Option missing ?

[BenKenobi]

Has the option to permit users to save login details in the browser GUI been removed ?

If not where is it - why does 18.1 now force me to log in all the time - I can't find the option in any settings window to allow this ( I know it used to be a setting - been using a form of pFSense or OPNSense for years ).

I'm not interested in lectures why saving login details is a bad idea.

[fabian]

Looks like it's hardcoded off:
https://github.com/opnsense/core/blob/master/src/etc/inc/authgui.inc#L471

[phoenix]

Has the option to permit users to save login details in the browser GUI been removed ?

Possibly.

If not where is it - why does 18.1 now force me to log in all the time - I can't find the option in any settings window to allow this ( I know it used to be a setting - been using a form of pFSense or OPNSense for years ).

That's poor practice and it's closing the browser that forces you to login again and, I guess, the session will expire after a period of time.

I'm not interested in lectures why saving login details is a bad idea.

That's a rather patronising statement, it's never a 'lecture' to tell people about good security practice and something about which they may never have previously been told.

[dcol]

I would also like to see this feature returned to the GUI.

[BenKenobi]

Quote from: BenKenobi on March 11, 2018, 01:17:27 pm

    I'm not interested in lectures why saving login details is a bad idea.

That's a rather patronising statement, it's never a 'lecture' to tell people about good security practice and something about which they may never have previously been told.

Actually it isn't, by definition patronising is

treat condescendingly, treat with condescension, condescend to, look down on, talk down to, put down, humiliate, treat like a child, treat as inferior, treat with disdain, treat scornfully/contemptuously, be snobbish to, look down one's nose at

Whereas I made it clear I don't need lectures on the topic to avoid those who would use such lectures as a way to justify not having the option or to try and sound clever.

I asked a question re an option that seems to have disappeared, I did not invite a debate on the merits or demerits of its use.

[franco]

Least that could be done is check the release notes as a base for discussion. It allows anyone to formulate a reasonable question upon which we could discuss and potentially act.


Cheers,
Franco

[phoenix]

Whereas I made it clear I don't need lectures on the topic to avoid those who would use such lectures as a way to justify not having the option or to try and sound clever.

I don't need a lecture on the use of the word "patronising" as I know what it means and your latest comments seem to fit the definition quite well.

I asked a question re an option that seems to have disappeared, I did not invite a debate on the merits or demerits of its use.

If you read my post again you'll see that I made a comment about advice given on forums, just like you I have an opinion about that and it's never a bad idea to give advice on security and in any case I actually didn't do that nor did I attempt to engage you in debate over your request.

[dcol]

So lets stop the posturing and get down to the issue.

This was a nice feature. You can default it disabled to avoid unknowing lack of protection.
For me, I do not allow or use the GUI outside the local network. But Firefox, at least remembers my long password. Just one extra click for me. Not a game changer, just an inconvenience.