[MXS-3914] maxctrl command to display hash password (Useful for comparing passwords on different MaxScales) Created: 2021-12-14  Updated: 2022-11-10  Resolved: 2022-04-25

Status: Closed
Project: MariaDB MaxScale
Component/s: REST-API
Affects Version/s: None
Fix Version/s: N/A

Type: New Feature Priority: Minor
Reporter: Pramod Mahto Assignee: Todd Stoffel (Inactive)
Resolution: Won't Do Votes: 0
Labels: None


 Description   

Currently we have only option to list out the users with in Maxscale.

 
[root@c8_maxscale_01 ~]# maxctrl list users
┌───────────────┬──────┬────────────┐
│ Name          │ Type │ Privileges │
├───────────────┼──────┼────────────┤
│ maxscaleadmin │ inet │ basic      │
├───────────────┼──────┼────────────┤
│ admin         │ inet │ admin      │
└───────────────┴──────┴────────────┘

Currently we have only option to check the same from cat /var/lib/maxscale/passwd



 Comments   
Comment by markus makela [ 2022-04-25 ]

This would expose hashed passwords in an interface that uses those passwords and this doesn't sound like the most secure idea. Given that this is not something that is used very commonly, SSH'ing over to the server and looking at the file itself should be an adequate alternative.

Generated at Thu Feb 08 04:24:51 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.