No password on web GUI

Configuring detection parameters, and optimizations
Post Reply
User avatar
CRM User
Posts: 172
Joined: Sun Nov 27, 2016 3:41 pm

No password on web GUI

Post by CRM User » Sun Nov 27, 2016 3:45 pm

I've installed SecAst and can now see the web GUI at http://host.mydomain.com/secast
However, there is no username/password required to access the web page so any user view security events of my PBX. How do I add a username/password?
Account for questions transferred from CRM system
User avatar
Telium Support
Posts: 233
Joined: Sun Nov 27, 2016 3:27 pm

Re: No password on web GUI

Post by Telium Support » Sun Nov 27, 2016 4:13 pm

Enterprise users often attach the management interface of SecAst to an IP on a management VLAN, and access to the management VLAN is restricted. So with this setup administrators don't want another level of authentication - so we leave it off by default.

However, if you would like to enforce authentication on the SecAst web GUI, you can add a username and password using the steps outlined in section 2.3.5 of the installation guide (Secure the Web Interface). I'll repeat the Linux command here to save you from digging out the manual:

htpasswd -c /usr/local/secast/web_interface/.htpasswd user1

The above line will create username 'user1' and then prompt for a password to be associated with the username. After that the web GUI will require authentication to view the web page.
Post Reply