LinHES Forums
http://forum.linhes.org/

mythweb security?
http://forum.linhes.org/viewtopic.php?f=6&t=9828
Page 1 of 1

Author:  drphil [ Fri Apr 28, 2006 8:16 am ]
Post subject:  mythweb security?

Hi all

I installed R5B7 a couple of days ago and just now realised mythweb is not asking me for user/pass as I point my browser to it. I am currently at work and the fact I am able to access it no questions asked is unsafe at best. Do I have to enable password protection manually or is it supposed to be on by default?

Author:  ceenvee703 [ Fri Apr 28, 2006 12:51 pm ]
Post subject: 

When you installed R5B6 you should have received a prompt about setting a password for MythWeb (i.e. Apache).

If you want to adjust your settings, use the script /usr/bin/ToggleWebSecurity.sh to do so. Add the "--help" parameter to get info on what it does.

Searching the forum for "mythweb security" (use "search for all terms") turns up lots of info on this and other details.

Author:  ryanpatterson [ Fri Apr 28, 2006 1:22 pm ]
Post subject: 

ceenvee703 wrote:
When you installed R5B6 you should have received a prompt about setting a password for MythWeb (i.e. Apache).

To be more exact: By default knoppmyth only secures the mythweb subdirectory. Everything else apache serves is not protected by default.

drphil wrote:
I installed R5B7 a couple of days ago and just now realised mythweb is not asking me for user/pass as I point my browser to it.

Maybe your web browser is set to remember your login/password? In R5B7 there should deffently be a password on mythweb after install. Do you remember the mythweb password prompt durring the install process?

Author:  drphil [ Fri Apr 28, 2006 2:06 pm ]
Post subject: 

I did enter a password for mythweb during the install process but I have not had to enter it since. I checked under options->saved passwords in mozilla and there is no password entered for my htpc for sure.

Author:  ceenvee703 [ Fri Apr 28, 2006 3:23 pm ]
Post subject: 

Then I would try running that ToggleWebSecurity script again if I were you and see what happens.

Author:  drphil [ Sun Apr 30, 2006 6:31 am ]
Post subject: 

Solved!

/usr/bin/ToggleWebSecurity.sh did the trick. Mythweb is now asking me for a log/pass!

Weird though that it wasn't on by default.

Thanks a lot for the input.

Page 1 of 1 All times are UTC - 6 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/