Help login

[TairaNoMasakado]

I'm trying to run the application via Docker but the password shown in the DJANGO_SUPERUSER_PASSWORD variable doesn't work. Someone could help me?

[blockisec]

Hello,
Did you change the URL or do you serve the application using localhost?
I remember that there was another issue that sounds similar:

#169

Maybe this helps.

[blockisec]

Yes it is mentioned in the docs. At the moment this is intended behavior to prevent users from working all the time with a high level user but instead create a new user with less permissions.
During the creation step a "activation" email is sent to the email address where the user can set the password for their account. I already thought about a feature to make the admin user set passwords for accounts, but personally, it was not a high priority idea and there is no ticket/issue for it at the moment. If you feel, that this is an important feature, please open an issue and I will try to implement it as soon as possible.

Edit:
For testing the application you may want to create a user with the groups "Management", "Pentester" and "Advisory Management" to see all features enabled in one account.
Please keep in mind, that the "Attack Surface Monitoring Dashboard" is curreently work in progress (it is only part of the docker dev tag and not in the latest release - if I remember correctly).

Edit2:
If you could describe the problem, I may be able to further improve the docs or docker stuff, because I personally do not use it much. I personally deployed everything using the manual install, so I would much appreciate any feedback/improvements/ideas on the docker setup.

[TairaNoMasakado]

I want to use it only on localhost, and when I create the user john I don't receive any emails, even though I configure an SMTP. That's why it would be interesting for the admin to be able to set a password, because I'm having difficulty logging in with a new user since I don't receive email and I can't set a password. If you can share how to do it I would appreciate it.

[blockisec]

You may be able to enable the django console backend for emails using the following setting in your django config file:

EMAIL_BACKEND = "django.core.mail.backends.console.EmailBackend"

This will show the email in the console instead of sending it using SMTP.

I will create an issue for the feature request that admin users can set passwords for users.

[blockisec]

I just merged that admins can set passwords on user creation (not while editing them at the moment). The docker image with the latest dev tag should contain the changes (not yet in a stable version).

[TairaNoMasakado]

I tried to enable EMAIL_BACKEND = "django.core.mail.backends.console.EmailBackend" but I was unable to set the password. Thank you very much.

[blockisec]

I think this should be solved.
I tested this for a few month now and did not see the problem anymore.
Also, we now use django admin which can change and set user passwords if required.

If you still encounter this issue, please report back. In the meantime, I will close the comment. Thx