Unclear Documentation - Authentication - default configuration

[proddata]

Documentation feedback

• Page title: Authentication
• Page URL: https://crate.io/docs/crate/reference/en/latest/admin/auth/index.html
• Source: https://github.com/crate/crate/blob/master/docs/admin/auth/index.rst

---

From the documentation right now it is unclear, what the default config for authentication for standard deployments is (packages, docker images, etc.)

By default, the boolean setting auth.host_based.enabled is false and therefore host based authentication is disabled. In this instance, the CrateDB cluster allows any unauthenticated connections.

then two paragraphs later ..

The crate.yml that is shipped with CrateDB explicitly enables host based authentication and defines a set of sane rules, which take effect in case HBA and Enterprise features are enabled.

Also the crate.yml shipping with linux packages is different from the default docker ones.

[mfussenegger]

@proddata Would you be up for creating a PR that clarifies these parts?

[proddata]

@mfussenegger I can help, but I am unsure about some technicalities. E.g. is it possible to use password authentication with HBA disabled?

[mfussenegger]

is it possible to use password authentication with HBA disabled?

No, if you disable HBA and create a user with password, the user will be able to login without password.

[nomicode]

@proddata please can you check 06292aa to see if this change adequately addresses this issue?