[cobalt-security] Re: Different SSH & Admin password on Qube2

[Rod Todd <rodd_todd_1999@xxxxxxxxx>]

We first applied the methodology listed at
http://www.cobalt.com/support/kb/search.php3?ques=ssh&qid=534&language=1.

The password method worked, but only RSA
Authentication on the Qube (not the Raq) and SSH would
not start up automatically upon reboot on both.
The folks at F-Secure, from whom we purchased the
client software, gave us these alternative directions
instead:
{snip}
What we did yesterday (and i've only done this with
RedHat) is edit your /etc/rc.d/rc.local file (the last
startup script) and enter in the second to last line
the command to launch SSHD. "/usr/local/sbin/sshd2"
{end}
This was for the Raq2 and also possibly for the Qube
(its been a while since).
I believe the folks at F-Secure desired a different
directory and / or files to work with instead of the
/etc/rc.d/rc3.d/S85sshd because they said it would not
work or would work very slowly with their software.

As far as the Qube's admin password, we believe we had
changed the admin password via the command prompt at
some point, so we were able to SSH in as Admin, just
not use the GUI interface as Admin.  Now, we reset the
admin password via the reset button, though now we can
only SSH in using the older password, once we are in
(via SSH localhost) the GUI accepts the new password
we created after hitting the reset button.  I don't
know if the "accept once and save" option from an
initial login from the F-Secure client software
somehow keeps the old password alive, though we have
to type it every time to SSH in and changed it via the
GUI interface.  Are there any tests that I can perform
to sort this out (other than logic).

Cheers,
rt
>I went through your thread of posts and they were
>addressing the raq2. 
>A couple of questions with regard to SSH on the
Qube2:

>(1) What process did you use to install SSH on the
>Qube2? [The 
>experimental
>one that was made available a while back or from
>scratch or ...?] Any 
>insight
>you may care to share about your installation of SSH
>on the Qube2 would 
>be
>appreciated.

>(2) What caused the admin and root passwords to get
>out of sync on the 
>Qube2
>after the install of SSH? Any recommendation on how
>to avoid such 
>difficulties
>in future installs?

>(3) How did you finally resolve the problem on the
>Qube2?

>Maybe we can all learn from your experiences.

>Thanks, Mike.

On Wed, 31 May 2000 11:45:26 -0700 (PDT), Rod Todd 
<rodd_todd_1999@xxxxxxxxx>
wrote:

:>Hello, thanks for helping with our Raq2 -
:>We hit the reset button on our Qube2 to enable to
get
:>back into our GUI admin interface & now can get in. 
:>Though to get in will the SSH client first, the
:>F-Secure software still requires the old Admin
:>password (will not take the new one), and the GUI
:>takes the new password (via
:>localhost:8081/.cobalt/sysManage).  Should we
:>uninstall the ssh software to fix this; i.e. does
the
:>ssh software only remember the password once and
then
:>lets anyone in with the original password,
regardless
:>of changing to a new password via the GUI?
:>
:>P.S. (Our Raq2 and Qube2 now can do RSA
:>Authentication, but only as the root user :.( ...)
:>


__________________________________________________
Do You Yahoo!?
Yahoo! Photos -- now, 100 FREE prints!
http://photos.yahoo.com