[DRBD-user] Proxmox/Linstor - Identity 'PUBLIC' using role: 'PUBLIC' is not authorized to access resource group 'DfltRscGrp'

[Robert Altnoeder]

On 9/3/19 1:01 PM, Greb wrote:
> Hello, After verification, on a third cluster Linstor / Proxmox,
> installed more recently, the value of the Linstor global security
> level is "NO_SECURITY". Has the default value changed over time or the
> differents versions of linstor packages ?

Yes, as the LINSTOR installation procedure does not yet include any
means of creating a privileged user account, which would be required to
change this setting from anywhere else than the local interactive debug
console of the LINSTOR controller, the default was changed to
NO_SECURITY a while ago.
The original default level before that change was MAC.

> What should be the default setting ?

As of now, it's NO_SECURITY. Once security features become usable, we
will probably set the default to the highest level again, which is MAC,
so that installations will be secure by default.

br,
Robert