password management on multiple systems

[Gary Glick]

Howdy all,

I am needing to login to multiple servers.
I would like to utilize the same password on each of these systems. Now since there will be 45 servers, or so, when it is time to change my password I do not want to have to login to each server and change it. Any thoughts on how I can manage my passwords on these multiple servers. Several other admins will have the same problem.

The root password on all the systems will be different, I'm only refering to my own "admin" account.

These systems are not "trusted".

Thank you for you help.

Gary

[Paul F. Carlson]

Hi Gary,

We wrote a perl script that uses a combination of ssh with pre-authenticated keys, expect and the password command. The perl script reads in a list of server stored in a text file, prompts for old and new passwords, and runs the passwd command via ssh (you'll have to use the "-t" option) to change passwords on each server.

Paul

[Rick Garland]

There are multiple options available.
NIS, NIS+, LDAP
These can help with the centralization.

If you are not wanting to proceed down this path, look at using 'Expect'.

A neat language (utility) that allows for the chat capabilities. Execute the command once from your desktop system and it will contact/connect the other systems listed and go through the routine of changing passwds.

[Gary Glick]

Let's say that Ldap was a possiblity. How would I get started setting that sort of thing up?

[dirk dierickx]

http://docs.hp.com/en/internet.html#LDAP-UX%20Integration

[Muthukumar_5]

Why don't you generate same type of account in all accounts and change /etc/passwd entry? It is easy to do right.

Are you having password less remote login? Or a account with password known account then you can achive it.

--
Muthu

[Muthukumar_5]

Use like this,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=981127

--
Muthu

[Devender Khatana]

Hi,

You configure one server as NIS , NIS+ or LDAP server and then let all other servers refer this for passwords.

But this will not be possible that it will be applicable for only your one user. The same will be then the case for all users.

You can also incorporate other features also for additional advantages.

HTH,
Devender