Hi,
On 25 Aug 2015, at 15:44 , Adrian Schröter <adrian@suse.de> wrote:
On Tuesday 25 August 2015, 15:38:18 wrote Carsten Höger:
Hi,
is it possible to secure the api by enforcing a password?
Using the appliance:
$ wget -Sv --no-check-certificate https://172.16.210.154/person/Admin -O -
This route is also requireing a password today. Are you sure you do not have a .netrc?
Nope, I don’t have one.
Can you try with curl?
$ curl -vk https://172.16.210.154/person/Admin * Trying 172.16.210.154... * Connected to 172.16.210.154 (172.16.210.154) port 443 (#0) * TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 * Server certificate: Organizational Unit Name
GET /person/Admin HTTP/1.1 Host: 172.16.210.154 User-Agent: curl/7.43.0 Accept: */*
< HTTP/1.1 200 OK < Date: Tue, 25 Aug 2015 15:49:37 GMT < Server: Apache < cache-control: max-age=0, private, must-revalidate < vary: Accept-Encoding < x-xss-protection: 1; mode=block < x-opensuse-runtimes: {"view":0.35848,"db":1.0506950000000002,"backend":0,"xml":0} < x-request-id: ac2b3d89-2565-4da8-ae35-5f92d4dc9260 < x-opensuse-apiversion: 2.6.3 < x-frame-options: SAMEORIGIN < x-runtime: 0.008162 < x-content-type-options: nosniff < Connection: close < X-Powered-By: Phusion Passenger 5.0.7 < etag: "1fac7a8b0b5a51791daf3179c386d6ac" < Status: 200 OK < Cache-Control: public < Transfer-Encoding: chunked < Content-Type: text/xml; charset=utf-8 < <person> <login>Admin</login> <email>root@localhost</email> <realname>OBS Instance Superuser</realname> <state>confirmed</state> <globalrole>Admin</globalrole> </person> * Closing connection 0 $ cat ~/.netrc cat: /Users/choeger/.netrc: No such file or directory -- mit freundlichen Gruessen/with best regards, Carsten Hoeger Open-Xchange GmbH -------------------------------------------------------------------------------- Open-Xchange AG, Rollnerstr. 14, 90408 Nürnberg, Amtsgericht Nürnberg HRB 24738 Vorstand: Rafael Laguna de la Vera, Carsten Dirks Aufsichtsratsvorsitzender: Richard Seibt European Office: Open-Xchange GmbH, Martinstr. 41, D-57462 Olpe, Germany Amtsgericht Siegen, HRB 8718, Geschäftsführer: Frank Hoberg, Martin Kauss US Office: Open-Xchange. Inc., 530 Lytton Avenue, Palo Alto, CA 94301, USA --------------------------------------------------------------------------------