Newa login without password

[smiffypr]

On version .33 I could get on without having to supply username and password. I found in the config-web.xml (in C:/Documents and settings/All Users/Application Data/NPVR) there is a parameter <autoLoginNetworks> which had a set of IP addresses which it would allow unrestricted access from. I changed the IP addresses to False so the line is now
<autoLoginNetworks>False</autoLoginNetworks>
restarted NPVR service, and I then had to login as before.

On version .36, this issue re-emerged. I looked at the same config file, and the value was "none". I changed that to "False" again and it cured the problem, i.e. I now need to enter the correct password to get on.

Smiffy

[smiffypr]

Mmmm, seems that that only worked once, next time I can login again without entering the user or password.
Even if I turn off the "enable web server" in the settings (and restart NPVR), it is still there, and I can still login without name or password.

Smiffy

[UncleJohnsBand]

What is in the NEWA log when logging in......the log file is in the logs directory of NPVR called web.log.

[smiffypr]

For the successful login without user or password, the log file says "User name and password matched for Guest Access"
So I have edited config-web.xml and removed the lines for Guest login.
I now cannot login without my name and password.
Thanks for pointing me in the right direction.
As there is no option to disable guest login in the settings GUI, I would have thought that there should be no guest login allowed.

[UncleJohnsBand]

For the successful login without user or password, the log file says "User name and password matched for Guest Access"
So I have edited config-web.xml and removed the lines for Guest login.
I now cannot login without my name and password.
Thanks for pointing me in the right direction.
As there is no option to disable guest login in the settings GUI, I would have thought that there should be no guest login allowed.

In the config tab of NEWA.....if the guest id and password are left blank there should be no confirmed guest access. So having the autologin disabled and guest id and password blank should force a login.

[smiffypr]

I put back the unedited config-web.xml, restarted, and had a look at the config tab, guest id and password are blank, and I can "guest" login again.

[UncleJohnsBand]

I put back the unedited config-web.xml, restarted, and had a look at the config tab, guest id and password are blank, and I can "guest" login again.

Thanks....this appears to be a bug from when Guest access was implemented(2007/10/19). The attached patch fixes the issue.

[smiffypr]

Thanks. Put those in place restarted, and now the login is working as expected.

The "enable web server" in settings>MVP & web still doesn't do anything, i.e. with the web server not enabled, it still works.
I think there is already another thread about that problem though.

[UncleJohnsBand]

Thanks. Put those in place restarted, and now the login is working as expected.

The "enable web server" in settings>MVP & web still doesn't do anything, i.e. with the web server not enabled, it still works.
I think there is already another thread about that problem though.

Thanks for the update. The web server thing would be a fix for sub to address.

[mvallevand]

That web server configuration isn't for NEWA, that is enabling the web server for the NMT.

Martin