Page 1 of 1

Multiple servers - one needs user/password, another doesn't

Posted: February 22nd, 2009, 4:58 pm
by Mihai
If one server needs user/password, the user/password is used also for the server that doesn't need. As a result it cannot log in the server that doesn't need authentication.

Re: Multiple servers - one needs user/password, another doesn't

Posted: February 22nd, 2009, 5:13 pm
by shypike
Show me an example.
I use a bunch of servers with and without authentication, never had a problem with it.

Re: Multiple servers - one needs user/password, another doesn't

Posted: February 22nd, 2009, 5:27 pm
by Mihai
2 servers: First does not need user/pass.
Second needs authentication. I enter the servers in that order. The moment I save the fsecond server,  user/pass appears also in the fields for the server without authentication.
Furthermore user/pass are prefilled in the Add Server dialogue box. Does not matter if I try to delete user/pass. The moment I save the settings, the user/Pass reappears.

Version used 0.4.6 under windows vista.

Which other details you need ?

Re: Multiple servers - one needs user/password, another doesn't

Posted: February 22nd, 2009, 5:49 pm
by switch
The user pass is likely being filled out by your browser, and not a problem of sabnzbd. What browser are you using? Chrome?

Re: Multiple servers - one needs user/password, another doesn't

Posted: February 22nd, 2009, 6:02 pm
by Mihai
OOPS !!!  ;D

You're 100% right Switch. My mistake. 
Was using Firefox and probably pressed on "save password" without thinking.
Now everything is ok.
Thanks !!!

Re: Multiple servers - one needs user/password, another doesn't

Posted: February 22nd, 2009, 6:04 pm
by sander
I've seen the same behaviour with SABnzbd on Vista with Firefox.

And yes, I too do think it's a browser thing.

FWIW: I've *not* checked whether it was a pure browser presentation thing, or that the username/pw was indeed filled out on each 'password' line in sabnzbd.ini

Re: Multiple servers - one needs user/password, another doesn't

Posted: March 12th, 2009, 1:45 am
by enrg
I have noticed the same.

If I log in to SABnzbd locally at the computer (Vista Ultimate, SABnzbd 0.4.7, Firefox 3.0.7), and then open a browser on another computer and point it to SABnzbd, I get straight into the web interface without a password. And I never save my password in Firefox.

I got shocked when I found this out by trying to reach SABnzbd from the internet. It's wide open. I have tried it from several computers, cleared the cache/temp data, but still I get straight in to the web interface on any computer if I have logged on to SABnzbd from another computer first.

Re: Multiple servers - one needs user/password, another doesn't

Posted: March 12th, 2009, 3:25 am
by shypike
If I understand you correctly you claim is:
When any computer has opened a session with SABnzbd (and has used username/password),
any session from another computer is automatically authenticated (and therefor does not need a username/password).

If this is true it is a serious problem and also a very old one (dating from 0.2.5 era).

I'll look into this further.
Fortunately we have switched to a more standard authentication method for 0.5.0,
but I'll check that too.

Re: Multiple servers - one needs user/password, another doesn't

Posted: March 12th, 2009, 4:01 am
by enrg
shypike: Yes, that's correct. When I first login from another computer, any other computer that connects to the web interface is automatically authenticated.

Re: Multiple servers - one needs user/password, another doesn't

Posted: March 12th, 2009, 10:35 am
by switch
I cannot confirm your issue. All other machines still prompt for the username and password after I have logged in from another one.

Re: Multiple servers - one needs user/password, another doesn't

Posted: March 13th, 2009, 5:32 am
by enrg
I see.

If 0.5.0 has another authentication method, it's no biggie for me. I ssh tunnel my traffic to SABnzbd now anyway.

Re: Multiple servers - one needs user/password, another doesn't

Posted: March 13th, 2009, 7:42 am
by shypike
enrg wrote: shypike: Yes, that's correct. When I first login from another computer, any other computer that connects to the web interface is automatically authenticated.
I have done some testing too, I cannot reproduce your problem in any way.
Even when using two different browsers on one system (IE and FireFox),
both browsers ask for login credentials.