Hi Christian,
thanks for taking the time to reply.
This is the file you are referring to. We tried to disable the default
admin user, but still we can login with the default password (and the
geonode password as well). Geoserver version is 2.4 (the snapshot, used for
Geonode 2.0). We tried with geoserver 2.5, but the result is the same. We
tried on Ubuntu 12.4/12.5 and Debian, but the result is the same. We follow
step by step the instruction of the geonode site.
[image: Inline image 1]
<?xml version="1.0" encoding="UTF-8"?>
<userRegistry version="1.0" xmlns="http://www.geoserver.org/security/users";>
<users>
<user enabled="true" name="admin"
password="crypt1:Z22ZwbZyJpL3kt3rZrM3PmY38jsMFYdx"/>
</users>
<groups/>
</userRegistry>
We have made a detail movie of what/how we configure the system.
https://drive.google.com/file/d/0B2oRsQyYjsqyMnRFQnN5Vy1vS2c/edit?usp=sharing
I will appreciate any ideas and suggestions.
My very best,
Lubo.
Lubomir Filipov
48 Evlogi Georgiev Blvd,
1504 Sofia, Bulgaria
e-mail: [email protected]
cell phone: (+359) 888 972277
fax: (+359) 2 4916469
* <+359)%202%204916469>*skype name: fipeto
http://www.linkedin.com/in/lubomirfilipov
http://www.facebook.com/GAPconsult.bg
On Wed, Oct 1, 2014 at 12:03 PM, Christian Mueller <
[email protected]> wrote:
> Hi Lubomir
>
> I assume you are talking about the password of the admin user.
>
> Please take a look into
>
> security/usergroup/default/users.xml
>
> There is an XML element called <user> with attributes name and password.
> What do you see ?
>
> Cheers
> Christian
>
>
>
>
>
>
>
> On Tue, Sep 30, 2014 at 8:37 PM, Lubomir Filipov <[email protected]
> > wrote:
>
>> Hello all,
>> we are running to a security problem using Geonode 2.0 and the default
>> version of geoserver (part of the geonode instalation), which is 2.4.
>> The issues is place also on:
>> https://github.com/GeoNode/geoserver-geonode-ext/issues/15 from January
>> 2014.
>> The issue is that we cannot change the default password of geoserver (it
>> allows change, but it keeps the old password as well).
>> Anyone running similar issue?
>> Thanks a lot in advance.
>>
>>
>> Lubomir Filipov
>>
>> 48 Evlogi Georgiev Blvd,
>> 1504 Sofia, Bulgaria
>> e-mail: [email protected]
>> cell phone: (+359) 888 972277
>> fax: (+359) 2 4916469
>> * <+359)%202%204916469>*skype name: fipeto
>> http://www.linkedin.com/in/lubomirfilipov
>> http://www.facebook.com/GAPconsult.bg
>>
>>
>> ------------------------------------------------------------------------------
>> Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
>> Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
>> Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
>> Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
>>
>> http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Geoserver-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>>
>>
>
>
> --
> DI Christian Mueller MSc (GIS), MSc (IT-Security)
> OSS Open Source Solutions GmbH
>
>
------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users
