possilbity to set authentification for user uid 0

[nephaste]

Hi Yudai,

can it be possible to set authentification using the uid 0 user for example.

this could allow Qnap users to log with the admin user (no root on qnap) set on their box, instead to set a custom user/password

I think it could be a good enhancement for Gotty.

[yudai]

Hi @nephaste,
Let me clarify your request. You want to run your actual command with a different UID?

How about using sudo like

gotty sudo top

[nephaste]

Hi Master Yudai

no i mean to use the password authentification "-c" flag
actually i run gotty with a custom user and password qnap:qn@p

gotty -p "8586" -w -c qnap:qn@p "/bin/sh" &

i would like to use the embedded linux user "admin" (is root on Qnap)

sorry if i was not clear enough

[haliphax]

So really, you want gotty to use the operating system's authentication method (pamd, etc.)...

[yudai]

The -c option of gotty is not related to the users of your OS. You can use any username and password (including admin) with the -c option.
The owner of your gotty process will be the owner of the shell you are running to launch gotty. Child processes created by gotty (/bin/sh) will be owned by the same user as well. There is no relationship between the -c option and those PIDs.

Therefore, if you want to run gotty itself with PID0, you can just run like sudo gotty /bin/sh (the owner of both gotty and /bin/sh will be PID0).
If you want to run only /bin/sh with PID0, you can run like gotty sudo /bin/sh (in this case, you may need to edit the sudors file to run sudo without a password).

Instead of /bin/sh, it might be a better way to use just /bin/login or ssh to use OS's authentication system. If you want to integrate gotty with a HTTP-level authentication like PAM or something, it's out of the scope of gotty, I believe. Gotty can provide really a light way authentication (basic auth), however, if you need a stricter authentication, perhaps setting up a proxy in front of gotty like nginx and Apache is the way to go.

[nephaste]

Hi Yudai,

thanks for the feedback, i will try with /bin/login didnt think about it :)

[nephaste]

confirm work as expected with /bin/login ;)

[ariselseng]

I am thinking about using "gotty /bin/login" as a way to login to my server without a terminal. Is this in any way considered safe? I mean it is using the OS own authentication. Is it safe?

[yudai]

@cowai Maybe no body can make sure that using /bin/login with gotty is safe. It depends on your requirements.