Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-51776

[CLI] server-add should provide an option to use client certificate for authentication

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • Morpheus
    • Morpheus
    • tools
    • None
    • Untriaged
    • 1
    • Unknown

    Description

      Currently the only option to authenticate on the-node-to-be-added is basic auth:

      --server-add-username <username>
                                    The username for the server to add
      --server-add-password <password>
                                    The password for the server to add
      

      Since the-node-to-be-added might be configured to use client certs for authentication, we need an option for that as well. Something like: --server-add-use-client-cert.

      Note that admin doesn't need to provide the certificate/key itself. The-node-to-be-added should already be provisioned with a client certificate. The only purpose of this new option is an indication that client cert auth should be used during addition.

      UPDATE:
      When client certificate is selected, CLI should pass clientCertAuth=true in /addNode and /doJoinCluster calls. Username and password parameters should be skipped in this case.

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              owend Daniel Owen
              timofey.barmin Timofey Barmin
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty