Re: [Gnump3d-users] password-protection for special URLs

[Ross Palmer Mohn]

I suspect if you upgrade to v2.8 your security problem will be solved. I
added a patch a bit ago that fixed this. My patch makes it so that you
only need a single .password file in your music root to protect the
entire site. GNUMP3d recursively searches up the directory tree looking
for a password file. This technique works on the "special" URLs as well.
Cheers! -Ross


On Wed, 2004-11-10 at 03:23, Bernd Gauweiler wrote:
> Following-up on this.... Although my configuration meets what Ray
> describes, the only page that is in fact protected is the home page.
> All the special URLs work without password, and I can actually play
> without authentication via the most recent, or custom playlists,
> entrances, using any browser. 
> 
> Is the single location of the .password file really sufficient, or
> does it have to be in each subfolder for the configured root?
> 
> Ray Tran wrote: 
> > Bernd, 
> > I have a .password file and I absolutely can't see anything without 
> > authenticating first. If you can, then maybe you have the file in
> > the 
> > wrong place or there is a bug in your version. FYI, my .password 
> > file is in the "root" defined in gnump3d.conf and I'm running v2.8. 
> > 
> > Bernd Gauweiler wrote: 
> > > I guess each newbie has 3 freebies, so here's my third one: 
> > > 
> > > How do I password-protect the special URLs, such as /prefs,
> > > /stats, etc? 
> > > 
> > > I guess what I am after is some global lock-out mechanism. I
> > > understand the .password file, but that still allows to see quite
> > > a lot of details, including the complete music collection (go
> > > Custom Playlists). Granted it won't play to unauthenticated users,
> > > but ideally the unauthorized visitor would see nothing at all,
> > > right? 
> > > 
> > > Any advice gratefully accepted, 
> > > Bernd 
> > 
> > ATB, 
> > Ray 
> > 
> > 
> > 
> > _______________________________________________ 
> > Gnump3d-users mailing list 
> > address@hidden
> > http://lists.gnu.org/mailman/listinfo/gnump3d-users
> > 
> > 
> 
> 
> ______________________________________________________________________
> _______________________________________________
> Gnump3d-users mailing list
> address@hidden
> http://lists.gnu.org/mailman/listinfo/gnump3d-users
-- 
Ross Mohn
address@hidden