Tag Archives: password

Infrastructure Anti-pattern: Death by a Thousand Passwords


December 20, 2010 By Tim O'Brien

I’ve had the opportunity to see many development environments: from the mature organization with tens of thousands of developers that can afford to spend millions on dedicated infrastructure teams, to the three person start-up lacking something as simple as source control.  This series of posts discusses some of the common anti-patterns in development infrastructure that are relevant regardless of team size or approach.   It also provides some hints for how to avoid these problems.

Problem/Anti-pattern: Too Many Logins

No matter how mature your process is, I’ve always found credentials to be especially difficult for a new hire.   It takes days, and then, even when you think you’ve created all of the necessary passwords, there are those other systems that jump up from out of nowhere.

“Do you have a login for Subversion?  No.  Talk to Tom about that?   How about JIRA?  I’m not sure who setup JIRA, let me check on that.   Ok, we have this VPN, and you are going to need to get those credentials in order to check your email which, unfortunately, is a whole different set of passwords.”

The first few days of employment are meeting people, downloading Gigabytes of software, and remembering an encyclopedia of passwords. Some of these password might be managed by HR, others are managed by your Technology department, but this post focuses on those credentials that affect development infrastructure.  If your development infrastructure is mature, your organization might solve this by consolidating authorization and access control information on an LDAP server or Atlassian’s Crowd.  If you don’t use one of these products, then you are dealing with an expanding constellation of moving parts: JIRA, Subversion, GitHub, Basecamp, Bugzilla, Confluence, Twiki, Matrix, CruiseControl, etc.

Continue reading