Page 1 of 1

New Authentication System & Bug Fixes

Posted: Sat May 23, 2009 5:41 pm
by Eric
The latest bleeding edge firmware now includes a new cookie-based authentication system instead of the old basic http authentication. This should make the system more secure by allowing you to logout properly, allowing session time-outs if you are inactive for a while, and by preventing against XSRF attacks.

The problems with the access restriction section and the quota section noted in the Beta 5 release have also been corrected in the latest firmware. Several bugs have also been fixed in the web monitor, the custom DNS settings and the WDS bridge settings.

If you've experienced problems with any of these things, you may want to consider upgrading now.

Re: New Authentication System & Bug Fixes

Posted: Fri May 29, 2009 5:04 am
by FRiC
How long is the session time-out? And is there any way to not make it time out if I'm editing something? I notice that if I spend too much time editing something and the session times out, the page that I'm on still appears to work and clicking save shows the spinning thing but returns instantly and the save fails (no indication that it failed though), and the re-login page if I switch to another page.

Re: New Authentication System & Bug Fixes

Posted: Tue Jun 02, 2009 11:08 pm
by sticky
Hi
I have just upgraded to the new bleeding edge version and have had problems reloading my backed up configuration. It just says its loading it but never finishes. Anyone had this problem.
S

Re: New Authentication System & Bug Fixes

Posted: Wed Jun 03, 2009 2:52 am
by DoesItMatter
I am liking the bleeding edge build!

On my Fon 2201+, I'm 8 days uptime and still plenty of free memory.

I usually had to keep rebooting with DD-WRT loaded.

Very nice work!

Re: New Authentication System & Bug Fixes

Posted: Sat Jun 06, 2009 3:30 am
by Crowbar
sticky wrote:Hi
I have just upgraded to the new bleeding edge version and have had problems reloading my backed up configuration. It just says its loading it but never finishes. Anyone had this problem.
S

I have the same problem had to reconfigure from begining.

Re: New Authentication System & Bug Fixes

Posted: Sun Jun 07, 2009 4:08 am
by Dan
It is often mentioned in DDWRT and Sveasoft forums that attempting to reload config files after upgrading firmware to newer versions can lead to problems.
It is a bad policy if you wish to avoid problems.
Using config files ACROSS different router types with the same version of firmware is a complete no-no. Bricked routers arrive. My experience from accidentally trying to load backup config files from a WRT54gs v1.1 to a WRT54GL.

I found by trial/accident (using DDWRT) that if I had a router page with a lot of data/ MAC addresses etc. I could load that data directly into the new router firmware across models and firmware provided the page was/looked the same and the routers had the same IP address, password and (perhaps) name.

This need me to:-

(1) Go through each wanted page using my browser

(2) Switch the lan cable to the router from old to new

(3) Go through each page and save to the new router.

Not tried it with Gargoyle yet as my config is simple as yet.

Re: New Authentication System & Bug Fixes

Posted: Sun Jun 07, 2009 11:01 am
by Eric
Actually this is a bug not a compatibility issue. It looks like both restore and upgrade pages got broken by my new login system.

However, this should be fixed now. New bleeding edge firmware has been uploaded.

Re: New Authentication System & Bug Fixes

Posted: Mon Jun 08, 2009 2:28 am
by FRiC
Dan wrote:It is often mentioned in DDWRT and Sveasoft forums that attempting to reload config files after upgrading firmware to newer versions can lead to problems.
Many of those firmware directly store the NVRAM variables, or make a snapshot of the firmware. It's less of a problem with OpenWrt based firmwares...