Captcha on glpi

varunb · 2012-01-06 07:41:56

Hi,

I am using GLPI version 0.80.5 on opensuse 11.4. I have a question???

Can we integrate Captcha on glpi??? so that it will be very secured while login!..!

ddurieux · 2012-01-06 11:16:53

Because login + password isn't secured ?

varunb · 2012-01-06 12:16:24

ddurieux wrote:

Because login + password isn't secured ?

Off-course it is secured, but if login attempts exceeds when entering wrong password then captcha will be useful.

Just asking can we integrate???

JMD · 2012-01-07 20:23:04

Captcha are not a good solution.

It's easy for bots to bypass captcha. We used recaptcha for example for the forum and spambots polluted the forum anyway.

Moreover, captcha are not human friendly.

tomolimo · 2012-01-09 10:01:10

To illustrate this, see the following article (sorry it's in French, but schemas and figures are understandable enough): http://www.xmco.fr/article-captcha.html
regards,
Tomolimo

teguh.umar · 2012-04-23 14:22:45

is t possible to put into GLPI? because my manager want to implement it, and he really want it. My Company GLPI will be published to internet, to support road warrior worker

Regards,

tomolimo · 2012-04-23 14:51:19

I'm not in the dev core team to decide that, but I think that captcha is not secure at all, and provide only a mean (and not very efficient as explained before) to prevent bots from login in.
But if you want something secure, then use SSL (https) with certificates! And this doesn't need dev, all is managed from Apache (or IIS).
regards,
Tomolimo

teguh.umar · 2012-04-25 05:09:12

Thank you for your answer, I'll try to convince my manager to use SSL (https), could you give a link about how to configure glpi to SSL

Regards,

tomolimo · 2012-04-25 09:54:20

The configuration is not in GLPI it has to be in the web server (Apache or IIS, or whatever).
Google that; and you'll find a lot of tuto, and doc.
The only trick is to have a certificat for your web server.
They are some free certificat providers (certificats to be renewed each year), but they are ok, and secure. In the past we've used this provider (free certificats), and we were happy with it: http://cert.startcom.org/
regards,
Tomolimo

teguh.umar · 2012-04-26 13:03:51

Thank you, my manager approve it

Forum GLPI-Project

Announcement

#1 2012-01-06 07:41:56

Captcha on glpi

#2 2012-01-06 11:16:53

Re: Captcha on glpi

#3 2012-01-06 12:16:24

Re: Captcha on glpi

#4 2012-01-07 20:23:04

Re: Captcha on glpi

#5 2012-01-09 10:01:10

Re: Captcha on glpi

#6 2012-04-23 14:22:45

Re: Captcha on glpi

#7 2012-04-23 14:51:19

Re: Captcha on glpi

#8 2012-04-25 05:09:12

Re: Captcha on glpi

#9 2012-04-25 09:54:20

Re: Captcha on glpi

#10 2012-04-26 13:03:51

Re: Captcha on glpi

Board footer