Skip to content

[BUG]: RSPAMD needs a password for the web interface #4022

@jiriks74

Description

@jiriks74

📝 Preliminary Checks

  • I tried searching for an existing issue and followed the debugging docs advice, but still need assistance.

👀 What Happened?

The documentation says

Rspamd provides a web interface, which contains statistics and data Rspamd collects. The interface is enabled by default and reachable on port 11334.

This doesn't mention the need to setup a custom password that is needed to get into the web interface.

The documentation also mentions that DMS doesn't set a password but only provides an option to disable it altogether:

DMS does not set a default password for the controller worker. You may want to do that yourself. In setups where you already have an authentication provider in front of the Rspamd webpage, you may want to set the secure_ip option to "0.0.0.0/0" for the controller worker to disable password authentication inside Rspamd completely.

I'll work on a PR that will ad a section to the documentation that explains how to add the password and therefore enable the WebUI by utilizing the custom config file but I think that this should be an option in DMS as the UI is enabled by default.

👟 Reproduction Steps

  1. See the docs
  2. Open port 11334 in the container
  3. Connect to the web interface
  4. See password prompt
  5. See rspamd documentation to know that must set a password in order to be able to log in

🐋 DMS Version

v13.3.1

💻 Operating System and Architecture

Debian GNU/Linux 11 (bullseye) aarch64

⚙️ Container configuration files

Not relevant

📜 Relevant log output

Not relevant

Improvements to this form?

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bug/reportA report about a bugmeta/needs triageThis issue / PR needs checks and verification from maintainers

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions