change the admin username?

Got an idea? Missing something? Post your feature request here.

Moderator: moderators

change the admin username?

Postby mattski » Tue Aug 15, 2017 5:06 am

I'd like to be able to change the main username from "admin" to something else. It seems to me that it's an awfully big security hole to be going around with a username everyone knows. All someone has to do is crack the password alone and they've got the keys to the kingdom.
mattski
 
Posts: 2
Joined: Tue Aug 15, 2017 4:19 am

Re: change the admin username?

Postby grant420 » Thu Jan 04, 2018 10:44 pm

Can't you simply not allow any players to use the admin account and instead point them to new account(s) you create?
grant420
 
Posts: 49
Joined: Fri Apr 08, 2011 8:07 pm

Re: change the admin username?

Postby toolman » Sat Jan 06, 2018 10:39 am

@ mattski: +1. It's impossible to delete rename or disable the admin account and that is indeed a security issue.
@ grant420: Even if you don't use the admin account, it still stays active. So any potential hacker already knows one username. If the password you assigned to the admin account isn't really very strong you are in risk of being hacked. And please don't say that that's very unlikely. I had to block almost all ip-adresses from China because my Subsonicserver was under contstant attack from hackers originating from that country.
Just to state my case; Here is a snippet from my logfile:
[6-1-18 13:26:43 CET] INFO LoginFailureLogger Login failed for [admin] from [61.178.18.191]
[6-1-18 13:51:22 CET] INFO LoginFailureLogger Login failed for [admin] from [23.234.8.52]
toolman
 
Posts: 537
Joined: Fri Dec 11, 2009 4:18 pm
Location: Netherlands


Return to Feature Requests

Who is online

Users browsing this forum: No registered users and 9 guests