Hey Jeff: 

> What do you mean it's not used?  I was under the impression 
> that it set the password on the mysql db and then stashed it 
> in a root-owned 0400 file in /etc somewhere, and then looked 
> in that file for all subsequent accesses to get the password.
> 
> I know that that's the way it *used* to be... if it has 
> changed, then it should be changed back.

Okay I took a look at the mysql.user table, and the password is set for
the 'oscar' user account (I keep thinking about root, since you can set
a password for the root user as well).

And yes, the password is stored in /etc/odapw and it is root readable.
This should be documented (if it is not already done so).

> > So perhaps we should simply implement
> > it such that the password is actually set in MySQL?
> >
> > To remove the prompt, perhaps we can simply randomly generate the 
> > password, and put it in a root-readable file.
> 
> As I said, I have no opinion on the UI issue.

Okay, I think we should just axe the dialog box and generate a random
password - and make sure that it is clearly stated in the docs and
possibly the prompt too that the password is located in /etc/odapw.

Cheers,

Bernard


-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Oscar-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/oscar-devel

Reply via email to