Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Giving Root to the Web

Posted Feb 27, 2003 16:52 UTC (Thu) by strombrg (guest, #2178)
Parent article: Giving Root to the Web

Even if you restrict webmin to being accessed only from certain IP's, that doesn't really stop you from using WeirdMind or jcterm from a java enabled browser to ssh to a trusted host and then remote display a lightweight browser back. WeirdMind and jcterm are both java ssh applications with x11 forwarding ability. They aren't perfect, but perhaps good enough for this task.

For that matter, you may be able to use links or w3m.

(Log in to post comments)

Posted Mar 8, 2003 13:28 UTC (Sat) by Adriaan (guest, #10014) [Link]

Why not use

ssh -X -L 10001:remote.server:10000 remote.server

and mozilla localhost:10001 from the admin's machine

You could only allow loopback connections to Webmin on the server that way; you wouldn't even have to use https.

It would still be a problem doing this from an Internet café though, as most (Windows) machines in Internet cafés don't have an X server running :-/

Giving Root to the Web

Posted Mar 11, 2003 23:01 UTC (Tue) by mogul (subscriber, #3163) [Link]

Ladies and gentlemen, I give you WeirdMind:
http://spiro.fisica.unipd.it/servizi/weirdx/weirdmind/weirdmind/
"WeirdMind allows you to embed an entire X server and SSH1 client in your java-enabled web browser. If an X program is opened, the X server will be automatically started, and the window will pop up on top of your web browser."

That's right... A full ssh client and X server in a browser applet. I've used it to do both routine and emergency admin work from internet cafes while on vacation in Canada, Europe, Japan, etc.

Rejoice, and Hallelujah my brethren!