[ 
https://issues.apache.org/jira/browse/DERBY-6234?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13907576#comment-13907576
 ] 

Kim Haase commented on DERBY-6234:
----------------------------------

Sorry for the thrashing. The Dev Guide topics can stay gone. The use of 
derby.user.UserName is described in cdevcsecure876908.dita.


> Remove references to BUILTIN authentication from the user guides
> ----------------------------------------------------------------
>
>                 Key: DERBY-6234
>                 URL: https://issues.apache.org/jira/browse/DERBY-6234
>             Project: Derby
>          Issue Type: Improvement
>          Components: Documentation
>    Affects Versions: 10.11.0.0
>            Reporter: Rick Hillegas
>            Assignee: Kim Haase
>         Attachments: DERBY-6234.diff, DERBY-6234.stat, DERBY-6234.zip
>
>
> BUILTIN authentication is a scheme suitable only for regression tests. Many 
> security problems make it inappropriate for production use. To avoid 
> confusion and prevent users from selecting this insecure authentication 
> scheme, we should remove references to it from our user documentation.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to