<div dir="ltr">FAQ #9 extensively revised today, preparing for the final release of IIAB/XSCE 6.2:<br><ul><li class="gmail-m_5897776892298852417gmail-toclevel-1"><a href="http://wiki.laptop.org/go/XS_Community_Edition/FAQ#What_are_the_default_passwords.3F" target="_blank"><span class="gmail-m_5897776892298852417gmail-tocnumber">9</span> <span class="gmail-m_5897776892298852417gmail-toctext">What are the default passwords?</span></a><br></li></ul><div><div class="gmail_extra">~ All feedback most welcome ~<br><br>Important to hit "Shift Reload" after loading the above (<a href="http://schoolserver.org/faq" target="_blank">http://schoolserver.org/faq</a>) frequently-changing page!<br><br><br>Aside: there is a vocal/rising group that would like us to support administrative user "pi" alongside "xsce-admin" in future. Not going to happen today! But conceivably/possibly/maybe sometime in future, e.g. if Raspberry Pi & Raspbian community momentum & norms/practices continue to grow underneath ever rock ;)<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sat, Feb 25, 2017 at 10:17 AM, Tim Moody <span dir="ltr"><<a href="mailto:tim@timmoody.com" target="_blank">tim@timmoody.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">re: rpi<div><br></div><div>Please Note: on some images this has already been done.</div></div><div class="gmail-m_5897776892298852417gmail-HOEnZb"><div class="gmail-m_5897776892298852417gmail-h5"><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Feb 25, 2017 at 4:35 AM, Adam Holt <span dir="ltr"><<a href="mailto:holt@laptop.org" target="_blank">holt@laptop.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><span>On Fri, Feb 24, 2017 at 6:34 PM, Tim Moody <span dir="ltr"><<a href="mailto:tim@timmoody.com" target="_blank">tim@timmoody.com</a>></span> wrote:<br></span><div class="gmail_extra"><div class="gmail_quote"><span><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">looks OK<div><br></div><div>we have no way to force auto-expiry on passwords for applications we didn't write.</div></div></blockquote><div><br></div></span><div>Right.<br><br></div><div>I've promoted "What are the default passwords?" to be near the top of <a href="http://schoolserver.org/FAQ" target="_blank">http://schoolserver.org/FAQ</a> instead of near the bottom.<br><br>This serves as a sneaky-but-fundamental introduction to the Admin Console as well, evangelizing this central concept that take time for all to grok. Currently it reads as follows:<br><div style="margin-left:40px"><p>For KA Lite, ownCloud and many/similar services, the username is <b>Admin</b> and the default/initial password is: <b>changeme</b>
</p><p>For the Admin Console(*) (<a href="http://box/admin" class="gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202external gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202gmail-free" title="http://box/admin" rel="nofollow" target="_blank">http://box/admin</a>, <a href="http://box.lan/admin" class="gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202external gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202gmail-free" title="http://box.lan/admin" rel="nofollow" target="_blank">http://box.lan/admin</a>, or <a href="http://172.18.96.1/admin" class="gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202external gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202gmail-free" title="http://172.18.96.1/admin" rel="nofollow" target="_blank">http://172.18.96.1/admin</a>) the username is <b>xsce-admin</b> and the default/initial password is: <b>g0adm1n</b>
</p><p><u>Change xsce-admin's password before connecting your server to the Internet.</u> You can do this within <a href="http://box/admin" class="gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202external gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202gmail-free" title="http://box/admin" rel="nofollow" target="_blank">http://box/admin</a> -> Utilities — or at the prompt with "passwd xsce-admin".
</p><p><u>Likewise on Raspberry Pi computers, the username "pi" has root
(sudoer) powers: change the default password from "raspberry" before
connecting it to the Internet, if sshd or similar is running.</u>
</p><p>The machine's root (master) password is generally not needed, and
not even set. However it is possible to log in as xsce-admin and then
escalate to root using "sudo su -".
</p><p><i>(*) While the Admin Console can change xsce-admin's password
instantly, it's important to understand that many Admin Console changes
(within its Configure menu especially) require you click "Save
Configuration" then "Install Configured Options" and then wait for this
to complete. Monitor for Status "SUCCEEDED" under Utilities menu -> Display Job Status
(takes ~25min on a Raspberry Pi 3!)</i>
</p><p>See: <a href="http://wiki.laptop.org/go/XS_Community_Edition/FAQ#What_can_I_do_with_E-books_and_Internet-in-a-Box.3F" title="" target="_blank">What can I do with E-books and Internet-in-a-Box?</a><br>
See: <a href="http://wiki.laptop.org/go/XS_Community_Edition/FAQ#What_security_tips_exist.3F" title="" target="_blank">What security tips exist?</a>
</p> </div></div><span><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202gmail-HOEnZb"><div class="gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202gmail-h5"><div class="gmail_extra">On Fri, Feb 24, 2017 at 6:21 PM, Adam Holt <span dir="ltr"><<a href="mailto:holt@laptop.org" target="_blank">holt@laptop.org</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div>Plz help me get this right, as best practices evolve around default/initial passwords, and how to force their auto-expiry reasonably, in different conditions:<br><br></div><div style="margin-left:40px"><a href="http://wiki.laptop.org/go/XS_Community_Edition/FAQ#What_are_the_default_passwords.3F" target="_blank"><span class="gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202gmail-m_6739637081107012963m_5814209988901990056gmail-toctext">What are the default passwords?</span></a><br>(= <a href="http://schoolserver.org/FAQ" target="_blank">http://schoolserver.org/FAQ</a> #14 )<br></div><br></div>Also: what other passwords are useful for operators to know about ?<br></div>
</blockquote></div><br></div>
</div></div></blockquote></span></div><span class="gmail-m_5897776892298852417gmail-m_1857443311330990491HOEnZb"><font color="#888888"><br><br clear="all"><br>-- <br><div class="gmail-m_5897776892298852417gmail-m_1857443311330990491m_6967532728465785202gmail_signature"><div dir="ltr">Unsung Heroes of OLPC, interviewed live @ <a href="http://unleashkids.org" target="_blank">http://unleashkids.org</a> !</div></div>
</font></span></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail-m_5897776892298852417gmail_signature"><div dir="ltr">Unsung Heroes of OLPC, interviewed live @ <a href="http://unleashkids.org" target="_blank">http://unleashkids.org</a> !</div></div>
</div></div></div>