Hi Luigi,

First thank you very much for implementing debian best practice with
dbconfig-common for drupal.

The bug is not limited to multi site installations. If
'dpkg-reconfigure drupal6' is used to re-configure a single
installation for a new, different database with a new, different user,
then the operator is not prompted for a new password. Instead the
password of the old configuration is copied silently to the new
configuration without any prompt whatsoever which is a security
breach.

I think it would be great if this bug could be fixed so that drupal
users can start taking advantage of debian best practices. At the
moment, users have to use manual methods as you say.

Once this bug is fixed, then dbconfig-common not only works as
expected for single sites, but it then supports multi site
installations out of the box with the additional manual step of
copying generated configuration from the default site to the target
site.

Best regards,

Bernard




--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to