rejetto forum

Software => HFS ~ HTTP File Server => Topic started by: Anonymous on December 07, 2003, 07:24:26 AM

Title: root login
Post by: Anonymous on December 07, 2003, 07:24:26 AM
I like the added function of only allowing users to see the folders they have access to but to have that work, you have to protect the root.

If the root is not protected, they get only the list of unprotected folders.

Is there a way to have this work without protecting the root

ex.  adding a login to the roots page?
Title: root login
Post by: rejetto on December 07, 2003, 12:38:57 PM
they could just type the URL in the form
http://user:pass@myip

i already tried to add a "login" link in the html, and i had problems with it.
i do not remember ATM...
Title: root login
Post by: Anonymous on December 08, 2003, 04:42:22 AM
I tried that and still the only folder that appears in the non protected folder.  I looks like the root will have to be protected to give the users access to their folders
Title: root login
Post by: rejetto on December 08, 2003, 03:12:51 PM
hmm, i just tried and it works to me
please, double-check
Title: root login
Post by: Anonymous on December 09, 2003, 03:49:34 AM
I just tried again and still I only get the unprotected folders.  I am using 1.5G.  I login using http://username:password@ip address:port number and login to the root, but only the unprotected folders show up.  To get the other folders to showup, I have to type in the folder after  http://username:password@ip address:port number,

Is this the same thing you did to get it to work?
Title: root login
Post by: rejetto on December 09, 2003, 07:37:22 PM
weird :?
Title: root login
Post by: Tim on December 12, 2003, 09:18:14 PM
Are you sure your protected folder isn't marked hidden?

I have just done a test, with a protected and un unprotected folder and I came to the following conclusion:
URL: http://host:port/ -> protected and unprotected folder is visible
URL: http://user:pass@host:port/ -> same result, protected and unprotected folder is visible
Title: root login
Post by: rejetto on December 12, 2003, 09:43:18 PM
Quote from: "Tim"
URL: http://host:port/ -> protected and unprotected folder is visible
URL: http://user:pass@host:port/ -> same result, protected and unprotected folder is visible

uh?
did you enable the list protected items... option?
Title: root login
Post by: Tim on December 13, 2003, 08:10:22 AM
Quote from: "rejetto"
did you enable the list protected items... option?
Sorry, I didn't enable that option...
Title: root login
Post by: rejetto on December 13, 2003, 03:18:53 PM
what a weak sight
it is not in that menu, it is in the "Virtual file system" menu
Title: root login
Post by: Anonymous on December 14, 2003, 06:23:20 AM
Rejetto, are getting the same problem I am getting with the root login or is it still working for you?  

If you have it working, could you explain how you did it in regards to how I did it.

thanks.
Title: root login
Post by: rejetto on December 14, 2003, 07:45:24 PM
1. enable list protected items only for allowed users
2. put an item in the VFS
3. right-click the item: access for users: choose a user
4. try browsing with URL in the form http://user:pass@host:port/


Tim, does it work for you now?
Title: root login
Post by: Tim on December 14, 2003, 08:16:00 PM
Quote from: "rejetto"
1. enable list protected items only for allowed users
2. put an item in the VFS
3. right-click the item: access for users: choose a user
4. try browsing with URL in the form http://user:pass@host:port/
Tim, does it work for you now?
I'm sorry this won't work for me.
This is what I have done:
1. Enabled option "list protected items only for allowed users"
2. Made a virtual folder with name "protected" and one with name "unprotected"
3. Folder "protected" has access only for user with name "user" and password "pass".
4. I browsed to http://user:pass@nettp.homeip.net:9080/ with Internet Explorer, Internet Explorer directly changes the url to http://nettp.homeip.net:9080/ and I only see the folder "unprotected"
5. This is wat I found out: when I surf directly to http://user:pass@nettp.homeip.net:9080/protected/ then I'm in the protected folder and when after that I surf to  http://nettp.homeip.net:9080/ I see also the protected folder listed.

You can try this for yourself with the URL above as long as I'm online.
Title: root login
Post by: Rafi on December 14, 2003, 08:47:06 PM
No. It was OK when I tried it (on your PC)
It only happens when you browes your own PC (I think. It happened on my PC when I did the same here...)

try on mine:  (will be open for a while for you )
http://rafi@rafi.homeip.net/protected
Title: root login
Post by: Tim on December 14, 2003, 08:52:13 PM
Quote from: "Rafi"
try on mine:  (will be open for a while for you )
http://rafi@rafi.homeip.net/protected
I have the same on your PC:
1. When I browse directly to http://rafi@rafi.homeip.net/ then I don't see the folder protected listed.
2. When I first browse to http://rafi@rafi.homeip.net/protected/ and after that without closing the browser to http://rafi@rafi.homeip.net/ then I do see the folder protected listed, because the browser remembers the username rafi now.

But it seems like when you surf directly (with a fresh opened browser so no username is remembered) to your root he won't accept the username.
Title: root login
Post by: Rafi on December 14, 2003, 08:57:34 PM
Quote from: "Tim"
Quote from: "Rafi"
try on mine:  (will be open for a while for you )
http://rafi@rafi.homeip.net/protected
I have the same on your PC:
1. When I browse directly to http://rafi@rafi.homeip.net/ then I don't see the folder protected listed.
2. When I first browse to http://rafi@rafi.homeip.net/protected/ and after that without closing the browser to http://rafi@rafi.homeip.net/ then I do see the folder protected listed, because the browser remembers the username rafi now.

But it seems like when you surf directly (with a fresh opened browser so no username is remembered) to your root he won't accept the username.


your # 2. is wrong !

it should be:
http://rafi@rafi.homeip.net/protected/
and then:
http://rafi.homeip.net/    or "UP"  (no user/PW...)
Title: root login
Post by: Tim on December 14, 2003, 09:01:10 PM
Quote from: "Rafi"
it should be:
http://rafi@rafi.homeip.net/protected/
and then:
http://rafi.homeip.net/     (no user/PW...)
Yes okay, but this won't make any difference.

But when you open a new browser window and you surf directly to http://user:pass@nettp.homeip.net:9080/ or http://rafi@rafi.homeip.net/ do you then see the folder "Protected" listed?
Title: root login
Post by: Rafi on December 14, 2003, 09:06:14 PM
No. May be this is the problem. It SHOULD show it... ?  8O

Edit:
I think you are right, it should show it the first time. May be an IE6 problem ?
Title: root login
Post by: Anonymous on December 15, 2003, 04:20:07 AM
I'm sorry for not being clear in the beginning of this post because this is what I was trying to explain.  Using http://user:pass@host:port works as long as you protect the root.  If the root is not protected, which is what I started this about, http://user:pass@host:port will only show the unprotected folders and not the protected folders.  So you will have to know the name of the protected folder you want to get to.  

Rejetto, have any idea why it works for you and noone else?
Title: root login
Post by: rejetto on December 15, 2003, 05:21:36 PM
ok, i found

it is Exploder that ignores user/pass in the URL, until the page is denied.
but i can't deny the root page if it is not actually protected, because this would cause unauthenticated users to not browse unprotected resources.

...looking for a solution... :read:
Title: root login
Post by: Anonymous on December 15, 2003, 09:33:53 PM
I see.

Thanks for looking into it

I will protect the root then.
Title: root login
Post by: rejetto on December 16, 2003, 02:05:22 AM
next version will fix this
Title: root login
Post by: Anonymous on December 16, 2003, 02:30:31 AM
Are you speaking of V2.0?

If so any ETA?
Title: root login
Post by: rejetto on December 16, 2003, 04:21:43 AM
nope

HFS 2 could come during my holidays, as i already said, but that's not assured. i will have so much other work to do.