• 1
  • 254
  • 255
  • 256(current)
  • 257
  • 258
  • 495
v18 LibreELEC Testbuilds for RaspberryPi (Kodi 18.0)
Sad 
Running #1208 and changed root passwd via ssh and intially everything to connect remotely on network via shh with the modified root password was OK, but after power cut and reboot of rpi2 I am now unable to connect to root via ssh with "access denied" when attempting to connect? (I am sure I am using/typing new password correctly) Addtionally I have a crashlog, not sure if its relevant at all.

Kodi crashlog

Currently locked out from sshing to my rpi2  Confused
RPi4, (LibreELEC 11.0) hdmi0 -> Philips 55PUS7304 4K TV, hdmi1 -> Onkyo TX-SR608 AV Receiver
(2017-12-10, 23:08)start78 Wrote: https://gizmodo.com/the-guy-who-invented...1797643987

I'm sorry to have to tell you that this method of measuring the strength of a password is outdated.

chinaspaghettitankflower

Isn't it horsebatterystaple? Smile

The rules I listed are from the Linux manual, which is almost certainly outdated (it was intended only as a rough guide to illustrate a basic point), and IMHO passwords these days are pretty anachronistic - using public/private keys (and disabling passwords) is a much better/easier and more secure solution, and one we already support. I haven't used a password to login to OpenELEC/LibreELEC (or most of my other systems for that matter) for years, and only enabled the password in LibreELEC to test this feature (and I can testify it was tedious to enter, as I'm in and out of the system more frequently than most!)

The point is you now have the choice of setting whatever password you want, within reason (so long as it's not trivially simple/stupid). Debating password strength is something that should continue in it's own thread (please, so I can ignore it! Wink).
Texture Cache Maintenance Utility: Preload your texture cache for optimal UI performance. Remotely manage media libraries. Purge unused artwork to free up space. Find missing media. Configurable QA check to highlight metadata issues. Aid in diagnosis of library and cache related problems.
(2017-12-11, 00:22)MikeKL Wrote: Running #1208 and changed root passwd via ssh and intially everything to connect remotely on network via shh with the modified root password was OK, but after power cut and reboot of rpi2 I am now unable to connect to root via ssh with "access denied" when attempting to connect? (I am sure I am using/typing new password correctly) Addtionally I have a crashlog, not sure if its relevant at all.

Kodi crashlog

Currently locked out from sshing to my rpi2  Confused

The crashlog seems to be CEC related.

As for the password. Hmm. Is the message you see "access denied" or "permission denied" - can you paste the exact message?

I'd expect the "permission denied" if you were entering an incorrect password. I'm not sure what would cause "access denied" - if sshd isn't running normally you'd see "connection refused".

In your crash log I can see you are having network issues, could that be your problem?

If all else fails and you want to reset the password then if you are able to mount the /storage partition in a Linux machine, you can delete the file /storage/.cache/shadow. Eventually we'll add an option to reset the root password in the LibreELEC Settings add-on (it's on the list of things to do), though obviously we'll need to think of a way of preventing it from being changed by those that shouldn't be changing it (ie. kids).
Texture Cache Maintenance Utility: Preload your texture cache for optimal UI performance. Remotely manage media libraries. Purge unused artwork to free up space. Find missing media. Configurable QA check to highlight metadata issues. Aid in diagnosis of library and cache related problems.
message when trying to connect to rpi2 with root via ssh
 
Code:
login as: root
[email protected]'s password:
Access denied
[email protected]'s password:

Thanks for info on how to reset as still have remote access to storage folder and can see shadow file
RPi4, (LibreELEC 11.0) hdmi0 -> Philips 55PUS7304 4K TV, hdmi1 -> Onkyo TX-SR608 AV Receiver
(2017-12-11, 00:49)MikeKL Wrote: message when trying to connect to rpi2 with root via ssh
 
Code:
login as: root
[email protected]'s password:
Access denied
[email protected]'s password:

Thanks for info on how to reset as still have remote access to storage folder and can see shadow file
Make sure it's the shadow file in the .cache folder not the .config folder - you may have a shadow file in the latter still, as it was moved to .cache the other day.

I wonder if the file permission on the /storage folder has changed following the power loss which is now resulting in the "access denied" - it should be 755. I don't think this is a shadow password issue (but could be wrong).
Texture Cache Maintenance Utility: Preload your texture cache for optimal UI performance. Remotely manage media libraries. Purge unused artwork to free up space. Find missing media. Configurable QA check to highlight metadata issues. Aid in diagnosis of library and cache related problems.
New LibreELEC.tv Leia build #1210: RPi / RPi2
(Supercedes previous build)

SHA256 Checksum: 59c2d805aed2ccbff021c8e31da09dd7455f5e856441a308ade365abd5602072 (RPi)
SHA256 Checksum: 3c0deed2c0b5c06583072b8b3c866d8fb415a7409ace57475e590d72bf03a4cd (RPi2)

Code:
# uname -a
Linux rpi512 4.14.4 #1 Sun Dec 10 21:05:42 GMT 2017 armv6l GNU/Linux

# vcgencmd version
Dec  1 2017 16:20:32
Copyright (c) 2012 Broadcom
version 38ac72569d7fbd7cf75754d9f14c2495416aaee7 (clean) (release)

# lsb_release
LibreELEC (Milhouse): devel-20171210210330-#1210-g3e358c7 [Build #1210]

# Kodi version
(18.0-ALPHA1 Git:1e1a81a). Platform: Linux ARM 32-bit

Based on tip of LibreELEC.tv master (3e358c7, changelog) and tip of XBMC master (1e1a81a, changelog) with the following modifications: Build Highlights:
  1. Drop ALSA/Pulse patch - this may require current audio device to be re-selected. Patch will return once fixed.
  2. Bump cmake-3.10.0, mesa-17.3.0
  3. Fix /var/run symlink
  4. AE: cleanup the mess in AESinkFactory
  5. Build Kodi using LTO
Build Details:
  1. LibreELEC.tv:
    • Package Updates: bump mesa-17.3, cmake-3.10.0 (PR:2307, 3 commits, 2 files changed)
      • cmake: simplify version changes
      • cmake: update to cmake-3.10.0
      • mesa: update to mesa-17.3.0
      • Support ApplePi DAC
    • openssl/heimdal: Security fixes (PR:2304, 2 commits, 2 files changed)
    • nss-mdns: install all libraries, correct avahi socket path (PR:2303, 1 commit, 1 file changed)
    • systemd: fix systemd-tmpfiles-setup (PR:2308, 2 commits, 2 files changed)
    • scripts/mkimage: add label to disk partition as well (PR:2260, 1 commit, 1 file changed)
    • u-boot: added option to compile mkimage for host (PR:2305, 1 commit, 2 files changed)
    • addons: use GOARM=7 for more arm cpus (PR:2310, 1 commit, 5 files changed)
  2. XBMC:
    • [bluray] Update libbluray to version 1.0.2. (PR:13149, 1 commit, 6 files changed)
    • Filestate: fix and cleanup (PR:13146, 4 commits, 10 files changed)
    • VideoPlayer: ffmpeg - drop deprecated merging of side data (PR:13010, 2 commits, 7 files changed)
    • [PVR] PVR database: Fix error "Abort due to constraint violation. Query: INSERT INTO channels..." (PR:13150, 1 commit, 1 file changed)
    • [Estuary] A bunch of small fixes & consistency improvements (PR:13155, 7 commits, 3 files changed)
    • VideoPlayer / PAPlayer: check return code of demuxer reset (PR:13156, 1 commit, 15 files changed)
    • AE: cleanup the mess in AESinkFactory (PR:13119, 13 commits, 51 files changed)
    • silence some warnings (PR:13157, 1 commit, 4 files changed)
    • [utils] Fix IsInArchive, IsInZIP and IsInRAR. (PR:13143, 1 commit, 1 file changed)
    • airplay: disable video/pictures support by default (PR:13159, 1 commit, 1 file changed)
    • fix typo (*VAApi()->VAApi*()) and function signature of VAAPIRegisterRender(), fixes build without VAAPI (PR:13162, 1 commit, 1 file changed)
    • [uwp] remoe Real Media Files from FileType in manifest (PR:13163, 1 commit, 1 file changed)
    • [addons] sync scrapers with repo (PR:13160, 1 commit, 14 files changed)
  3. pvr.demo:
    • implement strEpisodeName, iSeriesNumber, iEpisodeNumber (PR:56, 1 commit, 4 files changed)
  4. newclock5:
    • New commits in this build:
      • DemuxMVC: Fixup after Reset change (195064da)
  5. kernel 4.14.y:
    • New commits in this build:
      • Updates for Pisound module code: (ec861077)
      • overlays: Add applepi-dac overlay (78813e3b)
  6. Additional commits/pull requests/changes not yet merged upstream:
Texture Cache Maintenance Utility: Preload your texture cache for optimal UI performance. Remotely manage media libraries. Purge unused artwork to free up space. Find missing media. Configurable QA check to highlight metadata issues. Aid in diagnosis of library and cache related problems.
(2017-12-10, 23:25)Aux_ Wrote: Hi all,

I mean, the system can suggest that the password is weak.
But it should leave the choice to the owner - is called democracy  Smile

At the end of the day this is a consumer system and we have to consider the interests of the average user - sadly they're not all as savvy as you! Smile

Also bear in mind that if the user enters a blank root password (which passwd would allow by default, for the root user) then the user will lock themselves out of the system because sshd by default does NOT allow a blank password, so the problem simply moves up the food chain - we'd need to alter the security profile of sshd for the handful of users that might want to enter a blank root password etc. Modifying passwd to prevent the root user from blowing their legs off really is the best option!

Besides, allowing weak/no passwords is something that an extreme minority might actually want, but don't forget we're debating a password that nobody has been able to change for the past 6+ years and not being able to use a blank or weak password is now an issue! Smile
Texture Cache Maintenance Utility: Preload your texture cache for optimal UI performance. Remotely manage media libraries. Purge unused artwork to free up space. Find missing media. Configurable QA check to highlight metadata issues. Aid in diagnosis of library and cache related problems.
Is there a reason why libbluray is not updated to 1.0.2?
(2017-12-11, 03:13)smp1 Wrote: Is there a reason why libbluray is not updated to 1.0.2?

Yes, because LibreELEC is using a patch from Nevcairiel on top of 1.0.1 which needs to be updated before we can bump to 1.0.2.
Texture Cache Maintenance Utility: Preload your texture cache for optimal UI performance. Remotely manage media libraries. Purge unused artwork to free up space. Find missing media. Configurable QA check to highlight metadata issues. Aid in diagnosis of library and cache related problems.
@Milhouse 
Quote:Drop ALSA/Pulse patch - this may require current audio device to be re-selected. Patch will return once fixed.
Sadly this kills pulseaudio, this fact itself is not sad, but it prevents us from using bluetooth headphones/speakers because pulseaudio devices don't get enumerated.
I don't use your builds but I do steal some nice patches like that one from LE git.
Quick-and-dirty poor man's hack - https://gist.github.com/asavah/788aacd89...0b6c45b61c , works as expected.
Maybe it helps while a proper patch is being worked on.
Code:
04:33:51.208 T:1920204752  NOTICE: Enumerated PULSE devices:
04:33:51.208 T:1920204752  NOTICE:     Device 1
04:33:51.208 T:1920204752  NOTICE:         m_deviceName      : Default
04:33:51.208 T:1920204752  NOTICE:         m_displayName     : Default
04:33:51.209 T:1920204752  NOTICE:         m_displayNameExtra: Bluetooth Audio (PULSEAUDIO)
04:33:51.209 T:1920204752  NOTICE:         m_deviceType      : AE_DEVTYPE_PCM
04:33:51.209 T:1920204752  NOTICE:         m_channels        : FL, FR
04:33:51.209 T:1920204752  NOTICE:         m_sampleRates     : 5512,8000,11025,16000,22050,32000,44100,48000,64000,88200,96000,176400,192000,384000
04:33:51.209 T:1920204752  NOTICE:         m_dataFormats     : AE_FMT_U8,AE_FMT_S16NE,AE_FMT_S24NE3,AE_FMT_S24NE4,AE_FMT_S32NE,AE_FMT_FLOAT
04:33:51.209 T:1920204752  NOTICE:         m_streamTypes     : No passthrough capabilities
(2017-12-11, 04:42)asavah Wrote: Quick-and-dirty poor man's hack - https://gist.github.com/asavah/788aacd89...0b6c45b61c , works as expected.

Thanks, that looks like it might only work on the RPi - I think we might need something more that works for all platforms.
Texture Cache Maintenance Utility: Preload your texture cache for optimal UI performance. Remotely manage media libraries. Purge unused artwork to free up space. Find missing media. Configurable QA check to highlight metadata issues. Aid in diagnosis of library and cache related problems.
(2017-12-11, 00:59)Milhouse Wrote: I wonder if the file permission on the /storage folder has changed following the power loss which is now resulting in the "access denied" - it should be 755. I don't think this is a shadow password issue (but could be wrong).

Screengrabs of settings assigned to root for storage & .cache folder for info

Image

Image
RPi4, (LibreELEC 11.0) hdmi0 -> Philips 55PUS7304 4K TV, hdmi1 -> Onkyo TX-SR608 AV Receiver
(2017-12-11, 08:45)MikeKL Wrote: Screengrabs of settings assigned to root for storage & .cache folder for info

Thanks but it's the permissions on the /storage folder as Linux sees it that I was after - you'd have to mount the SD card in a Linux PC, I think. Duff permissions (as sshd can be very picky about that sort of thing, quite rightly) is about the only thing I can think of right now that would prevent sshd from working. If you have Samba enabled you can access your logfiles in the Logfiles share - open the latest zip and inside you'll have dmesg and journalctl logfiles which might give a clue as to what is wrong (upload the zip to dropbox and post the link if you don't get anywhere).
Texture Cache Maintenance Utility: Preload your texture cache for optimal UI performance. Remotely manage media libraries. Purge unused artwork to free up space. Find missing media. Configurable QA check to highlight metadata issues. Aid in diagnosis of library and cache related problems.
(2017-12-11, 03:12)Milhouse Wrote:
(2017-12-10, 23:25)Aux_ Wrote: Hi all,

I mean, the system can suggest that the password is weak.
But it should leave the choice to the owner - is called democracy  Smile

At the end of the day this is a consumer system and we have to consider the interests of the average user - sadly they're not all as savvy as you! Smile

Also bear in mind that if the user enters a blank root password (which passwd would allow by default, for the root user) then the user will lock themselves out of the system because sshd by default does NOT allow a blank password, so the problem simply moves up the food chain - we'd need to alter the security profile of sshd for the handful of users that might want to enter a blank root password etc. Modifying passwd to prevent the root user from blowing their legs off really is the best option!

Besides, allowing weak/no passwords is something that an extreme minority might actually want, but don't forget we're debating a password that nobody has been able to change for the past 6+ years and not being able to use a blank or weak password is now an issue! Smile 
 Thanks for the explanation @Milhouse, sounds reasonable  Smile
[3x RPi3]#[ AV Receiver - Marantz NR1506 ]#[ TV Panasonic TX-50EXW784 ]#[ NAS - OMV 4.1.xx (Arrakis) @ NanoPI M4 ]#[ Nextcloud 17.0.3 @ ODROID C2 ]
I have sound card  usb  PCM2704 in last builds i cant configure this card, works only audio from hdmi Sad
  • 1
  • 254
  • 255
  • 256(current)
  • 257
  • 258
  • 495

Logout Mark Read Team Forum Stats Members Help
LibreELEC Testbuilds for RaspberryPi (Kodi 18.0)24