Active Topics
-
Camera phone competition March 2023 "Endless" (35)
to General by Maemish - 1 day ago -
TLS 1.2 for N9 is ready (28)
to MeeGo / Harmattan by smartblu9 - 1 day, 1 hr ago -
Maemo repository (3)
to Community by torsen - 1 day, 17 hrs ago -
Error after installing Leste on sdcard (11)
to Maemo 7 / Leste by Maemish - 2 days, 14 hrs ago -
Introducing ubiboot N9 (multiboot OS loader) (1,393)
to Alternatives by smatkovi - 3 days, 21 hrs ago - more...
|
2012-01-25
, 18:11
|
|
Posts: 123 |
Thanked: 99 times |
Joined on Sep 2010
@ Russia
|
#3
|
Just use ssh key for login.
|
|
2012-01-25
, 18:17
|
|
Posts: 2,102 |
Thanked: 1,937 times |
Joined on Sep 2008
@ Berlin, Germany
|
#4
|
Code:
sudo gainroot passwd user
 |
|
2012-01-25
, 18:17
|
|
Posts: 5,028 |
Thanked: 8,613 times |
Joined on Mar 2011
|
#5
|
Originally Posted by ForeverYoung
Irrelevant to question - it doesn't allow to connect remotely to user, if '*' is set instead of password, or '!'.
Just use ssh key for login.
Anyway, using '!' seems to allow connecting through ssh *without* password set for user. Yet, I haven't seen or heard about any issues, when real password is set. So, I think it answers OP question
/Estel
__________________
N900's aluminum backcover / body replacement
-
N900's HDMI-Out
-
Camera cover MOD
-
Measure battery's real capacity on-device
-
TrueCrypt 7.1 | ereswap | bnf
-
Hardware's mods research is costly. To support my work, please consider donating. Thank You!
N900's aluminum backcover / body replacement
-
N900's HDMI-Out
-
Camera cover MOD
-
Measure battery's real capacity on-device
-
TrueCrypt 7.1 | ereswap | bnf
-
Hardware's mods research is costly. To support my work, please consider donating. Thank You!
|
|
2012-01-26
, 04:42
|
|
Posts: 3,401 |
Thanked: 1,255 times |
Joined on Nov 2005
@ London, UK
|
#6
|
Originally Posted by erdie
Allowed? Yes. Recommended? No (IMHO).
Hi all,
is it allowed to give the user "user" a defined password or will this lead to issues?
Background: I am using ssh-server for file transfert and it would be nice to have the right permission instantly.
Adding a password to the user account increases the chance of your device being exploited by someone guessing or brute forcing the password, though how seriously you should take this potential threat is hard to determine without knowing your precise circumstances.
The best and most secure option is to unlock the user account ("passwd -u user" as root), leave the user account without a password (not a blank password, but no password) and then use only public/private keys for authentication when logging in as user.
Originally Posted by erdie
Since PR1.1, using ssh to login as root is no longer permitted, either with a password or public/private keys.
Using root over ssh will cause problems if the user is goning to access them.
|
|
2012-01-26
, 05:37
|
|
Posts: 5,028 |
Thanked: 8,613 times |
Joined on Mar 2011
|
#7
|
Originally Posted by Milhouse
Although I generally agree with Your post, this statement is plain wrong. I'm doing it everyday (PR1.3, now 1.3.1 and CSSU-T) - using public/private key, but password based login as root also worked.
Since PR1.1, using ssh to login as root is no longer permitted, either with a password or public/private keys.
/Estel
__________________
N900's aluminum backcover / body replacement
-
N900's HDMI-Out
-
Camera cover MOD
-
Measure battery's real capacity on-device
-
TrueCrypt 7.1 | ereswap | bnf
-
Hardware's mods research is costly. To support my work, please consider donating. Thank You!
N900's aluminum backcover / body replacement
-
N900's HDMI-Out
-
Camera cover MOD
-
Measure battery's real capacity on-device
-
TrueCrypt 7.1 | ereswap | bnf
-
Hardware's mods research is costly. To support my work, please consider donating. Thank You!
|
|
2012-01-26
, 06:52
|
|
Posts: 3,401 |
Thanked: 1,255 times |
Joined on Nov 2005
@ London, UK
|
#8
|
Originally Posted by Estel
I should have mentioned I am referring to MeeGo-Harmattan (N9[50]) in which case my statement is entirely correct. In terms of Maemo5/N900 however, you are correct there has never been any such root login restrictions. Perhaps the OP will enlighten us as to which system they are actually using.
Although I generally agree with Your post, this statement is plain wrong. I'm doing it everyday (PR1.3, now 1.3.1 and CSSU-T) - using public/private key, but password based login as root also worked.
/Estel
Last edited by Milhouse; 2012-01-26 at 06:55.
| The Following User Says Thank You to Milhouse For This Useful Post: | ||
is it allowed to give the user "user" a defined password or will this lead to issues?
Background: I am using ssh-server for file transfert and it would be nice to have the right permission instantly. Using root over ssh will cause problems if the user is goning to access them.
thanks
Erdie