Ticket #787 (new maintenance)

Opened 2 years ago

Last modified 2 years ago

Access to Parrot

Reported by: annesley Owned by: chris
Priority: minor Milestone: Maintenance
Component: Dev server Keywords:
Cc: ed Estimated Number of Hours: 0.0
Add Hours to Ticket: 0 Billable?: yes
Total Hours: 0.5

Description

is it ok for me to send through my normal, non-passphrase protected public key to you Chris for parrot?

the documentation wants a passphrase protected key. however this may be what is causing the access issues from my laptop. i certainly could find a way around it but would suggest that the passphrase is not a great improvement to security anyway in this instance so it would be ok to use my normal public key. note that i can access all my other servers with the normal key without problems.

Change History

comment:1 Changed 2 years ago by annesley

  • Type changed from defect to maintenance

comment:2 in reply to: ↑ description Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 0.0 to 0.25

Replying to annesley:

is it ok for me to send through my normal, non-passphrase protected public key to you Chris for parrot?

Yes, but only because it is an account that only allows SFTP access to a chrooted directory for a development site -- it would be inappropriate for an account with sudo.

the documentation wants a passphrase protected key. however this may be what is causing the access issues from my laptop.

You were trying to login with the username "Passphrase", see ticket:780#comment:1 and ticket:779#comment:6

i certainly could find a way around it but would suggest that the passphrase is not a great improvement to security anyway in this instance

That depends, does your computer have encrypted disks? If it doesn't then having a passphrase is a significant security improvement as it means that if someone steals your computer they don't have direct access to remote servers. If however you do have encrypted disks and all your backups are to encrypted devices and you take care not to leave your computer unattended and decrypted then I'd agree that having a passphrase doesn't have a massive difference.

But on the other hand if you use a ssh-agent, and these are easy to set up and use, then having a passphrase doesn't add much additional hassle as you simply decrypt the passphrase once per X11 session and if you use hibernate while you are not using your computer then your session could last months.

comment:3 Changed 2 years ago by chris

annesley you can:

  1. Append your second ssh public key to your existing one (~/.ssh/authorized_keys) on the server using the public key that is already on the server or your password.
  2. Email me your ssh public key and I'll add it.
  3. Post your ssh public key in a comment here and I'll add it.

comment:4 Changed 2 years ago by annesley

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3v2VD5jBOpYNV29UOXhYx1dtlhZeXLq8ltKSEw2OI4t+uMHoTS1RUtP0AcLqYxJIXLhAYUgK66k7nROXMAK20stWdy1N1XEt7GUDVxiJE3Q7ybp8ypunyNQo9i7acrCtBSq6hoOwRPVw7wydZOdhXwMvnAhhSshZsQxqjBmtPKXU6Sm4212PJPRJZH7Q3H9BmFhWAjyH1vJqePiIQ0FKVmqxqdzquvJjjWfux17ZbXHBUdsqDm2kPpnMYyMNSm1t79mR0nHJyjxpGs8blnF3dv6DrTOa1h1nqFzJCRO0pnKkpuN3pjhBcpQL45c5L9Y3LkyoDPKS1IT/Iz7S7Kktx anewholm@dhcppc2

comment:5 follow-up: ↓ 6 Changed 2 years ago by annesley

thanks Chris!

also: i will let you know immediately if anything happens to my laptop :)

comment:6 in reply to: ↑ 5 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 0.25 to 0.5

Replying to annesley:

i will let you know immediately if anything happens to my laptop :)

Let's hope nothing does!

I have added your public key, try:

sftp annesley@parrot.transitionnetwork.org

Note that you have a writable ~/private/ directory for non-public stuff, a ~/tmp/ and the website is in ~/sites/default/.

It's easy to add additional sites to this account (and additional databases, or you can run multiple WP sites off one DB using prefixes), for the moment the automatic WordPress install script won't work as the WP 4.0 update seems to have broken it.

comment:7 follow-up: ↓ 8 Changed 2 years ago by annesley

ok, that's working fine now. the connection is not dropping at all. looks like Dolphin was just having an issue with the passphrase encryption then.

i'll start trying to file-copy upload the WP 4.0 install i have and mysqldump feeding in to the DB now...

thanks :)

comment:8 in reply to: ↑ 7 Changed 2 years ago by chris

Replying to annesley:

mysqldump feeding in to the DB now...

In case you missed this, the web interface to the database is here: https://parrot.transitionnetwork.org/phpmyadmin/ and the username / password is the same as for SFTP, if you don't have the password you can find it in the ~/sites/default/wp-config.php.

comment:9 Changed 2 years ago by annesley

i need access to ​https://parrot.transitionnetwork.org/phpmyadmin/ now. but i've forgotten my Parrot SFTP password although the SFTP access is working fine. and i deleted the ~/sites/default/wp-config.php already so can't look there. could you advise?

comment:10 Changed 2 years ago by chris

I have reset it and it is in this file: ~/private/passwd.txt

comment:11 Changed 2 years ago by annesley

thanks. that worked

comment:12 Changed 2 years ago by ed

  • Milestone set to Maintenance

changed to milestone: maintenance for monthly tally

Note: See TracTickets for help on using tickets.