-
Notifications
You must be signed in to change notification settings - Fork 72
Security
BicBucStriim was developed as an in-house solution. So currently (V1.0) there is only minimal access control, really more for purposes like parental control than anything else. If you need stronger security, e.g. when you connect you NAS to the public Internet, you should protect your installation by additional measures.
G1zm0 proposes using the .htaccess file, see #29 for more. This approach also allows multiple users with their own passwords.
Using this method requires two files. A .htacces file and a .htpasswd file. (Yes the files have no name, only an extension).
Create these files in notepad or some simple text editor.
The .htacces file looks like this:
order deny,allow
deny from all
satisfy any
AuthUserFile "/location/to/.htpasswd"
AuthGroupFile "/dev/null"
AuthType "Basic"
AuthName "Text to display in login box"
<limit GET POST>
require valid-user
</limit>
Some rules:
The first three lines can be left out, but as a third line you can insert allow from x.x.x.x
Where x.x.x.x stands for a specific IP-adress or an IP-domain. These adresses have free access and won't be prompted for a login. For example allow from 192.168.1
if that is the range your router hands out ipadresses in you LAN.
Or the oposite deny from y.y.y.y
were y.y.y.y is the adress to the IP to be blocked.
The second part consists of a path to your .htpasswd
file. It is important that you don't put it in your webdirectory. It is easy to hack (so I'm told).
You can generate this file with some simple password generators on te internet.Google results.
Here you can generate some usernames and passwords.
The .htacces file looks like this:
admin:4mvhdqnJIxUuc
In this example the username admin
with the password example
is used.