Bug 1370506 - [DOCS] Authentication with Dedicated only works with a token
Summary: [DOCS] Authentication with Dedicated only works with a token
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: OpenShift Online
Classification: Red Hat
Component: Documentation
Version: 3.x
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: ---
: ---
Assignee: Vikram Goyal
QA Contact: Vikram Goyal
Vikram Goyal
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-08-26 13:58 UTC by Eric Rich
Modified: 2019-12-16 06:30 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-09-04 22:28:27 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Eric Rich 2016-08-26 13:58:45 UTC
Document URL: https://docs.openshift.com/dedicated/3.2/dev_guide/authentication.html

Section Number and Name: CLI Authentication
Describe the issue: Authentication with Dedicated (cli) requires the use of a "token" 

Suggestions for improvement: Only document how to authenticate with a token, and document how `oc login` shows users where to get this token. 

Additional information: 

> $ ./oc login https://api.COOLCORP.openshift.com
> Login failed (401 Unauthorized)
> You must obtain an API token by visiting https://api.COOLCORP.openshift.com/oauth/token/request

Comment 1 Eric Rich 2016-08-26 14:16:03 UTC
(In reply to Eric Rich from comment #0)
> Document URL:
> https://docs.openshift.com/dedicated/3.2/dev_guide/authentication.html
> 
> Section Number and Name: CLI Authentication
> Describe the issue: Authentication with Dedicated (cli) requires the use of
> a "token" 
> 
> Suggestions for improvement: Only document how to authenticate with a token,
> and document how `oc login` shows users where to get this token. 
> 
> Additional information: 
> 
> > $ ./oc login https://api.COOLCORP.openshift.com
> > Login failed (401 Unauthorized)
> > You must obtain an API token by visiting https://api.COOLCORP.openshift.com/oauth/token/request

This should only be applied to OpenID or OAuth providers, or providers that do not support challange/login options from: https://docs.openshift.com/enterprise/3.2/install_config/configuring_authentication.html#identity-providers

Comment 2 Jordan Liggitt 2016-08-29 03:13:26 UTC
Some dedicated installations support username/password logins. `oc login` should continue to be the main starting point for the CLI login procedure.

There is nothing more specific we can document that would apply to all installations, since the web flow required to obtain a token is located at a different URL for all dedicated installations.

I would recommend we leave the docs as-is


Note You need to log in before you can comment on or make changes to this bug.