website icon indicating copy to clipboard operation
website copied to clipboard

anonymous user (i.e. with an empty password) fails

Open dicksnippe opened this issue 1 year ago • 1 comments

I was trying to create an anonymous user, by specifying an empty passwd: $ etcdctl user add anonymous:'' (the idea being to limit the anonymous user through RBAC to only some basic read operations)

Creating the user works, but retrieving data does not: $ etcdctl --user anonymous: get foo {"level":"warn","ts":"2024-11-26T17:13:40.985591+0100","logger":"etcd-client","caller":"[email protected]/retry_interceptor.go:63","msg":"retrying of unary invoker failed","target":"etcd-endpoints://0xc0004b4000/test0wa00:9966","attempt":0,"error":"rpc error: code = InvalidArgument desc = etcdserver: user name is empty"} Error: etcdserver: user name is empty

I think I understand why (https://github.com/etcd-io/etcd/issues/9590) But it would be nice to point this out explicitly in the documentation.

dicksnippe avatar Nov 26 '24 16:11 dicksnippe

+1, valid issue, we should update the documentation to indicate that currently users without passwords are not supported.

jberkus avatar Apr 22 '25 17:04 jberkus