trusted system - image deployment

[Romalfox]

All,

I have taken an golden ignite image of a trusted system 6 months ago.
I'm deploying that image now to new servers.
Due to password aging, not a single user remembers his password of the time when the image was taken, hence the current password on this "new" server.
Anyway any idea how I can reset those passwords easily without having to distribute all kind of new passwords to the users ?
1/ I know I can expire all passwords, but then still all users have to know there old passwords for the first login
2/ I can set all passwords manually, but then I have to distribute a lot of passwords ...

I'm looking for something to "blank" the password (knowing this is not perfectly safe, but the system is not in production yet), but forces the user to change it on first login.

Any clues ?

Thx,

R.

[Steven E. Protter]

Shalom,

You should be able to run a script to unlock all those accounts using the /usr/lbin/modprpw -m

command.

Your best bet is a script that sets the password empty and sets an expiration date a few days in the future.

/etc/default/security
These settings can be made to limit your exposure.

The passwd command itself has good options that work in a trusted system.

You might also consider getting around this hassle by updating your golden image.


SEP

[Romalfox]

Shalom SEP,

my exact issue is that I'm unsure on how to set an empty (or blank) password in a Trusted system.....

I've checked all modprpw options before and could not find any to solve my needs....

But maybe I did not check enough ?