From 067ed4448a65569f1bf43b2848a08878fc4377d0 Mon Sep 17 00:00:00 2001 From: Thomas Markwalder Date: Mon, 30 Jun 2025 09:58:33 -0400 Subject: [PATCH] [#3848] Remove user from default agent file modified: src/bin/keactrl/kea-ctrl-agent.conf.pre --- src/bin/keactrl/kea-ctrl-agent.conf.pre | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/src/bin/keactrl/kea-ctrl-agent.conf.pre b/src/bin/keactrl/kea-ctrl-agent.conf.pre index 29d81111b0..71cbc80753 100644 --- a/src/bin/keactrl/kea-ctrl-agent.conf.pre +++ b/src/bin/keactrl/kea-ctrl-agent.conf.pre @@ -27,9 +27,10 @@ "http-port": 8000, // Allow access only to kea-api user. - // To make it work, please store your password in kea-api-password file. - // Make sure the password file has sufficiently restrictive access - // permissions, in particular it is not world-readable. + // To make it work, please store your user name in kea-api-user file. + // and store your password in kea-api-password file. + // Make sure the user and password files have sufficiently restrictive + // access permissions, in particular it is not world-readable. // The basic HTTP auth offers poor security for unencrypted channels. // If possible, a better, stronger HTTPS mechanism should be deployed, // in particular when the client authentication is enabled by setting the @@ -42,7 +43,7 @@ "directory": "/etc/kea", "clients": [ { - "user": "kea-api", + "user": "kea-api-user", "password-file": "kea-api-password" } ]