Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add a configuration option to skip default password check for demo servers #5081

Closed
schwzr opened this issue Apr 14, 2021 · 1 comment · Fixed by #5082
Closed

Add a configuration option to skip default password check for demo servers #5081

schwzr opened this issue Apr 14, 2021 · 1 comment · Fixed by #5082
Assignees
@DavidBaldsiefen @schwzr @syntakker
Labels
backend Affects the web backend configuration feature A new feature to be developed (ticket type) qa-verified Issue has been tested and verified by QA
Milestone
Sprint 102 - 1.59.0

Comments

@schwzr
Copy link
Contributor

schwzr commented Apr 14, 2021

Situation Description

PR #4875 prompts users with a default password or administrators with systems that have default passwords to change them on every login. While this is intended for every system that is currently in production or will probably be used in production in the future, this feature makes the use of public demo servers a lot harder.

Feature Description

There should be a configuration option that allows to disable the default password check. For security reasons, it (the skip) should be disabled by default.
@schwzr schwzr added the feature A new feature to be developed (ticket type) label Apr 14, 2021
schwzr added a commit to HHNSec/SORMAS-Project that referenced this issue Apr 14, 2021
@schwzr
SORMAS-Foundation#5081 add configuration option to skip default passw…
cc0eb35 
…ord check
@schwzr schwzr mentioned this issue Apr 14, 2021
Merged
@Candice-Louw
Copy link
Contributor

Thank you very much!

@MateStrysewske MateStrysewske added configuration backend Affects the web backend labels Apr 15, 2021
DavidBaldsiefen added a commit that referenced this issue Apr 15, 2021
@DavidBaldsiefen
Merge pull request #5082 from HHNSec/5081-config-option-skip-default-…
ab7f434 
…password-check

#5081 add configuration option to skip default password check
DavidBaldsiefen added a commit that referenced this issue Apr 15, 2021
@DavidBaldsiefen
Add info on skipDefaultPasswordCheck to sormas.properties #5081
8c66784
@DavidBaldsiefen DavidBaldsiefen mentioned this issue Apr 15, 2021
Merged
@DavidBaldsiefen DavidBaldsiefen added this to Backlog in SORMAS Team 2 - DEV - Iteration Backlog via automation Apr 15, 2021
@DavidBaldsiefen DavidBaldsiefen added this to the Sprint 102 - 1.59.0 milestone Apr 15, 2021
syntakker added a commit that referenced this issue Apr 15, 2021
@syntakker
Merge pull request #5090 from hzi-braunschweig/5081-properties-comment
4c61682 
Add info on skipDefaultPasswordCheck to sormas.properties #5081
@AndyBakcsy-she AndyBakcsy-she added the qa-verified Issue has been tested and verified by QA label Apr 19, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@DavidBaldsiefen DavidBaldsiefen

@schwzr schwzr

@syntakker syntakker

Labels
backend Affects the web backend configuration feature A new feature to be developed (ticket type) qa-verified Issue has been tested and verified by QA
Projects
None yet
Milestone
Sprint 102 - 1.59.0
Development

Successfully merging a pull request may close this issue.

#5081 add configuration option to skip default password check HHNSec/SORMAS-Project
6 participants
@DavidBaldsiefen @schwzr @syntakker @MateStrysewske @Candice-Louw @AndyBakcsy-she