Results 1 to 3 of 3

Thread: tivoweb password protect session timeout

  1. #1
    Join Date
    Aug 2008
    Location
    Sydney, NSW
    Posts
    27

    tivoweb password protect session timeout

    Ive got my TiVo series 1 (Australia) set up with TivoWeb userneame password protection using a port forward through my router. The TivoWeb config is set up with LAN access not password protected.

    This all works as expected and Im not prompted internally, but I am externally.

    Howver, the session never seems to time out. That is I can connect from my PDA or work PC, for example, and Im prompted for credentials as expected. But from that point on Ime never prompted again. This is true even if I leave the devices overnight, and even in the case of my PDA if its dicsonnected from the internet for seveal hours.

    If I restart TivoWeb it makes no difference. But if I restart TiVoWeb after first changing the configured password, it re-prompts. So the authentication is obviously working. And something is obviously storing the credentials.

    However its not browser-specific. If I clear the browser cache (firefox) and cookies, no difference. Same on my PDA (Android).

    So Im wondering if Tivoweb somehow recognises requestors are lets them in.

    Does anyone know how or if the session timeout for tivoweb works, and when I might expect to be re-prompted for credentials ? Obviously Id like a timeout for when I access remotely from an untrusted or public PC.
    -----------------------------------
    Always learning yet never an expert.

    Sony SVR2000 + Seagate 320Gb OzTivi 1.6.2

  2. #2
    Join Date
    Apr 2004
    Location
    Perth, Western Australia
    Posts
    3,037
    Long time since I have played around the guts of TW, and cannot remember any timeout options. TiVoweb was not designed from the ground up for external access, it was added later without much thought for security.

    You might want to have a look at the support thread and development thread for your issue.

    An improvement might be just changing the port TiVo listens to by changing port = 80 in tivoweb.cfg to a non standard port (still not safe, but better than you currently have).

    Or even running a Secure SSL Reverse Proxy for TivoWeb.

    Peter.
    Please search this forum and our Website for your TiVo questions before starting a new thread. Thanks!

  3. #3
    Join Date
    Apr 2004
    Location
    Perth, Western Australia
    Posts
    3,037
    Long time since I have played around the guts of TW, and cannot remember any timeout options. TiVoweb was not designed from the ground up for external access, it was added later without much thought for security.

    You might wabt it have a look at the support thread and development thread for your issue.

    An improvement might be just changing the port TiVo listens to by changing port = 80 in tivoweb.cfg to a non standard port (still not safe, but better than you currently have).

    Or even running a Secure SSL Reverse Proxy for TivoWeb.

    Peter.
    Please search this forum and our Website for your TiVo questions before starting a new thread. Thanks!

Similar Threads

  1. TivoWEB needs a password?
    By palmag in forum Question and Answer Forum
    Replies: 4
    Last Post: 11-10-2008, 05:30 PM
  2. username password needed tivowebplus
    By schwaam in forum New Zealand General Forum
    Replies: 1
    Last Post: 15-08-2007, 09:04 PM
  3. tivowebplus password required??
    By andrewmc in forum Question and Answer Forum
    Replies: 3
    Last Post: 30-11-2006, 05:01 PM
  4. tivoweb plus
    By dadnz in forum New Zealand General Forum
    Replies: 4
    Last Post: 20-02-2006, 07:13 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •