sec(glauth): rotate serviceaccount passsha256; scrub retired plaintext from comments (mxaccessgw SEC-36)

2026-08-07 09:18:05 -04:00
parent 5198d3dc7f
commit aada53b27a
3 changed files with 14 additions and 9 deletions
@@ -1,7 +1,8 @@
 # Shared dev GLAuth for OtOpcUa + MxAccessGateway + ScadaBridge.
 # Deploy on the shared Docker host 10.100.0.35:  docker compose up -d
 # Verify:  ldapsearch -x -H ldap://10.100.0.35:3893 \
-#            -D cn=serviceaccount,dc=zb,dc=local -w serviceaccount123 \
+#            -D cn=serviceaccount,dc=zb,dc=local -w '<service-account-password>' \
+#          (serviceaccount password is rotated out-of-band — SEC-36 — and is not recorded here)
 #            -b dc=zb,dc=local "(cn=multi-role)" memberOf
 name: zb-shared-glauth
 services: