# Ingress basic-auth not working **URL:** \ **Category:** SUSE Rancher Prime\ **Created:** [July 4, 2018, 2:21pm UTC](https://forums.suse.com/t/ingress-basic-auth-not-working/11011 "2018-07-04T14:21:45Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![chris.ingenhaag](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/chris.ingenhaag/32/5703_2.png) [@chris.ingenhaag](https://forums.suse.com/u/chris.ingenhaag)\ **Post date:** [July 4, 2018, 2:21pm UTC](https://forums.suse.com/t/ingress-basic-auth-not-working/11011/1 "2018-07-04T14:21:45Z")
Hi there, I´m trying to make some tests with nginx-ingress annotations. In my case I can´t get basic-auth to work. Like described here [https://github.com/rancher/ingress-nginx/blob/master/docs/user-guide/annotations.md#authentication](https://github.com/rancher/ingress-nginx/blob/master/docs/user-guide/annotations.md#authentication) I created a basic-auth secret with key named auth. Then I attached the annotations to to ingress but nothing changes. Does anybody already tried this with rancher \>2.0.0? - [nginx.ingress.kubernetes.io/auth-type:](http://nginx.ingress.kubernetes.io/auth-type:) basic - [nginx.ingress.kubernetes.io/auth-secret:](http://nginx.ingress.kubernetes.io/auth-secret:) basic-auth - [nginx.ingress.kubernetes.io/auth-realm:](http://nginx.ingress.kubernetes.io/auth-realm:) “realm string” regards, christian ---
**Author:** ![chris.ingenhaag](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/chris.ingenhaag/32/5703_2.png) [@chris.ingenhaag](https://forums.suse.com/u/chris.ingenhaag)\ **Post date:** [July 11, 2018, 8:36am UTC](https://forums.suse.com/t/ingress-basic-auth-not-working/11011/2 "2018-07-11T08:36:14Z")
After some investigation I found the solution. The documentation is misleading. You must not use double quotes to enclose the auth-realm ``` nginx.ingress.kubernetes.io/auth-type: basic nginx.ingress.kubernetes.io/auth-secret: basic-auth nginx.ingress.kubernetes.io/auth-realm: realm string ``` works fine. I created a pull request to fix the documentation for this [https://github.com/kubernetes/ingress-nginx/pull/2770](https://github.com/kubernetes/ingress-nginx/pull/2770) . Investigation was ``` kubectl logs nginx-ingress-controller-abdf2 -n ingress-nginx ``` and showed something like ``` Error: exit status 1 2018/07/11 07:51:42 [emerg] 4610#4610: unexpected "A" in /tmp/nginx-cfg788972583:307 nginx: [emerg] unexpected "r" in /tmp/nginx-cfg788972583:307 nginx: configuration file /tmp/nginx-cfg788972583 test failed ``` The error is caused by the following nginx config line. ``` auth_basic ""realm string""; ``` ---
**Author:** ![vincent](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/vincent/32/7156_2.png) [@vincent](https://forums.suse.com/u/vincent)\ **Post date:** [July 11, 2018, 1:16pm UTC](https://forums.suse.com/t/ingress-basic-auth-not-working/11011/3 "2018-07-11T13:16:29Z")
The docs are a yaml file, so the example is fine there, and quoting would be required in some cases, e.g. if there was a colon in the realm. In the Rancher UI they’re a key-value map so if you put in a quote it goes into the literal value, which then produces an invalid config. ---
**Author:** ![chris.ingenhaag](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/chris.ingenhaag/32/5703_2.png) [@chris.ingenhaag](https://forums.suse.com/u/chris.ingenhaag)\ **Post date:** [July 11, 2018, 1:43pm UTC](https://forums.suse.com/t/ingress-basic-auth-not-working/11011/4 "2018-07-11T13:43:48Z")
Ok. Thx for the details. Indeed it not really wrong in doc but misleading because I stumpled over this over and over again. ---
**Author:** ![heverton](https://avatars.discourse-cdn.com/v4/letter/h/cdc98d/32.png) [@heverton](https://forums.suse.com/u/heverton)\ **Post date:** [December 19, 2018, 4:49am UTC](https://forums.suse.com/t/ingress-basic-auth-not-working/11011/5 "2018-12-19T04:49:56Z")
Hi I made the whole process of adding basic auth via the graphic interface of the rancher, I created the password file and then added the annotations, following the indications of this post, and even then use of the password does not work, when I remove annotations password, the url works well, with password it return error 502/503 I used ```auto nginx.ingress.kubernetes.io/auth-type: basic nginx.ingress.kubernetes.io/auth-secret: basic-auth nginx.ingress.kubernetes.io/auth-realm: realm string ``` Rancher ngress needs any label or more confs? ---
**Author:** ![chris.ingenhaag](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/chris.ingenhaag/32/5703_2.png) [@chris.ingenhaag](https://forums.suse.com/u/chris.ingenhaag)\ **Post date:** [January 28, 2019, 9:42pm UTC](https://forums.suse.com/t/ingress-basic-auth-not-working/11011/6 "2019-01-28T21:42:23Z")
Hi, hm… that should work. Actually it´s strange that you get a 502/503 and not a 401 or something else. And no, rancher doesn´t need more annotations. It´s fully nginx-ingress-controllers responsibilty. 1. Does the Ingress work without the auth-annotations? 2. Can you please check the logs of your ingress-controller container? This logs are usually very verbose. 3. Can you check, that your secret with name “basic-auth” exists? And does this secret has a key “auth” with your base64 encoded password? regards, Christian