Securing access to the web admin panel

When you attempt to visit a web admin instance, such as the one on http://localhost:8183/, you are greeted with a login box which requires you to present a username and its accompanying password.

The credentials can be added and updated using the command line.

  • To add a new user account use the zato create user command, e.g.:

    $ zato create user /opt/zato/dev1/web-admin
    Username (Leave blank to use 'user'): ohara
    E-mail address: ohara@example.com
    Password:
    Password (again):
    OK
    $
  • To update a password use the zato update password command, e.g.:

    $ zato update password /opt/zato/dev1/web-admin ohara
    Changing password for user 'ohara'
    Password:
    Password (again):
    OK
    $

Note

There are no roles nor user groups, every user is treated equally. Instead of deleting a user - set their password to a random string if you'd like to block the access.