A
Assignee:
François ARMAND
Category:
Web - UI & UX
Target version:
6.1.0~beta1
Pull Request:
https://github.com/Normation/rudder/p...
UX impact:
Suggestion strength:
User visibility:
Effort required:
Name check:
To do
Fix check:
Checked
Regression:

Description

In demo-rudder-users.xml we need to update informations to add bcrypt support :
- Replace "sha512" in the hash function used by "bcrypt"
- In the comment's part add bcrypt
- Add how to generate a bcrypt hash with a command line
- Update admin's password (which should be replace by a random one post-install)

Related issues 2 (0 open — 2 closed)

Related to Rudder - User story #16731: Adapt user configuration file to remove default admin credentialsReleasedAlexis MoussetActions
Has duplicate Rudder - User story #4834: Password used in the /opt/rudder/etc/rudder-users.xml file should be saltedResolvedActions
Actions
Copy link
 #1

Updated by Elaad FURREEDAN about 4 years ago

  • Status changed from New to In progress
Actions
Copy link
 #2

Updated by Elaad FURREEDAN about 4 years ago

  • Description updated (diff)
  • Status changed from In progress to New
Actions
Copy link
 #3

Updated by Elaad FURREEDAN about 4 years ago

  • Assignee changed from Elaad FURREEDAN to François ARMAND
  • Pull Request set to https://github.com/Normation/rudder/pull/2771
Actions
Copy link
 #4

Updated by Anonymous about 4 years ago

  • Status changed from New to Pending release
Actions
Copy link
 #5

Updated by Elaad FURREEDAN about 4 years ago

  • Related to User story #16720: Add BCrypt support for password encoder message box added
Actions
Copy link
 #6

Updated by Elaad FURREEDAN about 4 years ago

  • Related to User story #16674: Use BCrypt by default for storing user's local password added
Actions
Copy link
 #7

Updated by Elaad FURREEDAN about 4 years ago

  • Related to deleted (User story #16720: Add BCrypt support for password encoder message box)
Actions
Copy link
 #8

Updated by Alexis Mousset almost 4 years ago

  • Category set to Web - UI & UX
Actions
Copy link
 #9

Updated by François ARMAND almost 4 years ago

  • Has duplicate User story #4834: Password used in the /opt/rudder/etc/rudder-users.xml file should be salted added
Actions
Copy link
 #10

Updated by François ARMAND almost 4 years ago

  • Related to User story #16731: Adapt user configuration file to remove default admin credentials added
Actions
Copy link
 #11

Updated by Vincent MEMBRÉ almost 4 years ago

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 6.1.0~beta1 which was released today.

Actions
Copy link
 #12

Updated by Alexis Mousset almost 4 years ago

  • Parent task set to #16674
Actions
Copy link
 #13

Updated by François ARMAND almost 4 years ago

  • Fix check changed from To do to Checked
Actions
Copy link

Also available in: Atom PDF