topic Re: changing passwd on remote machines using script in Operating System - HP-UX

changing passwd on remote machines using script

jagdeesh — Sat, 22 May 2004 07:11:02 GMT

Hi,
I have 180 Machines running hpux11i. I have to change the passwd for a particular user in all the systems. I can use remote shell and i want to run a script from one server for this purpose. Can any one help me how can i achieve this?

Thanks in advance.
...

Re: changing passwd on remote machines using script

John Poff — Sat, 22 May 2004 07:27:20 GMT

Hi,

One thing you could do (if you want the same password for the user on all boxes) is to change the password on one box, and then write a script to put that password entry in the /etc/passwd file for that user on all the other boxes.

JP

Re: changing passwd on remote machines using script

jagdeesh — Sat, 22 May 2004 07:41:50 GMT

You mean put the passwd in /etc/passwd passwd field on remote machines? How can we do in the scipt (edit the /etc/passwd and replace the passwd in /etc/passwd field)? any examples available...?

...

Re: changing passwd on remote machines using script

John Poff — Sat, 22 May 2004 09:10:48 GMT

This question has come up before. Take a look at these posts for some ideas:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=48946

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=214045

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=347973

JP

Re: changing passwd on remote machines using script

D Block 2 — Sat, 22 May 2004 23:03:52 GMT

my thought would be to write a shell script and update the PASSWORD entry for this user. you migh start with somethin likehs one.
echo "FULL NAME= \c"
read NAME
echo "LOGIN = \c"
read USER
echo "PASS= \c"
read PASS

GRP=users

CMD="/usr/sbin/useradd -g $GRP -c \"$NAME\" \
-d /home/equiv -s /usr/bin/true $USER"

echo $CMD

echo "run y/n ? \c"
read resp
if test "$resp" != "y"
then
echo "not running...bye"
else
eval $CMD
fi

Re: changing passwd on remote machines using script

Sridhar Bhaskarla — Sun, 23 May 2004 01:36:18 GMT

Hi Jagdeesh,

"Expect" is good if you don't have remote shell capability as well to automatically supply responses to passwd program.

If you have remote shell access to all the systems, then there is a better secured way of doing it. First, generate the encrypted password. Then change it on the remote system using the command "/usr/sam/lbin/usermod.sam -p " command.

1. Generate encrypted password. It's really easy to do it if you are willing to go with 8 char password. Use /usr/lib/makekey to generate encrypted password for you.

echo ""|/usr/lib/makekey

For ex.,

echo "Test123!xy" |/usr/lib/makekey
xyZz5eiXOP3r.

Otherwise, change the password on one system and grab the encrypted key from /etc/passwd or /tcb/auth/files/ (for trusted).

2. Place the encrypted password obtained in the above step into password field by using the command

/usr/sam/lbin/usermod.sam -p "xyZz5eiXOP3r." login_name

It works for both trusted and non-trusted sytems.

Put it in remsh for the remote systems.

Good thing about it is, though your remsh session transmits the information in clear text, your password is encrypted so it's relatively safer than using "expect".

-Sri

Re: changing passwd on remote machines using script

Tim Howell — Mon, 24 May 2004 09:52:45 GMT

what about NIS / NIS+ ...is this available for HP-UX?

Re: changing passwd on remote machines using script

Bill Hassell — Mon, 24 May 2004 13:17:43 GMT

It's actually quite simple. Make the change for this user on one machine. Capture the encrypted password from the /etc/passwd file or the /tcb directory. Then from a list of all the machines, use remsh (I prefer rexec for security reasons) to run the command:

rexec $REMOTE_SYSTEM /usr/sam/lbin/usermod.sam -p $NEWPASS SomeUserName

wher $NEWPASS is a copy of the encrypted password. If this is a temporary password, you can then run:

rexec $REMOTE_SYSTEM passwd -f SomeUserName