Couchbase Server

Add server accepts incorrect password for uninitialized node

Details

  • Type: Bug Bug
  • Status: Open Open
  • Priority: Minor Minor
  • Resolution: Unresolved
  • Affects Version/s: 2.0, 2.0.1, 2.0.2
  • Fix Version/s: 2.1
  • Component/s: ns_server
  • Security Level: Public
  • Labels:
    None

Description

If I click add server from the server-nodes tab in the UI to add a new server, it ignores the password I added if I tried to add an unitialized node to the cluster.

If the password doesn't match whats set for the node it should give me an error message telling me that the password is incorrect.

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Perry Krug added a comment -
If the node is uninitialized, it doesn't have a password right? I use this functionality to my advantage when having to add multiple nodes to a cluster. If I don't set any password on the incoming nodes it's very easy to add then from within a cluster. What's your take on needing the password to be rejected? IIRC, when a password *is* set on a new node, that makes it initialized and then you have to supply the right password to bring it into a cluster. Is that not the behavior?
Show
Perry Krug added a comment - If the node is uninitialized, it doesn't have a password right? I use this functionality to my advantage when having to add multiple nodes to a cluster. If I don't set any password on the incoming nodes it's very easy to add then from within a cluster. What's your take on needing the password to be rejected? IIRC, when a password *is* set on a new node, that makes it initialized and then you have to supply the right password to bring it into a cluster. Is that not the behavior?
Hide
Permalink
Trond Norbye added a comment -
That means that the password for the node is empty. It seems conceptually wrong to allow an incorrect password when the node isn't initialized (in your case you should leave the password field empty and everything work as you would have expected it).

Its like if you create a user on your OS with an empty password logging in with a password will fail. Why should we behave differently?
Show
Trond Norbye added a comment - That means that the password for the node is empty. It seems conceptually wrong to allow an incorrect password when the node isn't initialized (in your case you should leave the password field empty and everything work as you would have expected it). Its like if you create a user on your OS with an empty password logging in with a password will fail. Why should we behave differently?

People

  • Assignee:
    Aleksey Kondratenko
    Reporter:
    Trond Norbye
Vote (0)
Watch (2)

Dates

  • Created:
    Updated: