canot login cf admin-ui

112 views
Skip to first unread message

hai wang

unread,
Aug 4, 2014, 3:13:25 AM8/4/14
to vcap...@cloudfoundry.org
I installed cf-admin-ui: https://github.com/cloudfoundry-incubator/admin-ui, and started, when I login with default user admin, it says:

Insufficient scope for user 
'admin'

what shoud I do?

Thanks in advance!

wulo...@huawei.com

unread,
Aug 4, 2014, 3:20:52 AM8/4/14
to vcap...@cloudfoundry.org
I think that is for cf v3, you should use https://github.com/cloudfoundry/cli

---
Thanks
Tim

Doug Davis

unread,
Aug 4, 2014, 8:57:25 AM8/4/14
to vcap...@cloudfoundry.org

Check the README: https://github.com/cloudfoundry-incubator/admin-ui
the admin-ui now uses UAA for authentication so you'll need to ensure that you have the proper groups and userIDs setup.  In particular, start reading at the "uaa_client" section.

thanks
-Doug
________________________________________________________
STSM |  Standards Architect  |  IBM Software Group
(919) 254-6905  |  IBM 444-6905  |  d...@us.ibm.com
The more I'm around some people, the more I like my dog.

Inactive hide details for hai wang ---08/04/2014 03:13:32 AM---I installed cf-admin-ui: https://github.com/cloudfoundry-incubahai wang ---08/04/2014 03:13:32 AM---I installed cf-admin-ui:  https://github.com/cloudfoundry-incubator/admin-ui, and started, when I

--
You received this message because you are subscribed to the Google Groups "Cloud Foundry Developers" group.
To view this discussion on the web visit https://groups.google.com/a/cloudfoundry.org/d/msgid/vcap-dev/db6cb668-9584-44c6-a55c-9650336d6238%40cloudfoundry.org.

To unsubscribe from this group and stop receiving emails from it, send an email to vcap-dev+u...@cloudfoundry.org.

hai wang

unread,
Aug 4, 2014, 11:47:29 PM8/4/14
to vcap...@cloudfoundry.org
Thanks, but I have added the admin-ui as UAA client to uaa using uaac, like the example shows.
It seems the login user do not have the scope, from debug log, the user only have openid scope, but I don't know how to give the user the scope?

在 2014年8月4日星期一UTC+8下午8时57分25秒，Doug Davis写道：

To unsubscribe from this group and stop receiving emails from it, send an email to vcap-dev+unsubscribe@cloudfoundry.org.

Doug Davis

unread,
Aug 5, 2014, 9:47:28 AM8/5/14
to vcap...@cloudfoundry.org

You'll need to make sure it has the "admin_ui.admin" scope - try using the "uaac client update" command to modify the scope of your client - e.g.:
uaac client update <name> --scope admin_ui.admin,admin_ui.user,openid




thanks
-Doug
________________________________________________________
STSM |  Standards Architect  |  IBM Software Group
(919) 254-6905  |  IBM 444-6905  |  d...@us.ibm.com
The more I'm around some people, the more I like my dog.

Inactive hide details for hai wang ---08/04/2014 11:47:38 PM---Thanks, but I have added the admin-ui as UAA client to uaa usinghai wang ---08/04/2014 11:47:38 PM---Thanks, but I have added the admin-ui as UAA client to uaa using uaac, like  the example shows.



From: hai wang <jamee...@gmail.com>
To: vcap...@cloudfoundry.org
Date: 08/04/2014 11:47 PM
Subject: Re: [vcap-dev] canot login cf admin-ui




Thanks, but I have added the admin-ui as UAA client to uaa using uaac, like the example shows.
It seems the login user do not have the scope, from debug log, the user only have openid scope, but I don't know how to give the user the scope?

在 2014年8月4日星期一UTC+8下午8时57分25秒，Doug Davis写道：

    Check the README: https://github.com/cloudfoundry-incubator/admin-ui
    the admin-ui now uses UAA for authentication so you'll need to ensure that you have the proper groups and userIDs setup.  In particular, start reading at the "uaa_client" section.

    thanks
    -Doug
    ________________________________________________________
    STSM |  Standards Architect  |  IBM Software Group
    (919) 254-6905  |  IBM 444-6905  |      d...@us.ibm.com
    The more I'm around some people, the more I like my dog.


--
You received this message because you are subscribed to the Google Groups "Cloud Foundry Developers" group.

To view this discussion on the web visit https://groups.google.com/a/cloudfoundry.org/d/msgid/vcap-dev/6158c3ba-2f30-486d-a6d0-49a4fae4b4e6%40cloudfoundry.org.

To unsubscribe from this group and stop receiving emails from it, send an email to vcap-dev+u...@cloudfoundry.org.

hai wang

unread,
Aug 5, 2014, 10:10:36 PM8/5/14
to vcap...@cloudfoundry.org
Finally, I found the problem: the group admin_ui.admin is not created, and the user cf_tester is not added into this group.
My uaac report error when add the user into the group, and I added in db mannay, it's OK now.


Thanks!

在 2014年8月5日星期二UTC+8下午9时47分28秒，Doug Davis写道：

--
You received this message because you are subscribed to the Google Groups "Cloud Foundry Developers" group.
To view this discussion on the web visit https://groups.google.com/a/cloudfoundry.org/d/msgid/vcap-dev/6158c3ba-2f30-486d-a6d0-49a4fae4b4e6%40cloudfoundry.org.

To unsubscribe from this group and stop receiving emails from it, send an email to vcap-dev+unsubscribe@cloudfoundry.org.

Reply all
Reply to author
Forward
0 new messages