MobileRead Forums - View Single Post

haertig · 10-18-2017, 07:14 PM

Is there a way to create a content server "user" without a password?

I don't need advice on how this is "not secure". To the contrary, opening a port to a server and using passwords is not secure enough for me. I run a VPN into my home network, and set up VPN client-specific firewall rules for who can access what (internal IP address and port). This is all based on the client certificate, which is much more secure than any Calibre password would ever be.

So I don't need passwords for Calibre's content server to create security. I already have a superior version of security. Is there a way to configure Calibre's content server without passwords? I could just not set up content server "users", because then it could be password-less, but I want to have users to control which virtual library can be accessed. Apparently, the only way to control virtual library access is to configure users. And if you configure a user, then you are required to configure a password. This is over-restrictive. Well intentioned maybe, but still over restrictive for folks that want to create security by a different method.

Related (somewhat), ... is there a way to configure default content server behavior? I would like to have the following default start up behavior for all incoming users: (1) No password required, (2) Go to a specific virtual library, (3) Display all items - do not require repeated clicks to "display more", (4) Sort by author, then series, then order in series, (5) Allow quick access to select from a specific subset of tags to cut down the list size.

I know that's asking for a lot. But it's the way I would want to default things in my personal version of "the ideal content server".

10-18-2017, 07:14 PM	#11
haertig Wizard Posts: 1,891 Karma: 31522252 Join Date: Sep 2017 Device: PW3, Fire HD8 Gen7, Moto G7, Sansa Clip v2, Ruizu X26	Is there a way to create a content server "user" without a password? I don't need advice on how this is "not secure". To the contrary, opening a port to a server and using passwords is not secure enough for me. I run a VPN into my home network, and set up VPN client-specific firewall rules for who can access what (internal IP address and port). This is all based on the client certificate, which is much more secure than any Calibre password would ever be. So I don't need passwords for Calibre's content server to create security. I already have a superior version of security. Is there a way to configure Calibre's content server without passwords? I could just not set up content server "users", because then it could be password-less, but I want to have users to control which virtual library can be accessed. Apparently, the only way to control virtual library access is to configure users. And if you configure a user, then you are required to configure a password. This is over-restrictive. Well intentioned maybe, but still over restrictive for folks that want to create security by a different method. Related (somewhat), ... is there a way to configure default content server behavior? I would like to have the following default start up behavior for all incoming users: (1) No password required, (2) Go to a specific virtual library, (3) Display all items - do not require repeated clicks to "display more", (4) Sort by author, then series, then order in series, (5) Allow quick access to select from a specific subset of tags to cut down the list size. I know that's asking for a lot. But it's the way I would want to default things in my personal version of "the ideal content server".