Project

General

Profile

Actions
Copy link

User story #2527

closed

Document procedure to change default passwords in a Rudder installation

Added by Jonathan CLARKE over 12 years ago. Updated over 9 years ago.

Status:
Released
Priority:
1 (highest)
Assignee:
Matthieu CERDA
Category:
Documentation
Target version:
2.3.8
Pull Request:
UX impact:
Suggestion strength:
User visibility:
Effort required:
Name check:
Fix check:
Regression:

Description

As of now, the Rudder packages and other scripts assume that some passwords are fixed, so many components are accessible using standard passwords. This is obvisouly a security risk, and will be fixed automatically in the next version (2.5.0). See also #860 that will fix this automatically for the 2.5.0 version.

For now, we must document this and provide a simple procedure to change these passwords in the documentation.

A (maybe) non exhaustive list :
  • The WebDAV password, defined in apache config and the inventory PT
  • The OpenLDAP password defined in slapd.conf and rudder-web.properties and inventory-web.properties
  • The PSQL password, defined in PSQL and rudder-web.properties
Actions
Copy link

Also available in: Atom PDF