<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"> <html><body style='font-family: Verdana,Geneva,sans-serif'> <p>I've always done this with "usermod -p", using the crypted password string. But that's probably not actually any more secure than echoing to "passwd --stdin".</p> <p> </p> <div> </div> <p>On 2015-08-25 16:50, Steve Meier wrote:</p> <blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px"> <pre>Hello, using sed on your /etc/shadow is a very harsh way to do it. On Red Hat the passwd command supports the --stdin parameter which is much cleaner echo supersecret | passwd --stdin root Run this as a remote action and you are good. Alternatively, you can create a dummy RPM where this is a %post action and deploy this RPM. This should work as well and the version of that dummy RPM will actually give you a hint on which of your rotated passwords it is. Kind regards, Steve Am 2015-08-25 22:24, schrieb Justin Edmands:</pre> <blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px">You change the root pw on one machine, grab the /etc/shadow entry, and sed replace the root line in the shadow file into a remote command to whatever systems you need to change. <blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px">On Aug 25, 2015, at 4:13 PM, Franky Van Liedekerke <<a href="mailto:liedekef@telenet.be">liedekef@telenet.be</a>> wrote: On Tue, 25 Aug 2015 19:45:06 +0000 "Armstrong, Kenneth Lawrence (SYSADMIN)" <<a href="mailto:klarmstrong2@liberty.edu">klarmstrong2@liberty.edu</a>> wrote: <blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px">Is there a way to deploy a root password change to a group of servers in Satellite 5.6? I imagine something like this might be possible in Satellite 6.x, but we don’t have that deployed yet.</blockquote> Since spacewalk only has the root-pwd there for kickstart I don't think that is possible. I don't know if this helps, but: loop through your servers, do sudo and: echo "root:newpass"|chpasswd I know, it is not the config-method you're looking for (puppet, ansible), but sometimes the simplest things are sufficient too ... Franky _______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list">https://www.redhat.com/mailman/listinfo/spacewalk-list</a></blockquote> _______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list">https://www.redhat.com/mailman/listinfo/spacewalk-list</a></blockquote> <pre>_______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> </pre> </blockquote> </body></html>