An superuser is unconditionally created on startup #160
Labels
awaiting answer
There is still some open discussion.
bug
This issue describes a confirmed bug.
pr
There is a PR targeting this issue.
It is not possible to skip the creation of a superuser. The logic can be seen here.
The documentation says the following:
SUPERUSER_*: Only define those variables during the initial setup, and drop them once the DB is set up. Don't use the default passwords!
This is potentially dangerous, because if you did change SUPERUSER_NAME to something other than admin, and after the first run removed all the SUPERUSER_ options, a new superuser named admin would be created.
I think the best solution is to just skip the creation of the superuser if the required SUPERUSER_ variables are not set. When using LDAP auth, it doesn't really make sense to have a statically defined superuser.
The text was updated successfully, but these errors were encountered: