Buildroot Archive on lore.kernel.org
 help / color / mirror / Atom feed
From: Alexey Brodkin <Alexey.Brodkin@synopsys.com>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH] system: add option for standalone telnetd on target
Date: Thu, 12 Mar 2015 08:04:33 +0000	[thread overview]
Message-ID: <1426147462.2639.11.camel@synopsys.com> (raw)
In-Reply-To: <87pp8flblh.fsf@dell.be.48ers.dk>

Hi Peter,

On Wed, 2015-03-11 at 17:53 +0100, Peter Korsgaard wrote:
> >>>>> "Alexey" == Alexey Brodkin <Alexey.Brodkin@synopsys.com> writes:
> 
> Hi,
> 
> >> Any specific reason why you don't just configure a root password and
>  >> enable dropbear instead?
> 
>  > Well I though of telnet as an essential replacement of serial console
>  > especially for development boards.
> 
> These days I would say ssh is much more common.
> 
>  > So my main intention was to get the most convenient tool for wide range
>  > of developers. 
> 
>  > For example in Windows if I'm not mistaken Telnet client is available
>  > right from MS, while SSH client is always 3rd-party program like Putty. 
> 
> If I'm not mistaken Windows no longer comes with telnet out of the box.
> 
> E.G. first Google hit:
> 
> http://social.technet.microsoft.com/wiki/contents/articles/910.windows-7-enabling-telnet-client.aspx

Well probably it was in days of WinXP when Telnet was pre-installed.
Still as you may see from the article - there's a way to install
"native" Telnet client from Windows update/software sources.

>  > Also ability to not set password is convenient here - because people
>  > will ask "what's the password" otherwise. Still in case of devboards we
>  > have limited access to the network for foreigners so we may not care
>  > much about paranoid safety.
> 
> Don't they ask the same about the serial login password?

That's exactly the point for serial port as well as for Telnet we may
not use password for root - which is a default case in Buildroot.

> 
>  > Indeed your proposal may work if my motivation is not convincing enough.
> 
> I can still be convinced, but my initial thought is that it isn't
> really a common enough use case / we should promote ssh instead.

I tried your proposal with Dropbear but frankly with not much luck.
What I did:
 [1] Enabled "dropbear": BR2_PACKAGE_DROPBEAR=y
 [2] Set root password: BR2_TARGET_GENERIC_ROOT_PASSWD="xxx"

What's nice Dropbear auto-starts on boot. But...

Now on attempt to ssh to the target I see:
 --->8---
 $ ssh root at 192.168.218.2
 root at 192.168.218.2's password: 
 PTY allocation request failed on channel 0
 shell request failed on channel 0
 --->8---

Even though I see devpts is correctly mounted to /dev/pts and /dev/ptmx
exists.

So probably I'm missing something.

Another inconvenience I discovered with SSH - every time I boot my
target it gets new fingerprint and then on attempt to ssh to the target
I see:
 --->8---
 $ ssh root at 192.168.218.2
 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
 @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
 IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
 Someone could be eavesdropping on you right now (man-in-the-middle
attack)!
 It is also possible that a host key has just been changed.
 The fingerprint for the ECDSA key sent by the remote host is
 82:b8:c2:cf:88:d6:19:77:60:23:ff:9b:cc:3e:3d:2c.
 Please contact your system administrator.
 Add correct host key in /home/abrodkin/.ssh/known_hosts to get rid of
this message.
 Offending ECDSA key in /home/abrodkin/.ssh/known_hosts:49
 ECDSA host key for 192.168.218.2 has changed and you have requested
strict checking.
 Host key verification failed.
 --->8---

I may assume this is because I have filesystem built-in kernel (vmlinux)
so between boots filesystem doesn't preserve any information - but in
case of simulators we usually don't have any other options.

-Alexey

  reply	other threads:[~2015-03-12  8:04 UTC|newest]

Thread overview: 11+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-03-11  9:35 [Buildroot] [PATCH] system: add option for standalone telnetd on target Alexey Brodkin
2015-03-11 16:22 ` Peter Korsgaard
2015-03-11 16:44   ` Alexey Brodkin
2015-03-11 16:53     ` Peter Korsgaard
2015-03-12  8:04       ` Alexey Brodkin [this message]
2015-03-12 12:59         ` Mike Williams
2015-03-12 14:35           ` Alexey Brodkin
2015-03-12 15:10             ` Thomas Petazzoni
2015-03-12 20:26               ` Arnout Vandecappelle
2015-03-12 15:25         ` Peter Korsgaard
2015-03-11 16:56 ` Thomas Petazzoni

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1426147462.2639.11.camel@synopsys.com \
    --to=alexey.brodkin@synopsys.com \
    --cc=buildroot@busybox.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox