Webmin

[TRN]

Are there any steady users of this product? I've noticed the number of add-ons has grown tremendously. What do you think are the pros and cons of using webmin versus doing things manually? Are there security risks?

[NinerFan]

What do you think are the pros and cons of using webmin versus doing things manually?

Pros:

1.) A single method to configure just about anything on your machine
2.) Easier for a junior admin, inexperienced user, or someone coming from the Windows world.
3.) You can maintain the machine from just about anywhere. All you need is a web browser.
4.) Cross-distro/platform. Webmin is available for lots of nixes, so familiarity with it is often better than vendor's xyz program.
5.) Built-in Logging of actions. Know who and what was last changed.

Cons:

1.) What do you do when Webmin doesn't work?
2.) Can be initially confusing because it will have often have settings and "modules" for items not even installed on the computer.
3.) Many of the modules don't support every aspect of xyz program. (This isn't necessarily a bad thing, just if you are away and do need abc setting and you put all your eggs into webmin...well)
4.) Some modules lag behind the latest software features.

These are just some.

Are there security risks?

I think it is safe to say there is always a risk. One just needs to minimize them.

I think the biggest risk is for the most part, the authentication is not encrypted. I believe Mandrake and a few others by default run it thru SSL. If you want to use it over the 'Net, then be sure to use SSL.

The practice of only giving someone enough access to do what they need to do equally applies here as well. Make use of Webmin's ACL's and permssions and don't just give everyone full access.


My opinion is you should use both, but try to understand what webmin is doing for you.

Cheers