[ 
https://issues.apache.org/jira/browse/COUCHDB-2362?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14214119#comment-14214119
 ] 

ASF subversion and git services commented on COUCHDB-2362:
----------------------------------------------------------

Commit 35cdab4d94bdea9c1f4accab36507245f4d0a984 in couchdb's branch 
refs/heads/developer-preview-2.0 from [~janl]
[ https://git-wip-us.apache.org/repos/asf?p=couchdb.git;h=35cdab4 ]

Merge branch 'goodbye-futon' into developer-preview-2.0

* goodbye-futon:
  Add share/www to .gitignore
  Add Fauxton build process to Makefile
  Goodbye Futon, old friend <3
  Move JS tests to test/javascript/tests
  fixes COUCHDB-2362 admin and cookie auth in dev cluster
  Remove leftovers from broken becnhmark
  Disable Nagle`s algorithm
  Adding myself to committers list
  added rebar to Mac OS X dependencies
  Add erlang-rebar dependency for Fedora systems to INSTALL.Unix
  Add API endpoint for _view_changes


> Have dev/run put the same cookie secret and hashed admin password in all 
> three nodes of dev cluster
> ---------------------------------------------------------------------------------------------------
>
>                 Key: COUCHDB-2362
>                 URL: https://issues.apache.org/jira/browse/COUCHDB-2362
>             Project: CouchDB
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: BigCouch
>            Reporter: Javier Candeira
>
> When starting a dev cluster with the --admin option:
> `dev/run -a candeira:candeira`
> the local.ini scripts get rebuilt with an extra [admin] section and the 
> plaintext user = password line. This means that couchdb adds the hashed 
> password instead of replacing it.
> in addition, the admin party fix only sets the user = password line in one of 
> the cluster's nodes, which may create problem.
> The forthcoming patch will initialise all three nodes with the same hashed 
> password, as per rnewson:
> 00:27 <+rnewson> so you need to ensure that the admin is the same on all 
> nodes after  hashing  
> 00:28 <+rnewson> otherwise cookies won't work if you hop between nodes



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to