View Issue Details

IDProjectCategoryView StatusLast Update
0010025Talermerchant backendpublic2025-05-27 16:44
ReporterFlorian Dold Assigned ToFlorian Dold  
PrioritynormalSeveritytweakReproducibilityhave not tried
Status assignedResolutionopen 
Product Version1.0 
Target Versionpost-1.0 
Summary0010025: merchant backend blocks creation of admin instance when another instance has been created
DescriptionIt's currently/unexpectedly possible to create a non-admin instance before the admin instance has been configured.

It's very difficult to get out of this situation, since taler-merchant-passwd doesn't work if the instance hasn't been created in the first place. Only option to fix this is to purge the instance and re-create everything.

We should avoid getting into this in the first place, either by:
(a) disallowing the creation of a non-admin instance before the admin instance has been configured
(b) still allowing the admin instance to be created if other instances have been created
TagsNo tags attached.

Activities

Christian Grothoff

2025-05-27 09:03

manager   ~0025016

Eh, that was actually seen as a feature: create a non-admin instance to enforce single-instance use, or delete your admin account to lock down a system and prevent direct interference with instances via the admin account. Maybe we should document this more, but I consider this not a bad feature to have!

Florian Dold

2025-05-27 16:44

manager   ~0025025

Problem is: This is a state that we can't recover from. It IMO should always be possible to change easily the admin credentials when you have root on the server.

=> As discussed offline, taler-merchant-passwd should simply create a (dummy, unconfigured) admin instance so that the admin password can be set.

Issue History

Date Modified Username Field Change
2025-05-26 19:24 Florian Dold New Issue
2025-05-27 09:03 Christian Grothoff Note Added: 0025016
2025-05-27 09:03 Christian Grothoff Severity minor => tweak
2025-05-27 09:03 Christian Grothoff Status new => acknowledged
2025-05-27 09:03 Christian Grothoff Product Version => 1.0
2025-05-27 09:03 Christian Grothoff Target Version 1.0 stretch goals => post-1.0
2025-05-27 16:44 Florian Dold Note Added: 0025025
2025-05-27 16:44 Florian Dold Assigned To => Florian Dold
2025-05-27 16:44 Florian Dold Status acknowledged => assigned