Re: [cobalt-users] [Mips] Anyone Can Access Admin GUI

[Mike Vanecek <nospam99@xxxxxxxxxxxx>]

On Fri, 01 Dec 2000 10:05:11 -0800, "James Hoaggs" <james_hoaggs@xxxxxxxxxx>
wrote:

:>Hello.  We just did a full restore with the Restore CD and Admin GUI
:>is accessible without a login or password due to no .htaccess file in
:>the sysMange folder. Also, we can not get the Web Page Builder to edit
:>user's pages & get the following html error with out a prompt for username
:>or password:
:>You do not have permission to use the Web Page Builder, or Edit this
:>specific web page. 
:>Funny though, a user's private page still prompts for a username/password
:>and works since there is a .htaccess file there.
:>On working versions the Web Builder also makes a htedit.html file in
:>the users directory for editing their web pages, which is not being generated.
:>
:>This phenomenom was happening before hence we did the restore CD install;
:>though since the problem still exists we are wondering if the restore
:>gives a fresh install or just writes in new files that are missing or
:>thinks are corrupted. How can we fix this other than creating a new .htaccess
:>file for every user?
:>Are our solutions:
:>1. Format Hard Drive and do a CD Restore

Seems to me, the last time I did a restore I did a format first. I initially
had a problem because the CD originally sent to me was erroneously for the
RAQ3s (the labeling was unclear on the package) and it caused a bit of
confusion on my part. However, once I used the correct CD and had a nic card
compatible with it, the restore went perfectly. I then installed all the
existing patches and was up and running.

:>2. Do a Cd Restore again & cross fingers

If you format, you know the disk is clean.

:>3. Throw Qube2 out of window and break in a trillion pieces and go to
:>Fry's and buy 800 MHz and run OpenBSD <jk>

Or FreeBSD or Red Hat - tempting ...

:>4. If no response, most people probably have done #3 and are no longer
:>on the list. <jk again>
:>
:>This computer is for testing and not exposed to hackers on the net and
:>we rebooted, set the Admin password via the GUI, cleaned out the  cache,
:>history, and restarted browser IE 5.0. Telnet still works with login/password.

My preference is always for clean disk builds whenever possible. Good luck.