e2openplugin-OpenWebif icon indicating copy to clipboard operation
e2openplugin-OpenWebif copied to clipboard

add whitelist option for authentification of specific IPs or network addresses

Open B3rt opened this issue 3 years ago • 5 comments

Please add an option to whitelist IP addresses or network addresses (local network) to access webif without any authorization.

For example when connected from IP range 192.1.68.1.0/24 then there is no authorization needed, connected from an other network range then you must enter username/password.

Also it would be great if it was possible to add seperate users to authorize instead of the main box user (root).

B3rt avatar May 03 '21 20:05 B3rt

Also it would be great if it was possible to add seperate users to authorize instead of the main box user (root).

That's already possible: Any Linux user on the box can log in. OWIF also already has an option to disable root logins.

Schimmelreiter avatar May 04 '21 16:05 Schimmelreiter

Then we only need to implement "disable login for local network" defined like "192.168.1.0/24"

jbleyel avatar May 04 '21 16:05 jbleyel

We could turn "require login" a tri-state: Always, external, never

Currently it's "Yes/No".

Schimmelreiter avatar May 04 '21 17:05 Schimmelreiter

Sounds good, but we have an auth switch for http and https and these settings needs to be merged from the current yes/no. Otherwise the current setting will be lost.

jbleyel avatar May 04 '21 17:05 jbleyel

Also it would be great if it was possible to add seperate users to authorize instead of the main box user (root).

That's already possible: Any Linux user on the box can log in. OWIF also already has an option to disable root logins.

I do not mean any user of the box.... Separate users, an option to create a users in webif itself, most user have no linux experience or even knowhow of a console, so to create a user must be simple from the webinterface itself.

Where in webif can you disable root login? I cannot find it and if root login is disabled how do you login then, which user? I myself have NOT created any extra users on my box.

B3rt avatar May 04 '21 18:05 B3rt