Comment 1 for bug 1792979

Revision history for this message
Richard Harding (rharding) wrote :

This is by design. When you first bootstrap the admin user hasn't provided any password details. If a password is set it should not be recorded where it could be reached. It's now a "something you know" part of security and so it's like other services when you submit a username and a password it's not documented and must be something that you know.

Best practice would be to create new user accounts for different users and grant them superuser access so that they behave as admin users but have unique accounts that can be audited individually.