Hello Colleagues,
How to automatically do the password rotation for influxdb users ?Is there any method is available now ?
BRs, Gowrisankar
katy
April 13, 2018, 9:07pm
2
There’s no way to rotate passwords automatically right now. You can always submit a feature request on influxdb or chronograf detailing the behavior you’d like to see. A lot of great contributions from the community!
@katy I have created Feature request for the same.
opened 06:14AM - 17 May 18 UTC
closed 02:29PM - 31 Jul 19 UTC
1.x
wontfix
# Feature Request
##What challenge are you facing?
Our InfluxDB is exposed t… o the Internet. There might be two reasons why we need to rotate passwords.
1. Passwords compromised/leaked
2. Regularly changing out current passwords with new ones is an effective way to improve security.
## __Proposal:__ & __Desired behavior:__
My proposal is to bring the password rotation for INFLUXDB as a feature using CLI or using API.
**ex**: To change the password for all the users [except admin user] available and new random generated password should be with > 15 chars long.
This will read all the users and change a new password. This print the output on the screen with username and new password.
* curl -G -k -u <adminuser>:<adminpassword> '<influxhost>/query?pretty=true' --data-urlencode ROTATE USER PASSWORD --ALL" *
**The output on the screen:**
*username1: newpassword*
*username2: newpassword*
*username3: newpassword*
**ex:** To change password for specfic user including admin user:
*curl -G -k -u <adminuser>:<adminpassword> '<influxhost>/query?pretty=true' --data-urlencode ROTATE USER PASSWORD --USER=<abcuser>"*
## __Current behavior:__
password rotation for INFLUXDB is not available today.
BRs, Gowrisankar
1 Like
