Project

General

Profile

Access to sess-man and vhost-man scripts from specific ip

Keren Meir
Added over 5 years ago

Hi,

Is there a way to give access to the scripts of sess-man and vhost-man only to a specific IP ?

thanks


Replies (4)

Added by Wojciech Kapcia TigaseTeam over 5 years ago

Currently it's not possible.

Avatar?id=6023&size=32x32

Added by Artur Hefczyc TigaseTeam over 5 years ago

Is there a way to give access to the scripts of sess-man and vhost-man only to a specific IP ?

No, but there are a few ways you can restrict access to ad-hoc commands:

  1. As all ad-hoc commands are available for administrators, we sometimes create a separate subdomain for admin accounts only. Let's say you have xmpp.example.com, the separate domain would be admins.xmpp.example.com. The domain is not in DNS and is only for admin accounts. You can even have a separate authentication mechanisms for this domain

  2. You can give kind of roles to your admins, certain ppl can be allowed to execute certain ad-hoc commands only

  3. You can have a different admin (or a few admins) for each VHost and these ppl can only execute ad-hoc commands for own domain.

Added by Keren Meir over 5 years ago

I want that only the Admin's machine will be able to access the adhoc commands.

For example, if the Admin's ip is 1.2.3.4, I want that the HTTP server will block all other request from ip's different than 1.2.3.4

Is one of your ways implement what I want?

Avatar?id=6023&size=32x32

Added by Artur Hefczyc TigaseTeam over 5 years ago

As Wojciech explained this is not supported.

    (1-4/4)