[Ovirt-devel] ssh access on the ovirt-node

[Pierre-Gilles Mialon]

< node-image/common-post.ks >
[...]
if rpm -q --qf '%{release}' ovirt-node | grep -q "^0\." ; then
    echo "Building in developer mode, leaving root account unlocked"
    augtool <<\EOF
set /files/etc/ssh/sshd_config/PermitEmptyPasswords yes
save
EOF
else
    echo "Building in production mode, locking root account"
    passwd -l root
fi
[...]
</node-image/common-post.ks >

What is the best way to disable the EmptyPasswords on the ovirt-node ? I 
didn't understand where I can redifined the %{release}. I try to put 
_ovirt_devel= 1 in the Makefile.am but it does nothing.


Is it really wanted to add a ssh root access with an empty password ? Some 
weeks ago, the authenticated keys were the only way to log in via ssh, and 
that was fiting my needs... 

Perhaps we can change this behaviour by touching a file 
yes_i_really_want_ssh_root_access_with_empty_pass and make the test on it at 
the place of the minor of revision ?

 

Thanks  

-- 
Pierre-Gilles Mialon
Responsable hébergement :: Head of Hosting services
pmialon at linagora.com :: +33.1 58 18  65 46
Linagora :: http://www.linagora.com
27 rue de Berri :: 75008 PARIS
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://listman.redhat.com/archives/ovirt-devel/attachments/20090907/3e30e708/attachment.sig>