The problem is that the notebook is never launched to bound to a specific
interface. Could you please file a trac# against this?

The specific issue is that in twistedconf.tac, we start the server like so:

strports.service('tls:8000:privateKey=/Users/yqiang/.sage/notebook/private.pem:certKey=/Users/yqiang/.sage/notebook/public.pem',
factory)

It should read something like

strports.service('tls:8000:interface=
127.0.0.1:privateKey=/Users/yqiang/.sage/notebook/private.pem:certKey=/Users/yqiang/.sage/notebook/public.pem',
factory)

to only listen on localhost.

Someone more familiar with the notebook should probably write the patch,
since the behavior of this should depend on what the user specifies when
launching the notebook.

Cheers,
Yi

http://yiqiang.org
On Thu, Mar 6, 2008 at 8:01 AM, Jason Grout <[EMAIL PROTECTED]>
wrote:

>
> William Stein wrote:
> > On Wed, Mar 5, 2008 at 6:31 PM, Jason Grout <[EMAIL PROTECTED]>
> wrote:
> >>  William Stein wrote:
> >>  > On Wed, Mar 5, 2008 at 7:55 AM, Neal Laurance <
> [EMAIL PROTECTED]> wrote:
> >>  >>  I have just installed SAGE on my MAC book, and it works fine
> there. But
> >>  >>  I would like to use it from my desk PC (Windows XP). The PC has a
> bigger
> >>  >>  display. I opened Firefox on the PC, entered the local IP address
> of the
> >>  >>  MAC (192.168.1.103) and I get an acknowledgment from the Apache
> Web
> >>  >>  server. Then I tried 192.168.1.103:8000, trying to connect with
> the SAGE
> >>  >>  session running on my MAC. No luck. It times out.
> >>  >
> >>  > You *must* explicitly start the notebook like this:
> >>  >
> >>  >   sage: notebook(address="192.168.1.103")
> >>  >
> >>  > where 192.168.1.103 is the external address of your laptop.
> >>  > If you don't do this the notebook will _only_ listen to connection
> >>  > from localhost (i.e., your laptop), as a security precaution.
> >>
> >>
> >>  That's funny.  Just typing notebook() lets me access from a remote
> >>  server just fine!  Is that a bug?
> >
> > Yes, and a really scary one at that.
> >
> > Out of curiosity do you have the same behavior if you do:
> >
> >    sage: notebook(secure=False)
> >
> > That would be _actually_ scary.
>
>
> Well, apparently it is *actually* scary.
>
> On my desktop, I start sage and type:
>
> sage: notebook(secure=False)
>
> On my laptop, I then go to http://serveripaddress:8000/
>
> and my home admin page appears.
>
> Jason
>
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
To post to this group, send email to sage-support@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/sage-support
URLs: http://www.sagemath.org
-~----------~----~----~----~------~----~------~--~---

Reply via email to