You can use HTTP authentication like this (Ubuntu 16 LTS):

9. Vamos a configurar un VirtualHost para la app de la VTL

a)
    sudo -s
    cd /var/www/html
    mkdir vtl
    # Movemos los archivos a un directorio independiente
    mv index.html vtindex.html quadstorvtl/ vtl/
    
    # Ahora creamos el nuestro
    touch index.html
    chown www-data:www-data index.html
    echo "<html><body>Uds no deberia estar en este servidor</body></html>" 
> index.html
    
    cd /etc/apache2/sites-available
    cp 000-default.conf 001-vtl.conf
    
    vi 000-default.conf
    # Agregar las cuatro lineas estas:
    ---------------- 000-default ------------------------
    ...
    DocumentRoot /var/www/html
    
    <Directory /var/www/html>
        # Deshabilitamos el listado de Directorios
        Options -Indexes
    </Directory>
    ...
    -----------------------------------------------------

# ls -l /var/www/html/vtl/
total 20
drwxr-xr-x 3 root root 4096 Jun  5 07:36 ./
drwxr-xr-x 3 root root 4096 Jun  5 08:55 ../
-rw-r--r-- 1 root root   96 Jun  3 12:33 index.html
drwxr-xr-x 3 root root 4096 Jun  5 07:35 quadstorvtl/
-rw-r--r-- 1 root root   96 Jun  3 12:33 vtindex.html

# cat /etc/apache2/sites-enabled/001-vtl.conf
------------------------------------------------------------------------------------
<VirtualHost *:80>
        # Add the name defined here to admin PC DNS hosts file
        ServerName vtl-01.dominio.local

        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/html/vtl

        <Directory /var/www/html/vtl>
            Options -Indexes
            # Configuramos la autenticacion
            AuthType Basic
            AuthName "Gestion de Librerias Virtuales"
            # Optional line:
            AuthBasicProvider file
            AuthUserFile "/etc/apache2/usersAndPass.apache2"
            AuthGroupFile "/etc/apache2/userGroups.apache2"
            Require group VtlGroup
        </Directory>

        # Deshabilitamos el listado de Directorios
        Options -Indexes

        <Directory /usr/lib/cgi-bin>
            AuthType Basic
            AuthName "Scripts"
            AuthBasicProvider file
            AuthUserFile "/etc/apache2/usersAndPass.apache2"
            AuthGroupFile "/etc/apache2/userGroups.apache2"
            Require group VtlGroup
        </Directory>

        ErrorLog ${APACHE_LOG_DIR}/error-vtl.log
        CustomLog ${APACHE_LOG_DIR}/access-vtl.log combined

</VirtualHost>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
------------------------------------------------------------------------------------

    # cd /etc/apache2
    # htpasswd -c usersAndPass.apache2 paaUser  # Le puse usuario888
    
    # vi userGroups.apache2
    # cat userGroups.apache2
    --------------------------------------
    VtlGroup: paaUser otroUsuario
    --------------------------------------

   # systemctl reload apache2.service



Hope this help.


El lunes, 2 de enero de 2017, 14:17:34 (UTC-3), quadstor escribió:
>
> The GUI does not have control on the authentication by the web server. 
> Closing the web browser after a session might work. The only way the 
> web GUI can have control over a session is if itself does the 
> authentication. 
>
> On Thu, Dec 29, 2016 at 11:08 PM, Luciano Ferrara 
> <[email protected] <javascript:>> wrote: 
> > Thanks for your quick reply. 
> > Using Firefox, for example, I am able to open the Webadmin page again 
> > without log-in again. 
> > :-( 
> > Not so safe! 
> > Thanks 
> > Luk 
> > 
> > On Thursday, December 29, 2016 at 12:50:14 PM UTC+1, quadstor wrote: 
> >> 
> >> The GUI does not use cookies and it does tell the browser not to cache 
> >> pages . So you dont really need such a feature. Also history, caching 
> >> etc. are managed at the browser side. Even if the browser ignores the 
> >> no-cache hint and caches pages, you can try the private browsing 
> >> feature available in most browsers. 
> >> 
> >> On Thu, Dec 29, 2016 at 12:56 PM, Luciano Ferrara 
> >> <[email protected]> wrote: 
> >> > Dear Quadstor, 
> >> > 
> >> > thanks for your nice product. It works great. However managing the 
> >> > proper 
> >> > logout from the Web GUI is challenging (delete cookies, history, 
> >> > etc...). Do 
> >> > you have any plan to add Logout button? 
> >> > 
> >> > Regards, 
> >> > 
> >> > Luk 
> >> > 
> >> > -- 
> >> > You received this message because you are subscribed to the Google 
> >> > Groups 
> >> > "QUADStor VTL" group. 
> >> > To unsubscribe from this group and stop receiving emails from it, 
> send 
> >> > an 
> >> > email to [email protected]. 
> >> > For more options, visit https://groups.google.com/d/optout. 
> > 
> > -- 
> > You received this message because you are subscribed to the Google 
> Groups 
> > "QUADStor VTL" group. 
> > To unsubscribe from this group and stop receiving emails from it, send 
> an 
> > email to [email protected] <javascript:>. 
> > For more options, visit https://groups.google.com/d/optout. 
>

-- 
You received this message because you are subscribed to the Google Groups 
"QUADStor VTL" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/quadstor-vtl/0fd863f7-f02b-40d3-9666-1aca640a7166%40googlegroups.com.

Reply via email to