[GH-ISSUE #781] Docker image, unable to login #538

Closed
opened 2026-03-03 01:30:20 +03:00 by kerem · 15 comments
Owner

Originally created by @OlivierGagnon on GitHub (Dec 27, 2019).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/781

Subject of the issue

When starting the docker image, it asks to sign up. Sign up doesn't work.

Expected behaviour

Bitwarden_rs advertises itself as being self hosted, but upon launching it, it asks to sign up or login. I assume it's an account on the bitwarden website, which I don't have and don't desire to have.

There also doesn't seem to be a way to create local accounts for self-hosting purposes

You might refer me to the "admin" faq, but see it here: https://imgur.com/a/N7krPNe and how there's no way to create an account

Originally created by @OlivierGagnon on GitHub (Dec 27, 2019). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/781 # Subject of the issue When starting the docker image, it asks to sign up. Sign up doesn't work. ### Expected behaviour Bitwarden_rs advertises itself as being self hosted, but upon launching it, it asks to sign up or login. I assume it's an account on the bitwarden website, which I don't have and don't desire to have. There also doesn't seem to be a way to create local accounts for self-hosting purposes You might refer me to the "admin" faq, but see it here: https://imgur.com/a/N7krPNe and how there's no way to create an account
kerem closed this issue 2026-03-03 01:30:20 +03:00
Author
Owner

@OlivierGagnon commented on GitHub (Dec 27, 2019):

See following screenshot of when I access the site for the first time: https://imgur.com/a/rN4yvOI

<!-- gh-comment-id:569215607 --> @OlivierGagnon commented on GitHub (Dec 27, 2019): See following screenshot of when I access the site for the first time: https://imgur.com/a/rN4yvOI
Author
Owner

@fbartels commented on GitHub (Dec 27, 2019):

Hi, Just because something is self hosted does not mean that there are no user accounts ;-)

You have to click on the "create an account".

<!-- gh-comment-id:569218020 --> @fbartels commented on GitHub (Dec 27, 2019): Hi, Just because something is self hosted does not mean that there are no user accounts ;-) You have to click on the "create an account".
Author
Owner

@OlivierGagnon commented on GitHub (Dec 27, 2019):

How do you protect is so that Account Creation is not open to anyone who has knowledge of the URL?

It's concerning if this can allow anyone to open an account on my instance

Also, it seems like the Submit button doesn't do anything

You might link me to some SMTP server config, but think about it. Can you name even 1 program that requires an SMTP server configured to even work, without the ability to create a local account?

Plz, think before replying

<!-- gh-comment-id:569224557 --> @OlivierGagnon commented on GitHub (Dec 27, 2019): How do you protect is so that Account Creation is not open to anyone who has knowledge of the URL? It's concerning if this can allow anyone to open an account on my instance Also, it seems like the Submit button doesn't do anything You might link me to some SMTP server config, but think about it. Can you name even 1 program that requires an SMTP server configured to even work, without the ability to create a local account? Plz, think before replying
Author
Owner

@mprasil commented on GitHub (Dec 27, 2019):

As @fbartels says, you need to create account. This account is created on your server (it's an local account) and it is in no way managed or hosted by official upstream bitwarden service.

Submit not doing anything sounds like you're not using HTTPS and trying to register from Chrome. Use Firefox for registration or set up HTTPS.

If you want to disable signups for new users, you can for example set SIGNUPS_ALLOWED=false - see docs here.

<!-- gh-comment-id:569225406 --> @mprasil commented on GitHub (Dec 27, 2019): As @fbartels says, you need to create account. This account is created on *your* server (it's an local account) and it is in no way managed or hosted by official upstream bitwarden service. Submit not doing anything sounds like you're not using HTTPS and trying to register from Chrome. Use Firefox for registration or set up HTTPS. If you want to disable signups for new users, you can for example set `SIGNUPS_ALLOWED=false` - see [docs here](https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-registration-of-new-users).
Author
Owner

@OlivierGagnon commented on GitHub (Dec 27, 2019):

Wow plz, guys, let's be reasonable.

What service out there allows ANONYMOUS REGISTRATION? Think about it. Like, really think about it. that's SUPER INSECURE. there's no way this is allowed

SIGNUPS_ALLOWED=false

Sure, how do you create an account if registration is disabled?

you need to create account. This account is created on your server

No it's not. have you even tried it? I don't think you have. On the docker image, right?

The signup link opens up a signup form, which doesn't Submit.

Again, you might refer me to the SMTP config wiki page, which isn't a prerequisite to using this software.

How do you create an account while sign up is disabled?

<!-- gh-comment-id:569225829 --> @OlivierGagnon commented on GitHub (Dec 27, 2019): Wow plz, guys, let's be reasonable. What service out there allows ANONYMOUS REGISTRATION? Think about it. Like, really think about it. that's SUPER INSECURE. there's no way this is allowed >SIGNUPS_ALLOWED=false Sure, how do you create an account if registration is disabled? >you need to create account. This account is created on your server No it's not. have you even tried it? I don't think you have. On the docker image, right? The signup link opens up a signup form, which doesn't Submit. Again, you might refer me to the SMTP config wiki page, which isn't a prerequisite to using this software. How do you create an account while sign up is disabled?
Author
Owner

@fbartels commented on GitHub (Dec 27, 2019):

How do you create an account while sign up is disabled?

There is a wiki here with lots of helpful articles, for example this one:
https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-admin-page

You might link me to some SMTP server config, but think about it. Can you name even 1 program that requires an SMTP server configured to even work, without the ability to create a local account?

This project is not among those that require a working SMTP setup. But I can think of a ton. Roundcube as a Webmailer is one.

<!-- gh-comment-id:569226604 --> @fbartels commented on GitHub (Dec 27, 2019): > How do you create an account while sign up is disabled? There is a wiki here with lots of helpful articles, for example this one: https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-admin-page > You might link me to some SMTP server config, but think about it. Can you name even 1 program that requires an SMTP server configured to even work, without the ability to create a local account? This project is not among those that require a working SMTP setup. But I can think of a ton. Roundcube as a Webmailer is one.
Author
Owner

@OlivierGagnon commented on GitHub (Dec 27, 2019):

How do you create an account while sign up is disabled?

There is a wiki here with lots of helpful articles, for example this one:
https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-admin-page

You might link me to some SMTP server config, but think about it. Can you name even 1 program that requires an SMTP server configured to even work, without the ability to create a local account?

This project is not among those that require a working SMTP setup. But I can think of a ton. Roundcube as a Webmailer is one.

Thanks for the reply. Plz see a screenshot of the admin page:

https://imgur.com/a/N7krPNe

Again, no way to create an account. "invite" link may send a request thru SMTP, but there's something missing.

**Hey guys, plz make sure to actually understand the scenario before replying.

All of the replies so far are completely irrelevant and already been answered, as if everyone replying are using the cloud service and not actually hosting it themselves**

<!-- gh-comment-id:569227681 --> @OlivierGagnon commented on GitHub (Dec 27, 2019): > > How do you create an account while sign up is disabled? > > There is a wiki here with lots of helpful articles, for example this one: > https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-admin-page > > > You might link me to some SMTP server config, but think about it. Can you name even 1 program that requires an SMTP server configured to even work, without the ability to create a local account? > > This project is not among those that require a working SMTP setup. But I can think of a ton. Roundcube as a Webmailer is one. Thanks for the reply. Plz see a screenshot of the admin page: https://imgur.com/a/N7krPNe Again, no way to create an account. "invite" link may send a request thru SMTP, but there's something missing. **Hey guys, plz make sure to actually understand the scenario before replying. All of the replies so far are completely irrelevant and already been answered, as if everyone replying are using the cloud service and not actually hosting it themselves**
Author
Owner

@OlivierGagnon commented on GitHub (Dec 27, 2019):

The docker image is completely broken

https://imgur.com/a/SkiHNOI

Login doesn't even work lol

<!-- gh-comment-id:569229561 --> @OlivierGagnon commented on GitHub (Dec 27, 2019): The docker image is completely broken https://imgur.com/a/SkiHNOI Login doesn't even work lol
Author
Owner

@OlivierGagnon commented on GitHub (Dec 27, 2019):

How to recreate the issue?

Go to https://github.com/dani-garcia/bitwarden_rs

Follow the two step Docker installation:

docker pull bitwardenrs/server:latest

docker run -d --name bitwarden -v /bw-data/:/data/ -p 8080:80 bitwardenrs/server:latest

Browse to http://localhost:8080

Witness that your Bitwarden doesn't work at all

<!-- gh-comment-id:569233447 --> @OlivierGagnon commented on GitHub (Dec 27, 2019): How to recreate the issue? Go to https://github.com/dani-garcia/bitwarden_rs Follow the two step Docker installation: docker pull bitwardenrs/server:latest docker run -d --name bitwarden -v /bw-data/:/data/ -p 8080:80 bitwardenrs/server:latest Browse to http://localhost:8080 Witness that your Bitwarden doesn't work at all
Author
Owner

@fbartels commented on GitHub (Dec 27, 2019):

The following works for me:

docker run -d --name=bitwarden-rs --restart=unless-stopped -v /var/lib/bitwarden_rs:/data/ -v /etc/localtime:/etc/localtime:ro --env-file ./env -p 127.0.0.1:9080:80 -p 127.0.0.1:3012:3012 bitwardenrs/server:latest

But the only real difference between my command and yours are some optional parameters (like --env-file and forwarding the websocket port).

PS: I should add that I have a proxy server in front of the system that provides https.

<!-- gh-comment-id:569234990 --> @fbartels commented on GitHub (Dec 27, 2019): The following works for me: `docker run -d --name=bitwarden-rs --restart=unless-stopped -v /var/lib/bitwarden_rs:/data/ -v /etc/localtime:/etc/localtime:ro --env-file ./env -p 127.0.0.1:9080:80 -p 127.0.0.1:3012:3012 bitwardenrs/server:latest` But the only real difference between my command and yours are some optional parameters (like --env-file and forwarding the websocket port). PS: I should add that I have a proxy server in front of the system that provides https.
Author
Owner

@OlivierGagnon commented on GitHub (Dec 27, 2019):

Mmm our command is basically the same. We're pulling the same docker image and forwarding port 80

Unlesss your env variables are super relevant.... lol

When you say "work" what do you mean? I always get the error shown in https://imgur.com/a/SkiHNOI

I tried on Native Ubuntu and Amazon EC2 ubuntu, same results

<!-- gh-comment-id:569236542 --> @OlivierGagnon commented on GitHub (Dec 27, 2019): Mmm our command is basically the same. We're pulling the same docker image and forwarding port 80 Unlesss your env variables are super relevant.... lol When you say "work" what do you mean? I always get the error shown in https://imgur.com/a/SkiHNOI I tried on Native Ubuntu and Amazon EC2 ubuntu, same results
Author
Owner

@fbartels commented on GitHub (Dec 27, 2019):

When I say work I mean create an account via the "create account" button and afterwards login with this account.

<!-- gh-comment-id:569240619 --> @fbartels commented on GitHub (Dec 27, 2019): When I say work I mean create an account via the "create account" button and afterwards login with this account.
Author
Owner

@mprasil commented on GitHub (Dec 27, 2019):

@Megalex42, please read the replies first before telling us we don't understand how bitwarden_rs works. All of us replying here are contributors and we know the code and how it works quite well.

The issue with creating account is exactly the problem I've told you about. You're using Chrome and accessing your service via unencrypted HTTP protocol. Chrome does not support some crypto API in this configuration and that's why it doesn't work. It's in my comment above, it's also in the Readme. Either use different browser (just for signup, the rest should work) or set up HTTPS.

As for restricting who can create account, there are multiple ways how to achieve that.

<!-- gh-comment-id:569245246 --> @mprasil commented on GitHub (Dec 27, 2019): @Megalex42, please read the replies first before telling us we don't understand how bitwarden_rs works. All of us replying here are contributors and we know the code and how it works quite well. The issue with creating account is exactly the problem I've told you about. You're using Chrome and accessing your service via unencrypted HTTP protocol. Chrome does not support some crypto API in this configuration and that's why it doesn't work. It's in my comment above, it's also in the Readme. Either use different browser (just for signup, the rest should work) or set up HTTPS. As for restricting who can create account, there are multiple ways how to achieve that.
Author
Owner

@OlivierGagnon commented on GitHub (Dec 27, 2019):

So there's no way to pre-create an account?

Am I understanding correctly that by default, Bitwarden RS is open for anonymous signup, there's no way to pre-create an account, and you have to manually go in AFTER starting it, to disable signup?

<!-- gh-comment-id:569318409 --> @OlivierGagnon commented on GitHub (Dec 27, 2019): So there's no way to pre-create an account? Am I understanding correctly that by default, Bitwarden RS is open for anonymous signup, there's no way to pre-create an account, and you have to manually go in AFTER starting it, to disable signup?
Author
Owner

@mprasil commented on GitHub (Dec 27, 2019):

You can start bitwarden_rs with admin token and disabled signups. Then you can invite user from admin interface. Inviting user does not need to actually have working SMTP, if you have no SMTP set, it just means that user with that email will be able to create account even though the signups are otherwise disabled.

<!-- gh-comment-id:569321087 --> @mprasil commented on GitHub (Dec 27, 2019): You can start `bitwarden_rs` with admin token and disabled signups. Then you can invite user from admin interface. Inviting user does not need to actually have working SMTP, if you have no SMTP set, it just means that user with that email will be able to create account even though the signups are otherwise disabled.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/vaultwarden#538
No description provided.