Re: webbased authpf ?

2006-09-19 Thread Frans Haarman
On 9/18/06, Brian Shackelford [EMAIL PROTECTED] wrote: While a web-based solution would be more than ideal - I think what I have will work. What our clients need is a piece of software that doesn't require much user interaction - even Putty would be hard to convince them to use. So we hide

Re: webbased authpf ?

2006-09-19 Thread chris barry
On Tue, 2006-09-19 at 13:37 +0200, Frans Haarman wrote: On 9/18/06, Brian Shackelford [EMAIL PROTECTED] wrote: While a web-based solution would be more than ideal - I think what I have will work. What our clients need is a piece of software that doesn't require much user interaction - even

Re: webbased authpf ?

2006-09-19 Thread Frans Haarman
On 9/19/06, chris barry [EMAIL PROTECTED] wrote: Q: if the website gives away the password/key, how do you limit access? Is there some generic login, published in the company (like on the conference room wall), used first to get this session data? How would this login data be secured wirelessly?

Re: webbased authpf ?

2006-09-19 Thread Jacob Yocom-Piatt
i haven't been following this thread very closely, but i do remember someone mentioning using a java ssh client. this seems to be a good way to use authpf: - have a webpage that has the java ssh client on it and instructions to ssh to some.host to gain access, in case ppl don't want to use the

Re: webbased authpf ?

2006-09-19 Thread chris barry
On Tue, 2006-09-19 at 15:33 +0200, Frans Haarman wrote: On 9/19/06, chris barry [EMAIL PROTECTED] wrote: Q: if the website gives away the password/key, how do you limit access? Is there some generic login, published in the company (like on the conference room wall), used first to get this

Re: webbased authpf ?

2006-09-18 Thread Joachim Schipper
On Sun, Sep 17, 2006 at 08:46:40PM -0600, Chris Kuethe wrote: On 9/17/06, Lars Hansson [EMAIL PROTECTED] wrote: On Saturday 16 September 2006 03:33, Bryan Irvine wrote: Just make a table and write up some script that add to the table. Something like nocat would probably what you are

Re: webbased authpf ?

2006-09-18 Thread Bryan Irvine
On 9/17/06, Chris Kuethe [EMAIL PROTECTED] wrote: On 9/17/06, Bryan Irvine [EMAIL PROTECTED] wrote: Or for that matter logged in. Correct me if I'm wrong on this but if you were to have some php or other script that runs from an http session wouldn't the session originate from the http

Re: webbased authpf ?

2006-09-18 Thread Lars Hansson
On Monday 18 September 2006 16:01, Bryan Irvine wrote: Yes but does authpf have a mechanism for understanding this? You could insert the Ip address into the authpf_users table (or whatever table you want, really) but you'd still have the good ole problem of reliably detecting user logout or

Re: webbased authpf ?

2006-09-18 Thread Bob Beck
* Joachim Schipper [EMAIL PROTECTED] [2006-09-18 00:55]: On Sun, Sep 17, 2006 at 08:46:40PM -0600, Chris Kuethe wrote: On 9/17/06, Lars Hansson [EMAIL PROTECTED] wrote: On Saturday 16 September 2006 03:33, Bryan Irvine wrote: Just make a table and write up some script that add to the

Re: webbased authpf ?

2006-09-18 Thread Brian Shackelford
: Monday, September 18, 2006 4:10 AM To: misc@openbsd.org Subject: Re: webbased authpf ? On Monday 18 September 2006 16:01, Bryan Irvine wrote: Yes but does authpf have a mechanism for understanding this? You could insert the Ip address into the authpf_users table (or whatever table you want, really

Re: webbased authpf ?

2006-09-18 Thread Joachim Schipper
On Mon, Sep 18, 2006 at 11:23:52AM -0400, Brian Shackelford wrote: Hello, I have been following this thread and am extremely interested in any solutions to the presented scenarios. We use OpenBSD to build firewall/Spam filtering boxes customized as needed by our customers. I have been

Re: webbased authpf ?

2006-09-17 Thread Lars Hansson
On Friday 15 September 2006 21:09, Bibby Michael wrote: Write cgi scripts with Python for web interface and Python+wxPython for GUI application. Since you're already writing your frontend in Python it's much better and more reliable to use one of the Python ssh modules. HTTP is stateless and

Re: webbased authpf ?

2006-09-17 Thread Lars Hansson
On Saturday 16 September 2006 03:33, Bryan Irvine wrote: Just make a table and write up some script that add to the table. Something like nocat would probably what you are looking for. Maybe nocat would work? I've never used it so I don't know. (This apply to all HTTP fw/authpf solutions...)

Re: webbased authpf ?

2006-09-17 Thread Bryan Irvine
On 9/17/06, Lars Hansson [EMAIL PROTECTED] wrote: On Saturday 16 September 2006 03:33, Bryan Irvine wrote: Just make a table and write up some script that add to the table. Something like nocat would probably what you are looking for. Maybe nocat would work? I've never used it so I

Re: webbased authpf ?

2006-09-16 Thread Joachim Schipper
On Fri, Sep 15, 2006 at 02:18:58PM -0500, Victor Camacho wrote: Jeff Quast wrote: On 9/15/06, Joachim Schipper [EMAIL PROTECTED] wrote: It would probably be best to let a daemon or cronjob outside the chroot read it; a socket or even a simple pipe in the chroot is sufficient to signal a

Re: webbased authpf ?

2006-09-16 Thread Victor Camacho
Joachim Schipper wrote: On Fri, Sep 15, 2006 at 02:18:58PM -0500, Victor Camacho wrote: Jeff Quast wrote: On 9/15/06, Joachim Schipper [EMAIL PROTECTED] wrote: It would probably be best to let a daemon or cronjob outside the chroot read it; a socket or even a simple pipe in the

webbased authpf ?

2006-09-15 Thread Frans Haarman
Is there someting which does Authpf like things, only via a website ? So the users authenticates on the website, then the firewall rules are loaded! Another idea I have is to simply have users authenticate, then they can download a ssh key with which they can login.

Re: webbased authpf ?

2006-09-15 Thread Joachim Schipper
On Fri, Sep 15, 2006 at 10:27:29AM +0200, Frans Haarman wrote: Is there someting which does Authpf like things, only via a website ? So the users authenticates on the website, then the firewall rules are loaded! Another idea I have is to simply have users authenticate, then they can

Re: webbased authpf ?

2006-09-15 Thread viq
On 9/15/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Fri, Sep 15, 2006 at 10:27:29AM +0200, Frans Haarman wrote: Is there someting which does Authpf like things, only via a website ? So the users authenticates on the website, then the firewall rules are loaded! Another idea I have is to

Re: webbased authpf ?

2006-09-15 Thread Bibby Michael
Frans Haarman wrote: Is there someting which does Authpf like things, only via a website ? So the users authenticates on the website, then the firewall rules are loaded! Another idea I have is to simply have users authenticate, then they can download a ssh key with which they can login.

Re: [OpenBSD] webbased authpf ?

2006-09-15 Thread MH
On Fri, Sep 15, 2006 at 10:27:29AM +0200, Frans Haarman wrote: Is there someting which does Authpf like things, only via a website ? So the users authenticates on the website, then the firewall rules are loaded! Another idea I have is to simply have users authenticate, then they can

Re: webbased authpf ?

2006-09-15 Thread Jacob Yocom-Piatt
Original message Date: Fri, 15 Sep 2006 14:21:22 +0200 From: viq [EMAIL PROTECTED] Subject: Re: webbased authpf ? To: misc@openbsd.org On 9/15/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Fri, Sep 15, 2006 at 10:27:29AM +0200, Frans Haarman wrote: Is there someting which does

Re: webbased authpf ?

2006-09-15 Thread Joachim Schipper
On Fri, Sep 15, 2006 at 09:18:09AM -0500, Jacob Yocom-Piatt wrote: Original message Date: Fri, 15 Sep 2006 14:21:22 +0200 From: viq [EMAIL PROTECTED] Subject: Re: webbased authpf ? To: misc@openbsd.org On 9/15/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Fri, Sep 15

Re: webbased authpf ?

2006-09-15 Thread Jeff Quast
On 9/15/06, Joachim Schipper [EMAIL PROTECTED] wrote: It would probably be best to let a daemon or cronjob outside the chroot read it; a socket or even a simple pipe in the chroot is sufficient to signal a daemon, or even send the whole IP address. Of course, this does result in a two-part

Re: webbased authpf ?

2006-09-15 Thread Victor Camacho
Jeff Quast wrote: On 9/15/06, Joachim Schipper [EMAIL PROTECTED] wrote: It would probably be best to let a daemon or cronjob outside the chroot read it; a socket or even a simple pipe in the chroot is sufficient to signal a daemon, or even send the whole IP address. Of course, this does result

Re: webbased authpf ?

2006-09-15 Thread Bryan Irvine
On 9/15/06, Frans Haarman [EMAIL PROTECTED] wrote: Is there someting which does Authpf like things, only via a website ? So the users authenticates on the website, then the firewall rules are loaded! Just make a table and write up some script that add to the table. Something like nocat would