janhoy commented on PR #4520: URL: https://github.com/apache/solr/pull/4520#issuecomment-4668496262
One possible issue with enforcing this check is that existing installs may have custom users with user==pass already, and they would need to change their password **before** upgrade to avoid being locked out from their user account. Perhaps not a major risk, as this will be caught early on in testing. But it is for sure a back-compat break (in the name of security) that will affect users. So they may need to reset user passwords directly in zookeeper or with a super-user account that is not locked out. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
