You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pinot.apache.org by "spareslant (via GitHub)" <gi...@apache.org> on 2023/05/08 20:10:08 UTC
[GitHub] [pinot] spareslant opened a new issue, #10747: Basic Auth not working for other users
spareslant opened a new issue, #10747:
URL: https://github.com/apache/pinot/issues/10747
Hi,
I am running Pinot in my test environment. I am following this link to configure basic auth for a user called `pinotuser` : https://docs.pinot.apache.org/operators/tutorials/authentication-authorization-and-acls
This user is not able to login via controller UI.
### `./conf/pinot-controller.conf` file contents:
```
pinot.service.role=CONTROLLER
pinot.cluster.name=pinot-quickstart
pinot.zk.server=localhost:2191
pinot.set.instance.id.to.hostname=true
controller.vip.host=worker1.virtual.machine
controller.host=worker1.virtual.machine
controller.data.dir=/tmp/pinot/data/controller
controller.tls.keystore.path=/root/apache-pinot-0.12.0-bin/certs/pinot-keystore
controller.tls.keystore.password=pinot123
controller.tls.client.auth=false
controller.access.protocols=https
controller.access.protocols.https.port=10000
controller.broker.protocol=https
controller.vip.protocol=https
controller.vip.port=10000
controller.admin.access.control.principals=admin,pinotuser
controller.admin.access.control.principals.admin.password=admin123
controller.admin.access.control.principals.pinotuser.password=pinot123
controller.admin.access.control.factory.class=org.apache.pinot.controller.api.access.BasicAuthAccessControlFactory
controller.admin.access.control.principals.pinotuser.tables=transcript
controller.admin.access.control.principals.pinotuser.permissions=READ
```
## Start zookeeper
```
bin/pinot-admin.sh StartZookeeper -zkPort 2191
```
## Start Controller
```
bin/pinot-admin.sh StartController-configFileName ./conf/pinot-controller.conf
```
## Expected Output
Both `admin` and `pinotuser` should be able to login. But `pinotuser` is not able to login. `admin` user works fine. However if I comment or remove last two lines in above controller configuration then `pinotuser` is able to login. In fact leaving any of the last two lines in config will make `pinotuser` fail to login
## Additional Info
Pinot version: apache-pinot-0.12.0
java version:
```
openjdk version "11.0.3" 2019-04-16
OpenJDK Runtime Environment 18.9 (build 11.0.3+7)
OpenJDK 64-Bit Server VM 18.9 (build 11.0.3+7, mixed mode, sharing)
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
[GitHub] [pinot] navina commented on issue #10747: Basic Auth not working for other users
Posted by "navina (via GitHub)" <gi...@apache.org>.
navina commented on issue #10747:
URL: https://github.com/apache/pinot/issues/10747#issuecomment-1560244190
> Both admin and pinotuser should be able to login. But pinotuser is not able to login. admin user works fine
@apucher what is the expected behavior here?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
[GitHub] [pinot] INNOCENT-BOY commented on issue #10747: Basic Auth not working for other users
Posted by "INNOCENT-BOY (via GitHub)" <gi...@apache.org>.
INNOCENT-BOY commented on issue #10747:
URL: https://github.com/apache/pinot/issues/10747#issuecomment-1545016834
Hi @spareslant , you can reference this close pr https://github.com/apache/pinot/pull/10634 to allow both admin and common user to login.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
[GitHub] [pinot] spareslant commented on issue #10747: Basic Auth not working for other users
Posted by "spareslant (via GitHub)" <gi...@apache.org>.
spareslant commented on issue #10747:
URL: https://github.com/apache/pinot/issues/10747#issuecomment-1549824138
Thanks.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org