aerobase / omnibus-aerobase-server

Omnibus Aerobase server build extension.
https://aerobase.io
Apache License 2.0
19 stars 9 forks source link

Cannot create new realm #23

Closed LouisKottmann closed 4 years ago

LouisKottmann commented 4 years ago

Hello,

On a fresh install of aerobase 2.4.0-1(Ubuntu Xenial), I cannot seem to create a new realm.

I tried on various browsers but the "Add new realm" button that is supposed to show up on hovering the admin realm name/down-arrow does not.

I tried using /auth/admin/admin-realm/console/#/create/realm which does show the page to add a new realm but when I enter values and hit create, I get a Forbidden page /auth/admin/admin-realm/console/#/forbidden

Reading the documentation I see that the only pre-requisite is to enable the admin realm, and it is enabled.

What am I missing?

yanivmn commented 4 years ago

In order to create new realms you must first activate the master realm and restart the service: aerobase-ctl recover <password> aerobase-ctl restart aerobase-server Then you need to access the master realm and add realm option will be available. http://YOUR-SERVER/auth/admin/master/console

The above process is documented here: https://aerobase.io/docs/server_admin/index.html#server-initialization

For production environment it is highly recommended to enable both brute force protection and OTP for master realm.

yanivmn commented 4 years ago

@LouisKottmann - was this helpful?

LouisKottmann commented 4 years ago

Yes this was perfect thank you.

I just got confused because the Quickstart of Aerobase mentions another admin realm to log in the first time (http://localhost/auth/admin/aerobase/console with login admin/123).

So when the documentation mentioned activating the admin realm I though "oh yeah I already did that".

But really, I had to activate on http://localhost/auth/admin/master/console ;)