Comment 2 for bug 741788

Revision history for this message
Galen Charlton (gmc) wrote :

> * At startup, the script should prompt the user to enter the
> password of the running user so it's not necessary to set the
> password via command line parameter.

Good idea, but note that the command line parameter is still needed as an alternative to entering the password, as otherwise it would be difficult to have Evergreen services start up fully automatically upon boot. Would be a good idea to double check whether the password gets masked in a process listing.

A bonus project (which probably should be the topic of a separate bug) would be to create a way for command-line scripts that need to authenticate as staff users to do so securely without requiring that the admin password be entered in configuration files or boot scripts. On the other hand, since if you have shell access to an Evergreen server as the opensrf user, you also have the full database connection information, that may be overkill.