Using 'pmwho' as a CGI script.

Kevin Kadow (kadokev@ripco.com)
Sun, 15 Sep 1996 02:40:28 -0500 (CDT)

> From: PortMaster Issues <pm@digicity.net>
> Subject: Using PMWHO as CGI
>
> Just a quick question as to whether anyone is using the PMWHO utility
> as a CGI program to allow monitoring of Portmaster(s) from a web
> browser? Works great from the command line, and seems reasonably
> secure.

My updated pmwhoall.pl (http://www.msg.net/utility/PM/) will produce
output in text or HTML format.

The drawback for security is that as a CGI script, it must either be
readable by the userID your CGI scripts run as (and thus your password
is also readable) or it must be run from a setuid wrapper.

> I'd like to set it up to be accessible to the support desks via
> their web browsers.
>
> Any other pointers on web-based PM adminstration / statistical
> utilities would be appreciated from any of you who have found a place
> for them within your company.

There's a link to PMgraph from the page referenced above.

I'm working on a 'PMWeb' CGI that not only provides the same functionality
as my updated pmwhoall, but also the ability to reset specific ports
via a web-form interface.

Combined with a web server's access control and some logging for
accountability, it could fit your needs. The final version will most
likely have the option to enter it in a 'password' field on the form
or encode it in the program.

You get your choice, store it in cleartext in the script, or send it
uuencoded over your LAN. Neither is a very good option.

Now if only Livingston would include per-port status, IP address, and
username in their SNMP Mib, I'd be able to monitor without the need to
have the !root password in the script.