Bug 31096 - [SSH] How to access the management interface?
[SSH] How to access the management interface?
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: General
UCS 3.1
Other Linux
: P5 enhancement (vote)
: UCS 3.1-1-errata
Assigned To: Moritz Muehlenhoff
Arvid Requate
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-04-18 13:31 CEST by Stefan Gohmann
Modified: 2013-06-27 16:04 CEST (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Usability
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Gohmann univentionstaff 2013-04-18 13:31:28 CEST
And something for the SSH login.

+++ This bug was initially created as a clone of Bug #31094 +++

/etc/issue should include a hint how to access the management interface, for
example:

********************************************************************
The management interface for this server is available at:
 https://10.201.12.31

Univention DC Master 3.1-1

master1231 login: 
********************************************************************
Comment 1 Moritz Muehlenhoff univentionstaff 2013-06-07 14:47:17 CEST
/etc/issue.net now provides an information message like in the following example:

Univention DC Master 3.1-1:

The UCS management system is available at https://master.sec31x86.jmm/ (10.200.3.91)

You can log into the Univention Management Console - the principal tool to manage 
users, groups, etc. - using the "Administrator" account and the password selected 
for the root user on the master domain controller.

There's now a new UCR variable sshd/banner, which by default configures /etc/issue.net as the banner file. Unsetting sshd/banner and setting it to an empty string, disables the display of the message.

yaml file: 2013-06-07-univention-base-files.yaml

Fixed and built in errata3.1-1, all changes have been merged to 3.2-0.
Comment 2 Stefan Gohmann univentionstaff 2013-06-11 21:10:19 CEST
Could you disable the message if the appliance mode has not finished. Otherwise we have two welcome messages:

$ ssh root@10.210.153.224
Univention DC Master 3.1-1:

The UCS management system is available at https://master.ucstest.local/ (10.210.153.224)

You can log into the Univention Management Console - the principal tool to manage
users, groups, etc. - using the "Administrator" account and the password selected
for the root user on the master domain controller.



########################################################################

Welcome to Univention Corporate Server (UCS)!

This system was configured with a random or default password. It is
recommended to change the password of the administrative root account.
To do so, please enter the following command and type in your password
twice:
 passwd root

This system is not completely configured yet. To finalise the configuration
of this system you need to login to the web-based Univention Management
Console which can be reached with a web browser under the following URL

  https://10.210.153.224/

The login at the Univention Management Console needs to be done with
the user root and the new password you entered in the above-mentioned
password change.

UMC uses numerous Javascript and CSS functions to display the web
interface. Some of these features are unavailable in older browsers. The
following web browsers are supported:
 - Chrome as of version 14 or later
 - Firefox as of version 3.6 (Firefox 10 or later is recommended)
 - Internet Explorer as of version 8 (IE 9 or later is recommended)
 - Safari (on the iPad 2)

########################################################################

Linux master 3.2.0-ucs27-amd64 #1 SMP Debian 3.2.39-2.27.201303061719 x86_64
Last login: Tue Jun 11 15:06:15 2013 from 10.210.216.13
root@master:~#
Comment 3 Moritz Muehlenhoff univentionstaff 2013-06-18 11:09:57 CEST
(In reply to Stefan Gohmann from comment #2)
> Could you disable the message if the appliance mode has not finished.
> Otherwise we have two welcome messages:

The welcome message for SSH is now shown through motd. It is only displayed if the message from appliance mode isn't enabled.

YAML: 2013-06-07-univention-base-files.yaml
Comment 4 Arvid Requate univentionstaff 2013-06-25 11:56:33 CEST
In ucs-3.1-1 there is still the typo in sshd_config template (/ssh/dbanner) which was fixed in svn r41447 in ucs-3.2-0.

UCR variable description for sshd/motd is twisted in english: "If the variable is not set, the hint isn't shown." -- in german it's the opposite.
Comment 5 Arvid Requate univentionstaff 2013-06-25 12:00:11 CEST
Changelog 3.2-0 not commited yet.
Comment 6 Moritz Muehlenhoff univentionstaff 2013-06-25 12:45:35 CEST
(In reply to Arvid Requate from comment #4)
> In ucs-3.1-1 there is still the typo in sshd_config template (/ssh/dbanner)
> which was fixed in svn r41447 in ucs-3.2-0.
> 
> UCR variable description for sshd/motd is twisted in english: "If the
> variable is not set, the hint isn't shown." -- in german it's the opposite.

Fixed.
Comment 7 Arvid Requate univentionstaff 2013-06-25 14:34:36 CEST
Ok.
Comment 8 Janek Walkenhorst univentionstaff 2013-06-27 16:04:40 CEST
http://errata.univention.de/ucs/3.1/131.html