Suggestion: API and login_pre.sh/login_post.sh

LawsHosting

Verified User
Joined
Sep 13, 2008
Messages
2,367
Location
London UK
The API is rubbish as it is, but it should have a separate optional WHITELIST and not look at the login_pre.sh/login_post.sh scripts.

or

make - if it's not already - the IP that is in the /usr/local/directadmin/data/admin/ip_whitelist bypass these scripts.


When you need to change the IP(s) of your billing/etc software, editing the .sh scripts can be tedious.
 
Hello Peter,

Using login keys for admin, resellers can fix it.

You can specify from which IPs and what commands are allowed on per login key bases.
 
Back
Top