-
-
Notifications
You must be signed in to change notification settings - Fork 389
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
default remote console access localhost only #1550
Comments
I think this is was set intentionally by default both for openHAB and for Karaf, it would be a problem to set
Yes, but ideally anything in You can also change this in
which will persist between upgrades. Again, I would advise not doing this by default until a user has changed the console password. IMO, this should be a user decision to change. |
Perhaps in the future the initial setup wizard can ask what username/password should be used to access the Console instead of the current defaults. By default Karaf is more secure nowadays. It has no default user and you need to manually configure this if you want access to the console (see user guide). The initial OH setup wizard could also ask if you want to make the Console available on external interfaces. |
good idea Wouter |
for 4.0 that would be extremely last minute and extremely unlikely, Markus ;) but in the future I think the setup wizard could handle more things indeed, like that or help the user configure an openHAB Cloud/myopenhab.org instance if they wish. I'm not sure yet if it could be the same wizard or a separate one but there would also be a need to set up the initial model (asking how many floors, list the rooms in each, do you have a front/backyard, etc.) |
In
org.apache.karaf.shell.cfg
, sshHost is127.0.0.1
by default.Can you please change that (in time for OH4) to be
0.0.0.0
.That's a fairly annoying restriction that'll do more harm than good .
For most installs this goes unchanged.
So the console cannot be used from remote on default (and hence 99% of) installs.
The config is also getting reset on any OH upgrade which is very annoying even to experts.
( 'Security' is a bad argument here as you have to protect your installation from the internet anyway and anyone interested can do easily)
The text was updated successfully, but these errors were encountered: