There seems to be some frequent confusion around how authentication work.
I see two distinct areas of auth, and I'm not quite sure how they're supposed to interact.
Many threads on the issue seem to suggest that disabling auth is the way to go. (var $noAuth=true;), but that seems dangerous.
To attempt to be clear.
config.php has $username and $password, which is says should be 'for the system user that runs VirtualBox'...
But that username and password appear to be what are prompted for when trying to connect to the php front end as well.
When the comment says 'for the system user' -- is that to mean the 'SSH user password'? Or something else in the vboxwebsrv config layer? (how do I set a username/password at the vboxwebsrv layer?)
To make things a little more confusing, I am attempting to manage multiple servers using the $servers array. That seems to allow for a username and password setting PER server.
If that is set, what username/password will be used when prompting the phpvirutalbox user?
I would like to propose that phpvirtualbox SPLIT the two auth functions (login to phpvirtualbox and auth against a backend vboxwebsrv) to make it explicitly clear.
I would also like to propose that var $servers be the DEFAULT way to configure any vboxwebsrv endpoint to reduce confusion with this feature. (an array of one field)
Any advice/guidance that doesn't involve just turning off auth would be appreciated.
Cheers,
Joel
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
So I've learned a bit .. the $username and $password variables have nothing to do with auth of the web app, and appear to need to match the ssh username/password of the user that runs vboxwebsrv.
I now have multi server auth and connections working well..
The UI to change server is a little odd. (why not make it like a group?)
Otherwise, pretty happy.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
There seems to be some frequent confusion around how authentication work.
I see two distinct areas of auth, and I'm not quite sure how they're supposed to interact.
Many threads on the issue seem to suggest that disabling auth is the way to go. (var $noAuth=true;), but that seems dangerous.
To attempt to be clear.
config.php has $username and $password, which is says should be 'for the system user that runs VirtualBox'...
But that username and password appear to be what are prompted for when trying to connect to the php front end as well.
When the comment says 'for the system user' -- is that to mean the 'SSH user password'? Or something else in the vboxwebsrv config layer? (how do I set a username/password at the vboxwebsrv layer?)
To make things a little more confusing, I am attempting to manage multiple servers using the $servers array. That seems to allow for a username and password setting PER server.
If that is set, what username/password will be used when prompting the phpvirutalbox user?
I would like to propose that phpvirtualbox SPLIT the two auth functions (login to phpvirtualbox and auth against a backend vboxwebsrv) to make it explicitly clear.
I would also like to propose that var $servers be the DEFAULT way to configure any vboxwebsrv endpoint to reduce confusion with this feature. (an array of one field)
Any advice/guidance that doesn't involve just turning off auth would be appreciated.
Cheers,
Joel
So I've learned a bit .. the $username and $password variables have nothing to do with auth of the web app, and appear to need to match the ssh username/password of the user that runs vboxwebsrv.
I now have multi server auth and connections working well..
The UI to change server is a little odd. (why not make it like a group?)
Otherwise, pretty happy.