On 13 Feb., 09:22, Volker Braun <[email protected]> wrote: > On Sunday, February 12, 2012 10:56:35 PM UTC-8, emil wrote: > > > If you want to use the multiuser "sage server" and access it from > > other computers on the LAN then you need "bridged adapter" and connect > > to the IP of the VM (there should be a green splash window on the > > bottom with the IP adress) > > But before you ever set the network adapter to "bridged" you must change > all passwords for all accounts in the virtual machine. Emil, are all logins > disabled in your VM?
Well, I did quite some thinking how to handle this when made it. Right at the moment loggins are not disabled but all servers (ssh, ftp) are off by default. Passwords for the accounts are not published (my defaults are like strong 20 char passwords). sshd is started together with the sage server and at this same moment a new set of encryption keys is generated (so it would be no use for some cracker to sniff the keys from the published iso). It is stated in the docs of the VM, that one should change passwords before using the sage server. The sage admin password is also not set and is asked for at first run of the notebook or the server. So if the password is not changed one still would have to crack those unknown strong passwords to gain ssh access. So I am no security expert, and if anyone points out a loophole to me I am thankful. Please bear in mind that this was like a first attempt to provide all that functionality in that 500 MB download and there will be rough edges (I am really no pro sysadmin, most of it is my first contact with this stuff). When creating it I studied the docs by Dan Drake and Jason Grout in detail and tried to implement it the best I could. -- To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/sage-support URL: http://www.sagemath.org
