[Spacewalk-list] Deploy a root password change

[J Epperson]

I've always done this with "usermod -p", using the crypted password
string. But that's probably not actually any more secure than echoing to
"passwd --stdin". 

On 2015-08-25 16:50, Steve Meier wrote: 

> Hello,
> 
> using sed on your /etc/shadow is a very harsh way to do it. On Red Hat
> the passwd command supports the --stdin parameter which is much cleaner
> 
> echo supersecret | passwd --stdin root
> 
> Run this as a remote action and you are good.
> 
> Alternatively, you can create a dummy RPM where this is a %post action
> and deploy this RPM. This should work as well and the version of that
> dummy RPM will actually give you a hint on which of your rotated 
> passwords
> it is.
> 
> Kind regards,
> Steve
> 
> Am 2015-08-25 22:24, schrieb Justin Edmands:
> You change the root pw on one machine, grab the /etc/shadow entry, and sed replace the root line in the shadow file into a remote command to whatever systems you need to change. On Aug 25, 2015, at 4:13 PM, Franky Van Liedekerke <liedekef at telenet.be> wrote: On Tue, 25 Aug 2015 19:45:06 +0000 "Armstrong, Kenneth Lawrence (SYSADMIN)" <klarmstrong2 at liberty.edu> wrote: Is there a way to deploy a root password change to a group of servers in Satellite 5.6? I imagine something like this might be possible in Satellite 6.x, but we don't have that deployed yet. Since spacewalk only has the root-pwd there for kickstart I don't think that is possible. I don't know if this helps, but: loop through your servers, do sudo and: echo "root:newpass"|chpasswd I know, it is not the config-method you're looking for (puppet, ansible), but sometimes the simplest things are sufficient too ... Franky _______________________________________________ Spacewalk-list mailing list Spacewalk-list at redhat.!
 com
https://www.redhat.com/mailman/listinfo/spacewalk-list [1]
 _______________________________________________ Spacewalk-list mailing
list Spacewalk-list at redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list [1] 

_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list [1]

 

Links:
------
[1] https://www.redhat.com/mailman/listinfo/spacewalk-list
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20150825/a4ed55a8/attachment.htm>