Hi all

I installed R5B7 a couple of days ago and just now realised mythweb is not asking me for user/pass as I point my browser to it. I am currently at work and the fact I am able to access it no questions asked is unsafe at best. Do I have to enable password protection manually or is it supposed to be on by default?

When you installed R5B6 you should have received a prompt about setting a password for MythWeb (i.e. Apache).

If you want to adjust your settings, use the script /usr/bin/ToggleWebSecurity.sh to do so. Add the "--help" parameter to get info on what it does.

Searching the forum for "mythweb security" (use "search for all terms") turns up lots of info on this and other details.

To be more exact: By default knoppmyth only secures the mythweb subdirectory. Everything else apache serves is not protected by default.


Maybe your web browser is set to remember your login/password? In R5B7 there should deffently be a password on mythweb after install. Do you remember the mythweb password prompt durring the install process?

I did enter a password for mythweb during the install process but I have not had to enter it since. I checked under options->saved passwords in mozilla and there is no password entered for my htpc for sure.

Then I would try running that ToggleWebSecurity script again if I were you and see what happens.

Solved!

/usr/bin/ToggleWebSecurity.sh did the trick. Mythweb is now asking me for a log/pass!

Weird though that it wasn't on by default.

Thanks a lot for the input.