From be66103c450856dfd24bbdb2cbfc58c54fedd089 Mon Sep 17 00:00:00 2001 From: reesporte Date: Wed, 29 Dec 2021 11:20:19 -0600 Subject: [PATCH] requirements when auth is enabled postgres binding is turned off TLS must be turned on --- server/server.go | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/server/server.go b/server/server.go index a2b963398..e9bb10a68 100644 --- a/server/server.go +++ b/server/server.go @@ -541,6 +541,15 @@ func (m *Command) SetupServer() error { if err != nil { return errors.Wrap(err, "instantiating authN object") } + + // disable postgres binding if auth is enabled + m.Config.Postgres.Bind = "" + + // TLS must be enabled if auth is + if m.Config.TLS.CertificatePath == "" || m.Config.TLS.CertificateKeyPath == "" || m.Config.TLS.CACertPath == "" { + return fmt.Errorf("transport layer security (TLS) is not configured properly. TLS is required when AuthN/Z is enabled, current configuration: %v", m.Config.TLS) + } + } m.Handler, err = http.NewHandler(