etcd

etcd copied to clipboard

etcd does not limit the number of connections with incorrect passwords, which may lead to the cracking of the administrator password, which poses a certain security risk.

You can create a user with no password based authentication with etcdctl user add <user name> --no-password. Such a user only allows CN based authnz. If you really want to avoid the brute force risk, I think it works for the purpose.

CN based authnz

hi @mitake , could you please give more steps on authnz, thanks a lot.

This issue has been automatically marked as stale because it has not had recent activity. It will be closed after 21 days if no further activity occurs. Thank you for your contributions.