Security

Managing Users and Passwords

The default security configuration uses a property file located at DDF_HOME/etc/user.properties to store users and passwords.

The default Web Administration Console user is "admin" with a password of "admin". Change this password to a more secure password by editing this file.

Format: 
USER=PASSWORD,ROLE1,ROLE2,....

Current default:
admin=admin,admin

Enable Password Encryption

In the DDF Text Console enter the following commands:

ddf@local> config:edit --force org.apache.karaf.jaas
ddf@local> config:propset encryption.enabled true
ddf@local> config:update 
ddf@local> dev:restart

The passwords will then be encrypted in the users.properties file once DDF restarts.

Passwords displayed in the admin console

A system administrator must ensure to block visual access to the screen when administering passwords for particular components such as the OpenSearch Source. This is a known issue and will be addressed in a future version of DDF.