[bind10-dev] Initial authentication setup

Shane Kerr shane at isc.org
Wed Jan 9 16:21:03 UTC 2013


All,

Perhaps we should no longer ship a default account? 

We could have bindctl report something if this has not yet been done:

$ bindctl
Please configure a user account using the b10-cmdctl-usermgr program

This would require a change in the startup of bindctl to connect to the
server before asking for user/password - but that's probably a good
idea anyway. It would also require the cmdctl recognize that there are
no users and report that via our RESTful API, but these seem simple
changes.

Even without that change, we should probably still disable the default
account. Having default logins is a sure recipe for hacked systems. :(

Cheers,

--
Shane


More information about the bind10-dev mailing list