Bug#1042823: Cannot log into SLBackup web frontend with sshd default configuration

2023-08-01 Thread Holger Levsen
On Tue, Aug 01, 2023 at 02:52:38PM +0200, Guido Berhoerster wrote:
> The Debian openssh-server disables login as root using a password by
> default.  As noted in the DebianEdu documentation this must be
> changed manually for the SLBackup web frontend to work:
> 
> > Note: the site will only work if you temporarily allow SSH root login on 
> > the backup server, which is the main server (tjener.intern) by default. 
> 
> I'm wondering whether we should allow password-based logins from
> localhost by default? E.g. through a drop in file
> /etc/ssh/sshd_config.d/debia-edu.conf:

can't we teach slbackup to work with ssh-key authentication?
it's 2023. 


> Match Address 127.0.0.1,10.0.2.2

10.0.2.2 is not localhost. :)


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

We live in a world where teenagers get more and more desperate trying to
convince adults to behave like grown ups.


signature.asc
Description: PGP signature


Bug#1042823: Cannot log into SLBackup web frontend with sshd default configuration

2023-08-01 Thread Guido Berhoerster
Package: debian-edu-config
Version: 2.12.33

The Debian openssh-server disables login as root using a password by
default.  As noted in the DebianEdu documentation this must be
changed manually for the SLBackup web frontend to work:

> Note: the site will only work if you temporarily allow SSH root login on the 
> backup server, which is the main server (tjener.intern) by default. 

I'm wondering whether we should allow password-based logins from
localhost by default? E.g. through a drop in file
/etc/ssh/sshd_config.d/debia-edu.conf:

Match Address 127.0.0.1,10.0.2.2
PermitRootLogin yes

-- 
Guido Berhoerster