You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ignite.apache.org by "Chinmaya D (Jira)" <ji...@apache.org> on 2021/11/30 16:08:00 UTC

[jira] [Created] (IGNITE-16029) Ignite isn't allowing to drop the default super user created for REST API Authentication

Chinmaya D created IGNITE-16029:
-----------------------------------

             Summary: Ignite isn't allowing to drop the default super user created for REST API Authentication
                 Key: IGNITE-16029
                 URL: https://issues.apache.org/jira/browse/IGNITE-16029
             Project: Ignite
          Issue Type: Bug
            Reporter: Chinmaya D
         Attachments: ignite_superuser-drop-error.JPG

Hi,

Was trying to create a new user as part of enabling user authentication with Ignite core v2.11.0 which am planning to use for connections via Ignite REST APIs.

 

As per [this doc|https://ignite.apache.org/docs/latest/security/authentication] - am able to successfully create and alter new / existing user.  After  creating new user account, the idea was to drop the default superuser account ("ignite") which gets created on the cluster startup.

 

As the default superuser creds  are readable and easily accessible by anybody, so we would need to drop the user for security concerns.  I understand currently, Ignite do not provide options with restricted roles per account, etc. but the dropping of super-user should have been allowed.

Attached image with the error message - for your reference.

 

Could you suggest a better way of addressing this issue, if not what am trying? Thanks!



--
This message was sent by Atlassian Jira
(v8.20.1#820001)