Webmin? Good, Bad, Ugly?

[Damien Hull]

It seams that Webmin security is an issue. Here's a quick fix.

    * install ssh on the server
    * Configure your network so you have ssh access to the server
          o I change the ssh port to something above 10000
    * Create an ssh tunnel to Webmin
    * Open a browser and connect

*Example: *

    ssh -p (ssh port) -l (userid) -L 10000:localhost:10000 example.com

*Note:* ssh has its own security issues and concerns.

> On 07/21/2007 03:09 PM, Brian Fahrlander wrote:
>   
>> Damien Hull wrote:
>>     
>>> Is Webmin good, bad or just damn ugly?
>>>
>>> I would like others opinions. I use Webmin for all my linux servers. I 
>>> know I should be using the command line. However, I work with a lot of 
>>> people that are new to Linux. They don't know anything about the CLI.
>>>
>>> Other Questions:
>>>
>>>     * Is Webmin a good thing for new Linux users ( server side not
>>>       workstation )?
>>>     * Is there another option?
>>>
>>> All suggestions / opinions are welcome.
>>>       
>>      I'm a fan; it does good work, especially when you need to fiddle 
>> with something you've never really dealt with before; like squid.  It 
>> can make a reasonable 'default' config file that the service can 
>> understand, until you get time to.  I've never had it mess up a service, 
>> unlike, for instance, LinuxConf.
>>
>>      It does have a security footprint, though: I've not dwelt on the 
>> details, but it's something you'd want to use inside the firewall, with 
>> no external access, unless you don't trust your users.
>>
>>      But being able to hand off certain functions to part-time admins, 
>> like in the case of someone needing to edit /etc/aliases, it's a great 
>> tool.  I believe the repos don't have it by default, due to the security 
>> concern.
>>
>>      I suppose it's a conditional thumbs-up.
>>
>>
>>     
>
> +1
>
> Being new at setting up an Ubuntu server Webmin has been a lifesaver &
> an excellent learning tool for me. It's helped me learn the
> interfaces/processes, file locations, etc., and then when I do use
> command line I have a better understanding of what I'm actually changing
> & how. I've installed it on my 4 other test systems & internal test
> workstations as well. However, the first thing that I do is change the
> default port from 10000 to something less obvious & well known. And, of
> course I've also broken a few things with Webmin along the way :-)
>
> Disclaimer: all of the above are in my own private firewalled test
> environment. I've not attempted to use it outside of that environment.
>
>
>