<
WiFi
EAP Controller 2.5.3 for Linux
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.EAP Controller 2.5.3 for Linux
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.EAP Controller 2.5.3 for Linux
Posts: 4334
Helpful: 987
Solutions: 173
Stories: 3
Registered: 2015-12-05
EAP Controller 2.5.3 for Linux
2017-11-04 08:57:08 - last edited 2021-03-30 03:55:41
Tags:
Good news: EAP controller 2.5.3 for Linux just has been released and is available for download.
Bad news: it still lacks privilege separation and needs to run with root permissions. Very risky if you intend to use it on a public server!
Even more bad news: the start/stop script still checks for the root user by looking at the shell environment variable UID.
So any local, non-privileged user with access to the server can easily stop a running EAP controller by claiming to be root:
[CODE]$ cd /opt/tplink/EAPController/bin
$ ./control.sh stop
The script need root permission. Exit.
$ UID=0 ./control.sh stop
Stopping EAP Controller ...
Stop successfully.
$
[/CODE]
This is really annoying, since I filed not only a bug report, but also a fix to TP-Link on occasion of the release of version 2.4.8 already.
Bad news: it still lacks privilege separation and needs to run with root permissions. Very risky if you intend to use it on a public server!
Even more bad news: the start/stop script still checks for the root user by looking at the shell environment variable UID.
So any local, non-privileged user with access to the server can easily stop a running EAP controller by claiming to be root:
[CODE]$ cd /opt/tplink/EAPController/bin
$ ./control.sh stop
The script need root permission. Exit.
$ UID=0 ./control.sh stop
Stopping EAP Controller ...
Stop successfully.
$
[/CODE]
This is really annoying, since I filed not only a bug report, but also a fix to TP-Link on occasion of the release of version 2.4.8 already.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
#1
Options
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Thread Manage
13 Reply
Posts: 4334
Helpful: 987
Solutions: 173
Stories: 3
Registered: 2015-12-05
Re:EAP Controller 2.5.3 for Linux
2017-12-02 08:41:23
DocJones wrote
That's fine for an uninstall/reinstall, but if you're migrating, or replacing a broken server, those files won't necessarily exist any more. They should have a UI-based means to export/back up the DB and maps.
Wether you use a web UI or CLI commands to produce a backup file does not really matter. What matters is to make such backup files before the server crashes or gets replaced.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
0
We appreciate your feedback. Feel free to let us know more. Log in to submit feedback.
0
We appreciate your feedback. Feel free to let us know more. Log in to submit feedback.
#12
Options
- Copy Link
- Report Inappropriate Content
Thread Manage
Posts: 38
Helpful: 0
Solutions: 0
Stories: 0
Registered: 2017-03-19
Re:EAP Controller 2.5.3 for Linux
2017-12-02 08:52:01
I'm just saying, it should be made available through the UI (in the same place where the config backup is), so it's easy for users to back up
all the stuff. Making users do multiple different things (go into the UI to back up configs, then go into CLI to back up other crap) to get all the stuff backed up is a great way to make sure users will be lazy or forget, and not get all the stuff backed up. It really can't be that hard to have a button that says "gzip the DB and maps and shove it at the user" (I could do such a thing in PHP in about 10 minutes), so why not make life easier for users?
0
We appreciate your feedback. Feel free to let us know more. Log in to submit feedback.
0
We appreciate your feedback. Feel free to let us know more. Log in to submit feedback.
#13
Options
- Copy Link
- Report Inappropriate Content
Thread Manage
Posts: 4334
Helpful: 987
Solutions: 173
Stories: 3
Registered: 2015-12-05
Re:EAP Controller 2.5.3 for Linux
2017-12-03 01:29:19
While it undoubtedly would be nice to have such a button in the web UI for the Windows style of doing something regularly such as backups, I just reminded to how this things are done in the Linux style: of course
you do not backup things manually if it can be done on the CLI and therefore suits perfectly to being scripted. We got a computer, don't we?
BUT: before adding a web UI button to the Linux version of the controller, please, TP-Link, add a "backup" option to the start/stop script like it has been done in Pharos Control, so Linux guys don't need to do two backups, one through the web UI and one for the maps.
Maybe TP-Links Windoze R&D team can add the button in the Windows version of the Controller, while the Linux R&D team can add it in the control script, and eventually they exchange both their work to each other. :D
BUT: before adding a web UI button to the Linux version of the controller, please, TP-Link, add a "backup" option to the start/stop script like it has been done in Pharos Control, so Linux guys don't need to do two backups, one through the web UI and one for the maps.
Maybe TP-Links Windoze R&D team can add the button in the Windows version of the Controller, while the Linux R&D team can add it in the control script, and eventually they exchange both their work to each other. :D
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
0
We appreciate your feedback. Feel free to let us know more. Log in to submit feedback.
0
We appreciate your feedback. Feel free to let us know more. Log in to submit feedback.
#14
Options
- Copy Link
- Report Inappropriate Content
Thread Manage
Posts: 4334
Helpful: 987
Solutions: 173
Stories: 3
Registered: 2015-12-05
Information
Helpful: 0
Views: 2790
Replies: 13
Voters 0
No one has voted for it yet.
Tags
Related Articles
Omada EAP controller for Linux
12274
0
Linux EAP Controller
1590
0
EAP Controller
1239
0
Linux controller 5.8.4
756
14
Report Inappropriate Content
Transfer Module
New message