Authentication for SEA Web Interface of WEBES

[michael zoumboulakis]

Hi,

The web interface running on http://ip_address:7902/ does not require a valid username or password.

I was reading the user guide, and there doesn't seem to be an option for turning authentication on. Is this the case?

Does anybody know a way to make the web interface accessible only by password?

Because I don't really want the outside world to see what's going on my boxes.

Thanks for your help.
Michael

[Wim Van den Wyngaert]

Don't think it is possible. The username is just something to link config data with.

If it is important, you can scan (e.g. every second) the output of ucx show dev/port=7902 for unauthorized usage (based upon client ip) and use ucx disconn to remove them.

Or use a firewall.

Wim

[Hoff]

AFAIK, this is a limitation of current WEBES, and can certainly also be argued a security exposure. Either shut off WEBES, or implement a firewall. (I too wish it did not work this way, though I usually configure or recommend that the boxes be behind firewalls regardless.)

[michael zoumboulakis]

Thanks guys, I thought that was the case. It seems strange though...
Thanks again.
M