Skip to content

DOC-353 Add article for password rotation #1051

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Nov 2, 2020

Conversation

bmansheim
Copy link
Contributor

No description provided.

@bmansheim bmansheim added enhancement Additional information or functionality next version New feature for the next version labels Sep 30, 2020
@bmansheim bmansheim added feature New feature in the product and removed enhancement Additional information or functionality next version New feature for the next version labels Oct 1, 2020
@bmansheim bmansheim added this to the 6.0.12 milestone Oct 1, 2020
@bmansheim
Copy link
Contributor Author

@AlonMagrafta Please review.

Copy link
Contributor

@AlonMagrafta AlonMagrafta left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks very good! Two thing that are important to mentions (one "note" the second "warning").
The Note -
RS users can access to the management API+UI and/or the DB connection - depending on their role.
When setting multiple passwords, it applies to all connections (API/UI and DB connections).

Warning - if you have a user with multiple passwords and you set a new password via the UI - it will override all the previous ones (-i.e. delete all the existing and add the new as a single new password).

@banker

This comment has been minimized.

@bmansheim
Copy link
Contributor Author

bmansheim commented Oct 19, 2020

@AlonMagrafta

The Note -
RS users can access to the management API+UI and/or the DB connection - depending on their role.
When setting multiple passwords, it applies to all connections (API/UI and DB connections).

Isn't this obvious? Is there a way to give a user a password for the UI/API and a different password for the data?

Or are you just saying that we need to highlight that the user can authenticate to the UI/API with any of the passwords?

@AlonMagrafta
Copy link
Contributor

It is obvious to us, but the field hasn't been fully used to the two kinds of permissions and it is my feeling it something worth pointing out at this time :)

@bmansheim bmansheim changed the base branch from master to 6.0.12-features November 2, 2020 09:42
@bmansheim bmansheim merged commit 85763b9 into 6.0.12-features Nov 2, 2020
@bmansheim bmansheim deleted the DOC-353-multiple-passwords branch November 2, 2020 09:43
bmansheim pushed a commit that referenced this pull request Jan 10, 2021
bmansheim pushed a commit that referenced this pull request Jan 10, 2021
bmansheim pushed a commit that referenced this pull request Jan 10, 2021
* DOC-355 Module dependency installation not required (#1070)

* DOC-239 Add ports for internode encryption (#1053)

* DOC-353 Add article for password rotation (#1051)

* DOC-354 Disable services to save resources (#1074)

* Updates to disabling services based on feedback

* Updates to password rotation based on feedback

* Removed extra RS mentions

* Rewrite new password requirements

* DOC-352 Replace NGINX with Envoy (#1052)

* Add procedure for adding module with REST API (#1164)

* Fix broken build

* Add reference to /v2/modules in redisgears installation

* DOC-442 Add 6.0.12 release notes (#1176)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature New feature in the product
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants