• authentication default

    From faeychild@2:250/1 to All on Wed Oct 9 12:03:28 2019

    In MCC > Security > Configure Authentication..

    All authentications are set to default.

    Is "Default" defined anywhere?

    Regards




    --
    faeychild
    Running plasmashell 5.15.4 on 5.2.13-desktop-2.mga7 kernel.
    Mageia release 7 (Official) for x86_64 installed via Mageia-7-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.12A (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From David W. Hodgins@2:250/1 to All on Wed Oct 9 15:03:36 2019
    On Wed, 09 Oct 2019 07:03:28 -0400, faeychild <faeychild@nomail.afraid.org> wrote:

    In MCC > Security > Configure Authentication..
    All authentications are set to default.
    Is "Default" defined anywhere?

    The actual default values depend on the msec security level chosen.

    From https://doc.mageia.org/mcc/7/en/content/mcc-security.html#draksec "Default: The launch mode depends on the chosen security level. See in the same MCC tab, the tool "Configure system security, permissions and audit".".

    That's described in https://doc.mageia.org/mcc/7/en/content/mcc-security.html#d4e3223

    Regards, Dave Hodgins

    --
    Change dwhodgins@nomail.afraid.org to davidwhodgins@teksavvy.com for
    email replies.

    --- MBSE BBS v1.0.7.12A (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From Doug Laidlaw@2:250/1 to All on Wed Oct 9 19:15:47 2019
    On 10/10/19 1:03 am, David W. Hodgins wrote:
    On Wed, 09 Oct 2019 07:03:28 -0400, faeychild
    <faeychild@nomail.afraid.org> wrote:

    In MCC > Security > Configure Authentication..
    All authentications are set to default.
    Is "Default" defined anywhere?

    The actual default values depend on the msec security level chosen.

    From https://doc.mageia.org/mcc/7/en/content/mcc-security.html#draksec "Default: The launch mode depends on the chosen security level. See in
    the same MCC tab, the tool "Configure system security, permissions and audit".".

    That's described in https://doc.mageia.org/mcc/7/en/content/mcc-security.html#d4e3223

    Regards, Dave Hodgins

    In the beginning (it seems like dinosaur days) one needed to run updates
    as root user, not with sudo. When it became common to accept sudo,
    users were advised that if they preferred the old setting, they could go
    into the tab Dave mentions, to change it back.


    --- MBSE BBS v1.0.7.12A (GNU/Linux-x86_64)
    * Origin: Aioe.org NNTP Server (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Wed Oct 9 22:20:59 2019
    On 10/10/19 5:15 am, Doug Laidlaw wrote:
    On 10/10/19 1:03 am, David W. Hodgins wrote:




    In the beginning (it seems like dinosaur days) one needed to run updates
    as root user, not with sudo.  When it became common to accept sudo,
    users were advised that if they preferred the old setting, they could go into the tab Dave mentions, to change it back.


    thanks Dave and Doug.I have more required reading.

    My mystery, is the update applet refuses to recognize either user or
    root password and was set to "Default" in Authentication in MCC

    I have changed it from Default to Administrator

    But I was curious


    regards
    --
    faeychild
    Running plasmashell 5.15.4 on 5.2.13-desktop-2.mga7 kernel.
    Mageia release 7 (Official) for x86_64 installed via Mageia-7-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.12A (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From TJ@2:250/1 to All on Fri Oct 11 12:37:21 2019
    On 10/9/19 5:20 PM, faeychild wrote:
    On 10/10/19 5:15 am, Doug Laidlaw wrote:
    On 10/10/19 1:03 am, David W. Hodgins wrote:




    In the beginning (it seems like dinosaur days) one needed to run
    updates as root user, not with sudo.  When it became common to accept
    sudo, users were advised that if they preferred the old setting, they
    could go into the tab Dave mentions, to change it back.


    thanks Dave and Doug.I have more required reading.

    My mystery, is the update applet refuses to recognize either user or
    root password and was set to "Default" in Authentication in MCC

    I have changed it from Default to Administrator

    But I was curious


    regards

    Years ago, when I was using Mandrake and then Mandriva, I questioned the wisdom of using the user password for this purpose, as it seemed to me
    to be a threat to system security. I asked why it was that way. The
    answer I got on Usenet boiled down to "That's the way we want it. If you
    don't like it that way, change it."

    So for years I did just that. Then about the time I switched to Mageia,
    I realized that since I'm the only one using this system, my user
    password is just as secure for this purpose as the root password. And
    now that I've been involved with testing updates for Mageia, I realize
    that even if someone else authorized installing the updates that have
    been through the process, it's HIGHLY unlikely that any would do damage
    to my system. (Though I readily admit it CAN happen. QA is made up of
    humans, and humans make mistakes.)

    TJ

    --- MBSE BBS v1.0.7.12A (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From William Unruh@2:250/1 to All on Fri Oct 11 12:56:25 2019
    On 2019-10-11, TJ <TJ@noneofyour.business> wrote:
    On 10/9/19 5:20 PM, faeychild wrote:
    On 10/10/19 5:15 am, Doug Laidlaw wrote:
    On 10/10/19 1:03 am, David W. Hodgins wrote:




    In the beginning (it seems like dinosaur days) one needed to run
    updates as root user, not with sudo.  When it became common to accept
    sudo, users were advised that if they preferred the old setting, they
    could go into the tab Dave mentions, to change it back.

    Years ago, BOTH the user and the root passwords would be accepted for
    these purposes (like opening a screensaved/locked session)


    thanks Dave and Doug.I have more required reading.

    My mystery, is the update applet refuses to recognize either user or
    root password and was set to "Default" in Authentication in MCC

    I have changed it from Default to Administrator

    But I was curious


    regards

    Years ago, when I was using Mandrake and then Mandriva, I questioned the wisdom of using the user password for this purpose, as it seemed to me
    to be a threat to system security. I asked why it was that way. The
    answer I got on Usenet boiled down to "That's the way we want it. If you don't like it that way, change it."

    So for years I did just that. Then about the time I switched to Mageia,
    I realized that since I'm the only one using this system, my user
    password is just as secure for this purpose as the root password. And
    now that I've been involved with testing updates for Mageia, I realize
    that even if someone else authorized installing the updates that have
    been through the process, it's HIGHLY unlikely that any would do damage
    to my system. (Though I readily admit it CAN happen. QA is made up of humans, and humans make mistakes.)

    TJ

    --- MBSE BBS v1.0.7.12A (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Fri Oct 11 22:05:32 2019
    On 11/10/19 10:56 pm, William Unruh wrote:

    In the beginning (it seems like dinosaur days) one needed to run
    updates as root user, not with sudo.  When it became common to accept >>>> sudo, users were advised that if they preferred the old setting, they
    could go into the tab Dave mentions, to change it back.

    Years ago, BOTH the user and the root passwords would be accepted for
    these purposes (like opening a screensaved/locked session)


    Yes! Good points
    Currently mine accepts neither password; I have to use MCC update.

    I must check again when an update comes through

    regards
    --
    faeychild
    Running plasmashell 5.15.4 on 5.2.13-desktop-2.mga7 kernel.
    Mageia release 7 (Official) for x86_64 installed via Mageia-7-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.12A (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)