You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@mesos.apache.org by "Joerg Schad (JIRA)" <ji...@apache.org> on 2016/04/07 21:53:25 UTC

[jira] [Comment Edited] (MESOS-5027) Enable authenticated login in the webui

    [ https://issues.apache.org/jira/browse/MESOS-5027?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15230921#comment-15230921 ] 

Joerg Schad edited comment on MESOS-5027 at 4/7/16 7:53 PM:
------------------------------------------------------------

I tested a number of browser (chrome, firefox, safari) and all of them generate a default login popup automatically (see screenshot).
After adding your credentials, the browser will reuse that for subsequent requests so you only have to login once for a session (or until the timeout -browser specific > 15min- is up).
Please note this only holds for Basic Auth.



was (Author: js84):
I tested a number of browser (chrome, firefox, safari) and all of them generate a default login popup automatically (see screenshot).
After adding your credentials, the browser will reuse that for subsequent requests so you only have to login once for a session (or until the timeout -browser specific > 15min- is up).


> Enable authenticated login in the webui
> ---------------------------------------
>
>                 Key: MESOS-5027
>                 URL: https://issues.apache.org/jira/browse/MESOS-5027
>             Project: Mesos
>          Issue Type: Improvement
>          Components: master, security, webui
>            Reporter: Greg Mann
>              Labels: mesosphere, security
>             Fix For: 0.29.0
>
>         Attachments: Screen Shot 2016-04-07 at 21.02.45.png
>
>
> The webui hits a number of endpoints to get the data that it displays: {{/state}}, {{/metrics/snapshot}}, {{/files/browse}}, {{/files/read}}, and maybe others? Once authentication is enabled on these endpoints, we need to add a login prompt to the webui so that users can provide credentials.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)