[Mapguide-trac] [mapguide-trac] #581: Command line password reset utility

MapGuide Open Source trac_mapguide at osgeo.org
Wed Jun 7 06:51:01 PDT 2017


#581: Command line password reset utility
-------------------------+----------------------
 Reporter:  zspitzer     |        Owner:  (none)
     Type:  enhancement  |       Status:  new
 Priority:  low          |    Milestone:
Component:  Server       |      Version:
 Severity:  minor        |   Resolution:
 Keywords:               |  External ID:
-------------------------+----------------------

Comment (by jng):

 In [changeset:"9201" 9201]:
 {{{
 #!CommitTicketReference repository="" revision="9201"
 Add support for a "setpwd" command-line operation. The use case for this
 feature is to change the passwords for built-in users in a headless
 fashion before starting up the mgserver/daemon proper. It also addresses
 #581.

 This is important for security when MapGuide is used within a container
 (eg. Docker) or an automated environment provisioning context where being
 able to programmatically change passwords for built-in users from their
 designated defaults is currently cumbersome as the Site Administrator
 requires manual operation and the only known way to programmatically
 change the password is through MgSite, but using this API requires a
 running mgserver and thus requires coordinating the server to be online
 first before being able to use this particular API.

 A small side-effect of changing passwords using this approach is that it
 will blank out other properties of the user, such as its user name (not
 related to its user id) and description. To preserve such information, we
 would have to first call EnumerateUsers and manually parse the XML
 response for the matching user and call UpdateUser with the new password
 and the preserved user information. This information is inconsequential in
 the grand scheme so having it blanked out through this setpwd command is
 deemed by me to be an acceptable trade-off for simplicity of the
 implementation.
 }}}

--
Ticket URL: <https://trac.osgeo.org/mapguide/ticket/581#comment:3>
MapGuide Open Source <http://mapguide.osgeo.org/>
MapGuide Open Source Internals


More information about the mapguide-trac mailing list