AlmostVPN User Manual

previous
 index
 next

Why AlmostVPN needs your password

In the early days of computing many strange decisions were made. For example, it was decided that only superuser can create port with number less than 1024.  As you should be aware by now, there are quite a lot of very "interesting" ports below 1024 ( pop3, imap, imaps, smtp, http, list goes on ). AlmostVPN has to be able to gain root privileges to start SSH in such a way that it could deal with these "privileged" ports.  Safe way of temporary gaining root privileges on Mac OS X (and any other modern *nix system) is to use sudo command, which requires your local password (NOTE: Your account should be marked as "Allow user to administer this computer" in System Preferences/Accounts in order to be able to use sudo).
When you presented with password entry dialog

you will have to decide if you want to check or not.  This is a list of things to consider before you make this decision:
  • Good. You will not need to enter password ever again.
  • Good. AlmostVPN widget will be able to start/stop profiles (otherwise it will just show current status)
  • Bad. If someone else will get access to your computer while you are logged in, this person will be able to start/stop profiles without knowing your password.
If you are the sole owner of the computer and you are practicing simple security measures (like, do not allow password-less login, require password to unlock screensaver, do not leave you computer un-attended while logged in... ) then you probably will want to check that box. If in doubts, leave it un-checked.
NOTE: You can make AlmostVPN to "forget" password at any moment by clicking on button. If you see button than it means that AlmostVPN does not remember your password.
NOTE: If you choose to remember password it will be stored in Keychain. Only you or person with superuser privileges can see its content.


previous index
 next