search

aerospike / aerospike-server.docker

Dockerfiles for Aerospike Server
Other
141 stars 68 forks source link

added possibility to enable security #42

Closed tdanylchuk closed 2 years ago

tdanylchuk commented 4 years ago

Since aerospike supports authentication it's good to have it onboard in docker

rbotzer commented 4 years ago

This is the docker image for the community edition, which doesn't have security. The Aerospike Enterprise Edition docker is https://github.com/aerospike/aerospike-server-enterprise.docker

tdanylchuk commented 4 years ago

Thank you for your comment.

Is there any chance that community edition will support authentication? We use community edition only for testing purposes, but on prod we have security enabled. In such case we need to have different code base for dev and prod envs, which is not convenient.

vasilievip commented 4 years ago

@tdanylchuk Zohar told me that AS ignores login/password sent by client if security disabled, pls check community version for this

tdanylchuk commented 4 years ago

I've tried to test upon aerospike/aerospike-server:4.8.0.5 which is latest community version, Trying to execute query using next java client settings: 

    ClientPolicy clientPolicy = new ClientPolicy();
            clientPolicy.user = "4e43";
            clientPolicy.password = "some_pass";
            return new AerospikeClient(clientPolicy, host, port);

And getting next exception

Caused by: com.aerospike.client.AerospikeException$Connection: Error -8: Failed to connect to host(s): 
localhost 33402 Error 51: Login failed
vasilievip commented 3 years ago

@rbotzer is it reasonable to add some sort of "fake" security in community image? In order to have ability to run integration tests over "secure" connection?

rbotzer commented 3 years ago

There's a feature request for minimal authentication in CE. Till we get that on the roadmap, you should be testing with the EE docker image. If the issue is with the license file, please open a support issue and we'll talk about it there.

arrowplum commented 2 years ago

Should be closed (See comment from @rbotzer )