Hello team, I have 2 questions. 1. In the open so...
# help
v
Hello team, I have 2 questions. 1. In the open source version of LakeFs, can we create more than one user? Though I didn't see any limitation about number of users in the documentation, when I access 'Administration' tab, I don't see any option to create users. 2. I see an notification mentioning RBAC is not configured. Can we enable RBAC in open sourc version?
n
Hi @Vibhath, lakeFS OSS supports a single user - cerdentials. RBAC is provided built in in the Cloud and Enterprise solutions. However, you can still get RBAC functionality by implementing your own auth server
v
Hi Niro, I configured a remote authenticator following the guidance. But the authenticator response only contains the lakefs user identifier, doesn't it? Do you have any guidance on how I enable RBAC with remote authenticator?
n
If you configured a remote authenticator you will need to set
auth.ui_config.rbac
to
external
in the lakeFS config
v
I did that as well. But then I got an error mentioning that I cannot use 'external' without a external auth api (or some message similar to that). I was wondering whether remote authenticator and external authenticator are two things?
How ever I could authicate with my remote authenticator
n
You will need to implement both authorization and authentication servers
v
Oh. Thanks. I thnink this something different than remote authenticator mentioned in the documentation. If I implement both of them, can I have multiple users as well
👍🏽 1
Hello Niro Just to confirm my understanding is correct as the implementation of authentication and authorisation servers is not well documented: could you please let me know whether it is possible to create multiple users with oss if we implement authentication server and authorisation server. If it is not possible, can you help me understand how RBAC works with a single user.
👀 2
n
Hi @Vibhath, Yes. In fact, if you just want multiple users it is enough to implement just the authorization. If you want to authenticate vs. an external server you will need the external authentication service as well
v
Thank you for the clarification
👍🏽 1