flaxsearch / flaxcode

Automatically exported from code.google.com/p/flaxcode
4 stars 1 forks source link

Remove preset password for admin logon #61

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Before making a release, we _MUST_ remove the default admin password.

Instead, either:

 1) the installer should require an admin password to be set

or

 2) no password should be set, and the first time a connection to the web
interface is made _from localhost_, an option to set the admin password can
be provided.

I think 1 is probably better.  It should probably go along with a simple
command line utility for setting the password (which the installer can then
call).

Original issue reported on code.google.com by boulton.rj@gmail.com on 30 Oct 2007 at 12:37

GoogleCodeExporter commented 9 years ago
Actually, I think the easiest way to fix this is to have a new command line 
option
for startflax.py which causes it to set the new password instead of running the 
file.
 This will avoid us having to have a further frozen python script, and lets us take
advantage of all the path configuration stuff too.

I'll implement this, taking the new password to be read from stdin, and storing 
it in
the cp.conf configuration file.

Charlie will then need to integrate it with the installer somehow, but I'll 
take the
bug over until I've got a command line system for setting the password made.

Original comment by boulton.rj@gmail.com on 30 Oct 2007 at 1:51

GoogleCodeExporter commented 9 years ago
OK, I think the best thing would be for me to write a separate program that is 
run
after installation, handling the following tasks:

1. Set the password
2. Set the data directory
3. Install Flax as a Service if required.

It can be run again for 1. or 2. after the fact of course. I can probably knock 
this
up pretty quickly in Visual C.

Original comment by charliej...@gmail.com on 30 Oct 2007 at 2:35

GoogleCodeExporter commented 9 years ago
Cool.  It can call the startflax.exe script to set the password; then we only 
have to
implement that in one place.

Original comment by boulton.rj@gmail.com on 30 Oct 2007 at 3:17

GoogleCodeExporter commented 9 years ago
This will just be a popup box during installation

Original comment by charliej...@gmail.com on 1 Nov 2007 at 4:21

GoogleCodeExporter commented 9 years ago
I've added the option to the startflax.py file, but not yet finished 
implementing it.

Original comment by boulton.rj@gmail.com on 2 Nov 2007 at 12:30

GoogleCodeExporter commented 9 years ago
The --set-admin-password option now works, so I'll reassign to Charlie to 
finish this
off.

Original comment by boulton.rj@gmail.com on 5 Nov 2007 at 11:07

GoogleCodeExporter commented 9 years ago
Increasing the priority of this, since the installer doesn't work without it.

Original comment by boulton.rj@gmail.com on 6 Nov 2007 at 12:43

GoogleCodeExporter commented 9 years ago
Done in the Windows installer.

Original comment by charliej...@gmail.com on 6 Nov 2007 at 1:47

GoogleCodeExporter commented 9 years ago
This has been done now.

Original comment by boulton.rj@gmail.com on 6 Nov 2007 at 1:51