11-19-2008
hmmm,
not really sure if I can use PAM.
Thanks for the suggestion though.
10 More Discussions You Might Find Interesting
1. Solaris
just installed solaris on my dell pc. I partinon my hard drive to dual boot solaris and windows.
window works fine and solaris as well but after login in more to 3 times in solaris i keep getting this error as below and as a result i could not login again.
I have re-installed several times but... (3 Replies)
Discussion started by: seyiisq
3 Replies
2. Cybersecurity
Hello,
I have created a web page on a server using apache and added .htaccess and .htpasswd in the folder for authentification.
I was wondering if there was anyway to tie-in the login for this page with the login used to logon to the server.
i.e. the same login info. is used for both, when... (1 Reply)
Discussion started by: WhotheWhat
1 Replies
3. Web Development
I had a login page and want to authenticate through a Unix file (.txt file).
-----abc.txt------
absvd|sfjlfnfkf
anldnv|asklffdko
------------------
So I want to read the file and check if corresponding username and password matches or not using javascript or JSP. Also tell me in which... (1 Reply)
Discussion started by: ravi18s
1 Replies
4. UNIX and Linux Applications
Hi ,
I am new user.
As you know when acl is defined in /etc/squid/squid.conf file according to its http_access users are able to access internet.
Before that .htaccess asks them to access internet.
It is fine.
I saw in some customised linux servers in place of .htaccess login ,html web page... (1 Reply)
Discussion started by: sandeepvson
1 Replies
5. Shell Programming and Scripting
How can I make htmldoc write to pdf page that requires login and password?
I'am doing it with PHP passthru. I have my login but htmldoc in passthru is showing me only login page. (4 Replies)
Discussion started by: Demerzel
4 Replies
6. Web Development
Hi all,
I am stepping into web-development as a hobby point of view. I am using WAMP server & have created the initial page & SQL set-up too. My problem is, I was able to login to a page/redirect to a page though I haven't specified my username & password. I thought of using both... (2 Replies)
Discussion started by: gameboy87
2 Replies
7. AIX
I want to learn AIX. I would like to find someone who would be willing to give me a login to their AIX home lab server. My intent is to poke around and discover the similarities and differences of AIX compared to other *NIXs.
I am a UNIX admin so I can think of what some immediate concerns may... (1 Reply)
Discussion started by: perl_in_my_shel
1 Replies
8. AIX
Hi,
i am able to login to AX server thru console but not able to login directly thru server.
also the server is not ping-able with other server.
filesystem is fine. and OS version is AIX 5.3.
please let me know if you need any specific log.
thx in advance.
Scriptor (2 Replies)
Discussion started by: scriptor
2 Replies
9. Linux
Hello dears,
I am trying to log in the website using curl but no luck so far.
The web page Content-Type is : text/html;charset=ISO-8859-1
I try the following command using curl:
curl \
--header "Content-type: text/html" \
--request POST \
--data '{"user": "someusername",... (0 Replies)
Discussion started by: Vit0_Corleone
0 Replies
10. UNIX for Beginners Questions & Answers
I'm currently logged in as Root on a Solaris 10 Server for my schools department and I'm trying to figure out why 20 of my users(Students) can log into the Solaris 10 Sun Ray Oracle Server with correct username and password but then be looped back to the same log in page. I tried deleting their... (7 Replies)
Discussion started by: mwilliams21z
7 Replies
LEARN ABOUT REDHAT
upsset.conf
UPSSET.CONF(5) Network UPS Tools (NUT) UPSSET.CONF(5)
NAME
upsset.conf - Configuration for Network UPS Tools upsset.cgi
DESCRIPTION
This file only does one job - it lets you convince upsset.cgi(8) that your system's CGI directory is secure. The program will not run
until this file has been properly defined.
SECURITY REQUIREMENTS
upsset.cgi(8) allows you to try login name and password combinations. There is no rate limiting, as the program shuts down between every
request. Such is the nature of CGI programs.
Normally, attackers would not be able to access your upsd(8) server directly as it would be protected by the ACCESS/ACL directives in your
upsd.conf(5) file and hopefully local firewall settings in your OS.
Since upsset runs on your web server, it could provide a passage from the outside to the inside, bypassing any firewall rules or upsd
access control limitations, since it appears to be coming from the web server. This is why you must secure it first.
On Apache, you can use the .htaccess file or put the directives in your httpd.conf. It looks something like this, assuming the .htaccess
method:
<Files upsset.cgi>
deny from all
allow from your.network.addresses
</Files>
You will probably have to set "AllowOverride Limit" for this directory in your server-level configuration file as well.
If this doesn't make sense, then stop reading and leave this program alone. It's not something you absolutely need to have anyway.
Assuming you have all this done, and it actually works (test it!), then you may add the following directive to this file:
I_HAVE_SECURED_MY_CGI_DIRECTORY
If you lie to the program and someone beats on your upsd through your web server, don't blame me.
SEE ALSO
upsset.cgi(8)
Internet resources:
The NUT (Network UPS Tools) home page: http://www.exploits.org/nut/
NUT mailing list archives and information: http://lists.exploits.org/
Tue Jul 30 2002 UPSSET.CONF(5)