Guest access to syslog

adrianmarsh · Post by **adrianmarsh** » Sat Mar 10, 2007 9:56 am

Hi All,

I'm still fighting an issue I had from way back in an early 0.8.6 release with the Syslog plugin..

I want to give access to the built in "guest" account to the syslog logs, so I edit the guest accout perms, and tick "View Syslog"

I logout, then login as guest/guest. I can see the Syslog tab at the top. I click the tab, and it puts me back to the logon screen again..

I re-enter the guest login details again, and then I get sent to a page not-found (404) error for plugins/haloe/graph_view.php

Same in IE7 and Firefox2.

Post by **rony** » Sat Mar 10, 2007 12:24 pm

Moved to Plugins General.

This is a plugin question.

Post by **TheWitness** » Sat Mar 10, 2007 3:08 pm

Look at graph_view.php and you will note a few lines of code at the very beginning of the file. Something to do with guest or global auth or something like that. You will see a trend when you look at files that are accessible by guests as opposed to stuff that is for the console.

That should be enough to get you through the hoop.

TheWitness

adrianmarsh · Post by **adrianmarsh** » Sun Mar 11, 2007 3:17 am

If you mean this bit:

Code: Select all

 +-------------------------------------------------------------------------+
 | - raXnet - http://www.raxnet.net/                                       |
 +-------------------------------------------------------------------------+
*/

$guest_account = true;
include("./include/auth.php");
include("./lib/html_tree.php");
include("./include/html/inc_timespan_settings.php");
include("./include/top_graph_header.php");

then I guess that bits already set.. Normal graph browsing as guest is ok, as is Thold, and Monitor, its only when Haloe is used that I have problems.

Post by **TheWitness** » Sun Mar 11, 2007 6:11 am

Interesting. Give you guest access to the console and see it that changes anything. Jimmy should know about this.

TheWitness

adrianmarsh · Post by **adrianmarsh** » Sun Mar 11, 2007 12:49 pm

Giving console access to guest didn't make any difference. I'll send Jimmy a message to let him know.

cigamit · Post by **cigamit** » Thu Mar 15, 2007 10:34 pm

This should be fixed in SVN already (as of a week or so ago)

adrianmarsh · Post by **adrianmarsh** » Fri Mar 16, 2007 11:37 am

Yep... found it... ta..

adrianmarsh · Post by **adrianmarsh** » Mon Apr 16, 2007 3:17 pm

One other thing - I noticed that theres no "security" around the filtering option (once Guest access is allowed). Which means anyone can setup a filter for a host (with no text), and have it wipe it out all entries rom Syslog (bad if you want to check login attempts..)

Post by **TheWitness** » Mon Apr 16, 2007 9:13 pm

Hmm, that sucks...

cigamit · Post by **cigamit** » Tue Apr 17, 2007 11:27 am

adrianmarsh wrote:One other thing - I noticed that theres no "security" around the filtering option (once Guest access is allowed). Which means anyone can setup a filter for a host (with no text), and have it wipe it out all entries rom Syslog (bad if you want to check login attempts..)

I have now removed guest access to the alerting / removal rules.

Cacti

Guest access to syslog

Guest access to syslog

Who is online