Re: web-based http password/group manager

2005-11-14 Thread Matt Johnson

--- loos <[EMAIL PROTECTED]> wrote:

> Em Seg, 2005-11-14 às 12:13 +, Matt Johnson
> escreveu:
> > --- Alvin Oga <[EMAIL PROTECTED]>
> wrote:
> > 
> > > 
> > > On Sun, 13 Nov 2005, Steve Lamb wrote:
> > > 
> > > > > vi ... takes about 5 seconds bring up the
> files
> > > to add/delete users :-)
> > > > 
> > > > Yes, because as we all know vi is really
> web
> > > based.  No, really.
> > > 
> > > it should be fun to write a front-end to vi to
> make
> > > it look 
> > > like a point-n-click thingie ma jig for those
> that
> > > insist on web-based
> > > ( presumably over http or https if they're
> smarter )
> > 
> > Others may find themselves in situations that
> differ
> > from yours. I use adduser on my boxes, but I
> > administer servers that sit behind firewalls that
> > *only* allow traffic through port 80. I have no
> > control over the firewall or the decision making
> > process. I use webmin (actually I use webmin ssh
> > module to get a prompt rather than the webmin user
> > module, but that's not my point). Go easy on the
> > judgments, eh?
> 
> Well, the firewall designer which allows port 80 and
> not 22 is
> definitively braindead, since he forces you to make
> user/passwd
> operation through an open/visible link.

Yes. I couldn't agree more :)

Although he's probably never heard of Webmin (or ever
sat in front of a linux/unix box). 22 is closed.

--
Matt



___ 
To help you stay safe and secure online, we've developed the all new Yahoo! 
Security Centre. http://uk.security.yahoo.com


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: web-based http password/group manager

2005-11-14 Thread Hornet
On 11/13/05, Hamish Moffatt <[EMAIL PROTECTED]> wrote:
> Hi,
>
> Can anyone recommend a good web-based (CGI, PHP etc) manager for HTTP
> password/group files?
>
> Specifically I need to maintain a list of users, and assign the users to
> one or more groups.
>
> thanks
> Hamish
> --
> Hamish Moffatt VK3SB <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>
>
Webmin is a great tool for this, you will have to install the Apache
plug-in which gives you a nice htpasswd manager.

--

-Erik-



Re: web-based http password/group manager

2005-11-14 Thread loos
Em Seg, 2005-11-14 às 12:13 +, Matt Johnson escreveu:
> --- Alvin Oga <[EMAIL PROTECTED]> wrote:
> 
> > 
> > On Sun, 13 Nov 2005, Steve Lamb wrote:
> > 
> > > > vi ... takes about 5 seconds bring up the files
> > to add/delete users :-)
> > > 
> > > Yes, because as we all know vi is really web
> > based.  No, really.
> > 
> > it should be fun to write a front-end to vi to make
> > it look 
> > like a point-n-click thingie ma jig for those that
> > insist on web-based
> > ( presumably over http or https if they're smarter )
> 
> Others may find themselves in situations that differ
> from yours. I use adduser on my boxes, but I
> administer servers that sit behind firewalls that
> *only* allow traffic through port 80. I have no
> control over the firewall or the decision making
> process. I use webmin (actually I use webmin ssh
> module to get a prompt rather than the webmin user
> module, but that's not my point). Go easy on the
> judgments, eh?

Well, the firewall designer which allows port 80 and not 22 is
definitively braindead, since he forces you to make user/passwd
operation through an open/visible link.

Michel.



Re: web-based http password/group manager

2005-11-14 Thread Matt Johnson

--- Alvin Oga <[EMAIL PROTECTED]> wrote:

> 
> On Sun, 13 Nov 2005, Steve Lamb wrote:
> 
> > > vi ... takes about 5 seconds bring up the files
> to add/delete users :-)
> > 
> > Yes, because as we all know vi is really web
> based.  No, really.
> 
> it should be fun to write a front-end to vi to make
> it look 
> like a point-n-click thingie ma jig for those that
> insist on web-based
> ( presumably over http or https if they're smarter )

Others may find themselves in situations that differ
from yours. I use adduser on my boxes, but I
administer servers that sit behind firewalls that
*only* allow traffic through port 80. I have no
control over the firewall or the decision making
process. I use webmin (actually I use webmin ssh
module to get a prompt rather than the webmin user
module, but that's not my point). Go easy on the
judgments, eh?

--
Matt



___ 
To help you stay safe and secure online, we've developed the all new Yahoo! 
Security Centre. http://uk.security.yahoo.com


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: web-based http password/group manager

2005-11-14 Thread Alvin Oga

On Sun, 13 Nov 2005, Steve Lamb wrote:

> > vi ... takes about 5 seconds bring up the files to add/delete users :-)
> 
> Yes, because as we all know vi is really web based.  No, really.

it should be fun to write a front-end to vi to make it look 
like a point-n-click thingie ma jig for those that insist on web-based
( presumably over http or https if they're smarter )

c ya
alvin 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: web-based http password/group manager

2005-11-13 Thread Steve Lamb
Alvin Oga wrote:
> On Sun, 13 Nov 2005, Hamish Moffatt wrote:

>>Can anyone recommend a good web-based (CGI, PHP etc) manager for HTTP
>>password/group files?

>>Specifically I need to maintain a list of users, and assign the users to
>>one or more groups.

> vi ... takes about 5 seconds bring up the files to add/delete users :-)

Yes, because as we all know vi is really web based.  No, really.

-- 
 Steve C. Lamb | I'm your priest, I'm your shrink, I'm your
   PGP Key: 8B6E99C5   | main connection to the switchboard of souls.
---+-


signature.asc
Description: OpenPGP digital signature


Re: web-based http password/group manager

2005-11-12 Thread Alvin Oga


On Sun, 13 Nov 2005, Hamish Moffatt wrote:

> > vi ... takes about 5 seconds bring up the files to add/delete users :-)
> 
> This is true ;-) Except for encrypted passwords. Anyway, I want
> web-based so that web accounts can be administered more simply.

couple minutes to make a cgi-script that:

func add users()
htpasswd -c .htpasswd newuser

htpasswd administers its passwd automatically
and nothing to do about it .. including
changing from des to rsa to foo-encryption

find and delete users()
if [ grep user .htpasswd ]
  grep -iv user < .htpasswd.old > .htpasswd 

add the cosmetics as needed, or more importantly,
filter out all the whacky things like "rm -rf /" as
a username and/or passwd and watch for race conditions

or install somebody else's appp and spend min/hrs/days/weeks
trying to figure out what they intended for you to be doing

either way.. you will still need to make a webpage
that calls their cgi or your cleaned up cgi-as-above
to change your all important .htpasswd and .htaccess 
and other equivalent files

c ya
alvin



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: web-based http password/group manager

2005-11-12 Thread Allan Wind
On 2005-11-13T17:34:36+1100, Hamish Moffatt wrote:
> This is true ;-) Except for encrypted passwords. Anyway, I want
> web-based so that web accounts can be administered more simply.

webmin?


/Allan


signature.asc
Description: Digital signature


Re: web-based http password/group manager

2005-11-12 Thread Hamish Moffatt
On Sat, Nov 12, 2005 at 09:50:07PM -0800, Alvin Oga wrote:
> On Sun, 13 Nov 2005, Hamish Moffatt wrote:
> 
> > Can anyone recommend a good web-based (CGI, PHP etc) manager for HTTP
> > password/group files?
> > 
> > Specifically I need to maintain a list of users, and assign the users to
> > one or more groups.
> 
> vi ... takes about 5 seconds bring up the files to add/delete users :-)

This is true ;-) Except for encrypted passwords. Anyway, I want
web-based so that web accounts can be administered more simply.


thanks

Hamish
-- 
Hamish Moffatt VK3SB <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: web-based http password/group manager

2005-11-12 Thread Alvin Oga


On Sun, 13 Nov 2005, Hamish Moffatt wrote:

> Can anyone recommend a good web-based (CGI, PHP etc) manager for HTTP
> password/group files?
> 
> Specifically I need to maintain a list of users, and assign the users to
> one or more groups.

vi ... takes about 5 seconds bring up the files to add/delete users :-)

c ya
alvin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]