[HH#766917] VPS Setup

[HelioHost]

VPS number: 87, VPS ID: 486

I signed up for a VPS account Aug 18th. I paid and was told that the
server would be created within 24 hours and I would be notified. I am still
waiting.

DanielGoad@gmail.com
214-952-3107

[MoneyBroz]

Your VPS seems like it is already created as vps87.heliohost.us is returning a connection refused error. you may not have gotten the email for your credentials, an admin can help with that.

[Krydos]

You paid on 2023-08-18 10:12:59 and your VPS was finished and you were emailed at 2023-08-18 10:48:28 36 minutes later. I noticed you use Gmail. Have you checked your spam box for the VPS email? If you can't find it in spam either let us know and I can resend it.

[HelioHost]

VPS number: 87, VPS ID: 486

Yes please resend it. I have not ever had access or any login information
to the main site or the vps. If it it?s not included in the email you will
be resending, please reset my password or advise how I can log in. I
noticed self resetting of passwords is not yet available.

On Tuesday, August 29, 2023, HelioHost Support
wrote:

> You paid on 2023-08-18 10:12:59 and your VPS was finished and you were
> emailed at 2023-08-18 10:48:28 36 minutes later. I noticed you use Gmail.
> Have you checked your spam box for the VPS email? If you can't find it in
> spam either let us know and I can resend it.
>
> You may view the status of your ticket by visiting:
>
> https://helionet.org/index/index.php?showtopic=56829
>
> Thank you,
> HelioHost support
> https://heliohost.org/
> https://helionet.org/
>
>

[danielgoad]

On 8/29/2023 at 6:10 PM, moneybrz said:

Your VPS seems like it is already created as vps87.heliohost.us is returning a connection refused error. you may not have gotten the email for your credentials, an admin can help with that.

I never received credentials, so I’ve never logged in. Would you expect an server to be returning connection refused in its default state?  I assume that it is just as it was when created. 
 

can someone please resend my credentials??!

[Krydos]

The welcome email has been resent. It contains the IPv4, IPv6, and port to login with SSH. Your username and password were chosen by you when you were creating your account, so you likely saved them in your browser. You can use the same username and password to login to our VPS dashboard at https://heliohost.org/dashboard/ and also to login to SSH. We never email, or store passwords in plaintext so your welcome email won't contain your password. If you didn't save it in your browser or write it down or anything let us know and we can reset the password for you.

[Krydos]

The fact that you were able to login to your danielgoad forum account means that you know the password for the dashboard and SSH as well. They should all be the same password. They don't remain synced up after creation though so if you changed your forum password it won't change your SSH password.

[HelioHost]

Right after creating this ticket, I received the automated email with links
to the ticket system and forum. After trying to log in with the password I
believe I gave at signup, and several other possibilities, I reset the
forum password by email.

I am sorry that I am unable to locate the password I originally used. I
vaguely recall that your systems require an unusually long or complex
password ? but I could be mistaken, I interact with many services all day.
If the requirements are unusual, I may have been forced to use a password
that is different than my usual pattern, and more difficult to recall.

Had I known that changing it was a major ordeal, I would have made certain
to document it better. I am used to simply resetting any password I
forget. I know many, if not all, are volunteers so I apologize for taking
more of your time, but *could someone please change my password*?

I am curious, as most companies are implementing industry best practices
and remove any human involvement in the password management process (other
than the account owner), and with many options available to allow password
reset by end users (while maintaining account security), why do you require
an admin to change passwords manually? And does this not result in
significantly reduced security, as well as adding delay and frustration to
end users that are unable to access their account until an admin processes
their change request?

Thanks, in advance, for resetting my password. I look forward to finally
being able to access the system.

Daniel Goad
Dallas, TX
Ph: 214-952-3107
DanielGoad@gmail.com


On Wed, Aug 30, 2023 at 21:14 HelioHost Support
wrote:

> The fact that you were able to login to your danielgoad forum account
> means that you know the password for the dashboard and SSH as well. They
> should all be the same password. They don't remain synced up after creation
> though so if you changed your forum password it won't change your SSH
> password.
>
> You may view the status of your ticket by visiting:
>
> https://helionet.org/index/index.php?showtopic=56829
>
> Thank you,
> HelioHost support
> https://heliohost.org/
> https://helionet.org/
>
>

[MoneyBroz]

10 hours ago, danielgoad said:

I never received credentials, so I’ve never logged in. Would you expect an server to be returning connection refused in its default state?  I assume that it is just as it was when created. 
 

can someone please resend my credentials??!

Yes it's completely normal for a freshly created VPS to display connection refused. Since it doesn't have a web server installed.

[Krydos]

The reason you can't reset your password yourself yet is because the functionality hasn't been implemented yet, but it will be eventually. There are quite a few things that need to be done since we recently switched from cPanel to Plesk on our shared hosting we basically had to start over from scratch and do a full rewrite of most of our backend. It has taken a ton of time and effort from our staff as you can probably imagine. We did offer automated password resets on the old system, but since we only need to do 1 or 2 password resets on VPS per year there have been quite a few things that are higher priority that more people will use.

The password requirements are 8 characters or more, at least 1 lowercase letter, at least 1 uppercase letter, and at least 1 number. I don't believe those requirements are unnecessarily complicated, and we don't even require a symbol like most websites. Password best practices suggest that generating a completely random long password with all of the above and symbols that you've never used on any other sites and save in a password manager would be the most secure though. If you reuse the same passwords or use a predictable pattern it would allow easier access for a hacker to all of your accounts. Plus it's annoying to have to go change 50 different accounts that used the same password if one website has a security breach and your password is exposed. I just use Chrome password manager and right click on the password field and click "suggest a strong password" on each account I create, but there are plenty of other password managers if you don't like Chrome. Using this method I don't have to memorize anything, and each site has a strong unique password.

Anyways, go to https://heliohost.org/password/ and submit your email address and the new password you would like to use to login to your dashboard and VPS. Keep in mind that this page simply stores the password securely, and no one, not even me will ever be able to see the password in plaintext. Once the password is stored securely in our database let us know by replying to this email and we can manually apply the new password to your VPS.

I'd also like to apologize for the confusion that you've experienced while signing up for our VPS service. 99% of people have no issues with the signup process at all, but we sincerely appreciate the feedback on the inadequacies of our system. When people let us know what they find confusing that allows us to find a way to fix the issue so it doesn't confuse people in the future.

[HelioHost]

I have updated my password at https://heliohost.org/password/ , please
apply the new password. Thanks you!!!

On Thu, Aug 31, 2023 at 8:04?AM HelioHost Support
wrote:

> The reason you can't reset your password yourself yet is because the
> functionality hasn't been implemented yet, but it will be eventually. There
> are quite a few things that need to be done since we recently switched from
> cPanel to Plesk on our shared hosting we basically had to start over from
> scratch and do a full rewrite of most of our backend. It has taken a ton of
> time and effort from our staff as you can probably imagine. We did offer
> automated password resets on the old system, but since we only need to do 1
> or 2 password resets on VPS per year there have been quite a few things
> that are higher priority that more people will use. The password
> requirements are 8 characters or more, at least 1 lowercase letter, at
> least 1 uppercase letter, and at least 1 number. I don't believe those
> requirements are unnecessarily complicated, and we don't even require a
> symbol like most websites. Password best practices suggest that generating
> a completely random long password with all of the above and symbols that
> you've never used on any other sites and save in a password manager would
> be the most secure though. If you reuse the same passwords or use a
> predictable pattern it would allow easier access for a hacker to all of
> your accounts. Plus it's annoying to have to go change 50 different
> accounts that used the same password if one website has a security breach
> and your password is exposed. I just use Chrome password manager and right
> click on the password field and click "suggest a strong password" on each
> account I create, but there are plenty of other password managers if you
> don't like Chrome. Using this method I don't have to memorize anything, and
> each site has a strong unique password. Anyways, go to
> https://heliohost.org/password/ and submit your email address and the new
> password you would like to use to login to your dashboard and VPS. Keep in
> mind that this page simply stores the password securely, and no one, not
> even me will ever be able to see the password in plaintext. Once the
> password is stored securely in our database let us know by replying to this
> email and we can manually apply the new password to your VPS. I'd also like
> to apologize for the confusion that you've experienced while signing up for
> our VPS service. 99% of people have no issues with the signup process at
> all, but we sincerely appreciate the feedback on the inadequacies of our
> system. When people let us know what they find confusing that allows us to
> find a way to fix the issue so it doesn't confuse people in the future.
>
> You may view the status of your ticket by visiting:
>
> https://helionet.org/index/index.php?showtopic=56829
>
> Thank you,
> HelioHost support
> https://heliohost.org/
> https://helionet.org/
>
>

[Krydos]

Try logging in to your VPS now.