Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: muchiri on April 04, 2008, 04:46:54 PM

Title: Securing BackupPC with htaccess
Post by: muchiri on April 04, 2008, 04:46:54 PM
Hi.
I have installed BackupPC a couple of times and I found that I could access it without passing through Server Manager.  How do I make sure that the user is forced to authenticate when the attempt to access it via http://myserver/backuppc?  Can setting up htaccess on that location help?

Muchiri
Title: Re: Securing BackupPC with htaccess
Post by: Daniel B. on April 04, 2008, 04:49:53 PM
Hi. I'm the author of the contrib. The panel is accessible outside of the server-manager (https://yourserver/backuppc) so that users can login and manage their backups. But they have to enter their login (sme accounts). Without a valide account, you cannot access the interface.

Cheers
Title: Re: Securing BackupPC with htaccess
Post by: muchiri on April 04, 2008, 04:56:03 PM
Hi.

Thanks for the feedback.  Strange thing is, in my installation it lets users straight through without authentication.  But if I attempt to access it via SME server's server-manager, then it asks for credentials.  Did I miss something in my install?

Muchiri
Title: Re: Securing BackupPC with htaccess
Post by: Daniel B. on April 04, 2008, 05:03:08 PM
Have you closed Firefox (or your web browser) between your attempt to connect? The first time it'll ask you the password, next time, it won't as your browser allready knows it. So if you connect first through the server-manager, you'll be asked. Then, if you go to https://yourserver/backuppc, it won't ask you anything, but your browser sends the credentials automatically.
Title: Re: Securing BackupPC with htaccess
Post by: muchiri on April 04, 2008, 05:09:02 PM
Thanks!  I opened it in a different browser and there was the pop-up!

Great contrib by the way, I admire your work.  Together with SME server, it is a critical part of our attempt to help small business in Africa acquire simple technology that makes the life easier.

Muchiri