Valuable News – 2026/04/20

[vermaden]

Original article here.
Consider this when replying.

FreeBSD, The FreeBSD Foundation, and The FreeBSD Forums are not associated with the content of this article.

 

[tingo]

I found the article about connecting a normal phone to a FreeBSD server (via an ATA adapter and Asterisk) very interesting. I love projects like this!

 

[cracauer@]

OpenSSL 4.0.0 Released

Uh-oh....

 

[MG]

You have good content but please use black text if it's on white..

 

[LibreQuest]

Thanks for giving audio video it's own section. I always look forward to your collection of news.

 

[JohnK]

Thanks.

...

Candalf is Simple Tool to Orchestrate Linux/FreeBSD/macOS/UNIX Systems Configuration.
...

*click-clicky*

• Logging in with root password over SSH should be allowed and enabled.

oops! That's not a very good idea.
Also after a quick peek, it looks like a dependency of rsync(1) should be added for that project.

 

[cracauer@]

Who uses ssh passwords for orchestration?

 

[JohnK]

I don't know (I use keys for my systems). But, I don't know what 'ssh passwords' are though, to be honest.

 

[JohnK]

*sigh* Another project without a manpage. When I forget how to use something I typically start by typing 'man <whatever>' -i.e. I do not think to "check a website".

 

[cracauer@]

"ssh passwords" is expressing that you use ssh with the regular login password.

I can't imagine this being useful for orchestration (typing the password every time you hit a given machine) when ssh agent login is around (typing the passphrase once after establishing the agent). Apart from the typing the password is less secure since a guess of the password is sufficient for compromise, whereas in the agent case you don't only need the passphrase, you also need the private key client-side.

 

[JohnK]

"ssh passwords" is expressing that you use ssh with the regular login password.

Oh, yes. No passwords is the way (and no "root ssh access"--it's off by default for a reason).

I prefer to keep things as simple as possible whenever I can (-i.e. I don't need extra moving parts when I'm trying to solve a problem. I think they--professionals--call this "auditable").