What type of client authentication does Memphis support?
-1
0
1
Methods
When deploying Memphis, there is an option to choose the authentication method.
The method should be chosen based on the app and the organization’s security requirements.
-
Username + password (Default). Each new user (both application and management) gets created with a dedicated username and password.
Kubernetes deployment command:
helm install memphis --set user_pass_based_auth="true" memphis/memphis --create-namespace --namespace memphis
Docker deployment command: To change the auth method value, please modify the
docker-compose.yml file
curl -s https://memphisdev.github.io/memphis-docker/docker-compose.yml -o docker-compose.yml && docker compose -f docker-compose.yml -p memphis up
-
Username + connection token Each new application-type user gets created with a dedicated username but the same connection token as the other app-type users.
Kubernetes deployment command:
helm install memphis --set user_pass_based_auth="false" memphis/memphis --create-namespace --namespace memphis
Docker deployment command: To change the auth method value, please modify the
docker-compose.yml file
curl -s https://memphisdev.github.io/memphis-docker/docker-compose.yml -o docker-compose.yml && docker compose -f docker-compose.yml -p memphis up
The Basics
Memphis has two types of credentials:
-
Application. Every connection has an associated user and a password or a connection token that is authenticated. App credentials, including username, password/connection token, and (optionally) client certificate, are specified during connection initiation time. There is a default pair of credentials called the root user and its detailes will appear on the post-installation notes.
-
Management. A dedicated user can be created for management purposes only to allow control over the UI and CLI, not data.
Production environments should not use the default user and create new user accounts with generated credentials instead.
Adding a new user
GUI
-
Head to the “Users” page
-
At the right-top corner, click on “Add a new user”
-
Fill in the required details