Enabling user authentication

By default, Monitoring components allow all inbound connections. To lock down access:

  1. Enable user authentication by setting .boot.cfg.enableUserAuthentication to 1b (true) in the component configuration file
  2. Add username and password hashes to the user-passwd-access file in the component configuration folder (/etc/kx-refinery-monitoring*)

Each line of user-passwd-access should be in the format user:SHA1passhash where the username is a unique username and SHA1passhash is the SHA-1 hash of the password to validate. If this file contains no users, user authentication is disabled until the first user is added.

Hash generation in kdb+:

raze string .Q.sha1 "password"

Hash generation in bash:

echo -n "password" | sha1sum | awk ' { print $1 } '