Security: All images have same user/password

benkoo / TensorCloud

A set of open-sourced computational services orchestrated by a tensor-based metalanguage.

GNU General Public License v3.0

12 stars 13 forks source link

Closed alexcg1 closed 6 years ago

alexcg1 commented 6 years ago

This is okay for testing, but if we roll out, then admin 1 can login to admin 2's image.

Suggestion: Prompt user to change password (for local login and SSH) upon first login

Suggested user-flow: Boot -> auto-login -> change password program autostarts

yangboz commented 6 years ago

Because all of ENVs variables has been pre-defined on static docker-composed files, In this stage, it can not support a dynamic way. :-(

yangboz commented 6 years ago

We are try to use a OAuthServer base on http://remix.network with OpenID connect providers.

yangboz commented 6 years ago

Let's Dind.