Unidata / thredds-docker

Dockerized THREDDS
https://hub.docker.com/r/unidata/thredds-docker
BSD 3-Clause "New" or "Revised" License
36 stars 28 forks source link

restrictedAccess authentication not working? #292

Open pedro-cf opened 1 year ago

pedro-cf commented 1 year ago

Hello I am currently running a dockerized instance of thredds and I am trying to setup restrictedAccess on a datasetScan.

I've created a role:

<role rolename="test"/>

I've created a user:

  <user username="test" password="password" roles="test,restrictedDatasetUser"/>

and added to my datasetScan:

restrictAccess="test"

But all kinds of authentication attempts don't seem to be working:

image

Could this be because I have not setup a SSL certificate?

julienchastang commented 1 year ago

Hi @pedro-cf. There is some documentation related to this in the parent container.

pedro-cf commented 1 year ago

Hi @pedro-cf. There is some documentation related to this in the parent container.

Attempting to log with the default admin user to the /admin/debug page does not work aswell.

sbgabrio commented 7 months ago

I ran into the same issue setting up triggers for dynamic data changes. Triggers use "tdm" for a user so supplement to fit your own needs. I had to update the password (tomcat-users.xml) for “tdm” with the password’s SHA-512 hash (I added lines in my Dockerfile for editing the file) BUT the hash had to be generated using tomcat’s digest script: /usr/local/tomcat/bin/digest.sh -a sha-512 -h org.apache.catalina.realm.MessageDigestCredentialHandler MyPassword The handler -h is very important (but you won’t find that in thredds documentation yet)