Hi Lubomir
Quite strange. Please can you check if the value of
password="crypt1:Z22ZwbZyJpL3kt3rZrM3PmY38jsMFYdx"
changes if you change the password of the admin user. (Note, the value
change is independent of a password change because we use a salt. Saving
the password "geoserver" two times will result into two different values).
Next, you can switch to the plain text password encoder (you have to change
the settings in the default user/group service). Change the password and
you should see the result in plain text
password="plain:mynewpasswordf"
I think this is the best way to resolve the problem. (After resolving,
switch back to the digest encoder).
Cheers
Christian
On Thu, Oct 2, 2014 at 9:52 AM, Lubomir Filipov <[email protected]>
wrote:
> Hi Christian,
> thanks for taking the time to reply.
> This is the file you are referring to. We tried to disable the default
> admin user, but still we can login with the default password (and the
> geonode password as well). Geoserver version is 2.4 (the snapshot, used for
> Geonode 2.0). We tried with geoserver 2.5, but the result is the same. We
> tried on Ubuntu 12.4/12.5 and Debian, but the result is the same. We follow
> step by step the instruction of the geonode site.
>
> [image: Inline image 1]
>
>
> <?xml version="1.0" encoding="UTF-8"?>
> <userRegistry version="1.0" xmlns="http://www.geoserver.org/security/users
> ">
> <users>
> <user enabled="true" name="admin"
> password="crypt1:Z22ZwbZyJpL3kt3rZrM3PmY38jsMFYdx"/>
> </users>
> <groups/>
> </userRegistry>
>
> We have made a detail movie of what/how we configure the system.
>
> https://drive.google.com/file/d/0B2oRsQyYjsqyMnRFQnN5Vy1vS2c/edit?usp=sharing
>
> I will appreciate any ideas and suggestions.
>
> My very best,
>
> Lubo.
>
> Lubomir Filipov
>
> 48 Evlogi Georgiev Blvd,
> 1504 Sofia, Bulgaria
> e-mail: [email protected]
> cell phone: (+359) 888 972277
> fax: (+359) 2 4916469
> * <+359)%202%204916469>*skype name: fipeto
> http://www.linkedin.com/in/lubomirfilipov
> http://www.facebook.com/GAPconsult.bg
>
> On Wed, Oct 1, 2014 at 12:03 PM, Christian Mueller <
> [email protected]> wrote:
>
>> Hi Lubomir
>>
>> I assume you are talking about the password of the admin user.
>>
>> Please take a look into
>>
>> security/usergroup/default/users.xml
>>
>> There is an XML element called <user> with attributes name and
>> password. What do you see ?
>>
>> Cheers
>> Christian
>>
>>
>>
>>
>>
>>
>>
>> On Tue, Sep 30, 2014 at 8:37 PM, Lubomir Filipov <
>> [email protected]> wrote:
>>
>>> Hello all,
>>> we are running to a security problem using Geonode 2.0 and the default
>>> version of geoserver (part of the geonode instalation), which is 2.4.
>>> The issues is place also on:
>>> https://github.com/GeoNode/geoserver-geonode-ext/issues/15 from January
>>> 2014.
>>> The issue is that we cannot change the default password of geoserver (it
>>> allows change, but it keeps the old password as well).
>>> Anyone running similar issue?
>>> Thanks a lot in advance.
>>>
>>>
>>> Lubomir Filipov
>>>
>>> 48 Evlogi Georgiev Blvd,
>>> 1504 Sofia, Bulgaria
>>> e-mail: [email protected]
>>> cell phone: (+359) 888 972277
>>> fax: (+359) 2 4916469
>>> * <+359)%202%204916469>*skype name: fipeto
>>> http://www.linkedin.com/in/lubomirfilipov
>>> http://www.facebook.com/GAPconsult.bg
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
>>> Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
>>> Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
>>> Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
>>>
>>> http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
>>> _______________________________________________
>>> Geoserver-users mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>>>
>>>
>>
>>
>> --
>> DI Christian Mueller MSc (GIS), MSc (IT-Security)
>> OSS Open Source Solutions GmbH
>>
>>
>
--
DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH
------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users
