Password shown in reports

General chat about HostMonitor (all messages posted before March 07, 2003 available here).
Locked
riosf
Posts: 3
Joined: Fri Feb 14, 2003 6:00 pm

Post by riosf »

I'm a new user testing HostMonitor. When a test report is generated, for example, for monitoring disk space on another computer, it shows the username and password used to access it. For security reasons, is there a way to eliminate the password from being shown in the report or to show asterisks instead?
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

Password in the report??? In which field?
riosf
Posts: 3
Joined: Fri Feb 14, 2003 6:00 pm

Post by riosf »

The following is a portion of the report generated for a test in another computer. As you can see in the last two lines the password is shown:

;-----------------------------------------------------------------------------
;- HostMonitor`s export/import file -
;- Generated by HostMonitor at 2/15/2003 9:58:07 PM -
;- Source file: -
;- Generation mode: Selected_Tests -
;-----------------------------------------------------------------------------


; ------- Test #01 -------


Method = UNC
;--- Common properties ---
Title = c$
Comment = \10.10.10.1c
RelatedURL =
ScheduleMode= Regular
Schedule = 7 Days, 24 Hours
Interval = 600
Alerts = Message, Sound
ReverseAlert= No
UnknownIsBad= Yes
UseCommonLog= Yes
PrivLogMode = Default
;--- Test specific properties ---
UNC = \10.10.10.1c$
test = totalfreespace
MinFreeSpace= 64M
username = 10.10.10.1administrator
password = 123456
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

It is not a report. Report is something like this http://www.ks-soft.net/hostmon.eng/examples/rep-man.htm
If you want to protect your settings (including passwords) use "Protect all settings by password" option located on Miscellaneous page in the Options dialog.

Regards
Alex
riosf
Posts: 3
Joined: Fri Feb 14, 2003 6:00 pm

Post by riosf »

This option controls accesses and does not avoid a password from being showed when an export is made. HostMonitor is an excellent tool but making a password visible is a security issue that you need to reconsider. Is there a way to eliminate the password field?
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

Nobody will be able to use export function when you protect settings by password.

Regards
Alex
Locked