Skip to content
This repository has been archived by the owner on Jul 31, 2023. It is now read-only.

Security

G1zm0 edited this page Jan 4, 2013 · 2 revisions

BicBucStriim was developed as an in-house solution. So currently (V1.0) there is only minimal access control, really more for purposes like parental control than anything else. If you need stronger security, e.g. when you connect you NAS to the public Internet, you should protect your installation by additional measures.

.htaccess

G1zm0 proposes using the .htaccess file, see #29 for more. This approach also allows multiple users with their own passwords.

Using this method requires two files. A .htacces file and a .htpasswd file. (Yes the files have no name, only an extension).
Create these files in notepad or some simple text editor.

The .htacces file looks like this:

order deny,allow
deny from all
satisfy any

AuthUserFile "/location/to/.htpasswd"
AuthGroupFile "/dev/null"
AuthType "Basic"
AuthName "Text to display in login box"

<limit GET POST>
require valid-user
</limit>

Some rules:
The first three lines can be left out, but as a third line you can insert allow from x.x.x.x Where x.x.x.x stands for a specific IP-adress or an IP-domain. These adresses have free access and won't be prompted for a login. For example allow from 192.168.1 if that is the range your router hands out ipadresses in you LAN. Or the oposite deny from y.y.y.y were y.y.y.y is the adress to the IP to be blocked.

The second part consists of a path to your .htpasswd file. It is important that you don't put it in your webdirectory. It is easy to hack (so I'm told). You can generate this file with some simple password generators on te internet.Google results. Here you can generate some usernames and passwords.

The .htacces file looks like this:

admin:4mvhdqnJIxUuc

In this example the username admin with the password example is used.

Clone this wiki locally