mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2026-04-26 01:35:54 +03:00
[GH-ISSUE #781] Docker image, unable to login #538
Labels
No labels
SSO
Third party
better for forum
bug
bug
documentation
duplicate
enhancement
future Vault
future Vault
future Vault
good first issue
help wanted
low priority
notes
pull-request
question
troubleshooting
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/vaultwarden#538
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @OlivierGagnon on GitHub (Dec 27, 2019).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/781
Subject of the issue
When starting the docker image, it asks to sign up. Sign up doesn't work.
Expected behaviour
Bitwarden_rs advertises itself as being self hosted, but upon launching it, it asks to sign up or login. I assume it's an account on the bitwarden website, which I don't have and don't desire to have.
There also doesn't seem to be a way to create local accounts for self-hosting purposes
You might refer me to the "admin" faq, but see it here: https://imgur.com/a/N7krPNe and how there's no way to create an account
@OlivierGagnon commented on GitHub (Dec 27, 2019):
See following screenshot of when I access the site for the first time: https://imgur.com/a/rN4yvOI
@fbartels commented on GitHub (Dec 27, 2019):
Hi, Just because something is self hosted does not mean that there are no user accounts ;-)
You have to click on the "create an account".
@OlivierGagnon commented on GitHub (Dec 27, 2019):
How do you protect is so that Account Creation is not open to anyone who has knowledge of the URL?
It's concerning if this can allow anyone to open an account on my instance
Also, it seems like the Submit button doesn't do anything
You might link me to some SMTP server config, but think about it. Can you name even 1 program that requires an SMTP server configured to even work, without the ability to create a local account?
Plz, think before replying
@mprasil commented on GitHub (Dec 27, 2019):
As @fbartels says, you need to create account. This account is created on your server (it's an local account) and it is in no way managed or hosted by official upstream bitwarden service.
Submit not doing anything sounds like you're not using HTTPS and trying to register from Chrome. Use Firefox for registration or set up HTTPS.
If you want to disable signups for new users, you can for example set
SIGNUPS_ALLOWED=false- see docs here.@OlivierGagnon commented on GitHub (Dec 27, 2019):
Wow plz, guys, let's be reasonable.
What service out there allows ANONYMOUS REGISTRATION? Think about it. Like, really think about it. that's SUPER INSECURE. there's no way this is allowed
Sure, how do you create an account if registration is disabled?
No it's not. have you even tried it? I don't think you have. On the docker image, right?
The signup link opens up a signup form, which doesn't Submit.
Again, you might refer me to the SMTP config wiki page, which isn't a prerequisite to using this software.
How do you create an account while sign up is disabled?
@fbartels commented on GitHub (Dec 27, 2019):
There is a wiki here with lots of helpful articles, for example this one:
https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-admin-page
This project is not among those that require a working SMTP setup. But I can think of a ton. Roundcube as a Webmailer is one.
@OlivierGagnon commented on GitHub (Dec 27, 2019):
Thanks for the reply. Plz see a screenshot of the admin page:
https://imgur.com/a/N7krPNe
Again, no way to create an account. "invite" link may send a request thru SMTP, but there's something missing.
**Hey guys, plz make sure to actually understand the scenario before replying.
All of the replies so far are completely irrelevant and already been answered, as if everyone replying are using the cloud service and not actually hosting it themselves**
@OlivierGagnon commented on GitHub (Dec 27, 2019):
The docker image is completely broken
https://imgur.com/a/SkiHNOI
Login doesn't even work lol
@OlivierGagnon commented on GitHub (Dec 27, 2019):
How to recreate the issue?
Go to https://github.com/dani-garcia/bitwarden_rs
Follow the two step Docker installation:
docker pull bitwardenrs/server:latest
docker run -d --name bitwarden -v /bw-data/:/data/ -p 8080:80 bitwardenrs/server:latest
Browse to http://localhost:8080
Witness that your Bitwarden doesn't work at all
@fbartels commented on GitHub (Dec 27, 2019):
The following works for me:
docker run -d --name=bitwarden-rs --restart=unless-stopped -v /var/lib/bitwarden_rs:/data/ -v /etc/localtime:/etc/localtime:ro --env-file ./env -p 127.0.0.1:9080:80 -p 127.0.0.1:3012:3012 bitwardenrs/server:latestBut the only real difference between my command and yours are some optional parameters (like --env-file and forwarding the websocket port).
PS: I should add that I have a proxy server in front of the system that provides https.
@OlivierGagnon commented on GitHub (Dec 27, 2019):
Mmm our command is basically the same. We're pulling the same docker image and forwarding port 80
Unlesss your env variables are super relevant.... lol
When you say "work" what do you mean? I always get the error shown in https://imgur.com/a/SkiHNOI
I tried on Native Ubuntu and Amazon EC2 ubuntu, same results
@fbartels commented on GitHub (Dec 27, 2019):
When I say work I mean create an account via the "create account" button and afterwards login with this account.
@mprasil commented on GitHub (Dec 27, 2019):
@Megalex42, please read the replies first before telling us we don't understand how bitwarden_rs works. All of us replying here are contributors and we know the code and how it works quite well.
The issue with creating account is exactly the problem I've told you about. You're using Chrome and accessing your service via unencrypted HTTP protocol. Chrome does not support some crypto API in this configuration and that's why it doesn't work. It's in my comment above, it's also in the Readme. Either use different browser (just for signup, the rest should work) or set up HTTPS.
As for restricting who can create account, there are multiple ways how to achieve that.
@OlivierGagnon commented on GitHub (Dec 27, 2019):
So there's no way to pre-create an account?
Am I understanding correctly that by default, Bitwarden RS is open for anonymous signup, there's no way to pre-create an account, and you have to manually go in AFTER starting it, to disable signup?
@mprasil commented on GitHub (Dec 27, 2019):
You can start
bitwarden_rswith admin token and disabled signups. Then you can invite user from admin interface. Inviting user does not need to actually have working SMTP, if you have no SMTP set, it just means that user with that email will be able to create account even though the signups are otherwise disabled.