[MESOS-5289] Basic Authentication for Mesos WebUI.

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 0.27.0
• Component/s: framework, HTTP API, master, webui
• Labels: documentation features mesosphere

Environment

mesos framework production environment developer environment

• Flags: Important
• Assignee: Unassigned
• Reporter: rajeshwerrao madoori
• Created: 27/Apr/16 02:43
• Updated: 02/May/16 14:32

Description

I have tried to use basic auth for Mesos-master used --authenticate=true --authenticate_http=true --http_authenticators=basic --credentials=/home/cloud-user/credentials
dint work for me also tried
--authenticate --authenticate_http --http_authenticators --credentials=/home/cloud-user/credentials

using crammd5 as default ..

created credentials in a file with username password set file permissions to 600

logs show

I0427 01:52:32.988502 25032 logging.cpp:188] INFO level logging started!
I0427 01:52:32.988922 25032 main.cpp:230] Build: 2016-02-01 17:12:13 by root
I0427 01:52:32.988936 25032 main.cpp:232] Version: 0.27.0
I0427 01:52:32.988943 25032 main.cpp:235] Git tag: 0.27.0
I0427 01:52:32.988950 25032 main.cpp:239] Git SHA: c29b3b6801846cda270aab17a670542ec5d238f5
I0427 01:52:32.988992 25032 main.cpp:253] Using 'HierarchicalDRF' allocator
I0427 01:52:33.016451 25032 leveldb.cpp:174] Opened db in 27.390206ms
I0427 01:52:33.038904 25032 leveldb.cpp:181] Compacted db in 22.386325ms
I0427 01:52:33.038946 25032 leveldb.cpp:196] Created db iterator in 8799ns
I0427 01:52:33.038978 25032 leveldb.cpp:202] Seeked to beginning of db in 6289ns
I0427 01:52:33.039058 25032 leveldb.cpp:271] Iterated through 3 keys in the db in 68062ns
I0427 01:52:33.039103 25032 replica.cpp:779] Replica recovered with log positions 283 -> 284 with 0 holes and 0 unlearned
I0427 01:52:33.039850 25032 main.cpp:464] Starting Mesos master
I0427 01:52:33.040645 25032 master.cpp:374] Master 49edc997-fbd4-4382-a043-dd7d18c8e517 (cluster01) started on 192.168.50.167:5050
I0427 01:52:33.040671 25032 master.cpp:376] Flags at startup: --allocation_interval="1secs" --allocator="HierarchicalDRF" --authenticate="true" --authenticate_http="true" --authenticate_slaves="false" --authenticators="crammd5" --authorizers="local" --cluster="mesos_cluster" --credentials="/home/cloud-user/credentials" --framework_sorter="drf" --help="false" --hostname="cluster01" --hostname_lookup="true" --http_authenticators="basic" --initialize_driver_logging="true" --ip="192.168.50.167" --log_auto_initialize="true" --log_dir="/var/log/mesos" --logbufsecs="0" --logging_level="INFO" --max_completed_frameworks="50" --max_completed_tasks_per_framework="1000" --max_slave_ping_timeouts="5" --port="5050" --quiet="false" --quorum="1" --recovery_slave_removal_limit="100%" --registry="replicated_log" --registry_fetch_timeout="1mins" --registry_store_timeout="5secs" --registry_strict="false" --root_submissions="true" --slave_ping_timeout="15secs" --slave_reregister_timeout="10mins" --user_sorter="drf" --version="false" --webui_dir="/usr/share/mesos/webui" --work_dir="/var/lib/mesos" --zk="zk://cluster01:2181/mesos" --zk_session_timeout="10secs"
I0427 01:52:33.040864 25032 master.cpp:421] Master only allowing authenticated frameworks to register
I0427 01:52:33.040876 25032 master.cpp:428] Master allowing unauthenticated slaves to register
I0427 01:52:33.040885 25032 credentials.hpp:35] Loading credentials for authentication from '/home/cloud-user/credentials'
I0427 01:52:33.040973 25032 master.cpp:466] Using default 'crammd5' authenticator
I0427 01:52:33.041005 25032 authenticator.cpp:518] Initializing server SASL
I0427 01:52:33.041497 25032 master.cpp:535] Using default 'basic' HTTP authenticator
I0427 01:52:33.044121 25037 log.cpp:236] Attempting to join replica to ZooKeeper group
2016-04-27 01:52:33,044:25032(0x7fa494c90700):ZOO_INFO@log_env@712: Client environment:zookeeper.version=zookeeper C client 3.4.5

Issue Links

• is related to: MESOS-5027 Enable authenticated login in the webui