topic Re: Another scripting question in Operating System - HP-UX

Another scripting question

Steve Sauve — Tue, 19 Sep 2000 17:09:53 GMT

Hello all,
I'm putting together a script to create users (either from input or from a file). The last hitch I've run into is how to set the password. I have it creating the actual password, but I'm not sure how to get it into the /etc/passwd file. I figure there are two ways, first the passwd command (in some form) and second the crypt command (which I haven't really used before). Does anyone have any thoughts? I could just spit the password up on the screen, have the passwd command execute and have the operator type it in twice, but this would just add the human error element to it and would slow down the processing of a list of people.

Thanks,
Steve

Re: Another scripting question

James Odak — Tue, 19 Sep 2000 17:45:27 GMT

i've worked on a bunch of platforms
so im not sure this is true for HP-UX or not
but from what i've seen the passwd command is one of those that will not work in a script .... the only work around i've seen is to use an option to defer the password and have it set upon the first login attempt

and i have never done that on HP-UX ...(was with a SCO system)

jim

Re: Another scripting question

John Palmer — Tue, 19 Sep 2000 17:46:25 GMT

Amongst several other options are:-

Install 'expect' so that you can control the 'passwd' command.

Write a C program to call 'crypt' (I think not the crypt command) to encrypt the password or use a known encrypted 'initial' password that the user has to change when they first log in. If you are generating records to be appended to /etc/passwd then this encrypted string can be included in the record at that stage.

Re: Another scripting question

Stefan Farrelly — Tue, 19 Sep 2000 17:49:56 GMT

Theres a couple of ways to do this;

1. Set their password in such a way as it has no password but requires the user to set their password the first time they login. Use the modprpw command.

2. Set your own password, you now know what it is, copy the encrypted string from the password file and put it into your script. You can now write this to any new password file entries and the password is set to something you already know.

Re: Another scripting question

Steve Sauve — Tue, 19 Sep 2000 19:31:34 GMT

I appreciate the responses but they don't quite do what I'm looking for. What I need to do is create a unique password for each user. As I said I already create the password, just need to get it encrypted into the /etc/passwd file.
What is "expect"?
I looked at the encrypt command, but it seems to want a key, which tells me that it won't be properly encrypted as a password.
Any other help would be appreciated.
Thanks,
Steve

Re: Another scripting question

Rick Garland — Tue, 19 Sep 2000 19:43:44 GMT

expect is another 'scripting' langauge, so is perl, awk, sed, etc.
expect works by "chatting" with the commands that you send. Example,

send passwd
expect New Password:
send
expect reenter password
send

You send a command, tell the script what to expect, it acknowledges, send the passwd.
However, in using expect the passwd you send is going to be clear. It is the passwd command that does the encrypting.
Very useful but not very secure with what you are doing.
There are some perl scripts that will do this as well.

Re: Another scripting question

Stefan Farrelly — Tue, 19 Sep 2000 19:50:57 GMT

I still believe you want the modprpw command. It accepts the format;

modprpw -w

Looks like this will enable you to set a users encrypted password to where string is a know password you decide on.

Re: Another scripting question

Stefan Farrelly — Tue, 19 Sep 2000 19:58:52 GMT

Nope, my previous reply is no good, you need to pass the already encrypted password to it which is not what you want.

However, ive found a link to exactly what you want, including a perl script which will do the job;

http://www.dutchworks.nl/htbin/hpsysadmin?h=3&dn=44860&q=generating%20passwords&fh

Re: Another scripting question

RikTytgat — Tue, 19 Sep 2000 20:04:14 GMT

Hi,

What you are trying to do is not possible with the crypt command.

You should use the crypt library call (crypt(3)).

I attached a small C-program that 'crypts' the first argument on the commandline into a format to be used in the passwd file.

Hope this helps,
Rik.

Re: Another scripting question

Lawrence Mahan — Wed, 20 Sep 2000 00:10:22 GMT

You can find expect here:

http://expect.nist.gov/

You will need to install tcl tk and expect to get expect to run.

This is the command line to use the passwd feature of expect.

/opt/expect/bin/expect /opt/expect/bin/autopasswd 'loginuser' 'password'

This will set the password for the 'loginuser' to what ever 'password' is.

This works in a shell script as this is how I stage new systems with passwords inplace.

Re: Another scripting question

Lawrence Mahan — Wed, 20 Sep 2000 00:15:40 GMT