Another authentication method

jt555 · Joined: 17 Nov 2007 Posts: 12 Location: Atlanta, Ga

Users from a certain IP range wouldn't need to login for graphs and plugins (defaults to guest) but clicking Console tab would require a login.

Users outside the IP range would need to login as normal.

It seems like this wouldn't be very difficult to implement. Does anyone else need this kind of functionality? It would be perfect for my environment.

BSOD2600 · Posted: Wed Mar 05, 2008 4:21 pm Post subject:

Sounds like the job for a plugin...

rony · Posted: Wed Mar 05, 2008 5:16 pm Post subject:

Nah, I like this idea...

I will look at integrating this when I'm updating the authentication system.

jt555 · Joined: 17 Nov 2007 Posts: 12 Location: Atlanta, Ga

Cool. Thanks.

The only change I would make to my post is that it should be IP ranges rather than one range.

rony · Posted: Wed Mar 05, 2008 5:47 pm Post subject:

Trying to complicate things already?

jt555 · Joined: 17 Nov 2007 Posts: 12 Location: Atlanta, Ga

Yes. Yes I am.

And another thing....

Since you're going to have to associate the auto-login to a certain user, you might as well have each allowed address range tied to a user. Could all be the same or could be different.

Howie · Posted: Thu Mar 06, 2008 11:20 am Post subject:

And on top of that... if you are going to have it tied to users, it should be tied to *groups* instead. Don't want to add our new RIPE allocation to 20 users.

But of course, you'll need to have groups first

jt555 · Joined: 17 Nov 2007 Posts: 12 Location: Atlanta, Ga

That makes more sense anyway.
Groups = Ranges.

We could call it 'Trusted Source' authentication.

rony · Posted: Thu Mar 06, 2008 12:26 pm Post subject:

FYI, groups are coming in 0.8.8, along with finite permission controls.

jt555 · Joined: 17 Nov 2007 Posts: 12 Location: Atlanta, Ga

TheWitness · Posted: Tue Nov 11, 2008 3:46 pm Post subject:

I have not seen a patch to date.

TheWitness

jt555 · Joined: 17 Nov 2007 Posts: 12 Location: Atlanta, Ga

Bummer. Was it ever seriously considered?

I guess I'll have to hack it so that we only get a login prompt if we try to access the console tab.

TheWitness · Posted: Tue Nov 11, 2008 11:48 pm Post subject:

What you need to do is follow the process:

Feature requests, one that go beyond here are logged at the following location:

http://bugs.cacti.net

Put it there, and it will be "Officially" on the list. I would support this patch. Of course, someone who contributes, is blessed.

TheWitness

jt555 · Joined: 17 Nov 2007 Posts: 12 Location: Atlanta, Ga

Mantis has an error when I follow the emailed link after account creation. I can't login.

If I submit this now what are the odds of it getting into 0.8.8?

TheWitness · Posted: Wed Nov 12, 2008 7:16 pm Post subject:

We actually have another beta of 0.8.7c to do. How soon?

TheWitness