• Webv4 sysop login?

    From Trikester@1:103/705 to All on Mon Jan 3 19:52:29 2022
    Howdy all,

    Is the sysop login in webv4 disabled? If I login with my sysop account, it doesn't say the login is incorrect, but it doesn't log me in. It just seems to refresh the page.

    Works fine with regular user accounts, but I'm a little mystified with this one currently.

    ---
    þ Synchronet þ ... The Basement ... Not really open yet.
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Trikester on Mon Jan 3 23:21:39 2022
    Re: Webv4 sysop login?
    By: Trikester to All on Mon Jan 03 2022 07:52 pm

    Howdy all,

    Is the sysop login in webv4 disabled? If I login with my sysop account, it doesn't say the login is incorrect, but it doesn't log me in. It just seems to refresh the page.

    Works fine with regular user accounts, but I'm a little mystified with this one currently.

    Works for me on Vertrauen. What is the name/alias of your sysop account?
    --
    digital man (rob)

    Rush quote #35:
    Static on your frequency, electrical storm in your veins
    Norco, CA WX: 46.8øF, 70.0% humidity, 0 mph ESE wind, 0.00 inches rain/24hrs --- SBBSecho 3.14-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Xerxes@1:103/705 to Trikester on Tue Jan 4 09:32:12 2022
    Re: Webv4 sysop login?
    By: Trikester to All on Mon Jan 03 2022 07:52 pm


    Is the sysop login in webv4 disabled? If I login with my sysop account, it doesn't say the login is incorrect, but it doesn't log me in. It just seems to refresh the page.

    Works fine with regular user accounts, but I'm a little mystified with this one currently.


    Are you using the Sysop password, or your regular password? Webv4 uses your regular password until it needs to use fTelnet to do something and then fTelnet prompts for the SYS password...


    ________________________________________________________________
    Sysop of Desert Rats Sanctuary --- https://bbs.kn6q.org

    ---
    þ Synchronet þ KN6Q BBS - https://kn6q.org - Sysop Xerxes
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Trikester@1:103/705 to Digital Man on Tue Jan 4 11:01:31 2022
    Re: Webv4 sysop login?
    By: Digital Man to Trikester on Mon Jan 03 2022 11:21 pm

    Is the sysop login in webv4 disabled? If I login with my sysop account, it doesn't say the login is incorrect, but it doesn't
    log me in. It just seems to refresh the page.
    Works fine with regular user accounts, but I'm a little mystified with this one currently.

    Works for me on Vertrauen. What is the name/alias of your sysop account?

    This one, Trikester. One thought I had on it was - if the system password is required elsewhere, is it not required in the web login?

    I don't have debug on for the logs presently, perhaps I should, as nothing interesting shows up in the logs when I do try and log in, HTTP POST and GETs, but no interesting errors.

    ---
    þ Synchronet þ ... The Basement ... Not really open yet.
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Trikester@1:103/705 to Xerxes on Tue Jan 4 11:08:12 2022
    Re: Webv4 sysop login?
    By: Xerxes to Trikester on Tue Jan 04 2022 09:32 am

    Are you using the Sysop password, or your regular password? Webv4 uses your regular password until it needs to use fTelnet to
    do something and then fTelnet prompts for the SYS password...

    Yup, just the account's regular password - even tried an FTP login userpassword:syspassword style without success.

    ---
    þ Synchronet þ ... The Basement ... Not really open yet.
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Trikester on Tue Jan 4 18:13:08 2022
    Re: Webv4 sysop login?
    By: Trikester to Digital Man on Tue Jan 04 2022 11:01 am

    Re: Webv4 sysop login?
    By: Digital Man to Trikester on Mon Jan 03 2022 11:21 pm

    Is the sysop login in webv4 disabled? If I login with my sysop account it doesn't say the login is incorrect, but it doesn't log me in. It ju seems to refresh the page.
    Works fine with regular user accounts, but I'm a little mystified with this one currently.

    Works for me on Vertrauen. What is the name/alias of your sysop account?

    This one, Trikester. One thought I had on it was - if the system password is required elsewhere, is it not required in the web login?

    The system password is not required for web login.
    --
    digital man (rob)

    Synchronet/BBS Terminology Definition #90:
    UTF-8 = 8-bit Unicode Transformation Format
    Norco, CA WX: 55.4øF, 56.0% humidity, 2 mph ESE wind, 0.00 inches rain/24hrs --- SBBSecho 3.14-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From echicken@1:103/705 to Trikester on Wed Jan 5 05:34:02 2022
    Re: Webv4 sysop login?
    By: Trikester to Digital Man on Tue Jan 04 2022 11:01:31

    This one, Trikester. One thought I had on it was - if the system password is required elsewhere, is it not required in the web login?

    Just your sysop alias and password (not the system password) should work.

    Are you able to log in using some other account, even a non-sysop one?

    The reason why the syspass is not required for web login is ... I just haven't gotten around to making it so. There isn't a lot of privileged stuff that the sysop can do from the web UI, so this hasn't been a priority.
    ---
    echicken
    electronic chicken bbs - bbs.electronicchicken.com
    ---
    þ Synchronet þ electronic chicken bbs - bbs.electronicchicken.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Trikester@1:103/705 to echicken on Wed Jan 5 12:15:39 2022
    Re: Webv4 sysop login?
    By: echicken to Trikester on Wed Jan 05 2022 05:34 am

    Just your sysop alias and password (not the system password) should work.

    Yup, guess that's why I'm scratching my head that it won't login, just using the sysop alias & password (and if I use the wrong password, it does tell me so)

    Are you able to log in using some other account, even a non-sysop one?

    I'm able to login with a non-sysop account, yes.

    ---
    þ Synchronet þ ... The Basement ... Not really open yet.
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Trikester@1:103/705 to echicken on Wed Jan 5 13:35:15 2022
    Re: Webv4 sysop login?
    By: Trikester to echicken on Wed Jan 05 2022 12:15 pm

    Are you able to log in using some other account, even a non-sysop one?
    I'm able to login with a non-sysop account, yes.

    OK, I've just checked again and I can not with a regular user account. Please disregard my previous message.

    I'm going to play around with cache flushing, different browsers, etc., as I'm a little more surprised about what's going on now.

    ---
    þ Synchronet þ ... The Basement ... Not really open yet.
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Trikester@1:103/705 to echicken on Wed Jan 5 15:04:35 2022
    Re: Webv4 sysop login?
    By: Trikester to echicken on Wed Jan 05 2022 01:35 pm

    All right, it appears it all had to do with the Apache proxying I had going on.

    ProxyPreserveHost On

    seems to be pretty critical when using webv4. With that in, the cookie issue (invalid domain) went away.

    There's still an error in the browser console complaining about the synchronet cookie will soon be rejected because it has the "SameSite" attribute set to "None" or an invalid value, without the "secure" attribute.

    So, I've also added in:

    Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure;SameSite=Strict

    And that seems to resolve that problem, too.

    ---
    þ Synchronet þ ... The Basement ... Not really open yet.
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From echicken@1:103/705 to Trikester on Thu Jan 6 04:28:54 2022
    Re: Webv4 sysop login?
    By: Trikester to echicken on Wed Jan 05 2022 15:04:35

    ProxyPreserveHost On

    seems to be pretty critical when using webv4. With that in, the cookie issue (invalid domain) went away.

    Glad to hear it's working. I don't think webv4 is doing anything unusual, so this would probably be a problem for many upstream servers that use cookies.

    There's still an error in the browser console complaining about the synchronet cookie will soon be rejected because it has the "SameSite" attribute set to "None" or an invalid value, without the "secure" attribute.

    Thanks for the heads up. Should hopefully be a simple fix when I get to it.

    What browser was this?
    ---
    echicken
    electronic chicken bbs - bbs.electronicchicken.com
    ---
    þ Synchronet þ electronic chicken bbs - bbs.electronicchicken.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Trikester@1:103/705 to echicken on Thu Jan 6 08:51:05 2022
    Re: Webv4 sysop login?
    By: echicken to Trikester on Thu Jan 06 2022 04:28 am

    ProxyPreserveHost On
    seems to be pretty critical when using webv4. With that in, the cookie issue (invalid domain) went away.
    Glad to hear it's working. I don't think webv4 is doing anything unusual, so this would probably be a problem for many upstream
    servers that use cookies.
    There's still an error in the browser console complaining about the synchronet cookie will soon be rejected because it has
    the
    "SameSite" attribute set to "None" or an invalid value, without the "secure" attribute.
    Thanks for the heads up. Should hopefully be a simple fix when I get to it.

    No worries - I figured most of it was due to just not having tested this with apache's reverse proxy enough initially. I think this is one item that doesn't have much said about it in the Synchro wiki - no config example that I noticed, anyway.

    If I get around to replacing this Apache install with nginx I'll have to see what the equivalent configs are like.

    What browser was this?

    Firefox

    ---
    þ Synchronet þ ... The Basement ... Not really open yet.
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From echicken@1:103/705 to Trikester on Thu Jan 6 18:14:31 2022
    Re: Webv4 sysop login?
    By: Trikester to echicken on Thu Jan 06 2022 08:51:05

    No worries - I figured most of it was due to just not having tested this with apache's reverse proxy enough initially. I think this is one item that doesn't have much said about it in the Synchro wiki - no config example that I noticed, anyway.

    It'd be good to have some generalized documentation up there about using HTTP reverse proxies, and let the sysop adapt them to whatever package they're using. IMHO they should learn how to configure whatever third party software they chose, and we can't cover the whole gamut of available proxy packages - but the same concepts will always apply.

    The most common omission / point of confusion is configuring proxying to the websocket service, but a few other tweaks are probably needed most of the time.
    ---
    echicken
    electronic chicken bbs - bbs.electronicchicken.com
    ---
    þ Synchronet þ electronic chicken bbs - bbs.electronicchicken.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Xerxes@1:103/705 to Trikester on Mon Jan 10 11:07:27 2022
    Re: Webv4 sysop login?
    By: Trikester to echicken on Thu Jan 06 2022 08:51 am

    ProxyPreserveHost On
    seems to be pretty critical when using webv4. With that in, the cookie issue (invalid domain) went away.
    Glad to hear it's working. I don't think webv4 is doing anything unusual, so this would probably be a problem for many upstream
    servers that use cookies.
    There's still an error in the browser console complaining about the synchronet cookie will soon be rejected because it has
    the
    "SameSite" attribute set to "None" or an invalid value, without the "secure" attribute.
    Thanks for the heads up. Should hopefully be a simple fix when I get to it.

    No worries - I figured most of it was due to just not having tested this with apache's reverse proxy enough initially. I think this is one item that doesn't have much said about it in the Synchro wiki - no config example that I noticed, anyway.

    If I get around to replacing this Apache install with nginx I'll have to see what the equivalent configs are like.


    I have it running behind a nginx proxy and I'm going to post my config to the Wiki when I get a chance. It is fairly standard settings, but WebV4 definately doesn't work if you try to do just do a proxy pass without all of the other parameters.

    The big thing I have seen with proxying WS and WSS for fTelnet is that Nginx will tear it down after 60-180 seconds of inactivity with the standard (global) config settings. I think I know what setting this is but I was kind of hesistant to change the global setting (I assume it's protecting the websevers from some kind DOS/Resource drain) - and wanted to play with it some more - so for now I'm running the actual fTelnet proxy software on that machine instead of proxying to the Synchronet Web Socket Service.


    ________________________________________________________________
    Sysop of Desert Rats Sanctuary --- https://bbs.kn6q.org

    ---
    þ Synchronet þ Desert Rats Sanctuary --- https://bbs.kn6q.org
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Trikester@1:103/705 to Xerxes on Mon Jan 10 11:23:12 2022
    Re: Webv4 sysop login?
    By: Xerxes to Trikester on Mon Jan 10 2022 11:07 am

    I have it running behind a nginx proxy and I'm going to post my config to the Wiki when I get a chance. It is fairly standard settings, but WebV4 definately doesn't work if you try to do just do a proxy pass without all of the other parameters.

    That'll be great, look forward to seeing that.

    I'm making a to-do to update the wiki with the Apache details, I hadn't even checked whether I could login to the wiki yet.

    ---
    þ Synchronet þ ... The Basement ... Not really open yet.
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Tracker1@1:103/705 to echicken on Thu Jan 13 11:51:12 2022
    On 1/6/22 16:14, echicken wrote:

    It'd be good to have some generalized documentation up there about
    using HTTP reverse proxies, and let the sysop adapt them to whatever
    package they're using. IMHO they should learn how to configure
    whatever third party software they chose, and we can't cover the whole
    gamut of available proxy packages - but the same concepts will always
    apply.

    The most common omission / point of confusion is configuring proxying
    to the websocket service, but a few other tweaks are probably needed
    most of the time.

    Yeah, dealing with the ws(s) links for ftelnet was probably my biggest
    issue.
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    ï¿­ Synchronet ï¿­ Roughneck BBS - roughneckbbs.com
    --- SBBSecho 3.14-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Xerxes@1:103/705 to Trikester on Sun Jan 16 00:54:08 2022
    That'll be great, look forward to seeing that.


    I've got it posted now:

    http://wiki.synchro.net/howto:nginx

    Still haven't figured out not having WS timeout fairly quickly with nginx (went back to using fTelnet proxy for that), but it works... ________________________________________________________________
    Sysop of Desert Rats Sanctuary --- https://bbs.kn6q.org

    ---
    þ Synchronet þ Desert Rats Sanctuary --- https://bbs.kn6q.org
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Ragnarok@1:103/705 to Trikester on Mon Jan 17 13:04:13 2022
    El 4/1/22 a las 16:08, Trikester escribió:
    Re: Webv4 sysop login?
    By: Xerxes to Trikester on Tue Jan 04 2022 09:32 am

    > Are you using the Sysop password, or your regular password? Webv4 uses your regular password until it needs to use fTelnet to
    > do something and then fTelnet prompts for the SYS password...

    Yup, just the account's regular password - even tried an FTP login userpassword:syspassword style without success.


    check the console browser if you get request errors

    ---
    ï¿­ Synchronet ï¿­ Dock Sud BBS TLD 24 HS - bbs.docksud.com.ar
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)