Byzantium/Byzantium — Issue #82: Change service passwords in MySQL server.
Author: virtadpt
Created: 2012-01-17 02:10:02+00:00
State: open
Labels: Feature request, System services

Some applications built into Byzantium use MySQL databases to store data. Each application has its own account and associated passphrase to segregate access to the databases. A problem with this is that the passwords to those accounts are well-known due to the fact that they're hardcoded into /etc/rc.d/rc.setup_mysql and the configuration files of the applications. Anyone can download a copy of Byzantium, boot it up, and go poking around in there for the passwords.

We need to add functionality that, if persistent data storage isn't detected on a node, pseudorandomly generates new passphrases for those accounts and sets them in the MySQL database server. It also then needs to edit the applications' configuration files so that the new passphrases are used to access their respective databases.