sanger / sequencescape

Web based LIMS
MIT License
80 stars 32 forks source link

Y24-132 - Security related RT 798566 edit title here Part 2 #4140

Closed TWJW-SANGER closed 1 week ago

TWJW-SANGER commented 2 weeks ago

Describe the Housekeeping

Once retired ensure both sets of credentials in the RT no longer authenticate on the retired passwords.

Blocking issues Describe any other issues or tickets that may be blocking this change.

Additional context Details of what to do are here #4043

dasunpubudumal commented 2 weeks ago

Hi @TWJW-SANGER, adding a small note here.

In https://github.com/sanger/sequencescape/issues/4043, I have updated the primary password, retaining the current password for psdp user as mentioned in https://github.com/sanger/sequencescape/issues/4043#issuecomment-2061159182. We just need to discard the secondary password using the SQL command:

ALTER USER 'psdp'@'%' DISCARD OLD PASSWORD;

We did not update passwords for the gapi user when doing #4043, primarily because we could not identify who that particular user was, and to whom does that user belong.

SHIV5T3R commented 1 week ago

The old passwords for both users have been discarded.