Mender client command line connect using credentials

General Discussions
1

Hi,

We are trying to connect to our hosted Mender server using command line on device.

We are able to connect using tenant token with command:

mender setup --config /data/mender/mender.conf --server-cert= --device-type ourdevice --server-url ``https://hosted.mender.io`` --hosted-mender --retry-poll 300 --update-poll 1800 --inventory-poll 300 --tenant-token XXXX

but trying to use credentials does not work:

mender setup --config /data/mender/mender.conf --server-cert= --device-type ourdevice --server-url ``https://hosted.mender.io``--hosted-mender --retry-poll 300 --update-poll 1800 --inventory-poll 300 --username username --password password

There is no change in configuration file for credentials or token after the command, only URL and polls changes. I was hoping it would automatically acquire tenant token using selected credentials and store it, as if you input it manually, when running interactive setup. There is no error output from command.

User is created on hosted Mender correctly. We were hoping to use credentials, so we can easily revoke them anytime.

Is there any way to get it work?

Thanks for help,

Michal

2

Hi @Michal,

Thanks for reaching out. Both approaches should work, under one condition: the user is not authenticated via SSO (Google, etc.), but was created on Hosted Mender with username and password. If SSO was used, Hosted Mender can’t check the password, hence the process does not work.

Additionally, this seems to be Mender Client 3.x, which is EOL by now. You should consider upgrading.

Greetz,
Josef

3

Hi,

Thank you for the information, looks like I had too much info in the command, after some debugging, this works:

mender setup --config /data/mender/mender.conf --device-type ourdevice --hosted-mender --retry-poll 300 --update-poll 1800 --inventory-poll 300 --username username --password password

Just for the information for the future, if I use open source version, it would probably look like this (when server has known https certificate)?

mender setup --config /data/mender/mender.conf --device-type ourdevice --server-url ``https://my.server.com`` --server-cert= --retry-poll 300 --update-poll 1800 --inventory-poll 300

I suppose the are none tenant tokens for open source version, so no credentials verification exist and there is no way to place authentification “firewall“ against things like botnet device flood, when URL is leaked?

Mender client version is 3.4.0, it is planned to be upgraded in our next BSP upgrade.

Thanks,

Michal

1 Like