How can i know the admin userpassword

julian

Hahaha -- that's a good point. I don't exactly like how it's hardcoding the first user at all... but for lack of a better option, I went ahead and did it that way.

Personally, I dislike how some CMSs (not naming names) auto-create an admin user, but it's always "admin", so it's very easy to attempt brute-forcing the password.

Michael Draper

I agree with Julian.

I would even go further to say that /admin as a route to the admin controllers leaves some security to be desired. It's the first url they'll go after/try to hack.

If this were configurable, it would make things more secure, but might add some maintenance concerns, and might be challenging to implement at this stage in development.

For instance, I will probably manually rename the /admin controllers to /cmd or something different (pretty much anything other than admin).

aaron

Hi, I just got set up and am trying to log in as the admin and it doesn't give me access.

I called flushall on the database, restarted both the redis and node servers, and logged in as a user. But when I visit http://localhost:4567/admin, my access is denied.

What do I do? Thanks!

julian

When you run node app --setup, you set up the administrative user there.

Once you run your NodeBB, log in as that user first, and then you can access /admin

aaron

Thanks! That worked.

Speaking of the setup process, do I need to install imagemagic? I keep getting warnings about it. If so, how do I do that?

julian

sudo apt-get install imagemagick

aaron

sudo apt-get install imagemagick

That doesn't work for me. I've been meaning to ask about that too. My mac doesn't know the apt-get command. How do I change that or is there another way to install these things?

finid

@aaron

"apt-get" is a Linux (Debian/Ubuntu) command, so it won't work on your Mac.

BarveyHirdman

@aaron You can either use Homebrew or MacPorts, whatever floats your boat.

If you're familiar with them you can just use

port install imagemagick
# OR
brew install imagemagick

If you don't have either of those installed, check their web:
http://brew.sh/
http://www.macports.org/

Nicekiwi

hey, so I just did a fresh install. Registered a user and get a 403 Permission denied error when I access /admin?

frissdiegurke

@Ezra-Sharp This is a (relative to NodeBBs lifetime) very old thread
As far I remember of my last installation a secret had to be given while setup (afterwards editable within config.json) and username was admin, but I may be wrong.

Nicekiwi

Yeah, the code in the mongo specific setup for nodebb is currently wrong. thats why Im having issues