Default password removal
Methods and systems for starting a node without a default password are provided. Exemplary methods include: creating a node responsive to indicia received from a user; checking for an existing keystore in the node; when no existing keystore is in the node: generating a seed password for a predefined user of the node; non-persistently providing the seed password to the user; creating an encrypted keystore in the node; and storing the seed password in the encrypted keystore; and allowing access to the node using the built-in user and seed password.
1. A computer-implemented method for starting a node without a default password comprising:
creating a node responsive to instructions received from a user, without a default password, the node being a physical or virtual computing device that is a part of a cluster, the node being configured to participate in indexing and searching capabilities of the cluster;
checking for an existing keystore in the node;
when no existing keystore is in the node:
generating a seed password for a built-in user account of the node;
non-persistently providing the seed password to the user;
creating an encrypted keystore in the node; and
storing the seed password in the encrypted keystore;
allowing access to the node using the built-in user account and the seed password;
receiving a new password for a predefined user from the user or another user; and
storing the new password in the encrypted keystore.
2. The computer-implemented method of claim 1 , wherein creating the node includes at least one of: setting a name for the node and configuring the node to see other nodes in a cluster, the node being a part of the cluster.
3. The computer-implemented method of claim 2 , wherein the seed password is randomly generated.
4. The computer-implemented method of claim 3 , wherein the seed password is randomly generated using a cryptographically secure pseudo-random number generator.
5. The computer-implemented method of claim 1 , wherein the encrypted keystore is encrypted using at least one of: Triple DES, RSA, Blowfish, Twofish, and Advanced Encryption Standard (AES).
6. The computer-implemented method of claim 1 , wherein the node is at least one of a master node and data node.
7. The method of claim 1 , further comprising authenticating the user by the node using the built-in user account and the seed password.
8. A system comprising:
a processor; and
a memory communicatively coupled to the processor, the memory storing instructions executable by the processor to perform a method for starting a node without a default password, the method comprising:
creating a node responsive to instructions received from a user, without a default password, the node being a physical or virtual computing device that is a part of a cluster, the node being configured to participate in indexing and searching capabilities of the cluster;
checking for an existing keystore in the node;
when no existing keystore is in the node:
generating a seed password for a built-in user account of the node;
non-persistently providing the seed password to the user;
creating an encrypted keystore in the node; and
storing the seed password in the encrypted keystore;
allowing access to the node using the built-in user account and the seed password;
receiving a new password for a predefined user from the user or another user; and
storing the new password in the encrypted keystore.
9. The system of claim 8 , wherein creating the node includes at least one of: setting a name for the node and configuring the node to see other nodes in a cluster, the node being a part of the cluster.
10. The system of claim 8 , wherein the seed password is randomly generated.
11. The system of claim 10 , wherein the seed password is randomly generated using a cryptographically secure pseudo-random number generator.
12. The system of claim 8 , wherein the encrypted keystore is encrypted using at least one of: Triple DES, RSA, Blowfish, Twofish, and Advanced Encryption Standard (AES).
13. The system of claim 8 , wherein the node is at least one of a master node and data node.
14. A system comprising:
means for creating a node responsive to instructions received from a user, the node being a physical or virtual computing device that is a part of a cluster, the node being configured to participate in indexing and searching capabilities of the cluster;
means for checking for an existing keystore in the node;
when no existing keystore is in the node:
means for generating a seed password for a built-in user account of the node;
means for non-persistently providing the seed password to the user;
means for creating an encrypted keystore in the node; and
means for storing the seed password in the encrypted keystore;
means for allowing access to the node using the built-in user account and the seed password;
means for receiving a new password for a predefined user from the user or another user; and
means for storing the new password in the encrypted keystore.