Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Auth in chronograf doesn't work #159

Closed
Punkoivan opened this issue Nov 11, 2017 · 4 comments
Closed

Auth in chronograf doesn't work #159

Punkoivan opened this issue Nov 11, 2017 · 4 comments

Comments

@Punkoivan
Copy link

Hello! Using the next compose file:

version: '2'
services:
 influx:
  image: influxdb:1.3
  environment:
   INFLUXDB_ADMIN_PASSWORD: pass
   INFLUXDB_ADMIN_USER: god
   INFLUXDB_DB: telegraf
   INFLUXDB_HTTP_AUTH_ENABLED: true
   INFLUXDB_HTTP_BIND_ADDRESS: :8086
   INFLUXDB_USER: telegraf
   INFLUXDB_USER_PASSWORD: tel
  volumes:
   - core-influx:/var/lib/influxdb
  ports:
   - 8086:8086/tcp
 kapacitor:
  image: kapacitor:1.3.3
  environment:
   KAPACITOR_INFLUXDB_0_URLS_0: http://influxdb:8086
   KAPACITOR_HOSTNAME: kapacitor
   stdin_open: true
   tty: true
  links:
   - influx:inlfuxdb
  ports:
   - 9092:9092/tcp
 chronograf:
  image: chronograf:1.3.8
  environment:
   INFLUXDB_URL: http://influxdb:8086
   KAPACITOR_URL: http://kapacitor:9092
   INFLUXDB_USERNAME: god
   INFLUXDB_PASSWORD: pass
   stdin_open: true
   tty: true
  links:
   - influx:influxdb
   - kapacitor:kapacitor
  ports:
   - 8888:8888/tcp

After start-up we go to chronograf URL and see no auth and able to do anything we want. And obviously not only we but anybody.

I checked env vars in influx container -
INFLUXDB_HTTP_AUTH_ENABLED = true

What I'm doing wrong and how I can fix it?

Thanks,
Punko Ivan

@jsternberg
Copy link
Contributor

It looks like you have only configured authentication for influxdb. I don't see any authentication enabled for chronograf itself. I'm not sure of the configuration for that, but maybe you can try that?

@Punkoivan
Copy link
Author

Thank you for the comment.
As I know there is no any authentication in Chronograf except of influx, am I wrong?

@jsternberg
Copy link
Contributor

I think this question might be better for the community forum. The people who monitor the questions there will know more than I will about general configuration for chronograf. If it turns out that this is actually a bug, make a comment here with more details and I'll reopen the issue.

The community forum is at https://community.influxdata.com.

@Punkoivan
Copy link
Author

https://docs.influxdata.com/chronograf/v1.3/administration/user-management/#enable-authentication

Please take a look at section 1.

Enable authentication in InfluxDB’s configuration file.

And its doesn't work in docker, but works w/o containerization.

But OK, I got your point, thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants