Re: [hobbit] restricting access to hobbit

["Josh Luthman" <josh (at) imaginenetworksllc.com>]

The default Apache configuration that Hobbit makes for you will specify
requiring HTTP logins for the cgisec directory. Is this what you're looking
for?

On 11/14/07, Phil Wild <philwild (at) gmail.com> wrote:
>
> Hello,
>
> I am looking at setting up hobbit to manage two groups of hosts. I would
> prefer to just deploy one hobbit installation for both groups. For most of
> the hobbit web pages, Apache security solves a lot of the browsing issues
> but the cgi-bin executables and menus are the problem.
>
> I want to make sure one group don't have access to see or make changes to
> the other groups hosts.
>
> The areas I see a problem with are:
>
> hobbit-enadis.sh
> bb-findhost.sh
> hobbit-confreport.sh
>
> I would like to restrict the above to only work with a subset of hosts
> (perhaps a tag in the bbhosts file)
>
> The reports generate web pages on the fly and drop the user at the top
> level page which is not what I would prefer (each group have their own top
> level page etc.)
>
> All nongreen view is also an issue
>
> and lastly, manually modifying the URL based on bb-hostsvc.sh to get to a
> web page for a host in the other groups list is also a problem.
>
> Any ideas how I can address this?
>
> Thanks
>
> Phil
>



-- 
Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly.
--- Henry Spencer