Hi, I would like to request password protection in syslinux. I know that it has come up a few times on the mailing list (google for "site:www.zytor.com syslinux password"), and on http://www.zytor.com/pipermail/syslinux/2002-May/000421.html you say interesting things about COMBOOT images. So I was wondering if I could bring that feature request to your attention again :) grub has it, but grub doesn't have PXE, and I think it is entirely non-trivial to get it to work with PXE. But their implementation is very nice. Basically, the main concern is not allowing regular users to change the boot parameters. Especially init=/bin/bash comes to mind :*). Under grub, you can type an md5 hash of the password in the configuration file. Thanks, Wout.
On Tue, Jun 24, 2003 at 01:47:41PM +0200, Wout Mertens wrote:> grub has it, but grub doesn't have PXE, and I think it is entirely > non-trivial to get it to work with PXE. But their implementation is very > nice."GRUB provides two second stage images, `nbgrub' and `pxegrub' (*note Images::). Those images are the same as the normal Stage 2, except that they set up a network automatically, and try to load a configuration file from the network, if specified. The usage is very simple: If the machine has a PXE ROM, use `pxegrub'. If the machine has a NBI loader such as Etherboot, use `nbgrub'" Regards, Luciano Rocha
Hi, strange at nsk.no-ip.org schrieb am 24.06.03 14:08:26:> > On Tue, Jun 24, 2003 at 01:47:41PM +0200, Wout Mertens wrote: > > grub has it, but grub doesn't have PXE, and I think it is entirely > > non-trivial to get it to work with PXE. But their implementation is very > > nice. > > "GRUB provides two second stage images, `nbgrub' and `pxegrub' (*note > Images::). Those images are the same as the normal Stage 2, except that > they set up a network automatically, and try to load a configuration > file from the network, if specified. The usage is very simple: If the > machine has a PXE ROM, use `pxegrub'. If the machine has a NBI loader > such as Etherboot, use `nbgrub'"Jep, but this is the etherboot way to boot your client: Using tagged images instead of config file / kernel / initrd. For a pxelinux user this is for sure 'non-trivial', at least it's completely different. Regards, Josef ______________________________________________________________________________ UNICEF bittet um Spenden fur die Kinder im Irak! Hier online an UNICEF spenden: https://spenden.web.de/unicef/special/?mc=021101
Hi, Wout Mertens <wmertens at cisco.com> schrieb am 24.06.03 13:54:49:> I would like to request password protection in syslinux. > > I know that it has come up a few times on the mailing list (google for > "site:www.zytor.com syslinux password"), and on > http://www.zytor.com/pipermail/syslinux/2002-May/000421.html you say > interesting things about COMBOOT images. > > So I was wondering if I could bring that feature request to your attention > again :) > > grub has it, but grub doesn't have PXE, and I think it is entirely > non-trivial to get it to work with PXE. But their implementation is very > nice. > > Basically, the main concern is not allowing regular users to change the > boot parameters. Especially init=/bin/bash comes to mind :*).for this feature I'd suggest to use the IMPLICIT command, perhaps extending this not to allow anything but the label name itself. For pxelinux this would be enough, since then you could change the config file on the server to again allow you the needed command line parameters. And I think this is useful, have already asked for this earlier, but can't do it myself. Regards, Josef ____________________________________________________________________________ Nur bei WEB.DE Testsieger FreeMail testen und damit 1 qm Regenwald schuetzen. Jetzt anmelden und mithelfen! http://user.web.de/Regenwald