Changes between Version 6 and Version 7 of GENIRacksHome/InstageniRacks/AcceptanceTestStatus/IG-ADM-2

Timestamp:

05/16/12 10:27:44 (12 years ago)

Author:

chaos@bbn.com

Comment:

--

GENIRacksHome/InstageniRacks/AcceptanceTestStatus/IG-ADM-2

@@ -5 +5 @@
 ''This page is GPO's working page for performing IG-ADM-2.  It is public for informational purposes, but it is not an official status report.  See [wiki:GENIRacksHome/InstageniRacks/AcceptanceTestStatus] for the current status of InstaGENI acceptance tests.''
 
-''Last substantive edit of this page: 2012-05-15''
+''Last substantive edit of this page: 2012-05-16''
 
 == Page format ==
@@ -20 +20 @@
 
 || '''Step''' || '''State'''               || '''Date completed''' || '''Tickets'''  || '''Comments'''                                   ||
-|| 1A         || [[Color(orange,Blocked)]] ||                      || instaticket:18 || blocked on IG verification of root sshd behavior ||
-|| 1B         ||                           ||                      ||                || ready to test                                    ||
+|| 1A         || [[Color(green,Pass)]] ||                      || instaticket:18 || question about root SSH access was resolved satisfactorily with no change to rack ||
+|| 1B         || [[Color(green,Pass)]] ||                      ||                || ||
 || 1C         ||                           ||                      ||                || ready to test                                    ||
 || 2A         ||                           ||                      ||                || ready to test                                    ||
@@ -144 +144 @@
  * Login does not succeed via any unencrypted login protocol
 
+==== Results of testing: 2012-05-16 ====
+
+Note: this isn't a penetration test.  I'm just looking for known unencrypted login protocols on public networks.  On FreeBSD, `sockstat -lL46` shows IPv4 and IPv6 listeners on non-loopback networks.
+
+I found the following listeners, none of which are problematic for our purposes here:
+{{{
+httpd
+sshd
+inetd (serving the flashpolicy service for Flack)
+sslxmlrpc_server.py (emulab)
+sdcollectd (emulab)
+capserver (emulab)
+tmcd (emulab)
+bootinfo (emulab)
+dhcpd
+sendmail
+pubsubd (emulab)
+mfrisbeed (emulab)
+ntpd
+mountd
+rpcbind
+named
+syslogd
+}}}
+
 === Step 1C: verify sudo and sudo logging ===