WilliamD's picture

How do I know what this login is?  The configuration process only asks me to set the password for the wordpress account, but not the "login".  When I quit the configuration console, I am asked for my login, which I have no idea what it is.  Help.

Forum: 
Tags: 
Jeremy Davis's picture

By the sounds of it you are trying to log into the console!? FWIW all the login credentials for each appliance are documented on each appliance page. Although it's not specified, the SSH login is essentially a remote console login. E.g. on the WordPress appliance page it says:

Credentials (passwords set at first boot):

Webmin, SSH, MySQL, phpMyAdmin: username root
Wordpress: username admin

Jeremy Davis's picture

As you are probably aware, security is not an "on/off" type arrangement and you always need to make compromises. When the TurnKey Linux appliance was first developed (many years ago, prior to WordPress supporting 'live' upgrades) the file permissions were set to maximise security (at the cost of user-friendliness; but easily worked around via the commandline).

But as WordPress has evolved, the 'user friendliness' cost imposed by the choice of security settings has risen. In some respects it could be argued what started as a security plus has actually become a security minus. Whilst the risk of a compromised WordPress install hijacking the whole server is reduced; the chance of an out-of-date WordPress install getting hacked in the first place is increased...

The new (not yet released v14.0) version of our WordPress appliance reworks the permissions to allow easy in place upgrades. It does come with the 'price-tag' or reduced overall server security but users will find it easier to keep WordPress up to date so the risk of WordPress being compromised are less (so long as the user actually applies the updates!).

But to get to the point, there is an extensive post covering how one might go about "fixing" the security settings of the current appliance (including a lively debate about the pros and cons). Have a look here. This post specifically covers the steps to take to enable browser based upgrades.

joshtheprogrammer's picture

Hello,

TurnKeyLinux's Wordpress looks extremely interesting and I've been looking forward to trying it for awhile. Today I installed the raspberry pi version on my pi 4, and it installed great, but I have a problem. It wants me to log into wordpress on my local system using the username 'admin', so I did so then entered the password (which I set for all of my services when I first set up the system) but it kept saying "Incorrect password." How can I find the correct password to log into the admin console?

Thank you!

Jeremy Davis's picture

I'm not sure why? But it doesn't have a default password. It should be the password you set it to at firstboot.

Having said that, we have had a few users complain that they are having problems with particularly complex passwords. Punctuation/special characters seem to be the most likely to cause issues. So perhaps try again with a more simple password (upper case, lower case and numbers)- although you can make it secure by making it long. Alternatively once you can log into WordPres, you could change it then, in the WordPress UI. Try setting the password again interactively like this:

/usr/lib/inithooks/bin/wordpress.py

Alternatively, you can run it non interactively. Use the '-h' switch to double check the values required:

/usr/lib/inithooks/bin/wordpress.py -h

Add new comment