Re: Leaf 7.2.1: Webconf login does not appear

Hello Graziano and list,

 On Wed, Apr 5, 10:48 AM 2023, Timothy Wegner ran some tests on lighttpd
and did not report this problem. I did not check it yet but the
distribution should ask you to login as admin:admin when you first connect
an external computer to LEAF's eth1 port only, and browse to
https://192.168.1.254 . The doc. explains it here:
https://bering-uclibc.zetam.org/wiki/Bering-uClibc_7.x_-_User_Guide_-_Basic_Configuration_-_Booting_for_the_First_Time#Make_target_connections
.

I will run some tests when I have time ... and come back later !
jrb.

On Thu, May 18, 2023 at 10:18 AM Graziano Brioschi <
[email protected]> wrote:

> Hi list,
>
> I have found a missing configuration in /etc/lighttpd/conf/auth.conf:
> here the original file
>
> #######################################################################
> ##
> ##  Authentication Module
> ## -----------------------
> ##
> ## See https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs_ModAuth
> ## for more info and many more options.
> ##
>
> #server.modules += ( "mod_auth" )
>
> #server.modules += ( "mod_authn_file" )
> #auth.backend                 = "plain"
> #auth.backend.plain.userfile  = conf_dir + "/lighttpd.user"
>
> #server.modules += ( "mod_authn_ldap" )
> #auth.backend               = "plain"
> #auth.backend.ldap.hostname = "localhost"
> #auth.backend.ldap.base-dn  = "dc=my-domain,dc=com"
> #auth.backend.ldap.filter   = "(uid=$)"
>
> auth.backend                 = "htpasswd"
> auth.backend.htpasswd.userfile  = "/var/webconf/www/.htpasswd"
>
> auth.require               = ( "/server-status" =>
>                                 (
>                                   "method"  => "basic",
>                                   "realm"   => "Login",
>                                   "require" => "valid-user"
>                                 ),
>                               )
>
> ##
> ## cache passwords/digests in memory to reduce load on the backend
> ## max-age is in seconds
> ##   cache is checked for expiration every 8 seconds, so actual
> ##   caching may be up to 8 seconds longer than configured max-age.
> ## default: inactive (no caching)
> ##
> #auth.cache = ("max-age" => "600")
>
> ##
>
> and here the same file with correct configs to enable auth request:
>
> #######################################################################
> ##
> ##  Authentication Module
> ## -----------------------
> ##
> ## See https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs_ModAuth
> ## for more info and many more options.
> ##
>
> *server.modules += ( "mod_auth" )*
>
> #server.modules += ( "mod_authn_file" )
> #auth.backend                 = "plain"
> #auth.backend.plain.userfile  = conf_dir + "/lighttpd.user"
>
> #server.modules += ( "mod_authn_ldap" )
> #auth.backend               = "plain"
> #auth.backend.ldap.hostname = "localhost"
> #auth.backend.ldap.base-dn  = "dc=my-domain,dc=com"
> #auth.backend.ldap.filter   = "(uid=$)"
>
> auth.backend                 = "htpasswd"
> auth.backend.htpasswd.userfile  = "/var/webconf/www/.htpasswd"
>
> *auth.require               = ( "/" =>*
>                                 (
>                                   "method"  => "basic",
>                                   "realm"   => "Login",
>                                   "require" => "valid-user"
>                                 ),
>                               )
>
> ##
> ## cache passwords/digests in memory to reduce load on the backend
> ## max-age is in seconds
> ##   cache is checked for expiration every 8 seconds, so actual
> ##   caching may be up to 8 seconds longer than configured max-age.
> ## default: inactive (no caching)
> ##
> #auth.cache = ("max-age" => "600")
>
> ##
>
>
> Ciao
>
> Graziano
>
>
> Il 18/05/2023 15:48, Graziano Brioschi ha scritto:
> > Hi list,
> >
> > I think that we have found a problem with begin uClibc 7.2.1 x64.
> >
> > Using webconf (webconf with lighhttpd), I can login in the
> > configuration web interface without authenticate myself (no
> > username/password is asked by the system).
> >
> > Looking for .htpasswd in /var/webconf/www, I can found it and it seems
> > to be correct.
> >
> > # ls -l /var/webconf/www/.h*
> > -rw-r--r--    1 root     root            20 May 18 15:31
> > /var/webconf/www/.htpasswd
> > -rw-r--r--    1 root     root            20 Mar 25 18:15
> > /var/webconf/www/.htpasswd.dist
> >
> > Can someone suggest me something to check?
> >
> > I can found only these two warnings in /var/log/lighttpd/error.log,
> > but nothing related to .htpasswd or auth problems:
> >
> > 2023-05-18 15:27:16: (server.c.1588) server started (lighttpd/1.4.67)
> > 2023-05-18 15:27:16: (configfile.c.1287) WARNING: unknown config-key:
> > dir-listing.exclude (ignored)
> > 2023-05-18 15:27:16: (configfile.c.1287) WARNING: unknown config-key:
> > dir-listing.encoding (ignored)
> >
> > thanks
> >
> > Graziano
> >
> --
>
> Graziano Brioschi
>
> Outland s.a.s.
> sede operativa:
> Via A. Don Rocca, 13
> 20030, Senago (MI)
> tel: 02 9948 6014
> mobile: 328 8382622
> email:[email protected]
> --> U4E <--
>
> ------------------------------------------------------------------------
> leaf-user mailing list: [email protected]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>

------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/