All geek questions in one place

Ccnet webdashboard authentication mode how to configure it to be safe

I’m sure that I’m just doing it wrong, but for the life of me I can’t make things play beautifully. I am just starting to install and configure CruiseControl.net on a VM2008 X64 VM. The installation seemed a little funny, as it did not create an IIS site for the toolbar, and I just did it myself and pointed to it:

C: \ Program Files (x86) \ CruiseControl.NET \ webdashboard

(I had to add permissions for iis_iusrs in order to deal with configuration files, and not sure how good it is).

In any case, now I can view the web control panel and enter the admin section, etc. Ultimately, I want this site to be available online for ease of use by the team, so it needs to be blocked and protected. Therefore, for this purpose, I put the following sections in web.config:

<authentication mode="Forms">
        <forms name="appNameAuth" path="/" loginUrl="server/local/SimpleUserLogin.aspx" protection="All" timeout="30">
            <credentials passwordFormat="Clear">
                <user name="jon" password="test" />
                <user name="mike" password="test" />
            </credentials>
        </forms>
    </authentication>

If I put the next section, I can get to the login screen, but it will always be sent back even after logging in and I will never see any other pages:

    <authorization>         
        <deny users="?" />
    </authorization>

I also have this outside the system.web section:

<location path="server/local/SimpleUserLogin.aspx">
    <system.web>
        <authorization>
            <allow users ="*" />
        </authorization>
    </system.web>
</location>

My goal is to direct all unregistered users to the login page and nowhere else, after logging in they can view any page. Am I here as a blocker?

thank

+3
source share
2 answers

, , . 1.5, :

http://confluence.public.thoughtworks.org/display/CCNET/Configuring+the+Server

configs. ccnet.config:

<internalSecurity>
 <users>
  <!-- Authenticated users -->
  <passwordUser name="bob" display="Bob (Team Lead)" password="bob1"/>
  <passwordUser name="jane" display="Jane (BA)" password="jane2"/>
  <passwordUser name="john" display="John (QA)" password="john3"/>
  <passwordUser name="joe" display="Joe (QA)" password="joe4"/>
  <!-- Generic role -->
  <simpleUser name="*"/>
</users>
<permissions>
  <!-- Roles -->
  <rolePermission name="Testers" forceBuild="Allow" defaultRight="Deny">
    <users>
      <userName name="john"/>
      <userName name="joe"/>
    </users>
  </rolePermission>
  <rolePermission name="Releasers" forceBuild="Allow" defaultRight="Deny">
    <users>
      <userName name="bob"/>
      <userName name="jane"/>
    </users>
  </rolePermission>
</permissions>

tweeking. , - .

+3

Source: https://habr.com/ru/post/1753592/

More articles:


All Articles