Default User & Passwords

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Default User & Passwords

Scott.
Hiya All,

I have a question about default user and passwords.

Is there a way to change all of the default passwords at once or do you have to change each individual? I am talking about the accounts that were created with the initial ofbiz setup. The ones like BLOG_ADMIN, BIGAL, MADMAX, etc.

Are there be any other users besides the ones found in Party Manager? We're just trying to close any back doors to our system.

Thanks in advance.
 

Reply | Threaded
Open this post in threaded view
|

Re: Default User & Passwords

cjhowe
all of the passwords should be "ofbiz" and should therefore encode to
the same value, if you run an sql query, you can replace all of the
ofbiz encoded value with another known encoded value
--- Scott A <[hidden email]> wrote:

>
> Hiya All,
>
> I have a question about default user and passwords.
>
> Is there a way to change all of the default passwords at once or do
> you have
> to change each individual? I am talking about the accounts that were
> created
> with the initial ofbiz setup. The ones like BLOG_ADMIN, BIGAL,
> MADMAX, etc.
>
> Are there be any other users besides the ones found in Party Manager?
> We're
> just trying to close any back doors to our system.
>
> Thanks in advance.
>  
>
>
> --
> View this message in context:
>
http://www.nabble.com/Default-User---Passwords-tf3565946.html#a9960968
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>
>

Reply | Threaded
Open this post in threaded view
|

Re: Default User & Passwords

Philip W. Dalrymple
The way I do this is to have a data file that is loaded LATE in the
"run-install" process that has all of the changed default passwords.
(you can also run the same process from the import section of webtools)

my file looks somthing like this

<entity-engine-xml>
     <UserLogin
         userLoginId="1"
         partyId="admin"
         currentPassword="XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
         passwordHint="The Number One, Yeah, Literally"
         enabled="N"
         />
</entity-engine-xml>

NOTE the number of XXX in the above is not correct

you can set the password on a users and then go to the webtools to
extract the necessary data.


Chris Howe wrote:

> all of the passwords should be "ofbiz" and should therefore encode to
> the same value, if you run an sql query, you can replace all of the
> ofbiz encoded value with another known encoded value
> --- Scott A <[hidden email]> wrote:
>
>> Hiya All,
>>
>> I have a question about default user and passwords.
>>
>> Is there a way to change all of the default passwords at once or do
>> you have
>> to change each individual? I am talking about the accounts that were
>> created
>> with the initial ofbiz setup. The ones like BLOG_ADMIN, BIGAL,
>> MADMAX, etc.
>>
>> Are there be any other users besides the ones found in Party Manager?
>> We're
>> just trying to close any back doors to our system.
>>
>> Thanks in advance.
>>  
>>
>>
>> --
>> View this message in context:
>>
> http://www.nabble.com/Default-User---Passwords-tf3565946.html#a9960968
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>>
>

--
It is MDT, Inc's policy to delete mail containing unsolicited
file attachments.  Please be sure to contact the MDT staff
member BEFORE sending an e-mail with any file attachments;
they will be able to arrange for the files to be received.

This email, and any files transmitted with it, is confidential
and intended solely for the use of the individual or entity to
whom they are addressed.  If you have received this email in error,
please advise [hidden email] <mailto:[hidden email]>.

Philip W. Dalrymple III <[hidden email]>
MDT Software - The Change Management Company
+1 678 297 1001
Fax +1 678 297 1003
Reply | Threaded
Open this post in threaded view
|

Re: Default User & Passwords

Scott.
Thanks guys. Much appreciated.

Philip W. Dalrymple III wrote
The way I do this is to have a data file that is loaded LATE in the
"run-install" process that has all of the changed default passwords.
(you can also run the same process from the import section of webtools)

my file looks somthing like this

<entity-engine-xml>
     <UserLogin
         userLoginId="1"
         partyId="admin"
         currentPassword="XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
         passwordHint="The Number One, Yeah, Literally"
         enabled="N"
         />
</entity-engine-xml>

NOTE the number of XXX in the above is not correct

you can set the password on a users and then go to the webtools to
extract the necessary data.


Chris Howe wrote:
> all of the passwords should be "ofbiz" and should therefore encode to
> the same value, if you run an sql query, you can replace all of the
> ofbiz encoded value with another known encoded value
> --- Scott A <Scott@anglolimited.com> wrote:
>
>> Hiya All,
>>
>> I have a question about default user and passwords.
>>
>> Is there a way to change all of the default passwords at once or do
>> you have
>> to change each individual? I am talking about the accounts that were
>> created
>> with the initial ofbiz setup. The ones like BLOG_ADMIN, BIGAL,
>> MADMAX, etc.
>>
>> Are there be any other users besides the ones found in Party Manager?
>> We're
>> just trying to close any back doors to our system.
>>
>> Thanks in advance.
>>  
>>
>>
>> --
>> View this message in context:
>>
> http://www.nabble.com/Default-User---Passwords-tf3565946.html#a9960968
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>>
>

--
It is MDT, Inc's policy to delete mail containing unsolicited
file attachments.  Please be sure to contact the MDT staff
member BEFORE sending an e-mail with any file attachments;
they will be able to arrange for the files to be received.

This email, and any files transmitted with it, is confidential
and intended solely for the use of the individual or entity to
whom they are addressed.  If you have received this email in error,
please advise postmaster@mdtsoft.com <mailto:postmaster@mdtsoft.com>.

Philip W. Dalrymple III <pwd@mdtsoft.com>
MDT Software - The Change Management Company
+1 678 297 1001
Fax +1 678 297 1003