OESF Portables Forum

Everything Else => General Support and Discussion => Zaurus General Forums => Archived Forums => Security and Networking => Topic started by: w4lna on February 26, 2004, 09:42:28 am

Title: No passwords required over USB?
Post by: w4lna on February 26, 2004, 09:42:28 am

Established a ssh connection with my SL-5600 over the USB interface,
but even though I have assigned passwords for root and zaurus, it didn\'t ask me for one.

Is this standard behavior and can it be corrected?

Title: No passwords required over USB?
Post by: lardman on February 26, 2004, 09:55:54 am

No this is not standard. What are you running on and which version of ssh?

Perhaps you\'re using public key (without even knowing it? ;-))


Si

Title: No passwords required over USB?
Post by: w4lna on February 26, 2004, 03:55:58 pm

Quote

No this is not standard. What are you running on and which version of ssh?

Perhaps you\'re using public key (without even knowing it? ;-))


Si

Have the USB driver loaded in Mac OS X, and the following for SSH on that system:

OpenSSH_3.6.1p1+CAN-2003-0693, SSH protocols 1.5/2.0, OpenSSL 0x0090702f

On the Zaurus, it is the standard Sharp 1.32 ROM and kernel.

Title: No passwords required over USB?
Post by: lardman on February 27, 2004, 06:56:25 am

The standard Sharp ROM doesn\'t come with ssh afaik, not can a root telnet login be made without editing /etc/securetty. Are you getting a terminal screen or a file transfer screen. If it\'s the latter then it may be that sftp is switching to ftp (which doesn\'t require a password).


Si

Title: No passwords required over USB?
Post by: w4lna on February 27, 2004, 07:00:33 am

Quote

The standard Sharp ROM doesn\'t come with ssh afaik, not can a root telnet login be made without editing /etc/securetty. Are you getting a terminal screen or a file transfer screen. If it\'s the latter then it may be that sftp is switching to ftp (which doesn\'t require a password).

I had to install SSH.  I compared the config files to the Mac and didn\'t see any huge differences.  There weren\'t any user keys, so I generated one, but it makes no difference.  It\'s also wide open :shock: from the WiFi connection too.

Title: No passwords required over USB?
Post by: lardman on February 27, 2004, 07:30:10 am

That\'s strange. I run ssh and have to provide a password everytime. I\'d guess that there\'s a config file somewhere on your Z which is set to allow logins via ssh without a password.

Just checking - You said that you\'ve set passwords for both root and zaurus, using passwd I presume?

Si

Title: No passwords required over USB?
Post by: tumnus on February 27, 2004, 07:32:39 am

Where did you get the ssh ipk from? I used this one: http://www.killefiz.de/zaurus/showdetail.php?app=1035 (http://www.killefiz.de/zaurus/showdetail.php?app=1035) . I have to enter a password.

I have never had to edit /etc/securetty to get root telnet access though with the Sharp ROMs

Title: No passwords required over USB?
Post by: lardman on February 27, 2004, 07:41:46 am

Quote

I have never had to edit /etc/securetty to get root telnet access though with the Sharp ROMs

Really? What about with the 2.xx ROMs? I certainly had to edit it with the 2.35 ROM.


Si