Re: [webmin-l] Webmin security risk!

[Jamie C. <jca...@we...>]

On 30/Aug/2006 03:45 Andreas Moroder wrote ..
> Jamie Cameron schrieb:
> > On 24/Aug/2006 22:30 Munzir Taha (=?utf-8?q?=D9=85=D9=86=D8=B0=D8=B1?=
> =?utf-8?q?_=D8=B7=D9=87?=) wrote ..
> >>The real problem is having the root password on this file
> >>/etc/webmin/servers/1108941386.serv
> >>May be this is because I am monitoring another server from webmin.
> > 
> > 
> > That's right .. the master Webmin needs to store the password of the
> > other server.
> Hello,
> 
> is this the password for webmin or the root password of the other server

It is the Webmin password (which may be the same as the root password).

> ? Does webmin connect to the remote server through the webmin port or 
> does it direct call scripts/apps on the other server ?

The connection is made via the webmin port, using its built-in RPC-over-HTTP
mechanism.

 - Jamie