No ability to log-out of own instance about mist-ce HOT 6 CLOSED

Hi Keiro,

The open-source version doesn't have user management or authentication support. It is just the infrastructure management interface. If you need authentication and to hide the interface from plain sight, you could use http auth behind apache or nginx.

If you're looking for the full multi-user service to act as a reseller, like the one on https://mist.io I can hook you up with one of our sales managers to discuss licensing.

from mist-ce.

@Clopy

I think not having authentication or user management in your open-source version is a very bad idea.

At least include authentication support in the open-source version to prevent anyone finding a user's mist.io instance and doing very bad things to it. Charge for user management if you must, but for the love of all that's good security-wise, please include some form of authentication support.

from mist-ce.

I would agree with @KeiroD . At least providing a hook point to add custom authentication modules provided by the community would be really great. I get the point that you want to earn money with the system itself. But at least a small authentication step like one defined user (admin/admin) defined in a file would be very easy to implement.

from mist-ce.

Hi JanLoebel,

the open source version starts on the localhost interface, so this poses no security threat. It is then easy to expose it to some other interface and also add some http auth through nginx or through haproxy for this. You are more than welcome to contribute in the FAQ section (or in an article) about how to add basic auth on nginx or even better haproxy - since it is used by mist.io.

At this point we are not thinking of adding auth modules of some sort to mist.io because we want to get it done correctly on the Saas. We are adding role based access control functionality and team support for the Saas, which means that teams and organizations can be created, or imported through SSO systems. On the same time we are moving fast functionality from the Saas to the open source version (scripts, monitoring, logs).

Regards,
Markos

from mist-ce.

Version 2 is out, comes with an easier installation process using Docker Compose and many new features, check updated instructions on https://github.com/mistio/mist.io

This also includes user management!

from mist-ce.

http://blog.mist.io/post/162083041316/our-biggest-mistio-open-source-release-yet

from mist-ce.