Turning a Zonbu into an SVN server

by **jmlait** on Sun Oct 28, 2007 7:28 pm

Hello. My old cvs server has gone flakey so I decided to replace it with something that uses less juice and hopefully is more stable. The Zonbu seemed like an excellent fit. As the title suggests, I am also going to be upgrading to subversion at the same time.

So, my process so far:
1) Acquire one Zonbu and verify it works
2) Activate root permissions
3) Install developer edition overlay
4) Create a new account for myself
a) useradd loginname
b) /home/loginname had to be manually created
c) passwd loginname to make the initial password
d) emerge tcsh as I am weird that way
5) Set sshd to start up by going to /etc/runlevel/default and ln -s /etc/init.d/sshd sshd
6) Open up the iptables for ssh
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p udp --dport 22 -j ACCEPT

At this point I can ssh into the zonbu using that account. I also successfully used cvs2svn to do an test conversion of my cvs repository to svn. I then successfully did an svn checkout svn+ssh://IP.OF.ZONBO/path/to/repo

Of course, the trouble was I had to type my password a few times. The next stage is setting up passwordless ssh via keys. I've done this lots of times so thought it would be a few minutes of work but I'm still struggling now.

Okay, two paragraphs of text deleted as I realized my newb mistake: My manually created /home/loginname has 777 permissions. chmod to 755 and passwordless ssh works fine.

So, I guess my remaining support question is this. Does the built in pcor user have a password for ssh? This machine will be eventually be dumped on the open network (with all ports blocked by a firewall but SSH) so I worry about the magic in pcor causing security holes.

Oh, and if there is any reason why this is a crazy idea, I can still be stopped :>

by **aymeric.augustin** on Mon Oct 29, 2007 12:41 pm

Yes, there is a built-in password which is:
- pcor by default
- your own password if you have logged in with your zonbu account at least once

You shouldn't change that password via passwd because you will no longer be able to login via the graphical login!

Change it with
Start > Control Panel > Advanced Settings > Storage > Connect

(A simpler version in Start > Control Panel > Password is under development)

by **jmlait** on Wed Oct 31, 2007 5:25 pm

Thank you very much for the swift response.

Instead of fiddling with the pcor password, I instead went with the easier root of just denying all ssh login other than the newly added users.

In /etc/ssh/sshd_config I added the lines:
AllowUsers newusername
PermitRootLogin no

When all the valid source machines have their keys setup for passwordless login, I might also add the line:
PasswordAuthentication no

which will then only accept ssh from machines that have been setup.

- Jeff

Turning a Zonbu into an SVN server

Turning a Zonbu into an SVN server

Re: Turning a Zonbu into an SVN server

Re: Turning a Zonbu into an SVN server

Who is online