Re-enable root account in Cockpit?

[Verhoeckx]

Hello Cockpit developers,

Just out of curiosity:
How do you re-enable the root account after you have disabled it?

I disabled to root account to work only from my default user account (with sudo rights). I wanted to check mark the option Never lock account for this account but I see that's not possible anymore (and probably also not necessary anymore)?

[Verhoeckx]

Oh wait, I found a button called Limited access with which I can get administrative access 😄 !
Now I can, if I want to, re-enable the root account. Problem solved!

I also found out that it's not necessary to click on Never lock account. It's a notification and not an action that I can take (which I thought it was). Stupid me 😄 !

[Verhoeckx]

Mmm, I realize that the word account can be really confusing because then people might thing it's the same as logging in and logging out. You should probably stick to the noun access.

I think my idea of adding an icon with a person (account) on it is also not a good idea because this has the same problem as stated above. Maybe an icon that has something to do with rights?

[Verhoeckx]

Maybe just move the blue button Turn on administrative access to the top bar?

Rename administrative to administrator?

And when you have administrator rights: Turn off administrator rights?

Icon is not really necessary.

[garrett]

Thanks for your continued feedback!

I should look at this again and try to make it clearer.

The big issue is that there are some cases where people use Cockpit without administrative access (and will never be given full access), so we need to strike a balance.

But I agree. It's not obvious enough and doesn't look so clickable. (This is the reason behind adding the banner. But, yeah, people might not see it and may proceed to other pages without realizing they're not in admin mode.)

[garrett]

I've mocked up some of these suggestions, like making the top look more button-like, adding an icon, and such @ #14305.

It's a WIP. I should probably implement some or all of this in a PR soon so we can see how it feels while using Cockpit.

[Verhoeckx]

I read your comment: all good points! Nice design!

[Verhoeckx]

I wonder however if it's possible to lock all accounts (so you won't be able to log in anymore in Cockpit)?
Because I still have the option to also lock my own user account 😨 !

[Verhoeckx]

I still wonder if this is possible (locking the root and user account) but I'm not going to try it because I don't want to lock myself out of Cockpit.

[garrett]

This is a great point. I've opened an issue @ #16152

[Verhoeckx]

Great: I see that's it being working on!

[garrett]

We just landed the change in #16159. Preventing locking one's self out will be in the next Cockpit release. Thanks pointing this out! 👍

[Verhoeckx]

My pleasure 😉 !