maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   OpenSSH update (https://talk.maemo.org/showthread.php?t=12352)

RipTorn 2007-11-27 19:16

OpenSSH update (no need to install gainroot)
 
Just installed the newest version of OpenSSH on my N800 with OS2008 Beta, and low and behold it asked me to set a root password, its a welcome feature for me and a much cleaner way of setting passwords than adding old repository's to install becomeroot or gainroot.

Anyone else noticed this or am I just repeating what people already know?


Cheers
Rip

deeteroderdas 2007-11-27 19:35

Re: OpenSSH update
 
Quote:

Originally Posted by RipTorn (Post 100897)
Just installed the newest version of OpenSSH on my N800 with OS2008 Beta, and low and behold it asked me to set a root password, its a welcome feature for me and a much cleaner way of setting passwords than adding old repository's to install becomeroot or gainroot.

Anyone else noticed this or am I just repeating what people already know?


Cheers
Rip

That's what that was! I had installed OpenSSH, then went about my business, installing other apps. At some point I rebooted, and when it came back up, I was asked to enter my password. I had already did the sudo gainroot, then changed my password from the xterm, so I could ssh in. I had a moment of confusion, but then continued with my install fest.

Thanks!

RipTorn 2007-11-28 03:58

Re: OpenSSH update
 
I'm pretty happy with it, no more need to install a bora repository to get gainroot :D

Ed_ 2007-11-28 09:17

Re: OpenSSH update
 
I'm glad you like it. Any further suggestions?
I'm going to fix small gtk issue with color of background and release it.

RipTorn 2007-11-28 10:16

Re: OpenSSH update
 
I honestly can't think of anything else, I would never of thought of getting OpenSSH to set the root password till you did it :) It now does everything I need in an SSH server.

Thanks again!

Cheer
Rip

N770-Freak 2007-11-28 10:25

Re: OpenSSH update
 
Is it possible to abort this password dialog? Or will we be forced to change the current root password?

Ed_ 2007-11-28 10:34

Re: OpenSSH update
 
The initial idea was that this dialog shouldl only appear when you install package first time.
I'll look at this again and fix it if it doesn't work properly.

Ed_ 2007-11-29 08:43

Re: OpenSSH update
 
One more good thing about openssh is if you install openssh-server and change password you will be able to login as root without using becomeroot or setting R&D mode.
Sounds good, ha?

linuxrebel 2007-11-30 08:21

Re: OpenSSH update
 
Quote:

Originally Posted by N770-Freak (Post 101273)
Is it possible to abort this password dialog? Or will we be forced to change the current root password?

I already had a new root passwd. Just reset it to the same thing I already had it and drove on. No problem at all ~Wii~

Ed thanks It's often simple things like this that make all the difference.

N770-Freak 2007-11-30 10:30

Re: OpenSSH update
 
Quote:

Originally Posted by linuxrebel (Post 102442)
I already had a new root passwd. Just reset it to the same thing I already had it and drove on. No problem at all ~Wii~

That's exactly what I think is the wrong way of doing this. If you have already set your root password or don't want to change your current one, you should be able to abort this dialog without retyping your current password.

I think the best solution would be one more dialog that asks at first whether you want to change your password or not. Or the password dialog could be extended by a cancel button. The Info text should mention that cancel will abort password change without aborting the setup.

Ed_ 2007-11-30 12:24

Re: OpenSSH update
 
I don't see any need in one more dialog, but I can add 'cancel' button to this one.
Hovewer, I'm pretty sure that most of users would press it even if they didn't change their password yet and magic will not happen - they will not be able to login.
What do you think?

N770-Freak 2007-11-30 12:36

Re: OpenSSH update
 
Quote:

Originally Posted by Ed_ (Post 102518)
I don't see any need in one more dialog, but I can add 'cancel' button to this one.
Hovewer, I'm pretty sure that most of users would press it even if they didn't change their password yet and magic will not happen - they will not be able to login.
What do you think?

The info text in this dialog should mention that you are not able to login if the root password wasn't set. And I think that people who want to use ssh to control the internet tablet as root, should be able to read three lines!

Perhaps you should also mention that the password shouldn't be too short... ssh could be a security problem.

Ed_ 2007-11-30 12:55

Re: OpenSSH update
 
May be. But I still think most of them will not read even those three lines :)

luca 2007-11-30 15:19

Re: OpenSSH update
 
IMHO sshd should, by default, disable root login and only allow user login with keys (i.e. disable password authentication). That's how I configured mine anyway.

Ed_ 2007-11-30 16:55

Re: OpenSSH update
 
In this case you have to deal with R&D mode and becomeroot. My idea with changing password was to give user opportunity to login without it and then configure system as she wants.

TA-t3 2007-11-30 19:14

Re: OpenSSH update
 
Quote:

Originally Posted by luca (Post 102614)
IMHO sshd should, by default, disable root login and only allow user login with keys (i.e. disable password authentication). That's how I configured mine anyway.

Then you'll always have to use the ssh client on the tablet to get the keys into the system into the first place. This may be inconvenient and impossible (say, if the computer you're planning to log in from doesn't run an ssh server) for many users.
Personally I think this is ideal:
Quote:

Originally Posted by _Ed
My idea with changing password was to give user opportunity to login without it and then configure system as she wants.



All times are GMT. The time now is 10:30.

vBulletin® Version 3.8.8