Tim Vernum 734a4ee66d Prevent default passwords in production mode (elastic/elasticsearch#4724) ... Adds a new `xpack.security.authc.accept_default_password` setting that defaults to `true`. If it is set to false, then the default password is not accepted in the reserved realm. Adds a bootstrap check that the above setting must be set to `false` if security is enabled. Adds docs for the new setting and bootstrap. Changed `/_enable` and `/_disable`, to store a blank password if the user record did not previously exist, which is interpreted to mean "treat this user as having the default password". The previous functionality would explicitly set the user's password to `changeme`, which would then prevent the new configuration setting from doing its job. For any existing reserved users that had their password set to `changeme`, migrates them to the blank password (per above paragraph) Closes: elastic/elasticsearch#4333 Original commit: elastic/x-pack-elasticsearch@db64564093		2017-02-08 16:19:55 +11:00
..
java/org/elasticsearch/upgrades	Remove exception from client suite	2016-12-22 09:10:42 -05:00
resources/rest-api-spec/test	Prevent default passwords in production mode (elastic/elasticsearch#4724)	2017-02-08 16:19:55 +11:00