From 10ebcdcd10594e617acd9a9a7279aa6a9a99b67f Mon Sep 17 00:00:00 2001 From: Jason Stirnaman Date: Tue, 9 May 2023 17:27:35 -0500 Subject: [PATCH] fix(enterprise): enabling auth before data nodes are attached prevents admin user creation (#4923) (#4928) Closes Data node installation - Step 4: Create an admin user #4923 - Remove the instruction to enable auth before data nodes are installed. - Admin user creation and auth instructions are already included in the next step following data node creation. --- .../configure/security/authentication.md | 3 ++- .../installation/data_node_installation.md | 16 ---------------- 2 files changed, 2 insertions(+), 17 deletions(-) diff --git a/content/enterprise_influxdb/v1.10/administration/configure/security/authentication.md b/content/enterprise_influxdb/v1.10/administration/configure/security/authentication.md index a1b7def73..8ae8f5f2d 100644 --- a/content/enterprise_influxdb/v1.10/administration/configure/security/authentication.md +++ b/content/enterprise_influxdb/v1.10/administration/configure/security/authentication.md @@ -32,7 +32,8 @@ To enable authentication in a cluster, do the following: 1. Next, create an admin user (if you haven't already). Using the [`influx` CLI](/enterprise_influxdb/v1.10/tools/influx-cli/), run the following command: - ``` + + ```sql CREATE USER admin WITH PASSWORD 'mypassword' WITH ALL PRIVILEGES ``` 1. Restart InfluxDB Enterprise. diff --git a/content/enterprise_influxdb/v1.10/introduction/installation/data_node_installation.md b/content/enterprise_influxdb/v1.10/introduction/installation/data_node_installation.md index 903f87aeb..d0a711d59 100644 --- a/content/enterprise_influxdb/v1.10/introduction/installation/data_node_installation.md +++ b/content/enterprise_influxdb/v1.10/introduction/installation/data_node_installation.md @@ -150,7 +150,6 @@ For added security, follow these steps to verify the signature of your InfluxDB First, in `/etc/influxdb/influxdb.conf`: * Uncomment `hostname` at the top of the file and set it to the full hostname of the data node. -* Uncomment `auth-enabled` in the `[http]` section and set it to `true`. * Uncomment `meta-auth-enabled` in the `[meta]` section and set it to `true`. * Uncomment `meta-internal-shared-secret` in the `[meta]` section and set it to a long pass phrase. The internal shared secret is used in JWT authentication for intra-node communication. @@ -194,9 +193,6 @@ hostname="" # The bind address used by the HTTP service. # bind-address = ":8086" - # Determines whether HTTP authentication is enabled. - auth-enabled = true # Recommended, but not required - [...] # The JWT auth shared secret to validate requests using JSON web tokens. @@ -297,18 +293,6 @@ If not, there may be artifacts of a previous cluster in the metastore. If you do not see your data nodes in the output, please retry adding them to the cluster. -## Step 4: Create an admin user - -In [Step 2](#b-edit-the-data-node-configuration-files), you enabled authentication. -To access the cluster, you must create at least one admin user. -To create an admin user, use the [`influx` CLI](/enterprise_influxdb/v1.10/tools/influx-cli/), and run the following: - -```sql -CREATE USER admin WITH PASSWORD '' WITH ALL PRIVILEGES -``` - ---- - ## Next steps Once your data nodes are part of your cluster, do the following: