Telnet needs authorisation
Closed this issue · 5 comments
Otherwise we'll forget about it.
On mar., mars 24, 2015 at 08:09:01 -0700, Andrew wrote:
Otherwise we'll forget about it.
Do you mean a password ?
I've been thinking of a no-auth telnet but auth required for
sensible commands through telnet so anyone could read sensors
but not reset nor tftp update nor show env (showing passwords), ...
unless authorized through a sort of sudo command.
That mode would require a lot of hackery as I see it. e.g. add permission section for every command. Just adding a plain login/password prompt that can be turned off should be enough. Automated scripts will have no problem to supply that.
For single user mode only password check will be enough. If password was not set in env, so allow auth to everyone.
@darkbyte-ru Sound's like it should be enough.
Implemented in current master, closing this issue.