Enabling basic access authentication

[Douglas Nelson <it...@gmail.com>]

With marathon you can enable basic access authentication to the WebUI with
the flag --http_credentials.

I expected something similar with the flag --authenticate_http in mesos but
when I hit the WebUI I'm not prompted to give a username/pass. Is that
feature not included in mesos or is there a different configuration I need
to set?

Thanks!

Re: Enabling basic access authentication

[Vinod Kone <vi...@apache.org>]

We separated out the default authentication mode for read only (default: no
authn) and read-write (default: authn) endpoints. Since the webui only
depends on the read-only endpoints you need to explicitly enable authn for
read-only endpoints if you need authn. See
https://github.com/apache/mesos/blob/master/docs/upgrades.md for more
details.

On Mon, Aug 1, 2016 at 12:20 PM, Douglas Nelson <it...@gmail.com> wrote:

> It was working for me with mesos 1.0.0-rc2. Now that I made the switch to
> 1.0.0 the feature is missing for user/pass prompt at the WebUI. Was another
> flag added or was it decided that this feature wasn't necessary?
>
> On Tue, Jul 12, 2016 at 6:26 PM, Douglas Nelson <it...@gmail.com>
> wrote:
>
>> Ah, I missed that in the vote message. That makes sense. I'm running
>> version 0.28.2 so that would be why.
>>
>> On Tue, Jul 12, 2016 at 6:22 PM, Zhitao Li <zh...@gmail.com> wrote:
>>
>>> Just went through this: I think the necessary endpoint `/master/state`
>>> is only authenticated after 1.0.0, which is still going through release
>>> vote.
>>>
>>> Can you share which version of Mesos you are running?
>>>
>>> On Tue, Jul 12, 2016 at 5:18 PM, Douglas Nelson <it...@gmail.com>
>>> wrote:
>>>
>>>> With marathon you can enable basic access authentication to the WebUI
>>>> with the flag --http_credentials.
>>>>
>>>> I expected something similar with the flag --authenticate_http in mesos
>>>> but when I hit the WebUI I'm not prompted to give a username/pass. Is that
>>>> feature not included in mesos or is there a different configuration I need
>>>> to set?
>>>>
>>>> Thanks!
>>>>
>>>
>>>
>>>
>>> --
>>> Cheers,
>>>
>>> Zhitao Li
>>>
>>
>>
>

Re: Enabling basic access authentication

[Douglas Nelson <it...@gmail.com>]

It was working for me with mesos 1.0.0-rc2. Now that I made the switch to
1.0.0 the feature is missing for user/pass prompt at the WebUI. Was another
flag added or was it decided that this feature wasn't necessary?

On Tue, Jul 12, 2016 at 6:26 PM, Douglas Nelson <it...@gmail.com> wrote:

> Ah, I missed that in the vote message. That makes sense. I'm running
> version 0.28.2 so that would be why.
>
> On Tue, Jul 12, 2016 at 6:22 PM, Zhitao Li <zh...@gmail.com> wrote:
>
>> Just went through this: I think the necessary endpoint `/master/state` is
>> only authenticated after 1.0.0, which is still going through release vote.
>>
>> Can you share which version of Mesos you are running?
>>
>> On Tue, Jul 12, 2016 at 5:18 PM, Douglas Nelson <it...@gmail.com>
>> wrote:
>>
>>> With marathon you can enable basic access authentication to the WebUI
>>> with the flag --http_credentials.
>>>
>>> I expected something similar with the flag --authenticate_http in mesos
>>> but when I hit the WebUI I'm not prompted to give a username/pass. Is that
>>> feature not included in mesos or is there a different configuration I need
>>> to set?
>>>
>>> Thanks!
>>>
>>
>>
>>
>> --
>> Cheers,
>>
>> Zhitao Li
>>
>
>

Re: Enabling basic access authentication

[Douglas Nelson <it...@gmail.com>]

Ah, I missed that in the vote message. That makes sense. I'm running
version 0.28.2 so that would be why.

On Tue, Jul 12, 2016 at 6:22 PM, Zhitao Li <zh...@gmail.com> wrote:

> Just went through this: I think the necessary endpoint `/master/state` is
> only authenticated after 1.0.0, which is still going through release vote.
>
> Can you share which version of Mesos you are running?
>
> On Tue, Jul 12, 2016 at 5:18 PM, Douglas Nelson <it...@gmail.com>
> wrote:
>
>> With marathon you can enable basic access authentication to the WebUI
>> with the flag --http_credentials.
>>
>> I expected something similar with the flag --authenticate_http in mesos
>> but when I hit the WebUI I'm not prompted to give a username/pass. Is that
>> feature not included in mesos or is there a different configuration I need
>> to set?
>>
>> Thanks!
>>
>
>
>
> --
> Cheers,
>
> Zhitao Li
>

Re: Enabling basic access authentication

[Zhitao Li <zh...@gmail.com>]

Just went through this: I think the necessary endpoint `/master/state` is
only authenticated after 1.0.0, which is still going through release vote.

Can you share which version of Mesos you are running?

On Tue, Jul 12, 2016 at 5:18 PM, Douglas Nelson <it...@gmail.com> wrote:

> With marathon you can enable basic access authentication to the WebUI with
> the flag --http_credentials.
>
> I expected something similar with the flag --authenticate_http in mesos
> but when I hit the WebUI I'm not prompted to give a username/pass. Is that
> feature not included in mesos or is there a different configuration I need
> to set?
>
> Thanks!
>



-- 
Cheers,

Zhitao Li