[ 
http://mifosforge.jira.com/browse/MIFOS-2850?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Graeme Ruthven updated MIFOS-2850:
----------------------------------

    Description: 
The instructions in the INSTALL file included with both 1.4.2 and Gazelle C use 
"root" in section 3.2 of the accompanying INSTALL file.

This is repeated in mainDatabase.properties.

This is very poor security practice and does not reflect the instructions on 
the Mifos Ubuntu Install wiki page on www.mifos.org.

I strongly recommend that all samples, examples and instructions are altered to 
remove references to using the root user for connection to any of the mifos 
databases. "mifos" or "mifosuser" would be more suitable.

The local.properties file in the config directory of the 1.4.2 download file 
uses "mifos".

  was:
The instructions in the INSTALL file included with both 1.4.2 and Gazelle C use 
"root" in section 3.2 of the accompanying INSTALL file.

This is repeated in mainDatabase.properties.

This is very poor security practice and does not reflect the instructions on 
the Mifos Ubuntu Install wiki page on www.mifos.org.

I strongly recommend that all samples, examples and instructions are altered to 
remove references to using the root user for connection to any of the mifos 
databases. "mifos" or "mifosuser" would be more suitable.


> Remove all References to Using the user "root: when Connecting to a MySQL 
> Database
> ----------------------------------------------------------------------------------
>
>                 Key: MIFOS-2850
>                 URL: http://mifosforge.jira.com/browse/MIFOS-2850
>             Project: mifos
>          Issue Type: Improvement
>          Components: Authentication
>    Affects Versions: Release 1.4, Gazelle C
>         Environment: All
>            Reporter: Graeme Ruthven
>
> The instructions in the INSTALL file included with both 1.4.2 and Gazelle C 
> use "root" in section 3.2 of the accompanying INSTALL file.
> This is repeated in mainDatabase.properties.
> This is very poor security practice and does not reflect the instructions on 
> the Mifos Ubuntu Install wiki page on www.mifos.org.
> I strongly recommend that all samples, examples and instructions are altered 
> to remove references to using the root user for connection to any of the 
> mifos databases. "mifos" or "mifosuser" would be more suitable.
> The local.properties file in the config directory of the 1.4.2 download file 
> uses "mifos".

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://mifosforge.jira.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Mifos-issues mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mifos-issues

Reply via email to