question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Basic Authentication password hashing

See original GitHub issue

What did you do? I’m currently trying to set up a node_exporter on a test server using both TLS and basic authentication. I have setup a simple user in my playbook as mentioned in the README.

node_exporter_basic_auth_users:
   user: password

But this results in the following config file on the remote machine:

basic_auth_users:
  user: *0

Changing the password to something else does not affect the *0 field.

The following error is also raised when the node_exporter is starting up: level=error ts=2020-10-14T13:31:20.226Z caller=node_exporter.go:194 err="yaml: unknown anchor '0' referenced"

The exporter works well if no users are specified. Any idea where I could have made a mistake?

Did you expect to see some different? No crash on start up and a correctly hashed password in the config file.

Environment

  • Role version: 0.22.0

  • Ansible version information:

ansible 2.9.12
config file = None
configured module search path = ['/home/tdh/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /home/tdh/.local/lib/python3.8/site-packages/ansible
executable location = /home/tdh/.local/bin/ansible
python version = 3.8.2 (default, Apr 27 2020, 15:53:34) [GCC 9.3.0]
  • Variables:
node_exporter_basic_auth_users: 
  user: password

Issue Analytics

  • State:open
  • Created 3 years ago
  • Reactions:1
  • Comments:9 (5 by maintainers)

github_iconTop GitHub Comments

3reactions
thdhondtcommented, Oct 14, 2020

I seem to have fixed the issue 😃.

pip3 install passlib[bcrypt]

I do not see any mention/error regarding the missing package in the log though…

0reactions
rayrapetyancommented, Oct 31, 2022

I seem to have fixed the issue 😃. pip3 install passlib[bcrypt]

A note for myself: this should be run on your local machine (where you run ansible), not on the target host!

Read more comments on GitHub >

github_iconTop Results From Across the Web

Hashing Passwords and Basic Auth! | by James Bowen
Our AuthData type will link to a particular user. It will contain their password hash, and specify their role within our system. module...
Read more >
Should http basic auth passwords be stored hashed serverside?
Passwords in general should be stored hashed on the server, no matter if they are transferred within some HTTP POST body as a...
Read more >
Basic Authentication - Hashing Algorithm and Header injection
Questions: What hashing algorithm does the browser use to create the initial username:password hash which is sent to the server for verification ...
Read more >
Password Formats - Apache HTTP Server Version 2.4
Apache recognizes one format for digest-authentication passwords - the MD5 hash of the string user:realm:password as a 32-character string of hexadecimal digits ...
Read more >
Hashing Passwords: One-Way Road to Security - Auth0
Password hashing is used to verify the integrity of your password, sent during login, against the stored hash so that your actual password...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found