webadmin-devel — The webmin development mailing list

RE: Images on a custom session login screen

[Andy L. <an...@ep...>]

Jamie,

>> You could have images embedded with HTML like :
>>
>> <img src="http://foo:bar@servername/login.gif">
>>
>> if you create a dummy webmin user called foo with password bar and
>> no access to any modules.

I tried this already to no avail. I even tried creating a dummy module
called "justimages" that the dummy user had access to, and it still wouldn't
serve up the images.  I also thought that because I was using https, that
this may have had some effect, but it didn't. I turned off SSL and it still
wouldn't surface the images.

My final test involved just junking my module and embedding the img link
directly into the standard session_login.cgi script as such:

	print "<img src=http://iu:iu\@machine:10000/justimages/pr_logo.gif>";

I put this just above the table definition. This still didn't work. I get
the image placeholder, but that is all.

It is difficult to debug this as the server detaches itself from the main
terminal and the requests are handled in spawned children. I'll play some
more today to see what else I can find.

Andy

Re: Images on a custom session login screen

[Jamie C. <jca...@we...>]

"Andy Levine" <an...@ep...> wrote ..
> I want to customize the entire session login screen. I modified the
> miniserv.conf file so session_login points to my new script
> (/custom/Login.cgi). Login.cgi properly sets the $main::no_acl_check flag
> so
> that it can be run. Login.cgi reads an HTML template and then passes it
> back. Unfortunately, the HTML has references to .GIF images embedded within
> it. When the browser requests these images, they ALWAYS fail.
> 
> I've determined (I think) that this is due to the fact that the session
> has
> not yet been established, and therefore I am not authorized yet to fetch
> the
> images.
> 
> Sounds like a Catch-22 to me. Can anyone think of a way to embed images
> within a custom session login script ?

You could have images embedded with HTML like :

<img src="http://foo:bar@servername/login.gif">

if you create a dummy webmin user called foo with password bar and
no access to any modules.

 - Jamie

Re: Images on a custom session login screen

[Alex de L. <ale...@xs...>]

> I've determined (I think) that this is due to the fact that the session has
> not yet been established, and therefore I am not authorized yet to fetch the
> images.
> 
> Sounds like a Catch-22 to me. Can anyone think of a way to embed images
> within a custom session login script ?

Maybe another way to get access to other stuff is automaticaly logging
in with a (severly) restricted webmin user. Use that user to start a
session with a little more access (and nice pretty pictures :) in your
login script.
I'm not really aquainted with the webmin login procedure, and this could
undermine security, but it may be possible. And besides, its just a
thought...

greets,
Alex de Landgraaf

RE: Images on a custom session login screen

[Andy L. <an...@ep...>]

Frank,

>> Do they fail if the images are located on another server, for example
>> an apache VirtualHost on the same machine?
Sure, that would/does work fine. Unfortunately, the box that we will hosting
the Webmin stuff on will NEVER have another http server on it. We were
relying on Webmin to serve up the minimal stuff we would need, all of which
are for the config modules themselves.

Andy

Re: Images on a custom session login screen

[Frank A. <fa...@is...>]

Hello !

Andy Levine wrote on 08.08.2001 14:39:44 -0500:
> Sounds like a Catch-22 to me. Can anyone think of a way to embed images
> within a custom session login script ?

<IMG SRC="http://images.yourserver.com/loginpic.gif">

Where's the problem? :)

With kind regards,

		Frank Altpeter - Laird Of Glencairn

-- 
"I learned how to handle delicate social situations from a little show
called 'Three's Company.'" -Fry 

Images on a custom session login screen

[Andy L. <an...@ep...>]

I want to customize the entire session login screen. I modified the
miniserv.conf file so session_login points to my new script
(/custom/Login.cgi). Login.cgi properly sets the $main::no_acl_check flag so
that it can be run. Login.cgi reads an HTML template and then passes it
back. Unfortunately, the HTML has references to .GIF images embedded within
it. When the browser requests these images, they ALWAYS fail.

I've determined (I think) that this is due to the fact that the session has
not yet been established, and therefore I am not authorized yet to fetch the
images.

Sounds like a Catch-22 to me. Can anyone think of a way to embed images
within a custom session login script ?

Thanks
Andy Levine

Re: Cant See Icon in WebMin?!?!?!?

[Jamie C. <jca...@we...>]

Jonathan Rain <jc...@ya...> wrote ..
> Hi there,
> 
> I have created a module that will manage my raid. 
> When i configured it with Webmin everything is fine
> but i cant seem to be able to see my icon within
> webmin of my web browser.  Could you run through the
> necessary steps that i miust go through so that this
> can work.  I have gone through the manual and it still
> doesn't help.  Could you provide potential causes and
> remedies for my problems.  I do see my module as a
> choice on one of the other webmin screens in my
> browser (no icon, just words next to a box).  

You need to go into the Webmin Users module, click on
'admin' or 'root' and grant yourself access to your
new module.

 - Jamie

Cant See Icon in WebMin?!?!?!?

[Jonathan R. <jc...@ya...>]

Hi there,

I have created a module that will manage my raid. 
When i configured it with Webmin everything is fine
but i cant seem to be able to see my icon within
webmin of my web browser.  Could you run through the
necessary steps that i miust go through so that this
can work.  I have gone through the manual and it still
doesn't help.  Could you provide potential causes and
remedies for my problems.  I do see my module as a
choice on one of the other webmin screens in my
browser (no icon, just words next to a box).  

Thanks very much

__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

VENTURE CAPITAL

[George U. <geo...@ya...>]

URGENT BUSINESS PROPOSAL

This letter may come to you as a surprise since it is coming from someone you have not met before.  However, we decided to contact you based on a satisfactory information we had about your business person as regard business information concerning your country and the safety of our funds in a steady economy such as that of your country compared to our country Nigeria Africa.

I am a civil adviser currently working with the monitoring committee overseeing the winding up of the petroleum trust fund(PTF).Myself and my close and trusted colleagues need your assistance in the transfer of US$25 million into any reliable Account you may nominate overseas. This fund was generated from over-invoicing of contracts executed by the PTF
under the administration of the past military government.

These were discovered while we were reviewing the PTF accounts. From our discoveries, these contracts have been executed and the contractors in question were all paid. The difference of US$25,000,000 being the over-invoiced amount is the funds, we want your corporate entity to help us receive.

What we want from you is a good and reliable company or personal Account into which we shall transfer this fund. Details should include the following:

 1. Name of Bank

 2. Address of Bank with Fax & Tel.

 3. Account Number

 4. Beneficiary/Signatory to Account (Account Name)

 Upon the Successful crediting of your account. The fund will be shared    as follows:

 1. 20% for you and your assistance

 2. 75% for myself & my Colleagues

 3. 5% for contingency expenses

Please after your first reply through e-mail I will want us to continue further communication by fax and telephone for confidential purpose. We wish to assure you that your involvement should you decide to assist us, will be well protected, and also, this business, proposal is 100% risk free as we have put a whole lot into it.

Thank you for your anticipated cooperation while we look forward to a mutually benefiting business relationship with you. Please when replying to my e-mail kindly include your telephone, fax number and mobile telephone numbers preferably extremely private numbers where we can reach you any time of the day. Please be aware that a high level of confidentiality and trust is required in this business. 

You can reach me on my confidential telephone number 234 1 7754093 and my fax number 234 9 2720239.

Best Regards,

George Umia.

Tel No.: 234 1 7754093
Fax No.:234 9 2720239
Email:drg...@eu...




_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

Re: HTTP Redirect support?

[Ryan W. M. <ry...@gu...>]

You could always replace the top-level index.cgi with something like this:

-----
#!/usr/bin/perl

  require "web-lib.pl";

  &redirect("/module");
-----

Or you can just hack up index.cgi to check the REMOTE_USER env. var. and
trigger the redirect on that...

-r

 +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+
   Ryan W. Maple          "I dunno, I dream in Perl sometimes..."  -LW
   Guardian Digital, Inc.                     ry...@gu...
 +-- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --+


On Sat, 28 Jul 2001, Nick Jennings wrote:

> Hello,
>  I'm wondering if there is a way to do a redirect with webmin (in
>  miniserv.pl?). 
>  
>  For Instance:
>  
>  When someone goes to --  http://webminurl:10000
>  I'd like them to go straight to --  http://webminurl:10000/module
> 
>  Is this possible currently?

Re: HTTP Redirect support?

[Nick J. <ni...@na...>]

On Sat, Jul 28, 2001 at 08:55:54PM -0700, Curtis Doty wrote:
> >
> > For Instance:
> >
> > When someone goes to --  http://webminurl:10000
> > I'd like them to go straight to --  http://webminurl:10000/module
> >
> 
> Does this person have only one module? You can configure the 'Go direct to
> module if user only has one' feature here...
> 
> http://webminurl:10000/webmin/edit_startpage.cgi
> 

 This seems like it should work. However, It actually goes to the
 category, not the module.

 It says, select Default Category.

 Then I say "Yes" to: "Go direct to module if user only has one?"

 However, when I go to -- http://webminurl:10000 

 It takes me to the Category the module is in, not the module itself
 (Yes there is just this one module in the category).

-- 
  Nick Jennings

RE: HTTP Redirect support?

[Curtis D. <Cu...@Gr...>]

> I'm wondering if there is a way to do a redirect with webmin (in
> miniserv.pl?).
>
> For Instance:
>
> When someone goes to --  http://webminurl:10000
> I'd like them to go straight to --  http://webminurl:10000/module
>
> Is this possible currently?

Does this person have only one module? You can configure the 'Go direct to
module if user only has one' feature here...

http://webminurl:10000/webmin/edit_startpage.cgi

../C

HTTP Redirect support?

[Nick J. <ni...@na...>]

Hello,
 I'm wondering if there is a way to do a redirect with webmin (in
 miniserv.pl?). 
 
 For Instance:
 
 When someone goes to --  http://webminurl:10000
 I'd like them to go straight to --  http://webminurl:10000/module

 Is this possible currently?

-- 
  Nick Jennings

[RESEND] pragma_no_cache?

[Kenneth P. <sh...@we...>]

I was finding that Opera was caching my webmin pages, so I looked at
the source code and found that webmin only issues a "pragma: no-cache"
in the HTTP header if $pragma_no_cache is true. I can't find anything
that sets this. Where does this get configured?

Ken
mailto:sh...@we...
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]

RE: bind8 user config problem

[Curtis D. <Cu...@Gr...>]

>> When webmin is populating the list of zones one is allowed to edit, it
>> should remove any no longer in named.conf. If the user is only allowed
>> to edit selected zones, webmin should not include any new zones.
>>
>> BTW, is there some way to provide "read-only" access to a zone? I'd
>> like to permit some users to inspect a zone but not to change it.
>
>Yes - you can allow a user to only view zones without being able
>to edit them.
>However, this applies to all the zones the user has access to, so you can't
>grant edit access to some and read-only access to others.

FYI, and easy work-around is to clone the module as 'BIND DNS Read-Only.'
Then grant your users r/w to specified zones in the original, and read-only
to specific zones in the copy.

../C

Re: bind8 user config problem

[Jamie C. <jca...@we...>]

Kenneth Porter wrote:
> 
> Ran into another one. I've been using Webmin's bind module as just a
> viewer for now, until I figure out how to add DDNS support. Meanwhile,
> I removed a zone (10.in-addr.arpa) that was in the set of zones I was
> allowing myself to edit, and added a couple of other zones (both
> forwarders, one a forward domain and one a reverse), by editing
> named.conf. When I looked at the result with webmin ("Existing DNS
> Zones"), I saw the old "10" zone and not the two new ones. Clicking on
> the old zone resulted in a Perl error page with the name of one of the
> new zones and this message: Can't use an undefined value as a HASH
> reference at /usr/libexec/webmin/bind8/edit_master.cgi line 28. It
> looks like the module isn't cross-checking the information from the
> webmin config files against the current state of the BIND config files.
> (This was after restarting webmin, which was necessary to get your
> updated bind module recognized.)

That's rather odd, because if a zone no longer exists it can never appear
on the zone list page, even if some user still has it in his list of allowed
zones. From your description, it sounds like you had the main page of the
bind module open, deleted a zone in another window and then click on the
deleted zone. 

Can you replicate this problem in webmin 0.87 ?
 
> When webmin is populating the list of zones one is allowed to edit, it
> should remove any no longer in named.conf. If the user is only allowed
> to edit selected zones, webmin should not include any new zones.
> 
> BTW, is there some way to provide "read-only" access to a zone? I'd
> like to permit some users to inspect a zone but not to change it.

Yes - you can allow a user to only view zones without being able to edit them.
However, this applies to all the zones the user has access to, so you can't
grant edit access to some and read-only access to others.

 - Jamie

Support for Apache 2.0?

[HARADA,LIZA (HP-Cupertino,ex1) <liz...@hp...>]

Hello Webmin-Devel!

I was wondering if anyone has plans for extending the Apache module to
support Apache 2.0.

Thanks,
Liza 

bind8: master/slave asymetry, SRV records, allow-update

[Kenneth P. <sh...@we...>]

I just noticed that webmin doesn't handle SRV records, so I started to
look at what would be needed to add support for them. I grepped all the
files in the module for "HINFO" to see where changes would need to be
made, and noticed a slight asymetry in the edit_{master,slave}.cgi
files. Observe the region where @rcodes is getting populated, and the
variations in the two scripts. This section just begs for factoring out
the common logic into a library routine to avoid the common logic
getting out of sync between the two files.

I'm trying to figure out where to hook in dynamic updates, but for now
I'd recommend NOT writing a zone file for an existing zone that has
allow-update in its options. I figure if this option is present for the
zone, the record-editing scripts should invoke nsupdate instead of
writing a new zone file. Updating the reverse zone complicates this, as
either or both zones could be dynamic. For instance, my DHCP server
updates both a forward and reverse zone in my DNS. In this case I'd
need to populate the webmin zone display from a zone transfer, not from
a file, because the file is likely to be out-of-date with respect to
the DNS server's internal state. So I'll have to hook in some code to
use named-xfer if allow-update is present.

Ken
mailto:sh...@we...
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]

Re: Suggestion: Username on main index page

[Kenneth P. <sh...@we...>]

On Fri, 20 Jul 2001 15:43:14 +1000, jca...@we... wrote:

>Actually, there is already an option to do this .. just go into
>Webmin Configuation -> User Interface and change the 'Display login
>and hostname' option.

Ah again. I thought "at bottom of browser" meant in the page footer. I
have Opera configured to put its status line at the top of its window,
so I didn't connect the two. Perhaps the option should instead read "in
browser status area".

Ken
mailto:sh...@we...
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]

Re: Suggestion: Username on main index page

[<jca...@we...>]

"Kenneth Porter" <sh...@we...> wrote ..
> On Fri, 20 Jul 2001 12:41:35 +1000, jca...@we... wrote:
> 
> >That wouldn't be too hard to add .. though the username does get shown
> >already in the browser status bar on all webmin pages.
> 
> Aha, the trick is knowing where to look. I always expect the status bar
> to show me just the text of a link target, not special messages from
> the page. (And I *hate* scrollers, because they obscure that info. ;-)
> I would have looked in the <TITLE> text in the titlebar first, as
> that's often used to indicate CGI state information.

Actually, there is already an option to do this .. just go into
Webmin Configuation -> User Interface and change the 'Display login
and hostname' option.

 - Jamie

pragma_no_cache?

[Kenneth P. <sh...@we...>]

I was finding that Opera was caching my webmin pages, so I looked at
the source code and found that webmin only issues a "pragma: no-cache"
in the HTTP header if $pragma_no_cache is true. I can't find anything
that sets this. Where does this get configured?

Ken
mailto:sh...@we...
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]

Re: Suggestion: Username on main index page

[Kenneth P. <sh...@we...>]

On Fri, 20 Jul 2001 12:41:35 +1000, jca...@we... wrote:

>That wouldn't be too hard to add .. though the username does get shown
>already in the browser status bar on all webmin pages.

Aha, the trick is knowing where to look. I always expect the status bar
to show me just the text of a link target, not special messages from
the page. (And I *hate* scrollers, because they obscure that info. ;-)
I would have looked in the <TITLE> text in the titlebar first, as
that's often used to indicate CGI state information.

Ken
mailto:sh...@we...
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]

Re: Suggestion: Username on main index page

[Herb P. <hpa...@pa...>]

To handle that, I usually set custom colors for each user. Typically a red =
theme foor ROOT.

>>> sh...@we... 07/19/01 08:20PM >>>
I log into webmin with one of root, my personal account, and a test
account. I often forget which account I've logged in with. It would be
nice if the main index page showed the logged in username along with OS
and webmin version.

Re: Suggestion: Username on main index page

[<jca...@we...>]

"Kenneth Porter" <sh...@we...> wrote ..
> I log into webmin with one of root, my personal account, and a test
> account. I often forget which account I've logged in with. It would be
> nice if the main index page showed the logged in username along with OS
> and webmin version.

That wouldn't be too hard to add .. though the username does get shown
already in the browser status bar on all webmin pages.

 - Jamie

Suggestion: Username on main index page

[Kenneth P. <sh...@we...>]

I log into webmin with one of root, my personal account, and a test
account. I often forget which account I've logged in with. It would be
nice if the main index page showed the logged in username along with OS
and webmin version.

Ken
mailto:sh...@we...
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]