问题

警报：外部身份验证

  • 2018年3月28日
  • 3个答复
  • 2082观看次数
m
徽章 +1
你好，

我已经看到有关外部身份验证的棱镜的警报。这是完整的消息：

可能的原因
外部客户端被配置为通过管理用户对REST API进行身份验证。
推荐
与具有管理特权的其他用户对REST API进行身份验证。

我不认为我有任何配置用于使用API​​的东西。

CE 2018.01.31
    \r\n
    \r\nI\u00b4ve seen a alert on Prism about external authentication. Here you are the complete message:
    \r\n
    \r\nPossible Cause
    \r\nAn external client is configured to authenticate to the REST API with the admin user.
    \r\nRECOMMENDATION
    \r\nAuthenticate to the REST API with a different user that has administrative privileges.
    \r\n
    \r\nI don\u00b4t think I have anything configured to use APIs.
    \r\n
    \r\nCE 2018.01.31<\/b>
    \r\n\ufeff<\/b>","quoteUsername":"matheusmartins","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

    3个答复

    p
    秩
    UserLevel 3
    徽章 +4
    嘿，
    从AOS 5.5开始，如果您使用任何第三方客户（例如Rubrik）使用管理员用户对REST API调用进行身份验证，则可能会收到以下警告。

    影响：管理用户将在即将发布的版本中禁用。来自管理员用户的REST API调用将停止工作。
    原因：外部客户端被配置为使用管理员用户对REST API进行身份验证。
    解析度：与具有管理特权的其他用户对REST API进行身份验证。

    您可能需要检查试图“通过管理用户进行身份验证”以找出应用程序/源的IP地址。

    要解决此警告，请创建另一个用户并使用该用户对REST API进行身份验证。

    执行以下过程以通过在AOS 5.5上使用Prism Web控制台添加用户：
    https://portal.nutanix.com/#/page/docs/details?targetId=web-console-guide-prism-v55:wc-user-management-management-wc-c.html

    让我们知道这是否有帮助？
    \r\nStarting from AOS 5.5, you might receive the following alert with a warning if you are using any third party clients such as Rubrik to authenticate REST API calls using the admin user.
    \r\n
    \r\nImpact<\/b> :Admin user will be disabled in a forthcoming release. REST API calls from the admin user will stop working.
    \r\nCause<\/b> :An external client is configured to authenticate to the REST API with the admin user.
    \r\nResolution<\/b>: Authenticate to the REST API with a different user that has administrative privileges.
    \r\n
    \r\nYou may want to check the IP address which is trying to 'authenticate via the admin user' to figure out the application\/ source.
    \r\n
    \r\nTo resolve this warning, create another user and use that user to authenticate to the REST API.
    \r\n
    \r\nPerform the following procedure to add a user by using the Prism web console on AOS 5.5:
    \r\nhttps:\/\/portal.nutanix.com\/#\/page\/docs\/details?targetId=Web-Console-Guide-Prism-v55:wc-user-management-wc-c.html
    \r\n
    \r\nLet us know if that helpful?","quoteUsername":"Prad_Math","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
    Eric-the_viking
    UserLevel 2
    徽章 +3

    你好

    我有同样的问题，是否有一种方法可以从报告的CVM中追溯到请求来自何处？

    谢谢

    埃里克

    Hi<\/p>

    I have the same problem, is there a way to trace back from the reported CVM to see where the request is coming from?<\/p>

    \u00a0<\/p>

    Thanks<\/p>

    Eric<\/p>","quoteUsername":"Eric-The_Viking","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

    s
    秩
    UserLevel 3
    徽章 +3

    @eric-the_viking如果您检查警报的时间戳，则CVM中的〜/data/logs/aplos.out文件可能会阐明问题。通常，在那里提到一个IP地址。

    问候，

    -说

    @Eric-The_Viking<\/user-mention>\u00a0The ~\/data\/logs\/aplos.out file in the CVM\u00a0might shed some light on the issue if you check the timestamp of the alert. Usually, an IP address is mentioned there.<\/p>

    \u00a0<\/p>

    Regards,<\/p>

    \u00a0<\/p>

    -Said<\/p>","quoteUsername":"sbarab","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

    回复


    Baidu