[kune-devel] [Kune's installation] INSTALL instructions for DB creation and Developer's Guide issues

Roberto Aragón robarago at gmail.com
Thu Sep 1 11:36:19 CEST 2011


Hello everybody:

I would like to propose to add some kind of explanation in kune/INSTALL
file concerning database passwords. This file says that database
passwords must be changed to something different than the placeholder
text "PUT_HERE_A_DB_PASSWD". This is the right thing (since passwords
are a very sensitive security concern), but no warning exists
explaining that database password must match the one in all these files
in order to start kune successfully:

 - src/main/resources/db/liquibase.properties
 - src/main/resources/META-INF/persistence.xml
 - script/liquibase-migrate.sh
 - script/liquibase-rollback.sh
 - pom.xml
 - src/main/webapp/WEB-INF/publicspace/config/database.yml

So, shouldn't be the best (insecure) way to create the database to use
the default ("db4kune") password?

Also, I found some problems with these project settings/dependencies:

 - .project and .classpath are included in SVN repo, but Developer's
   Guide asks to generate this by making "mvn eclipse:eclipse".
   Couldn't be this a little contradictory/dangerous?
 - AspectJ nature is not needed but included in SVN's ".project" file.
   Is there a good reason for this?

Thank you very much for your time, and please don't take this as an
urgent task, lets come back from holidays at a slooooow pace ;-)

Regards,
Roberto.



More information about the kune-devel mailing list