On 13 Feb., 23:19, Volker Braun <vbraun.n...@gmail.com> wrote: > On Monday, February 13, 2012 12:42:14 AM UTC-8, emil wrote: > > > Right at the moment loggins are not disabled but all servers (ssh, > > ftp) are off by default. Passwords for the accounts are not published > > (my defaults are like strong 20 char passwords). > > Thats fine as long as you don't use MD5 for password hashes (no > distribution past ~2008, I guess). But its security relies on you never > handing out the password to anybody, so I don't understand why you don't > disable logins directly if you want to make the VM a sealed box.
No, I don't know which algorithm, but clearly not MD5 I published this system as beta, so I thought for easy solutions for some features. Sure, one could disable logins. But then there should the possibility of a remote access to the VM via ssh. For a testing system I thought it is easier to type passwd than to explain how to edit sshd configuration file or host.deny/host.allow files. > > > It is stated in the docs of the VM, that one should change passwords > > before using the sage server. > Well, this was a bad formulation by me. You have to change passwords to make remote logins to the VM via ssh. You need not change passwords to use the sage server. However if you are very paranoid you can of course change the passwords anyway. This is the complete docs: http://boxen.math.washington.edu/home/emil/doc/html/en/relase-notes-slvms-b.htm.htm I think I got it right there... > Well if you don't hand out the password then that would be difficult to do, > non? To change passwords is easy since you have a root desktop from the vm. > course you can always modify a VM that is running on your computer > but its not exactly a friendly process for new users ;-) Have you ever run it? I allow to disagree, even if it "would" be necessary to set passwords for using the server - which it is not. A click on a launch icon is EXTREMLY userfriendly compared to setting up such a sage server from scratch. Lots of what I put into it is MORE userfriendly than other available systems. -- To post to this group, send email to sage-support@googlegroups.com To unsubscribe from this group, send email to sage-support+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/sage-support URL: http://www.sagemath.org
