Enabling user authentication¶
By default, Monitoring components allow all inbound connections. To lock down access:
- Enable user authentication by setting
.boot.cfg.enableUserAuthenticationto1b(true) in the component configuration file - Add username and password hashes to the
user-passwd-accessfile in the component configuration folder (/etc/kx-refinery-monitoring*)
Each line of user-passwd-access should be in the format user:SHA1passhash where the username is a unique username and SHA1passhash is the SHA-1 hash of the password to validate. If this file contains no users, user authentication is disabled until the first user is added.
Hash generation in kdb+:
raze string .Q.sha1 "password"
Hash generation in bash:
echo -n "password" | sha1sum | awk ' { print $1 } '