topic Re: Authentication for SEA Web Interface of WEBES in Operating System - OpenVMS

Authentication for SEA Web Interface of WEBES

michael zoumboulakis — Wed, 11 Apr 2007 05:30:04 GMT

Hi,

The web interface running on http://ip_address:7902/ does not require a valid username or password.

I was reading the user guide, and there doesn't seem to be an option for turning authentication on. Is this the case?

Does anybody know a way to make the web interface accessible only by password?

Because I don't really want the outside world to see what's going on my boxes.

Thanks for your help.
Michael

Re: Authentication for SEA Web Interface of WEBES

Wim Van den Wyngaert — Wed, 11 Apr 2007 08:01:39 GMT

Don't think it is possible. The username is just something to link config data with.

If it is important, you can scan (e.g. every second) the output of ucx show dev/port=7902 for unauthorized usage (based upon client ip) and use ucx disconn to remove them.

Or use a firewall.

Wim

Re: Authentication for SEA Web Interface of WEBES

Hoff — Wed, 11 Apr 2007 14:02:41 GMT

AFAIK, this is a limitation of current WEBES, and can certainly also be argued a security exposure. Either shut off WEBES, or implement a firewall. (I too wish it did not work this way, though I usually configure or recommend that the boxes be behind firewalls regardless.)

Re: Authentication for SEA Web Interface of WEBES

michael zoumboulakis — Wed, 11 Apr 2007 15:01:08 GMT

Thanks guys, I thought that was the case. It seems strange though...
Thanks again.
M