Project

General

Profile

Actions

Bug #7077

closed

Pulp default admin password set to 'admin', should be random generated

Added by Walden Raines over 10 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
High
Assignee:
Category:
Installer
Target version:
Difficulty:
Triaged:
Yes
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1127242
Description of problem:
Having admin:admin as default pulp credentials should be considered a security issue and we shouldn't ship Sat 6 GA with this issue inside

Version-Release number of selected component (if applicable):
6.0.3

How reproducible:
Always

Steps to Reproduce:
1. install sat6
2. grep default_password /etc/pulp/server.conf

Actual results:
The default password set to admin

curl -k -u admin:admin https://localhost/pulp/api/v2/repositories/
lets me to go to the list of repositories

Expected results:
The default password set to random script

curl -k -u admin:admin https://localhost/pulp/api/v2/repositories/
returns 401 Unauthorized

Additional info:

Actions

Also available in: Atom PDF