Security Question around the Default User

[David Torre, modificado hace 12 años.]

Greetings.

I'm writing a security hardening guide for Liferay, and noticed that the default install has a user named "[e-mail]" with a password of "password" and passwordEncrypted = 0 in the SQL DB. I verified that the user cannot login using said credentials, but now I'm kind of curious as to why? Is it due to some internal code that prevents an interactive login from this user?

Also, is it safe to completely remove this row in the SQL DB?


Kind regards,

[Mika Koivisto, modificado hace 12 años.]

Default user can never login and no it's not safe to delete any rows from the DB directly.