View Issue Details

IDProjectCategoryView StatusLast Update
0010025Talermerchant backendpublic2025-06-05 00:22
ReporterFlorian Dold Assigned To 
PrioritynormalSeveritytweakReproducibilityhave not tried
Status confirmedResolutionopen 
Product Version1.0 
Target Versionpost-1.0 
Summary0010025: merchant backend blocks creation of admin instance when another instance has been created
DescriptionIt's currently/unexpectedly possible to create a non-admin instance before the admin instance has been configured.

It's very difficult to get out of this situation, since taler-merchant-passwd doesn't work if the instance hasn't been created in the first place. Only option to fix this is to purge the instance and re-create everything.

We should avoid getting into this in the first place, either by:
(a) disallowing the creation of a non-admin instance before the admin instance has been configured
(b) still allowing the admin instance to be created if other instances have been created
Tagsux

Activities

Christian Grothoff

2025-05-27 09:03

manager   ~0025016

Eh, that was actually seen as a feature: create a non-admin instance to enforce single-instance use, or delete your admin account to lock down a system and prevent direct interference with instances via the admin account. Maybe we should document this more, but I consider this not a bad feature to have!

Florian Dold

2025-05-27 16:44

manager   ~0025025

Problem is: This is a state that we can't recover from. It IMO should always be possible to change easily the admin credentials when you have root on the server.

=> As discussed offline, taler-merchant-passwd should simply create a (dummy, unconfigured) admin instance so that the admin password can be set.

Issue History

Date Modified Username Field Change
2025-05-26 19:24 Florian Dold New Issue
2025-05-27 09:03 Christian Grothoff Note Added: 0025016
2025-05-27 09:03 Christian Grothoff Severity minor => tweak
2025-05-27 09:03 Christian Grothoff Status new => acknowledged
2025-05-27 09:03 Christian Grothoff Product Version => 1.0
2025-05-27 09:03 Christian Grothoff Target Version 1.0 stretch goals => post-1.0
2025-05-27 16:44 Florian Dold Note Added: 0025025
2025-05-27 16:44 Florian Dold Assigned To => Florian Dold
2025-05-27 16:44 Florian Dold Status acknowledged => assigned
2025-06-05 00:22 Christian Grothoff Assigned To Florian Dold =>
2025-06-05 00:22 Christian Grothoff Status assigned => confirmed
2025-06-05 00:22 Christian Grothoff Tag Attached: ux