search

intersystems-community / iris-community-edition

Feedback and Issues for InterSystems IRIS Community Edition
https://hub.docker.com/_/intersystems-iris-data-platform
MIT License
1 stars 0 forks source link

Set password from variables/secrets instead of file #9

Closed daimor closed 5 years ago

daimor commented 5 years ago

Using password file, for changing password, was not a good idea. Very difficult to use, and does not help with security. Default password, which should be changed after the first use, very bad idea. It means it can be changed by any who will be first, and you will lose control. So, we need a way to initialize the password, but in a more secure way without default one.

evshvarov commented 5 years ago

Fixed in the following release

zrml commented 5 years ago

Also is worth noting we are looking at reviewing the whole credential area. There are issues with all present approaches. Even supporting secrets (which I think we should do) there is the problem that there isn't a standard out there on it... it's delicate and at the same time important. Thanks for the feedback.