Shell Programming and Scripting

Hello Gurus
I have little challenge which I do not know how to address it. I have unix account on many servers (let's say over 25). These accounts expire every 60 days. Is there scripts that I can run from my "local computer" and pass a new password to it where it would change it for me on all servers?

Or maybe an application that I can use on my local machine to do that?!

Thanks.

Try building a script around "expect".

will this allow me to run unix commands from my local windows OS?

Expect is written in Perl, so yes, you should be able to run it on Windows to login to Unix machines and change the passwords.

actually expect is not written in Perl. It is Tcl based.

---------- Post updated at 17:55 ---------- Previous update was at 17:52 ----------

I would suggest you migrate to LDAP if possible. This will make your life so much easier and give you more options for managing accounts. If you don't centralize your accounts your going to have to customize a solution to update the passwords on each server. This can be done many ways but I would avoid using an expect script if possible. Most Unix variants these days have command line ways to update passwords with either clear text or encrypted passwords.

No need to use expect.

First, you need set a ssh keyless pass with root on all servers. With that, you needn't provide password to ssh to other servers.

Second, set your new password on your local server. and get the new unix keypass from /etc/shadow.

Code:

nimo:QKDPc5E$S.:12825:0:90:5:30:13096:

run the command: (sample only)

Code:

for server in `cat server_list`
do
   ssh root@$server perl -pe -i.bak 's/^nimo:$SWlkjRWexrXYgc98F/^nimo:QKDPc5E$S./' /etc/shadow
done

Please test it on one server first, then go for next servers.

if the Unix keypass includes \ or some other special chars, maybe you need add \ before them.

Thanks for all your help.