I would like to install on a Linux Debian Lite distro (a version without 
Desktop GUI).
But this does not work. The manual says:

If you do not provide an administrator password, the administration 
interface is disabled. This is a security measure to prevent publicly 
exposing the admin interface.

The administrative interface, *admin*, is only accessible from localhost 
unless you run web2py behind Apache with mod_proxy. If *admin* detects a 
proxy, the session cookie is set to secure and *admin* login does not work 
unless the communication between the client and the proxy goes over HTTPS; 
this is a security measure. All communications between the client and 
*admin* must always be local or encrypted; otherwise an attacker would be 
able to perform a man-in-the middle attack or a replay attack and execute 
arbitrary code on the server.


Would it work to SSH to the command console and

define password with:

 > python -c "from gluon.main import save_password; 
save_password(raw_input('my password'),443)"
and run with:
 > python web2py.py -a 'my password' -i 127.0.0.1 -p 8000


How should I use the command console to set the admin password and login 
without a GUI?

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to web2py+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to