# Security for OOD v1.8

**URL:** <https://discourse.openondemand.org/t/security-for-ood-v1-8/1084>\
**Category:** Get Help\
**Created:** [August 26, 2020, 5:25pm UTC](https://discourse.openondemand.org/t/security-for-ood-v1-8/1084 "2020-08-26T17:25:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![edwardsp](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/edwardsp/32/511_2.png) [@edwardsp](https://discourse.openondemand.org/u/edwardsp)\
**Post date:** [August 26, 2020, 5:25pm UTC](https://discourse.openondemand.org/t/security-for-ood-v1-8/1084/1 "2020-08-26T17:25:46Z")

</div>

Is it still possible to use Basic Auth with version 1.8? Alternatively, is there a way to set the default user with dex (rather than just `ood`)? I’m creating this on Azure and want something very simple when it will just be run for a single user (and would prefer not to set up ldap).

Thanks,  
Paul

---

<div class="post-metadata">

**Author:** ![tdockendorf](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/tdockendorf/32/202_2.png) [@tdockendorf](https://discourse.openondemand.org/u/tdockendorf)\
**Post date:** [August 26, 2020, 5:43pm UTC](https://discourse.openondemand.org/t/security-for-ood-v1-8/1084/2 "2020-08-26T17:43:32Z")

</div>

You can continue to use basic auth if you wish. Just uninstall or do not install `ondemand-dex` and continue to set the `auth` lines in ood\_portal.yml to the required lines for basic auth. The ood-portal-generator no longer defaults to Basic Auth but it’s still possibly by specifying necessary `auth` lines.

We do not provide a mechanism in ood-portal-generator to specify additional users, the user we ship is `ood@localhost`. You can optionally generate `/etc/ood/dex/config.yaml` then make a copy and modify that copy to change the `ood` user to something else and the password either remains `password` or you have to generate a new bcrypt hash. It’s important to use a copy and not directly use `/etc/ood/dex/config.yaml` because ood-portal-generator will overwrite that file. If you want to start `ondemand-dex` with your custom config do something like this in `/etc/systemd/system/ondemand-dex.service.d/config.conf`:

[Service]  
ExecStart=  
ExecStart=/usr/sbin/ondemand-dex serve /etc/ood/dex/my-config.yaml

The above assumes you made a copy of YAML config at `/etc/ood/dex/my-config.yaml`. It must be readable by `ondemand-dex` user.

---

<div class="post-metadata">

**Author:** ![westburg.2](https://avatars.discourse-cdn.com/v4/letter/w/0ea827/32.png) [@westburg.2](https://discourse.openondemand.org/u/westburg.2)\
**Post date:** [May 26, 2022, 3:43pm UTC](https://discourse.openondemand.org/t/security-for-ood-v1-8/1084/3 "2022-05-26T15:43:09Z")

</div>