Re: Question about hashed passwords in seed data

[Jacopo Cappellato]

On Jan 25, 2009, at 9:51 PM, David E Jones wrote:

I should also concede that I may not have communicated very well...

The system account definitely needs to be there, and in seed data. The admin account we be a good thing to have in demo data, but my objection is to always having admin there, ie in seed data.

Ok,

I did some research and I have noticed the following things:



Jacopo

1) the "system" account is loaded with seed data in the framework: this is good 2) the "system" account password (ofbiz) is loaded with seed-initial data in the applications: do we really need to set a password for it? If the password is not required, it would be a good news and we could remove the password entry. 3) the "admin" user is loaded with seed data in the applications (and its password with seed-initial data): should we move it to demo data? I think that, now that we have an ant script to create a user, we could really move this to demo data without issues

-David

On Jan 25, 2009, at 13:42, David E Jones <david.jo...@hotwaxmedia.com> wrote:

Maybe you understood incorrectly, if you are referring to what I think you are.

-David


On Jan 25, 2009, at 13:01, Adrian Crum <adrian.c...@yahoo.com> wrote:

--- On Sun, 1/25/09, Jacopo Cappellato <jacopo.cappell...@hotwaxmedia.com > wrote:

Also, I would like to move the UserLogin record for the
"admin" and "system" UserLogin
(including the relevant entries in the
PasswordSecurityData.xml file) from the securityext to the
security component, i.e. from the applications to the
framework.

In this way we will be able to log in to the webtools
application even if we are running a framework only version
of OFBiz.

-Adrian

I suggested that some time ago and the reply was that there were to be no user login IDs or passwords supplied with the framework.

smime.p7s
Description: S/MIME cryptographic signature