topic root password in Operating System - HP-UX

root password

Petr Simik_1 — Fri, 17 Jan 2003 15:08:48 GMT

I red your previous discussion regarding root password discipline. I care abot 45 HP servers and I cannot use NIS. How can I change root password easily on several servers easily at once! Do you use some scripts or do you click out new password on each server one by one?

Re: root password

Pete Randall — Fri, 17 Jan 2003 15:11:16 GMT

Petr,

In my case, I keep the passwd file synchronised on all my hp-ux machines by rcp'ing it.

Pete

Re: root password

Patrick Wallek — Fri, 17 Jan 2003 15:13:11 GMT

At a previous job we kept a bunch of servers in sync with 'rdist'.

Do a 'man rdist' for more information.

Re: root password

Robert-Jan Goossens — Fri, 17 Jan 2003 15:17:04 GMT

I use the same method as Patrick for Sun and HP (rdist).

Kind regards,

Robert-Jan.

Re: root password

John Poff — Fri, 17 Jan 2003 15:17:24 GMT

Hi,

We have a low enough ratio of servers to sys admins [about 5:1] that we just divide them up and change the root passwords manually.

The password files are mostly different on each box so we don't have the luxury of rcp'ing them.

JP

Re: root password

Chris Wilshaw — Fri, 17 Jan 2003 15:18:08 GMT

I use an expect script to make the changes.

>>>> Shell wrapper

#!/usr/bin/ksh

for MACHINE in `cat MACHINES`
do
./allpw.exp "$MACHINE" "$USERID" "$NEWPW"
done

>>> allpw.exp

#!/usr/local/bin/expect
###############################################################################

set term vt100
set timeout 5
set SITE [lindex $argv 0]
set USERID [lindex $argv 1]
set NEWPW [lindex $argv 2]

spawn rlogin $SITE

expect {*TERM*)} {}
send "$term\n"
expect {*>} {} {*#} {} {*$} {}

send "/opt/super/bin/super passwd $USERID\n"

expect {*word:} {}
sleep 2

send "$NEWPW\n"
expect {*word:} {}
sleep 2

send "$NEWPW\n"

expect {*>} {} {*#} {} {*$} {}

send "exit\n"
close -i $spawn_id

exit 0

-----------------------

For convenience,I use a utility called super (similar to sudo) to allow me to change passwords using my own ID.

Re: root password

Chris Wilshaw — Fri, 17 Jan 2003 15:21:35 GMT

Sorry,

Wrong verision of the shell script posted previously.

#!/usr/bin/ksh
LOG=log/pwchg.log

if [ `whoami` = "root" ]
then
echo "Script must not be run as root"
exit 0
fi

echo "Please enter ID for global password change:\c"
read USERID
echo "Please enter new password for ID $USERID: \c"
stty -echo
read NEWPW
stty echo
echo ""

echo "password change for $USERID on `date`" >> $LOG

for MACHINE in `cat MACHINES`
do
./allpw.exp "$MACHINE" "$USERID" "$NEWPW"
done