rsh/ssh prompt for password when none is required in 6.9.1


9 posts in this topic Last Reply

Recommended Posts

I have no password on the unraid root account.

 

rsh/ssh prompt for the password and will not log in when the enter key is pressed. This is new behavior in 6.9.1: I have been using ssh for root without a password successfully like forever.

 

telnet connects without requiring a password.

 

The GUI itself opens without requiring a password.

 

The web GUI console opens without requiring a password.

 

Any suggestions?

 

Thanks,

- Eric

Link to post

@John_M - Thanks for taking the time to point this out in the release notes. (They've moved to https://wiki.unraid.net/Manual/Release_Notes/Unraid_OS_6.9.0#SSH_Improvements now.) This explains what I've discovered re ssh requiring that root have a password, but doesn't explain either why this is now required nor why other avenues of access (telnet, web UI, samba) do or don't require it. I'll have to find out how to register a complaint with management.

 

Thanks,

- Eric

Link to post
2 hours ago, eweitzman said:

I've just found another use case where a non-existent root password is required: browsing samba drives from windows. Arg!

root user is just considered an anonymous guest for network file access. You should use another user for that purpose.

Link to post
  • 2 weeks later...

There's no good reason to force security enhancements on users who do not want/need them. I've been able to run unraid with no root password (and no friction) for over a decade. Nothing in my circumstances or practices has required changing this now.

Link to post

January 1, 1968 Seatbelts became a requirement and to many it was a "I don't want to use it", but it has become the standard to which all vehicles now have them. 

 

Don't think of the Requirement for a Root password as a force. Nearly all OS's ask you to set a root password. I feel for you that you don't want to, but there has been many reported hacking's over the past month or two and tons of data has been lost and it has been identified that many never set something as simple as root password. 

Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.