Topic: Securing BackupPC with htaccess

[muchiri]

Hi.
I have installed BackupPC a couple of times and I found that I could access it without passing through Server Manager.  How do I make sure that the user is forced to authenticate when the attempt to access it via http://myserver/backuppc?  Can setting up htaccess on that location help?

Muchiri

[Daniel B.]

Hi. I'm the author of the contrib. The panel is accessible outside of the server-manager (https://yourserver/backuppc) so that users can login and manage their backups. But they have to enter their login (sme accounts). Without a valide account, you cannot access the interface.

Cheers

[muchiri]

Hi.

Thanks for the feedback.  Strange thing is, in my installation it lets users straight through without authentication.  But if I attempt to access it via SME server's server-manager, then it asks for credentials.  Did I miss something in my install?

Muchiri

[Daniel B.]

Have you closed Firefox (or your web browser) between your attempt to connect? The first time it'll ask you the password, next time, it won't as your browser allready knows it. So if you connect first through the server-manager, you'll be asked. Then, if you go to https://yourserver/backuppc, it won't ask you anything, but your browser sends the credentials automatically.

[muchiri]

Thanks!  I opened it in a different browser and there was the pop-up!

Great contrib by the way, I admire your work.  Together with SME server, it is a critical part of our attempt to help small business in Africa acquire simple technology that makes the life easier.

Muchiri