Hello,

we´ve just updated the statistics settings for our haproxy
environment, when i noticed that haproxy has support for userlists.

In the past, we´ve used the "stats" configuration in every backend and
"stats auth" with plain text passwords.

Now the whole "stats" related config is in the defaults section, but
still using plaintext passwords.

>From what i´ve found so far, it is possible to authenticate stats
against userlists and crypted hashes, but this requires an "acl" and
an "if" in every backend - this is a lot of config if you have 50
backens or more.

So it would be great, if you would add a new config option, f.e.
"stats userlist <userlist>" which could be placed in the defaults
sections.

This would give us an easy config, since we have to define the
authentication once and it is available in every backend and
additionally we have the security of sha512 hashes.

Here is an example how it might be:

defaults
  stats enable
  stats uri /admin?stats
  stats show-legends
  stats show-node
  stats userlist adminlist

userlist adminlist
  group G1 users tiger,scott

  user tiger password $6$k6y3o.eP$JlKBx9za9667qe4(...)xHSwRv6J.C0/D7cV91
  user scott insecure-password elgato

backend foo
  -> no stats config here


Thank you,
Regards,
Christian

Reply via email to