Security test for cloud customers = Insure default mifos login/password is not
being used
-----------------------------------------------------------------------------------------
Key: MIFOSADMIN-299
URL: http://mifosforge.jira.com/browse/MIFOSADMIN-299
Project: mifos administration
Issue Type: New Feature
Components: Cloud Instances
Reporter: Ryan Whitney
Be good to add some kind of script that checks the cloud customer instances
once a day and tries to login with mifos/testmifos to make sure the default
account is not being used (risk to our customers).
Or our general policy should be to disable the mifos account - maybe we can
check to see if the account is disabled or enabled in the db directly?
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://mifosforge.jira.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
The modern datacenter depends on network connectivity to access resources
and provide services. The best practices for maximizing a physical server's
connectivity to a physical network are well understood - see how these
rules translate into the virtual world?
http://p.sf.net/sfu/oracle-sfdevnlfb
_______________________________________________
Mifos-issues mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mifos-issues
