Re: [cobalt-users] How secure is the Qube2 Admin Login

[Balazs Nagy <bn@xxxxxxxxxxxxxx>]

Jens Kristian Søgaard wrote:

> Balazs Nagy <bn@xxxxxxxxxxxxxx> writes:
>
> > > > Anyway, is it really free, or did you assume that you just break the RSA
> > > > patent, and don't pay for the ssh licence (about $500 for Unix) either?
>
> > Yes, Sept 10, 2000. In the mean time they are valid. Plus, the price for the
> > ssh licence has not been addressed either...
>
> Well:
>
>         1. SSH1 and OpenSSH hasn't got the license limitations that
>            others have. I.e. they're free.

OK it's new to me, but I'll take your word for it.


>         2. The RSA patent is not valid where I live. I.e. I don't
>            break it.
>
> As simple as that.

So as far as you are concerned, those who live in the US can just go to hell? Maybe
you should start posting on a scandinavians-only@xxxxxxxxxxxxxxxxxx


> > Two people suggested that the admin server can be secured with ssh. Well, I'm
> > still waiting on the instructions. I'm affraid it is not as simple as they
>
> Still waiting? - come, give us a break.
>
> For me, this list has a considerable delay -- it takes several days
> from the time I write a message to the time it appears on the
> list. Not good.
>
> And instead of being like "it can't be done", then try reading the
> manual. It's a simple use of ssh. I use for example this to connect to
> our third nameserver (RaQ3i):
>
>                 ssh -L 1234:ns3:81 ns3

Thank you, but this will only work from Unix, or if you installed a bunch of things
on windoze that allow you to use the command line version of the Unix client.

My point was that if you want to offer secure access to the admin server to your
clients, ssh is almost impossible. Different ssh clients have different configs,
and some have bugs. The secure channel drops from time to time and with some
clients you have to quit the browser, quit the client and start over.

The SSL admin server from Brosoft is only $100 or so, and saves a lot of time to
both you and your clients.

Now as far as I am concerned, I don't use it, because I have no clients that
requested secure site admin, and myself am able to set up ssh (yes, yes I know it
seems unbelievable...)