topic Re: password management on multiple systems in Operating System - HP-UX

password management on multiple systems

Gary Glick — Tue, 27 Dec 2005 16:22:24 GMT

Howdy all,

I am needing to login to multiple servers.
I would like to utilize the same password on each of these systems. Now since there will be 45 servers, or so, when it is time to change my password I do not want to have to login to each server and change it. Any thoughts on how I can manage my passwords on these multiple servers. Several other admins will have the same problem.

The root password on all the systems will be different, I'm only refering to my own "admin" account.

These systems are not "trusted".

Thank you for you help.

Gary

Re: password management on multiple systems

Paul F. Carlson — Tue, 27 Dec 2005 16:31:49 GMT

Hi Gary,

We wrote a perl script that uses a combination of ssh with pre-authenticated keys, expect and the password command. The perl script reads in a list of server stored in a text file, prompts for old and new passwords, and runs the passwd command via ssh (you'll have to use the "-t" option) to change passwords on each server.

Paul

Re: password management on multiple systems

Rick Garland — Tue, 27 Dec 2005 16:33:30 GMT

There are multiple options available.
NIS, NIS+, LDAP
These can help with the centralization.

If you are not wanting to proceed down this path, look at using 'Expect'.

A neat language (utility) that allows for the chat capabilities. Execute the command once from your desktop system and it will contact/connect the other systems listed and go through the routine of changing passwds.

Re: password management on multiple systems

Gary Glick — Tue, 27 Dec 2005 16:52:34 GMT

Let's say that Ldap was a possiblity. How would I get started setting that sort of thing up?

Re: password management on multiple systems

dirk dierickx — Wed, 11 Jan 2006 03:13:51 GMT

http://docs.hp.com/en/internet.html#LDAP-UX%20Integration

Re: password management on multiple systems

Muthukumar_5 — Wed, 11 Jan 2006 03:21:30 GMT

Why don't you generate same type of account in all accounts and change /etc/passwd entry? It is easy to do right.

Are you having password less remote login? Or a account with password known account then you can achive it.

--
Muthu

Re: password management on multiple systems

Muthukumar_5 — Wed, 11 Jan 2006 03:22:44 GMT

Use like this,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=981127

--
Muthu

Re: password management on multiple systems

Devender Khatana — Wed, 11 Jan 2006 03:28:18 GMT

Hi,

You configure one server as NIS , NIS+ or LDAP server and then let all other servers refer this for passwords.

But this will not be possible that it will be applicable for only your one user. The same will be then the case for all users.

You can also incorporate other features also for additional advantages.

HTH,
Devender