which user and pwd to use