Hi Jeff:

I agree.

But as far as I'm concerned, right now there is a password set by the
OSCAR Wizard, but it is not used.  So perhaps we should simply implement
it such that the password is actually set in MySQL?

To remove the prompt, perhaps we can simply randomly generate the
password, and put it in a root-readable file.

Cheers,

Bernard

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Jeff Squyres
> Sent: Wednesday, January 26, 2005 11:44
> To: OSCAR-devel
> Subject: Re: [Oscar-devel] ODA password
> 
> I think it's mainly a "we should do a reasonable job with security" 
> philosophy, simply because we can.  Put differently: there's no reason
> *not* to have a password, so why not have one?
> 
> Yes, root can always screw up anything.  But that's not the 
> point here. 
>   We have the ability to make the database [slightly] more 
> secure, so why not do it?
> 
> My $0.02.
> 
> I don't have any strong feelings as to whether the user is 
> prompted for this password or whether it's always randomly generated.
> 
> 
> On Jan 26, 2005, at 11:28 AM, Bernard Li wrote:
> 
> > Well - you must be root when you install the cluster, so root by 
> > default
> > has access to all the MySQL databases anyways, so why is 
> the password
> > necessary?  It's not like when you use the mysql client it 
> asks you for
> > the password...
> >
> > You probably don't want users to be able to mess with the oscar 
> > database
> > though, but since it was created by root, I don't think they have
> > access?
> >
> > Cheers,
> >
> > Bernard
> >
> >> -----Original Message-----
> >> From: Lombard, David N [mailto:[EMAIL PROTECTED]
> >> Sent: Wednesday, January 26, 2005 11:21
> >> To: Bernard Li; OSCAR-devel
> >> Subject: RE: [Oscar-devel] ODA password
> >>
> >> Yup.  I *always* choose "Random password" and have never
> >> otherwise dealt with it.
> >>
> >> I don't know why we just don't do that automagically and
> >> ditch the dialog.
> >>
> >> --
> >> David N. Lombard
> >>
> >> My comments represent my opinions, not those of Intel Corporation.
> >>
> >>> -----Original Message-----
> >>> From: [EMAIL PROTECTED] [mailto:oscar-devel-
> >>> [EMAIL PROTECTED] On Behalf Of Bernard Li
> >>> Sent: Wednesday, January 26, 2005 11:18 AM
> >>> To: OSCAR-devel
> >>> Subject: [Oscar-devel] ODA password
> >>>
> >>> Can someone hit me with a cluebat as to why we need to
> >> password protect
> >>> the ODA database?
> >>>
> >>> Thanks,
> >>>
> >>> Bernard
> >>>
> >>>
> >>> -------------------------------------------------------
> >>> This SF.Net email is sponsored by: IntelliVIEW --
> >> Interactive Reporting
> >>> Tool for open source databases. Create drag-&-drop reports.
> >> Save time
> >>> by over 75%! Publish reports on the web. Export to DOC, XLS,
> >> RTF, etc.
> >>> Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> >>> _______________________________________________
> >>> Oscar-devel mailing list
> >>> [email protected]
> >>> https://lists.sourceforge.net/lists/listinfo/oscar-devel
> >>
> >
> >
> > -------------------------------------------------------
> > This SF.Net email is sponsored by: IntelliVIEW -- 
> Interactive Reporting
> > Tool for open source databases. Create drag-&-drop reports. 
> Save time
> > by over 75%! Publish reports on the web. Export to DOC, 
> XLS, RTF, etc.
> > Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> > _______________________________________________
> > Oscar-devel mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/oscar-devel
> >
> 
> -- 
> {+} Jeff Squyres
> {+} [EMAIL PROTECTED]
> {+} http://www.lam-mpi.org/
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: IntelliVIEW -- Interactive 
> Reporting
> Tool for open source databases. Create drag-&-drop reports. Save time
> by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
> Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> _______________________________________________
> Oscar-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/oscar-devel
> 


-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Oscar-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/oscar-devel

Reply via email to