From df791ea56ee1720af9eb0c889037cec30dc66acf Mon Sep 17 00:00:00 2001 From: Scott Anderson Date: Wed, 29 Nov 2023 10:23:55 -0700 Subject: [PATCH] Update Enterprise auth configuration steps (#5255) * upadte enterprise auth config steps, closes influxdata/DAR#366 * Update content/enterprise_influxdb/v1/administration/configure/security/authentication.md Co-authored-by: Jason Stirnaman --------- Co-authored-by: Jason Stirnaman --- .../configure/security/authentication.md | 24 ++++++++++++------- 1 file changed, 16 insertions(+), 8 deletions(-) diff --git a/content/enterprise_influxdb/v1/administration/configure/security/authentication.md b/content/enterprise_influxdb/v1/administration/configure/security/authentication.md index 197725dc1..167d6455b 100644 --- a/content/enterprise_influxdb/v1/administration/configure/security/authentication.md +++ b/content/enterprise_influxdb/v1/administration/configure/security/authentication.md @@ -22,21 +22,29 @@ enable authentication to control access to your cluster. To enable authentication in a cluster, do the following: -1. Set `auth-enabled` to `true` in the `[http]` section of the configuration files +1. Create an admin user (if you haven't already). + Using the [`influx` CLI](/enterprise_influxdb/v1/tools/influx-cli/), + run the following command: + + ```sql + CREATE USER WITH PASSWORD '' WITH ALL PRIVILEGES + ``` + + **Replace the following:** + + - ``: Admin username + - ``: Admin password + +2. Set `auth-enabled` to `true` in the `[http]` section of the configuration files for all meta **and** data nodes: + ```toml [http] # ... auth-enabled = true ``` -1. Next, create an admin user (if you haven't already). - Using the [`influx` CLI](/enterprise_influxdb/v1/tools/influx-cli/), - run the following command: - ```sql - CREATE USER admin WITH PASSWORD 'mypassword' WITH ALL PRIVILEGES - ``` -1. Restart InfluxDB Enterprise. +3. Restart all InfluxDB Enterprise meta and data nodes to apply the updated configuration. Once restarted, InfluxDB Enterprise checks user credentials on every request and only processes requests with valid credentials.