Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check possibility for hdm to run locally without authentication #54

Closed
tuxmea opened this issue May 3, 2022 · 5 comments · Fixed by #271
Closed

Check possibility for hdm to run locally without authentication #54

tuxmea opened this issue May 3, 2022 · 5 comments · Fixed by #271
Assignees
Labels
bug Something isn't working enhancement New feature or request

Comments

@tuxmea
Copy link
Member

tuxmea commented May 3, 2022

We are considering the idea to let HDM run in a container without authentication for local (dev workstation) usage.

General question:

is it possible to easily disable authentication?

@tuxmea tuxmea changed the title Allow hdm to run locally without authentication Check possibility for hdm to run locally without authentication May 3, 2022
@tuxmea tuxmea added the question Further information is requested label May 3, 2022
@rwaffen
Copy link
Member

rwaffen commented May 3, 2022

  • should be a flag in hdm config file
  • hide elements which show user / logged in as
  • or add demo/dummy user to automatically use in this mode
  • in production mode dummy user should be deactivaed

oneiros added a commit that referenced this issue Jun 2, 2022
With this change you can set `authentication_disabled` to `true`
in `hdm.yml` to bypass authentication.
@oneiros
Copy link
Collaborator

oneiros commented Jun 2, 2022

I quickly prototyped the idea of using a dummy user for this here: ff9b009

As you can see, the diff is quite small.

If you would like to pursue this further, I would maybe add a test or two and open a PR.

@tuxmea tuxmea self-assigned this Jun 28, 2022
@tuxmea
Copy link
Member Author

tuxmea commented Jul 29, 2022

@oneiros We have at least two requests from Puppet community on Slack who asked for disabling authentication.
It would be nice to have a config switch to deactivate and maybe switch the user authentication (local vs LDAP).

@tuxmea tuxmea assigned oneiros and unassigned tuxmea Jul 29, 2022
@tuxmea tuxmea added enhancement New feature or request and removed question Further information is requested labels Jul 29, 2022
oneiros added a commit that referenced this issue Aug 16, 2022
With this change you can set `authentication_disabled` to `true`
in `hdm.yml` to bypass authentication.
oneiros added a commit that referenced this issue Aug 16, 2022
Also fix rubocop violations.
tuxmea pushed a commit that referenced this issue Aug 23, 2022
* Prototype making authentication optional #54

With this change you can set `authentication_disabled` to `true`
in `hdm.yml` to bypass authentication.

* Add a few tests for disabled auth #54

Also fix rubocop violations.
@tuxmea tuxmea closed this as completed Aug 23, 2022
@tuxmea
Copy link
Member Author

tuxmea commented Jan 17, 2024

Disabling authentication is no longer working.
This is the HDM config file:

---
development:
  read_only: false
  allow_encryption: true
  puppet_db:
    server: "https://puppetdb:8081"
  config_dir: '/etc/puppetlabs/code'
  authentication_disabled: true

@tuxmea tuxmea reopened this Jan 17, 2024
@tuxmea
Copy link
Member Author

tuxmea commented Jan 18, 2024

Upon first start, we still see the "Create Admin" page. We must fill out this form and get the anonymous access afterwards.

@tuxmea tuxmea added the bug Something isn't working label Jan 18, 2024
oneiros added a commit that referenced this issue Jan 22, 2024
Adds a welcome page upon first access that explains that
an admin user is needed and displays information about
external authentication sources if applicable.

It no longer prompts to create a new regular user if
external authentication is already configured.

If authentication is disabled none of this is displayed
(fixes #54)
oneiros added a commit that referenced this issue Jan 23, 2024
Adds a welcome page upon first access that explains that
an admin user is needed and displays information about
external authentication sources if applicable.

It no longer prompts to create a new regular user if
external authentication is already configured.

If authentication is disabled none of this is displayed
(fixes #54)
oneiros added a commit that referenced this issue Jan 23, 2024
* Improve first access flow #234

Adds a welcome page upon first access that explains that
an admin user is needed and displays information about
external authentication sources if applicable.

It no longer prompts to create a new regular user if
external authentication is already configured.

If authentication is disabled none of this is displayed
(fixes #54)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants