[Xymon] Clearing ACK user credentials in the user interface (UI)

[Jeremy Laidman]

Didds

Firstly, make sure that your webserver is actually requiring authentication
when accessing the ack page. This could be by inspecting the headers in
"Developer Tools" (Ctrl+Shift-I in Firefox, Chrome and Edge) or by
reviewing the webserver log for the authenticated user field. Or you could
temporarily change the password or remove the account from xymonpasswd to
see if that fails to authenticate.

In Edge and Chrome you can selectively review and delete cached credentials
by going into Settings -> (Autofill / Profiles) -> Passwords, or entering
edge://settings/passwords or chrome://settings/passwords into the location
bar. In Firefox it's about:logins, or go to Options -> Privacy & Security
-> Logins and Passwords.

It's possible that changing the password on the webserver (in xymonpasswd)
will force the browser to prompt you for the password, and also clear the
cached entry. You can then change the password back again on the server.
But I'm not confident - it might just continue to try the old cached entry.

Just a thought: are you running a password manager such as Lastpass or
Bitwarden? These utilities might be automagically entering the credentials
for you. Lastpass has an "autofill" option that can be set/cleared for each
username/password, and if set, this might be authenticating you
automagically.

Cheers
Jeremy


On Mon, 30 Nov 2020 at 21:28, Ian Diddams via Xymon <xymon at xymon.com> wrote:

>
> Date: Mon, 30 Nov 2020 10:08:03 +0000 (UTC)
> Subject: Clearing ACK user credentials in the user interface (UI)
> We have several hobbit servers running in different environments (4.3.28)
>
> In order to ack or enable and disable alerts we have (of course) an
> account created within hobbit
>
> i.e.   htpasswd -c /etc/xymon/server/etc/xymonpasswd <user>
>
> Across multi
> ple different web browsers (IE, Edge, FF, Chrome, opera etc) over time
> I've used these credentials and theyve somehow/somewhere been cached. But
> here's the wierd thing - I cant clear them!  eg if I use shit+ctrl+delete
> for all time and everything, or firefox.exe -p for a clean profile, in a
> browser with no proxies and reopened after clwearing etc...  an attempt to
> ack goes straight to the ack page and doesnt prompt me for the UI account
> credentials?  This must be browser/OS based rather than  hobbit/xymon
> itself of course but its driving me nuts?
>
> Anyone able to put me out of my siery and advise how i can make sure I
> clear this stuff so ic an test correctly etc ?
>
> cheers
>
> didds
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20201201/be504b7d/attachment.htm>