rsh/ssh prompt for password when none is required in 6.9.1

[eweitzman]

I have no password on the unraid root account.

 

rsh/ssh prompt for the password and will not log in when the enter key is pressed. This is new behavior in 6.9.1: I have been using ssh for root without a password successfully like forever.

 

telnet connects without requiring a password.

 

The GUI itself opens without requiring a password.

 

The web GUI console opens without requiring a password.

 

Any suggestions?

 

Thanks,

- Eric

[John_M]

2 minutes ago, eweitzman said:

Any suggestions?

 

Only one: set a password. As you said, it's required by 6.9.1.

 

[eweitzman]

It's only required by 6.9.1's build or config of rsh/ssh, and not required in other places. Can this be configured by the user?

 

Why the change?

[John_M]

21 minutes ago, eweitzman said:

Why the change?

 

See the release notes: https://wiki.unraid.net/Unraid_OS_6.9.0#SSH_Improvements

 

[eweitzman]

I've just found another use case where a non-existent root password is required: browsing samba drives from windows. Arg!

[eweitzman]

@John_M - Thanks for taking the time to point this out in the release notes. (They've moved to https://wiki.unraid.net/Manual/Release_Notes/Unraid_OS_6.9.0#SSH_Improvements now.) This explains what I've discovered re ssh requiring that root have a password, but doesn't explain either why this is now required nor why other avenues of access (telnet, web UI, samba) do or don't require it. I'll have to find out how to register a complaint with management.

 

Thanks,

- Eric

[trurl]

2 hours ago, eweitzman said:

I've just found another use case where a non-existent root password is required: browsing samba drives from windows. Arg!

root user is just considered an anonymous guest for network file access. You should use another user for that purpose.

[eweitzman]

There's no good reason to force security enhancements on users who do not want/need them. I've been able to run unraid with no root password (and no friction) for over a decade. Nothing in my circumstances or practices has required changing this now.

[kizer]

January 1, 1968 Seatbelts became a requirement and to many it was a "I don't want to use it", but it has become the standard to which all vehicles now have them. 

 

Don't think of the Requirement for a Root password as a force. Nearly all OS's ask you to set a root password. I feel for you that you don't want to, but there has been many reported hacking's over the past month or two and tons of data has been lost and it has been identified that many never set something as simple as root password.