|
| 1 | +--- |
| 2 | +layout: guide |
| 3 | +--- |
| 4 | +<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> |
| 5 | +<html> |
| 6 | +<head> |
| 7 | +<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> |
| 8 | +<title>Managing multiple hosts at the same time</title> |
| 9 | +<meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"> |
| 10 | +<link rel="home" href="index.html" title="Cockpit Guide"> |
| 11 | +<link rel="up" href="guide.html" title="Part I. Deployment Guide"> |
| 12 | +<link rel="prev" href="startup.html" title="Start up"> |
| 13 | +<link rel="next" href="authentication.html" title="Cockpit Authentication"> |
| 14 | +<link rel="stylesheet" href="style.css" type="text/css"> |
| 15 | +</head> |
| 16 | +<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> |
| 17 | +<table class="navigation" id="top" width="100%" summary="Navigation header" cellpadding="2" cellspacing="2"><tr valign="middle"> |
| 18 | +<td><a accesskey="p" href="startup.html"><img src="left.png" width="24" height="24" border="0" alt="Prev"></a></td> |
| 19 | +<td><a accesskey="u" href="guide.html"><img src="up.png" width="24" height="24" border="0" alt="Up"></a></td> |
| 20 | +<td><a accesskey="h" href="index.html"><img src="home.png" width="24" height="24" border="0" alt="Home"></a></td> |
| 21 | +<th width="100%" align="center">Cockpit Guide</th> |
| 22 | +<td><a accesskey="n" href="authentication.html"><img src="right.png" width="24" height="24" border="0" alt="Next"></a></td> |
| 23 | +</tr></table> |
| 24 | +<div class="chapter"> |
| 25 | +<div class="titlepage"><div><div><h2 class="title"> |
| 26 | +<a name="multi-host"></a> |
| 27 | + Managing multiple hosts at the same time |
| 28 | + </h2></div></div></div> |
| 29 | +<p> |
| 30 | + Cockpit allows you to access multiple hosts in a single session, |
| 31 | + by establishing SSH connections to other hosts. This is quite |
| 32 | + similar to logging into these other hosts using the |
| 33 | + <span class="command"><strong>ssh</strong></span> command on the command line, with one very |
| 34 | + important difference: |
| 35 | + </p> |
| 36 | +<p> |
| 37 | + Code from the local host and all the remote hosts run at the same |
| 38 | + time, in the same browser context. They are not isolated from |
| 39 | + each other in the browser. All code effectively has the same |
| 40 | + privileges as the primary session on the local host. |
| 41 | + </p> |
| 42 | +<p> |
| 43 | + Thus, <span class="emphasis"><em>you should only only connect to remote hosts that |
| 44 | + you trust</em></span>. You must be sure that none of the hosts that |
| 45 | + you connect to will cause Cockpit to load malicious JavaScript |
| 46 | + code into your browser. |
| 47 | + </p> |
| 48 | +<p> |
| 49 | + Therefore, Cockpit will warn you before connecting to more than |
| 50 | + one host. It is also possible to disable multiple hosts entirely, |
| 51 | + and some operating systems do this already by default. |
| 52 | + </p> |
| 53 | +<p> |
| 54 | + You can prevent loading of JavaScript, HTML, etc from more than |
| 55 | + one host by adding this to <code class="filename">cockpit.conf</code>: |
| 56 | + </p> |
| 57 | +<pre class="programlisting"> |
| 58 | + [WebService] |
| 59 | + AllowMultiHost=false |
| 60 | + </pre> |
| 61 | +<p> |
| 62 | + When you allow multiple hosts in a single Cockpit session by |
| 63 | + setting <code class="code">AllowMultiHost</code> to true, then the user will be |
| 64 | + warned once per session, before connecting to the second host. If |
| 65 | + that is still too much, you can switch the warning off completely |
| 66 | + by adding the following to <code class="filename">cockpit.conf</code>: |
| 67 | + </p> |
| 68 | +<pre class="programlisting"> |
| 69 | + [Session] |
| 70 | + WarnBeforeConnecting=false |
| 71 | + </pre> |
| 72 | +</div> |
| 73 | +<div class="footer"><hr></div> |
| 74 | +</body> |
| 75 | +</html> |
0 commit comments