[ previous ] [ next ] [ threads ]
 
 From:  "NADAI MAURIZIO" <MAURIZIO dot NADAI at bts dot it>
 To:  "MonoWall-Developers List" <m0n0wall dash dev at lists dot m0n0 dot ch>
 Subject:  RE: [m0n0wall-dev] Logout / Change User on webGUI function?
 Date:  Mon, 24 Apr 2006 15:28:28 +0200
Hi all.

As far as I know, if you use the good old Basic Authentication method
then there's no way (read: no standard, clean way, that works on at
least the majority of browsers and web servers) to "logout". Closing the
browser is the ONLY solution.

This has nothing to do with m0n0. I'd a century old (so to speak) issue
that, as far as I know, has never been resolved (never meant to be,
perhaps).

That's why people implement their own logon pages (Yahoo, MSN, etc)
instead of relying on .htaccess et simila.

Should m0n0 have this feature? You have my vote.

Ciao
Maurizio


-----Original Message-----
From: Paul Taylor [mailto:ptaylor at addressplus dot net] 
Sent: Monday, 24 April, 2006 13:26
To: Stefan Frank
Cc: MonoWall-Developers List
Subject: Re: [m0n0wall-dev] Logout / Change User on webGUI function?


What I do: Use an alternate browser for testing purposes.  For example,
if your main browser is Firefox, use IE for testing.

The nice thing about this method is that you can be logged into the same
Monowall as two users, at the same time.  If something isn't right with
the permissions for the user you are testing, you can go to the browser
where you are logged in as a full admin and change the permissions.  No
need to open/close the "testing" browser, just select another link (or
refresh the page) and you'll see that your permissions have instantly
been updated.  Since permissions are re- read on each page-load, the
changes took effect immediately, altering the menu on the left side.

As far as why there isn't a logout button - I don't believe there is a
universal method (other than closing the browser) that works to log you
out across various browsers.  One day, I was looking through the pfSense
code and found that they had tried adding a logout button,  
which simply was a link to http://baduser:badpassword@yourMonowall.   
I was initially excited thinking that this was a very simple way to log
out of Monowall, but I believe they pulled this feature because of how
poorly it worked across browsers.  (Either that, or there was a comment
in the source stating that it only worked with such-and- such browser?
Don't recall.  If you're reading this, Scott, please correct me if I'm
wrong.)

Paul

On Apr 24, 2006, at 6:09 AM, Stefan Frank wrote:

> Hello Jonathan,
>
> If you run several monowall systems on different locations you use on 
> all the same passwords? I use for my self never the same passwords and

> store them in a secure database. If you use tab browseing (i do
> that)
> you want always to close open websites to change a user for testing?
>
> Its out of my knowledge why things should be made complicated if there

> are other ways possible that make it more usefull ;)
>
> --
> Best regards,
> Stefan Frank
>
> Looking for Monowall Adjustment?
> http://M0n0WaLL.RootServices.Biz
>
>
> Closing your browser is enough.
>
> J.
>
> --
> Jonathan De Graeve
> Network/System Engineer
> Imelda vzw
> Informatica Dienst
> +32 15/50.52.98
> jonathan dot de dot graeve at imelda dot be
>
> ---------
> Always read the manual for the correct way to do things because the 
> number of incorrect ways to do things is almost infinite
> ---------
>> -----Oorspronkelijk bericht-----
>> Van: John Lin [mailto:0chiehchen at gmail dot com]
>> Verzonden: maandag 24 april 2006 4:13
>> Aan: Stefan Frank
>> CC: MonoWall-Developers List
>> Onderwerp: Re: [m0n0wall-dev] Logout / Change User on webGUI 
>> function?
>>
>> Hi Stefan,
>>
>> Yeah, its good to have that feature.  I notice this last time I tried
> to
>> logout and login as different user and found there is no such
> feature...
>>
>>
>>
>> Best regards,
>>
>> John
>>
>>
>> On 4/24/06, Stefan Frank <Mono dot Developer at rootservices dot biz> wrote:
>>>
>>> Hi Everyone ...
>>>
>>> I guess the webGUI missing a way to logout from the webGUI and be 
>>> able to change the User (for tests if a user reports some
> problems
>>> with his/her login to the webGUI). Sounds like a thing for the to do
>> list.
>>>
>>> What do the others think here? :o)
>>>
>>> --
>>> Best regards,
>>> Stefan Frank
>>>
>>> Looking for Monowall Adjustment?
>>> http://M0n0WaLL.RootServices.Biz
>>>
>>>
>>>
> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: m0n0wall dash dev dash unsubscribe at lists dot m0n0 dot ch
>>> For additional commands, e-mail: m0n0wall dash dev dash help at lists dot m0n0 dot ch
>>>
>>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash dev dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash dev dash help at lists dot m0n0 dot ch
>


---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash dev dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash dev dash help at lists dot m0n0 dot ch