[Hawkular-dev] Default user, or alternative realm file?

[Juraci Paixão Kröhling]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

Alexandre (and others) asked about the possibility of adding a default
user on Keycloak for the Hawkular realm.

While adding a default user with the requirement of changing the
password on the first login is a possibility, I'd rather have an
alternative realm file to import during first boot.

This means: a dev (or user) have to actively copy this JSON file into
standalone/configuration in order to have a default user.

The idea is that we wouldn't ship with a default username/password on
the main distribution. Having a default username is usually not
recommended from the security perspective, as it's half of the
information required to login with super power rights (and you would
be surprised to know how many admins set their passwords to "admin").

Given these two alternatives, which one would you prefer? Voting is
open and I'll take the results on Monday 9am CET (08:00 UTC).

[ ] Default user on the main realm JSON file that will ship with Kettle
[ ] Alternate JSON realm file with a default user, which can be copied
over the default JSON realm file.

- - Juca.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJVAGy2AAoJECKM1e+fkPrXIkMH/jyS4BIJCpcIntF12G6+Ofai
IaxuopgbS6rDqNnemABBQhb14Kd1mJelAz8/xnyFQsjHtzV3BZr4cqJqgC4vMpkX
cuCQWqmz5v3nTFsoxYjFXNMK2FR/K6srG/N95eg0/vO+pXVOmC5Fy8FSE1h2cUmh
9yL1Zd8hR28xV8JDQgnRulmAsE4INY3QhpzaBpVnJczZKSsM54Hq4mDEQx5Wmr+i
k1PE9sdcysoWXmjqHSpR4cG4HNHKZXkbaBWubpaFzrI40ZkGiYVg5Vg//LqPtvQe
G16+/HNo4cgUw0HBbiVUvcXTRE3k2y/UFWVw9laQxZrAadl9Byr/7B4PnRcZxEw=
=G8QS
-----END PGP SIGNATURE-----