-
Type: Improvement
-
Resolution: Unresolved
-
Priority: Unknown
-
None
-
Affects Version/s: None
-
Component/s: None
With the dashboard deprecated, we need a way to detect that ROS doesn't have an admin user and a way to create the first admin user from Realm Studio, just like the setup through the dashboard of ROS 1.x.
We should be careful how we do this. If ROS is functional without an admin user, people might not create one and an intruder might scan for vulnerable ROS installations that has not yet created an admin account.
Updated
When starting ros without keys and the userpassword service enabled it will create a temporary admin user (username "realm-admin" and an empty password). So this issue should ease the process of logging into ROS for the first time, creating a new administrative user (with a custom password) and deleting the realm-admin user.