Re: [cobalt-users] [Mips] Anyone Can Access Admin GUI

[Jeff Bilicki <jeff@xxxxxxxxxxx>]

> Hello.  We just did a full restore with the Restore CD and Admin GUI
> is accessible without a login or password due to no .htaccess file in
> the sysMange folder. Also, we can not get the Web Page Builder to edit
> user's pages & get the following html error with out a prompt for username
> or password:
> You do not have permission to use the Web Page Builder, or Edit this
> specific web page. 
> Funny though, a user's private page still prompts for a username/password
> and works since there is a .htaccess file there.
> On working versions the Web Builder also makes a htedit.html file in
> the users directory for editing their web pages, which is not being generated.

> This phenomenom was happening before hence we did the restore CD install;
> though since the problem still exists we are wondering if the restore
> gives a fresh install or just writes in new files that are missing or
> thinks are corrupted. How can we fix this other than creating a new .htaccess
> file for every user?
> Are our solutions:
> 1. Format Hard Drive and do a CD Restore
> 2. Do a Cd Restore again & cross fingers
> 3. Throw Qube2 out of window and break in a trillion pieces and go to
> Fry's and buy 800 MHz and run OpenBSD <jk>
> 4. If no response, most people probably have done #3 and are no longer
> on the list. <jk again>

If you skip running the setup wizard this is true on all RaQs and Qubes,  re-run the
setup wizard and you will be fine.  Or grep all of the admserv_set_access out
of wizardDone.cgi and run them in a perl script. 

Jeff-