Christian Fries created ZEPPELIN-2588:
-----------------------------------------

             Summary: Improve shiro.ini.template
                 Key: ZEPPELIN-2588
                 URL: https://issues.apache.org/jira/browse/ZEPPELIN-2588
             Project: Zeppelin
          Issue Type: Bug
            Reporter: Christian Fries


The shiro.ini file may needs some small improvements:

  - The comment at the end {code}# To enfore security, comment the line below 
and uncomment the next one{code} is unclear/outdated.
  - The default definitions for the admin user should be commented out to 
prevent accidental providing login under a default password. The current 
sections read
{code}
[users]
# List of users with their password allowed to access Zeppelin.
# To use a different strategy (LDAP / Database / ...) check the shiro doc at 
http://shiro.apache.org/configuration.html#Configuration-INISections
admin = password1, admin
user1 = password2, role1, role2
user2 = password3, role3
user3 = password4, role2
{code}



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to