Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


No, I'm not giving away my root password! - Page 2
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

No, I'm not giving away my root password!

2»

Comments

  • SplitIceSplitIce Member, Host Rep

    Usually this is the default first or second reply of outsourced support. Of course you should refuse. Additionally if for production boycott the provider before you incur a major incident and there is no-one manning the desk who can fix anything.

    @MasonR said:
    With an unmanaged service, I would never expect the provider to take control of the server to investigate any problems/solutions. I would expect general guidance in a certain direction or troubleshooting tips and nothing more. For that reason, I wouldn't give out the root password.

    For unmanaged services, the burden is on you to prove your case that there is a legit issue on the provider's end (provide mtr's and the like).

    Seriously, I wish more people were like you.

    Thanked by 2brueggus MasonR
  • AnthonySmithAnthonySmith Member, Patron Provider

    SplitIce said: Seriously, I wish more people were like you.

    Well the problem with @MasonR's perspective is that it simply does not apply in the low end real world of VPS hosting.

    A world where tickets go like this:

    Customer: "cannot work pls fix my root is abc123"

    Host: "This is a self-managed service if you require assistance please provide detailed troubleshooting and more details on what specifically is not working"

    Customer: "The VPS is not work"

    Host: "What specifically does not work, your VPS is responding to ssh and ping?"

    Customer: "random software package from 3rd party repo give an error"

    Host: "Sorry that is not supported as part of your self-managed package, please contact the software vendor"

    Customer: 'Insert random insult and threat here'

    --

    Or you get people who think it is ok to write you a book in a ticket and take up so much of your time you might as well be managing things for them.

    While I fully appreciate this is not how it should go, and I fully appreciate there are a good percentage of people who do actually know how to manage a VPS properly, you are the minority.

    If you don't provide some basic support at least enough so that the end user fully understands why it is not supported (and yes sometimes this can require some server interaction) you just get trashed as a host by the majority.

    So yes I wish I could take that ideal world stance of "not supported" and be done with it, that is just not how it works in the real world.

    I have been doing this for 7 years now, IT support for MUCH longer, I have taken support work for other hosts, smaller companies, and bigger companies during that time, my perspective seems to be a fairly universal truth when it comes to the expectations of end users not actually paying for support and you need to work to at least assist with them coming to more realistic expectations if you are not going to help them with the actual problem they have.

  • brueggusbrueggus Member, IPv6 Advocate

    jaden said:
    I don't allow password authentication via SSH on my servers. You could do the same and joke's on them!

    Tried that once (different provider though) and got a reply that the ticket got forwarded to the "System Admin" who resolved the issue little later.

    Radi said: If your server for example is a KVM or Xen and you expect them to work on your VPS, there is practically no sane way for them to login to it,

    Actually I do not want them to work on my VPS. If they need additional information, I'm happy to work with them. But I also understand that it's easier and faster for them to have access to the system rather than play ticket ping-pong all day.

    Corey said: So why not setup a new user with root permissions so they can login that way you don't have to give your root password? They are just trying to help you. Some people....

    That's probably the way to go. I still don't see how that's necessary in my case.

    Gamma17 said: but the fact that i want to know everything that is done to server, so that some time later i do not spend few days searching for a reason why something does not work only to find out that someone changed some settings

    This.

    AnthonySmith said: So I assume you have put a cancellation request in then?

    I did. When they asked for the root password, I was only annoyed. When they changed my IP to another one from the same subnet tonight, I got pissed. I highly doubt that my VPS is the only one in that /22, so I have no idea how they still didn't notice that there's something bigger going on than just a misconfiguration on my box.

    WSS said: shitty virtual machine

    Don't be rude, she has feelings too :(

    Abdussamad said: you're not supposed to use passwords to login via ssh anyway. use pub key authentication. ask the provider to give you their pubkey and then add that to root's authorized_keys file.

    They won't be able to log in via SSH in any case as the network's down.

  • @Corey said:

    What? If you're asking for help, then yes, you obviously need help.

    nope if the problem is from provider side

    Thanked by 1rm_
  • brueggusbrueggus Member, IPv6 Advocate

    MikePT said:
    If you don't trust them with your root password, I hope you ordered a KVM VPS, installed your own ISO and encrypted the partition, because otherwise, they can still mount the lvm and boot, then reset the pw, etc etc.

    If they're unable to understand a mtr, I highly doubt they're able to mount a file system.

    MikePT said: I've had to ask for root pw's multiple times, to provide further assistance / check their own mess / actually see what's happening in the VPS.

    AnthonySmith said: A world where tickets go like this:

    I get your points. The support agent does not know whether he's talking to someone who knows his shit or not. So it's probably the fastest way and less hassle for them to just check things on their own.

  • MasonRMasonR Community Contributor

    @AnthonySmith said: Well the problem with @MasonR's perspective...

    Agreed, and from a provider's perspective, that's understandable.

    Although, I'd argue that in the OP's case where he provided evidence of what was wrong and it obviously wasn't an issue with the OP's instance, the provider wouldn't need to go poking and prodding around in the VM. But again, I totally agree that 9/10 tickets probably provide little to no proof of the customer taking initiative to see exactly what is wrong or competence to do so.

  • MikePTMikePT Moderator, Patron Provider, Veteran

    @brueggus said:

    MikePT said:
    If you don't trust them with your root password, I hope you ordered a KVM VPS, installed your own ISO and encrypted the partition, because otherwise, they can still mount the lvm and boot, then reset the pw, etc etc.

    If they're unable to understand a mtr, I highly doubt they're able to mount a file system.

    MikePT said: I've had to ask for root pw's multiple times, to provide further assistance / check their own mess / actually see what's happening in the VPS.

    AnthonySmith said: A world where tickets go like this:

    I get your points. The support agent does not know whether he's talking to someone who knows his shit or not. So it's probably the fastest way and less hassle for them to just check things on their own.

    Like I said, if you don't trust the provider, just signup for another provider.

    When you get to the point of having hundreds of tickets per day, you'll easily understand that it's faster to diagnose the issue, than having the client to reply back and forth. Ends up spending you more time than it should/is worth.

    Although, MTR tests shouldn't need access to the VPS itself, unless you're unable to run an MTR from the VPS to your home IP, in such case, if the provider is offering help to do so and you're refusing to give them your root passwd then you're pretty much on your own.

    Thanked by 1Zerpy
  • KuJoeKuJoe Member, Host Rep
    edited August 2017

    Don't open a ticket for support if you don't want to let them help you. Problem solved.

    Thanked by 1WSS
  • KuJoeKuJoe Member, Host Rep

    The other week I had a nail in my tire so I brought it to the dealership to get repaired. They asked me for my keys and I just laughed as I drove the car off the lot. Why do they need the keys to my vehicle to fix a tire that's on the outside????? MORONS!!!!! [/sarcasm]

    The bottom line is, you opened a ticket for them to fix something. You couldn't fix it so how do you know what's wrong? How do you know how they will troubleshoot something that is broke? Why would you prevent them from doing their jobs because you think it's not important? You're well within your rights to refuse to give them the root password, just don't expect them to help you if you refuse to let them help you.

    Thanked by 2PrestigeWS Waldo19
  • doghouchdoghouch Member
    edited August 2017

    @WSS said:

    banner -f drpepper dicks && wall
    
  • MasonRMasonR Community Contributor
    edited August 2017

    @KuJoe said:
    The other week I had a nail in my tire so I brought it to the dealership to get repaired. They asked me for my keys and I just laughed as I drove the car off the lot. Why do they need the keys to my vehicle to fix a tire that's on the outside????? MORONS!!!!! [/sarcasm]

    Since it's story time. Let's say I'm getting the driveway in front of my house repaved. The contractor says, "hey, by the way I need a copy of the key to your front door because 'reasons'." I say, "why? All I want to do is be able to drive up to and park by my house." The contractor says, "well I'm not doing the job then because I need full access to your home."

    I don't think anyone here is arguing that a provider would absolutely never need root access to troubleshoot problems. But when the customer has obviously shown that the issue resides outside of their control (i.e. the network in this case), the provider should be competent enough to resolve the issue remotely.

  • KuJoeKuJoe Member, Host Rep
    edited August 2017

    MasonR said: Since it's story time. Let's say I'm getting the driveway in front of my house repaved. The contractor says, "hey, by the way I need a copy of the key to your front door because 'reasons'." I say, "why? All I want to do is be able to drive up to and park by my house." The contractor says, "well I'm not doing the job then because I need full access to your home."

    A driveway is not part of the house so they would never need access to the house. That's like saying they need your house key to mow your lawn. In my example, I'm asking somebody to fix my car so it's entirely reasonable for them to need access to the car.

    MasonR said: But when the customer has obviously shown that the issue resides outside of their control (i.e. the network in this case), the provider should be competent enough to resolve the issue remotely.

    Unless the provider needs to perform additional troubleshooting steps in addition to documenting everything for their supervisors. How would the support tech know if the problem is fixed if they didn't have access to the VPS to test it? If you want to waste the tech's time then sure don't be helpful, but if you want to get the issue resolved and the ticket closed quickly just provide them the access they ask for (like mentioned above, it shouldn't have to be root access).

  • WSSWSS Member

    @doghouch said:

    > banner -f drpepper dicks && wall
    > 

    Dropped your pipe..

    @MasonR said:

    @KuJoe said:
    The other week I had a nail in my tire so I brought it to the dealership to get repaired. They asked me for my keys and I just laughed as I drove the car off the lot. Why do they need the keys to my vehicle to fix a tire that's on the outside????? MORONS!!!!! [/sarcasm]

    Since it's story time. Let's say I'm getting the driveway in front of my house repaved. The contractor says, "hey, by the way I need a copy of the key to your front door because 'reasons'." I say, "why? All I want to do is be able to drive up to and park by my house." The contractor says, "well I'm not doing the job then because I need full access to your home."

    I don't think anyone here is arguing that a provider would absolutely never need root access to troubleshoot problems. But when the customer has obviously shown that the issue resides outside of their control (i.e. the network in this case), the provider should be competent enough to resolve the issue remotely.

    Both of these are stupid analogies, but obviously having the ability to move your vehicle for convenience sake is more akin to a provider wanting access to your machine than the asphalt dude wanting to rifle through your wife's frilly things.

  • AnthonySmith said: I have had users outright fake mtr reports

    Then run them from the host, requesting root for that is insanely dumb.

  • MasonRMasonR Community Contributor

    @KuJoe said:
    A driveway is not part of the house so they would never need access to the house. That's like saying they need your house key to mow your lawn. In my example, I'm asking somebody to fix my car so it's entirely reasonable for them to need access to the car.

    Sure, that was a bit of a stretch.

    Unless the provider needs to perform additional troubleshooting steps in addition to documenting everything for their supervisors. How would the support tech know if the problem is fixed if they didn't have access to the VPS to test it? If you want to waste the tech's time then sure don't be helpful, but if you want to get the issue resolved and the ticket closed quickly just provide them the access they ask for (like mentioned above, it shouldn't have to be root access).

    The OP's case above could be quickly verified that it's working by the provider pinging the customer's IP from outside the subnet. No intervention required.

  • KuJoeKuJoe Member, Host Rep

    MasonR said: No intervention required.

    Unless the problem is within the VPS itself. 99% of the tickets I get saying "the network is down" is easily fixed with the removal of a few iptables rules within the VPS (meaning the customer was blocking the traffic and our network was fine).

    Thanked by 1MikePT
  • MikePTMikePT Moderator, Patron Provider, Veteran

    @KuJoe said:

    MasonR said: No intervention required.

    Unless the problem is within the VPS itself. 99% of the tickets I get saying "the network is down" is easily fixed with the removal of a few iptables rules within the VPS (meaning the customer was blocking the traffic and our network was fine).

    Exactly.

  • WSSWSS Member

    There needs to be a stupid tax that gets passed onto clients that aren't smart enough to manage their own firewall rules.

    Thanked by 2MikePT MasonR
  • KuJoeKuJoe Member, Host Rep

    @WSS said:
    There needs to be a stupid tax that gets passed onto clients that aren't smart enough to manage their own firewall rules.

    If somebody made a common sense test module for WHMCS that clients had to pass before they could pay an invoice it would be super popular. :D

    Thanked by 3MikePT WSS MasonR
  • MasonRMasonR Community Contributor

    @KuJoe said:

    @WSS said:
    There needs to be a stupid tax that gets passed onto clients that aren't smart enough to manage their own firewall rules.

    If somebody made a common sense test module for WHMCS that clients had to pass before they could pay an invoice it would be super popular. :D

    In retrospect after reading all of these providers' responses, it seems I've grossly overestimated the competence level of the average customer. :P

    Thanked by 1FlamesRunner
  • WSSWSS Member

    @MasonR said:
    In retrospect after reading all of these providers' responses, it seems I've grossly overestimated the competence level of the average customer. :P

    There are plenty of technology-related customers that are just as stupid as the person who decides to save money on their oil changes and ends up draining the transmission of fluids.

    Thanked by 2MasonR AuroraZ
  • KuJoeKuJoe Member, Host Rep
    edited August 2017

    MasonR said: In retrospect after reading all of these providers' responses, it seems I've grossly overestimated the competence level of the average customer. :P

    You don't know how many tickets we get asking "what is linux?" after they purchased an OpenVZ VPS. It's not that a lot of clients are incompetent, it's that the low price makes them go "for $X I can figure out what a SSH is". A lot of company policies are in place specifically for the majority of clients, which usually are the ones that need the most hand holding. In the past year I can only recall one client who ever opened a ticket with a traceroute, ping, or MTR in the initial ticket. With the hundreds of tickets I've received in the past 60 days, most of them could have been solved with a reboot. We just recently had one client who disabled the OpenSSH service and then opened a ticket complaining that he couldn't SSH to the server. What stinks the most is I tend to give people the benefit of the doubt so of course I wasted however long troubleshooting the issue and it never occurred to me that the client would disabled SSH then proceed to open a ticket that SSH was disabled. That $15 I made off that client was easily eaten up by the time I spent on that ticket.

    So yeah in most cases asking for your root password probably isn't necessary, but for every client like you who does the troubleshooting for the support tech there are thousands who just turned off their VPS and wonder why their website stopped loading.

    EDIT: And I just realized you aren't the OP. My bad. :)

    Thanked by 1MasonR
  • Running a hosting business doesn't seem to make sense given the labour costs you have in the first world. Why do you even bother?

  • @brueggus said:

    MikePT said:
    If you don't trust them with your root password, I hope you ordered a KVM VPS, installed your own ISO and encrypted the partition, because otherwise, they can still mount the lvm and boot, then reset the pw, etc etc.

    If they're unable to understand a mtr, I highly doubt they're able to mount a file system.

    MikePT said: I've had to ask for root pw's multiple times, to provide further assistance / check their own mess / actually see what's happening in the VPS.

    AnthonySmith said: A world where tickets go like this:

    I get your points. The support agent does not know whether he's talking to someone who knows his shit or not. So it's probably the fastest way and less hassle for them to just check things on their own.

    All your roots are belongs to mes.

  • And all the provider replies here are the reason why most times i do not even bother opening ticket when i encounter an issue which is definitely provider side. I either live with it or move to another provider. Because it is usually easier and faster than dealing with support stuff which is both, not very experienced/competent and assumes that i am complete moron. Thankfully it does not work like this with all providers.

    Thanked by 2brueggus NodePing
  • With the amount of porn we already know you have and don't have time to watch... might as well share because sharing is caring.

  • CoreyCorey Member
    edited August 2017

    Gamma17 said: And all the provider replies here are the reason why most times i do not even bother opening ticket when i encounter an issue which is definitely provider side. I either live with it or move to another provider. Because it is usually easier and faster than dealing with support stuff which is both, not very experienced/competent and assumes that i am complete moron. Thankfully it does not work like this with all providers.

    Provider hopping on any perceived issue is a pretty common practice around here. I'm sure you will fit in well.

    Thanked by 1WSS
Sign In or Register to comment.