[Xymon] Hide username and password in http test

[KING, KEVIN]

Make sure it is 0600 readable by owner only.  If that is not it, maybe someone may have other advice.

-Kevin

From: Chris Pretorius <chrisp at lightstone.co.za>
Sent: Thursday, March 18, 2021 10:46 AM
To: KING, KEVIN <KK1051 at att.com>; Xymon Mailing List <xymon at xymon.com>
Subject: RE: Hide username and password in http test

Hi

Xymon server runs as the xymon user, homedir is /usr/lib/xymon/

I placed the file there (Perms are xymon:xymon) but still no go



From: KING, KEVIN <KK1051 at att.com<mailto:KK1051 at att.com>>
Sent: Thursday, 18 March 2021 14:54
To: Chris Pretorius <chrisp at lightstone.co.za<mailto:chrisp at lightstone.co.za>>; Xymon Mailing List <xymon at xymon.com<mailto:xymon at xymon.com>>
Subject: RE: Hide username and password in http test

I have not used this, but based on the other items and the writers of the platform, I would put this in the home directory of the user that is running the xymon application.

-Kevin

From: Xymon <xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>> On Behalf Of Chris Pretorius
Sent: Thursday, March 18, 2021 7:35 AM
To: Xymon Mailing List <xymon at xymon.com<mailto:xymon at xymon.com>>
Subject: [Xymon] Hide usernam and password in http test

Hi

Im running a xymon server installed from the Terabithia repository

Release: xymon-4.3.30-1

I added a http test that requires basic authentication. The password has special characters.

The test works when I add the username and password in the full url, ie. https://server/page.htm?user=User&password=p@sw0rd<https://urldefense.com/v3/__https:/server/page.htm?user=User&password=p@sw0rd__;!!BhdT!374AslU01M-gavchN3GUGqP8XwfFNgqNoCReWupQ1GONsSAa_U5Dw_ifFODBWQ$>

The man pages mention a file ~/.netrc where you can store username and password for basic authentication

Which directory should the file be stored on the server.

Best regards



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20210318/e4ec02c0/attachment.htm>