[rabbitmq-discuss] Silly Question...Delete Guest User?

[Chris Chew]

> -----Original Message-----
> From: Alexandru Scvorţov [mailto:scvalex at gmail.com] On Behalf Of Alexandru
> Scvortov
> Sent: Friday, October 01, 2010 1:41 PM
> To: Chris Chew
> Cc: RabbitMQ
> Subject: Re: [rabbitmq-discuss] Silly Question...Delete Guest User?
> 
> Hi Chris,
> 
> It depends on what you mean by safe.  There's certainly no harm in
> deleting guest and you'll probably want to do that eventually anyway,
> but you do need a user to connect to the broker.
> 
> All of our clients use username guest and password guest as defaults.
> 
> You can delete guest and, if you change your mind, you can re-add him
> with:
>    rabbitmqctl add_user guest guest
>    rabbitmqctl set_permission guest '.*' '.*' '.*'
> 
> Cheers,
> Alex

Thank you for the confirmation.  We are creating new users for the various systems connecting to our furry Rabbit, but wanted to delete guest in the interest of security.

I just first wanted to make sure there wasn't some hidden internal operational requirement on guest.

The admin guide (http://www.rabbitmq.com/admin-guide.html) advises changing the guest password, perhaps it would be more proper to say,

"It is advisable to delete the guest user or change the password to something private, particularly if your broker is accessible publicly."

Thanks!

Chris