Changing SSH password

XToni · Dec 14, 2008, 2:02 PM

2.0-ALPHA-ALPHA
built on Tue Nov 25 14:52:07 EST 2008
FreeBSD 7.1-PRERELEASE

SSH password is default admin/pfsense even after changing default password for admin in GUI. How can I fix this ?

nocer · Dec 15, 2008, 2:25 AM

Hi,

Both are separated. SSH is SSH and GUI is GUI. Once you login SSH then change password. And should you load more recent snaps if you will.

cheers,

XToni · Dec 15, 2008, 11:41 AM

K, Thanks. Done that using passwd from console. I was confused since 1.2.1 have sane password for GUI and SSH

eri-- · Dec 15, 2008, 11:59 AM

Upgrade to a newer snapshot and retry it should be the same actually.

nocer · Dec 16, 2008, 12:14 PM

Hi,

not true on my a week old 2.0-AA snap build on Tue Dec 9 20:22:49 EST 2008.

@ermal:

Upgrade to a newer snapshot and retry it should be the same actually.

will try load newer tho…

cheers,

tekoholic · Dec 19, 2008, 10:13 PM

I, also, am experiencing this issue. However, I cannot change with passwd from CLI, either. admin keeps pass of pfsense, no matter. This has been true thru at least 6-8 of the last 15-20 snapshots, and I believe it to be, still.

I say this because, for the last several weeks, I've had sshfs mounts on clients in my home-network, with the default pass, and it always loads… I've tried passwd several times, all failed.

tekoholic · Dec 20, 2008, 4:31 PM

OK, new info… Running "Fri Dec 19 16:50:07 EST 2008" snapshot...

sshfs / fish did lose connectivity (not sure why). I have reloaded from scratch, for a variety of reasons.

Running SSH on -p 10022. Of course, I've done the necessary maintenance upon my .ssh/known_keys files. Now, when ssh'ing in from CLI as admin, I found that I received the console menu, rather than the command prompt. #8 to prompt... passwd, seemed to succeed... Logged out... Logged back in as admin, NEW PASSWD DID NOT WORK, default did. Logged out, logged back in as root... Password had been changed, correctly.

Wondering, now, why passwd did not work for the user for which it was run, but for root? Nice to be able to protect the root account, except for the fact that the admin account has root priv's anyhow...

eri-- · Dec 22, 2008, 9:28 PM

Try next snap.

stompro · Aug 27, 2009, 10:01 PM

I just noticed this same problem using 2.0-ALPHA-ALPHA built on Sat Aug 22 01:39:53 UTC 2009 FreeBSD 7.2-RELEASE-p3.

Should the ssh admin password be kept in sync with the gui admin password?

When I change the password in the user manager it does change both the Gui and SSH admin user password.

When I setup the machine and noticed the problem, I either used the setup wizard to set the password or I imported the configuration. Does the config file store them separately? Does the setup wizard password changer change both?

Thanks
Josh

cmb · Aug 27, 2009, 11:25 PM

changing in the GUI changes both.

_igor_ · Aug 28, 2009, 8:55 AM

In 1.x i was able to change the "admin" to whatever I wanted. This now is not anymore possible. Would be nice because I'm a bit paranoid and "admin" is too known and reduces the time to hack any account to a much shorter time…

Are there plans to change this to the "old" behaviour?

cmb · Aug 28, 2009, 5:25 PM

@_igor_:

Are there plans to change this to the "old" behaviour?

The possibility to disable accounts needs to be added.
http://redmine.pfsense.org/issues/show/65

You should be able to set today's date as the expiration on admin after adding a new user. You can't specify a date in the past to immediately disable.