[kune-devel] [Kune's installation] INSTALL instructions for DB creation and Developer's Guide issues
Roberto Aragón
robarago at gmail.com
Thu Sep 1 11:36:19 CEST 2011
Hello everybody:
I would like to propose to add some kind of explanation in kune/INSTALL
file concerning database passwords. This file says that database
passwords must be changed to something different than the placeholder
text "PUT_HERE_A_DB_PASSWD". This is the right thing (since passwords
are a very sensitive security concern), but no warning exists
explaining that database password must match the one in all these files
in order to start kune successfully:
- src/main/resources/db/liquibase.properties
- src/main/resources/META-INF/persistence.xml
- script/liquibase-migrate.sh
- script/liquibase-rollback.sh
- pom.xml
- src/main/webapp/WEB-INF/publicspace/config/database.yml
So, shouldn't be the best (insecure) way to create the database to use
the default ("db4kune") password?
Also, I found some problems with these project settings/dependencies:
- .project and .classpath are included in SVN repo, but Developer's
Guide asks to generate this by making "mvn eclipse:eclipse".
Couldn't be this a little contradictory/dangerous?
- AspectJ nature is not needed but included in SVN's ".project" file.
Is there a good reason for this?
Thank you very much for your time, and please don't take this as an
urgent task, lets come back from holidays at a slooooow pace ;-)
Regards,
Roberto.
More information about the kune-devel
mailing list