Helpdesk password resets

[Rick Krul]

I need to be able to allow a helpdesk person/function be able reset users' passwords. A previous thread mentioned xenmenu. Can someone lend an assist as to what this is and how to implement on HPUX11.11 (rp4440). Alternately, I have tried to get Webmin to upgrade on this same system. I believe the Usermin piece of Webmin 1.380 has the password reset function. I have upgraded the HPUX Web Server suite to v2.18, but the Webmin version there is still old, 1.070.10. The Webmin website latest is the 1.380. When I try to upgrade Webmin on the server suite, I get a Perl error:

No package signature verification done.

Running setup.sh script to upgrade Webmin .. Please wait a minute until it is complete before continuing.


HTTP/1.0 500 Perl execution failed
Server: MiniServ/0.01
Date: Fri, 16 Nov 2007 17:31:53 GMT
Content-type: text/html
Connection: close

Error - Perl execution failed
Undefined subroutine &proc::safe_process_exec called at /opt/hpws/webmin/webmin/upgrade.cgi line 342.

I have upgrade Perl to Perl5 D.5.8.0.E Perl for HP-UX
Perl5-32 D.5.8.7.A 32-bit 5.8.7 Perl Programming Language wi
th Extensions
Perl5-64 D.5.8.7.A 64-bit 5.8.7 Perl Programming Language wi
th Extensions

Can anyone lend an assist to either the xenmenu solution or webmin or something else? I would prefer a browser based front end so helpdesk could just enter the userid and the newpassword. I am open to suggestions.

Thank you,
Rick

[Victor BERRIDGE]

Greetings,

Truly I would use restricted sam for such purpose "to allow a helpdesk person/function be able reset users' passwords"
For that use sam -r and grant that user the privilege...

All the best
Victor

[Court Campbell]

I would do as Victor suggested or install and setup sudo.

[Rita C Workman · Accepted solution]

Go with Victor's suggestion. We did similar and wrote a script to bring up a screen so they would just run these things. Here's a copy:

#!/usr/bin/sh
#
#
#
trap '' INT
function cont
{
print -n "Do You Wish to Continue Y/N : "
read answ
if [[ $answ = [Yy] ]]
then
return 0
else
return 1
fi
}
while true
do
clear
print -n "
* HELP DESK MENU *
$(uname -n)
HELLO: $(whoami)
===================================================
1. Run Restricted SAM to reset passwords.

2. Display printer status / print jobs.

3. Cancel a print job.

4. Cancel ALL print jobs for a printer.

5. EXIT this program and RETURN TO COMMAND LINE.
===================================================

Select an Option # from above: "

read answer
case "$answer" in
5*|Qq|bye|Ee ) print "Quitting! See You Later, $(whoami)" ; exit ;;
1) if cont
then
. /usr/sbin/sam
fi;;
2) if (( $? == 0 ))
then
print -n "Enter Printer Name: "
read prtr
lpstat $prtr
print -n "OK to clear screen [Hit Any Key]"
read h
fi;;
3) if (( $? == 0 ))
then
print -n "Enter Printer Name-job#: "
read prtr
cancel $prtr
fi;;
4) if (( $? == 0 ))
then
print -n "..Enter printer name :"
read prtr_name
print -n "You enter printer ${prtr_name}"
print -n " Is this correct Y/N "
read answ
if [[ "$answ" = [Yy] ]]
then
lpstat $prtr_name | grep $prtr_name | sort -k1 | cut -d " " -f1 > $prtr_name.out
for rem_prt in `cat $prtr_name.out`
do
cancel $rem_prt
done
else
echo "No Such Printer"
fi



fi;;
esac
done

We set their .profile to exec the script (hs) when they logged in and to automatically log them off when they quit.

Add
exec /path/

at end of .profile add:

exit

Hope this helps, it's old and was written in my very early learning how to right scripts days...
Rgrds,
Rita

[Rick Krul]

Victor,
Can that be presented to the helpdesk via browser? I don't want the helpdesk to require either a Reflections client (x-window or xterm) to have to use the sam -r function. That is why I was trying to get Webmin on HP upgraded. I am not familiar with xenmenu. I have installed sudo on my test server as well, but current Webmin only allows for shell commands. It does not have the Usermin built into the versions HP has included in their Web Server suite.

Thank you for responding,
Rick

[Rick Krul]

Rita,
I am new to scripting, wish I had 'old' scripting days under the belt. Will give your suggestion serious consideration. Thank you for including your script. I hope it works for me, otherwise I will be doing all of the unlocks/resets myself. Sleep is overrated....

Thanks again,
Rick

[Court Campbell]

Rick,

you don't need reflections. Just download putty on the helpdesk machines. Next create and save a session to the server. Then create a link on their desktop to the putty binary. Edit the link target to be something like this:

C:\BIN\putty.exe -load "server_name"

when they double click the link it will connect to the server. You can then do some scripting like that above.

[Victor BERRIDGE]

If its a browser you want to use there is still a product you can consider:
http://www.attachmate.com/en-US/Products/Host+Connectivity/Terminal+Emulation/Reflection/rweb/rweb.htm

But as mentionned above there is no need of X to use sam, a terminal emulation is enough ( as putty.exe) but that is not a very attractive GUI...


All the best
Victor

[Rita C Workman]

Rick,

Thanks.....enjoy the script !

Rgrds,
Rita