[Server-devel] [XSCE] What are IIAB/XSCE default passwords?

[Adam Holt]

FAQ #9 extensively revised today, preparing for the final release of
IIAB/XSCE 6.2:

   - 9 What are the default passwords?
   <http://wiki.laptop.org/go/XS_Community_Edition/FAQ#What_are_the_default_passwords.3F>

~ All feedback most welcome ~

Important to hit "Shift Reload" after loading the above (
http://schoolserver.org/faq) frequently-changing page!


Aside: there is a vocal/rising group that would like us to support
administrative user "pi" alongside "xsce-admin" in future.  Not going to
happen today!  But conceivably/possibly/maybe sometime in future, e.g. if
Raspberry Pi & Raspbian community momentum & norms/practices continue to
grow underneath ever rock ;)


On Sat, Feb 25, 2017 at 10:17 AM, Tim Moody <tim at timmoody.com> wrote:

> re: rpi
>
> Please Note: on some images this has already been done.
>
> On Sat, Feb 25, 2017 at 4:35 AM, Adam Holt <holt at laptop.org> wrote:
>
>> On Fri, Feb 24, 2017 at 6:34 PM, Tim Moody <tim at timmoody.com> wrote:
>>
>>> looks OK
>>>
>>> we have no way to force auto-expiry on passwords for applications we
>>> didn't write.
>>>
>>
>> Right.
>>
>> I've promoted "What are the default passwords?" to be near the top of
>> http://schoolserver.org/FAQ instead of near the bottom.
>>
>> This serves as a sneaky-but-fundamental introduction to the Admin Console
>> as well, evangelizing this central concept that take time for all to grok.
>> Currently it reads as follows:
>>
>> For KA Lite, ownCloud and many/similar services, the username is *Admin*
>> and the default/initial password is: *changeme*
>>
>> For the Admin Console(*) (http://box/admin, http://box.lan/admin, or
>> http://172.18.96.1/admin) the username is *xsce-admin* and the
>> default/initial password is: *g0adm1n*
>>
>> *Change xsce-admin's password before connecting your server to the
>> Internet.* You can do this within http://box/admin -> Utilities — or at
>> the prompt with "passwd xsce-admin".
>>
>> *Likewise on Raspberry Pi computers, the username "pi" has root (sudoer)
>> powers: change the default password from "raspberry" before connecting it
>> to the Internet, if sshd or similar is running.*
>>
>> The machine's root (master) password is generally not needed, and not
>> even set. However it is possible to log in as xsce-admin and then escalate
>> to root using "sudo su -".
>>
>> *(*) While the Admin Console can change xsce-admin's password instantly,
>> it's important to understand that many Admin Console changes (within its
>> Configure menu especially) require you click "Save Configuration" then
>> "Install Configured Options" and then wait for this to complete. Monitor
>> for Status "SUCCEEDED" under Utilities menu -> Display Job Status (takes
>> ~25min on a Raspberry Pi 3!)*
>>
>> See: What can I do with E-books and Internet-in-a-Box?
>> <http://wiki.laptop.org/go/XS_Community_Edition/FAQ#What_can_I_do_with_E-books_and_Internet-in-a-Box.3F>
>> See: What security tips exist?
>> <http://wiki.laptop.org/go/XS_Community_Edition/FAQ#What_security_tips_exist.3F>
>>
>>
>> On Fri, Feb 24, 2017 at 6:21 PM, Adam Holt <holt at laptop.org> wrote:
>>>
>>>> Plz help me get this right, as best practices evolve around
>>>> default/initial passwords, and how to force their auto-expiry reasonably,
>>>> in different conditions:
>>>>
>>>> What are the default passwords?
>>>> <http://wiki.laptop.org/go/XS_Community_Edition/FAQ#What_are_the_default_passwords.3F>
>>>> (= http://schoolserver.org/FAQ #14 )
>>>>
>>>> Also: what other passwords are useful for operators to know about ?
>>>>
>>>
>>>
>>
>>
>> --
>> Unsung Heroes of OLPC, interviewed live @ http://unleashkids.org !
>>
>
>


-- 
Unsung Heroes of OLPC, interviewed live @ http://unleashkids.org !
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.laptop.org/pipermail/server-devel/attachments/20170309/560dc3e2/attachment.html>