I agree. I would take this path.

On Feb 3, 11:38 pm, Thadeus Burgess <thade...@thadeusb.com> wrote:
> -1 for admin username
> +1 for anti-brute-forcing. If incorrect password typed 3 times, ban
> the IP permanently until you log into ssh and edit a pickled file.
>
> -Thadeus
>
> On Wed, Feb 3, 2010 at 7:07 PM, mdipierro <mdipie...@cs.depaul.edu> wrote:
> > I am confused. appadmin does not requires any. appadmin, by default,
> > required admin (perhaps you refer to that). appadmin predates auth. If
> > your app needs a more complex appadmin authentication you should
> > connect to the auth of the app.
>
> > admin does not no need more than a passoword because there is a single
> > user (administrator) and because it should not relay on the presence
> > of a database.
>
> > On Feb 3, 3:22 pm, Wes James <compte...@gmail.com> wrote:
> >> On Wed, Feb 3, 2010 at 1:48 PM, mdipierro <mdipie...@cs.depaul.edu> wrote:
>
> >> <snip>
>
> >> >> By the way  Massimo, will you take a patch to add a username to
> >> >> appadmin?  If not, I'm learning a few things on the way, anyway.
>
> >> > please explain more.
>
> >> appadmin only uses a password to login.  I'm putting in a username too
> >> so it requires a username and password to log in to appadmin.
>
> >> <snip>
>
> >> -wes
>
> > --
> > You received this message because you are subscribed to the Google Groups 
> > "web2py-users" group.
> > To post to this group, send email to web...@googlegroups.com.
> > To unsubscribe from this group, send email to 
> > web2py+unsubscr...@googlegroups.com.
> > For more options, visit this group 
> > athttp://groups.google.com/group/web2py?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To post to this group, send email to web...@googlegroups.com.
To unsubscribe from this group, send email to 
web2py+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en.

Reply via email to