[hobbit] restricting access to hobbit

[Iain Conochie]

Josh Luthman wrote:
> I've never used the PAGE statement, but I was under the impression it 
> was just going to put the following hosts in www/newpage.html instead 
> of www/bb.html - same directory.  Is this not so?

Nope. Using "PAGE NewPage This is a new page!" statement creates a 
directory NewPage and there is an index.html file under that

Iain

>
> On 11/15/07, *Iain Conochie* <iain at shihad.org 
> <mailto:iain at shihad.org>> wrote:
>
>     Josh Luthman wrote:
>     > With two groups of hosts you still only have one directory
>     accessible
>     > by web.  This means Apache HTTP authentication is out of the
>     question.
>     >
>     > That's about all I can tell you =/
>
>     Not necessarily!
>
>     You can use the PAGE statement in bb-hosts and then you have a new
>     directory for each page and sub-page underneath. You can then use
>     apache
>     auth for that.
>
>     Then for the top level you can also use apache auth for admins
>
>     Cheers
>
>     Iain
>
>     >
>     > On 11/15/07, *Phil Wild* <philwild at gmail.com
>     <mailto:philwild at gmail.com>
>     > <mailto:philwild at gmail.com <mailto:philwild at gmail.com>>> wrote:
>     >
>     >     No, not quite, I want to make a single hobbit install work
>     for two
>     >     groups of users, and I don't want group A to have any access to
>     >     see or do anything to Group B hosts and vice versa.
>     >
>     >     I am tryingto find out if there is a way of restricting the
>     >     reports/tools/executables to only run against a subset of the
>     >     hosts defined in bbhosts say like using bbgrep to filter on
>     a tag
>     >     or something for all functions.
>     >
>     >     Any ideas?
>     >
>     >     Phil
>     >
>     >
>     >     On 16/11/2007, *Josh Luthman* < josh at imaginenetworksllc.com
>     <mailto:josh at imaginenetworksllc.com>
>     >     <mailto:josh at imaginenetworksllc.com
>     <mailto:josh at imaginenetworksllc.com>>> wrote:
>     >
>     >         The default Apache configuration that Hobbit makes for you
>     >         will specify requiring HTTP logins for the cgisec
>     directory.
>     >         Is this what you're looking for?
>     >
>     >
>     >         On 11/14/07, * Phil Wild* <philwild at gmail.com
>     <mailto:philwild at gmail.com>
>     >         <mailto: philwild at gmail.com
>     <mailto:philwild at gmail.com>>> wrote:
>     >
>     >             Hello,
>     >
>     >             I am looking at setting up hobbit to manage two
>     groups of
>     >             hosts. I would prefer to just deploy one hobbit
>     >             installation for both groups. For most of the hobbit web
>     >             pages, Apache security solves a lot of the browsing
>     issues
>     >             but the cgi-bin executables and menus are the problem.
>     >
>     >             I want to make sure one group don't have access to
>     see or
>     >             make changes to the other groups hosts.
>     >
>     >             The areas I see a problem with are:
>     >
>     >             hobbit-enadis.sh
>     >             bb-findhost.sh
>     >             hobbit-confreport.sh
>     >
>     >             I would like to restrict the above to only work with a
>     >             subset of hosts (perhaps a tag in the bbhosts file)
>     >
>     >             The reports generate web pages on the fly and drop the
>     >             user at the top level page which is not what I would
>     >             prefer (each group have their own top level page etc.)
>     >
>     >             All nongreen view is also an issue
>     >
>     >             and lastly, manually modifying the URL based on
>     >             bb-hostsvc.sh to get to a web page for a host in the
>     other
>     >             groups list is also a problem.
>     >
>     >             Any ideas how I can address this?
>     >
>     >             Thanks
>     >
>     >             Phil
>     >
>     >
>     >
>     >
>     >         --
>     >         Josh Luthman
>     >         Office: 937-552-2340
>     >         Direct: 937-552-2343
>     >         1100 Wayne St
>     >         Suite 1337
>     >         Troy, OH 45373
>     >
>     >         Those who don't understand UNIX are condemned to
>     reinvent it,
>     >         poorly.
>     >         --- Henry Spencer
>     >
>     >
>     >
>     >
>     >     --
>     >     Tel: 0400 466 952
>     >     Fax: 0433 123 226
>     >     email: philwild at gmail.com <mailto:philwild at gmail.com>
>     <mailto:philwild at gmail.com <mailto:philwild at gmail.com>>
>     >
>     >
>     >
>     >
>     > --
>     > Josh Luthman
>     > Office: 937-552-2340
>     > Direct: 937-552-2343
>     > 1100 Wayne St
>     > Suite 1337
>     > Troy, OH 45373
>     >
>     > Those who don't understand UNIX are condemned to reinvent it,
>     poorly.
>     > --- Henry Spencer
>
>
>     To unsubscribe from the hobbit list, send an e-mail to
>     hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk>
>
>
>
>
>
> -- 
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
> Those who don't understand UNIX are condemned to reinvent it, poorly.
> --- Henry Spencer