|
|
Sponsored Content
Top Forums
UNIX for Beginners Questions & Answers
Help with password 'maintenance' or maybe I just need to generate ssh keys?
Post 303030506 by newbie_01 on Tuesday 12th of February 2019 05:11:31 AM
02-12-2019
Help with password 'maintenance' or maybe I just need to generate ssh keys?
Hi gurus,
I am NOT the SA of the servers so very limited on what I can do. Basically the scenario is like this:
Every 6 months our password expires and we have to reset them to comply to some password rules. Thing is users, me included, tend to have plaintext copy of this difficult to remember password and copy and paste when we use PuTTY to ssh to the servers. There is about 20+ servers and we've been provided a passmass expect script to use whenever we need to do a password reset.
passmass works fine, it does the job in so far as password resetting to all servers is concern. Remembering the very difficult password however is a challenge. I use KeePass at the moment to save the password and copy and paste to PuTTY. We don't always ahve KeePass, so I want to save the password in one of the servers. I am thinking of creating a text file and openssl encrypt/decrypt and copy and paste the password every time I need to access my current password. I can't think of any other way
but I am sure may be I just don't know that there is a better way out there somewhere, hence I am posting this to the forum.
Question is, does generating ssh keys and placing it in all the servers make it easier so that I don't have to supply the password when I ssh to each server? Do I have to update the ssh keys as well every so often whenever I do a password reset which means I have to manually copy it to all the 20+ servers? Or maybe there is a way that I can store the password in PuTTY?
Please advise. Thanks in advance.
I am NOT the SA of the servers so very limited on what I can do. Basically the scenario is like this:
Every 6 months our password expires and we have to reset them to comply to some password rules. Thing is users, me included, tend to have plaintext copy of this difficult to remember password and copy and paste when we use PuTTY to ssh to the servers. There is about 20+ servers and we've been provided a passmass expect script to use whenever we need to do a password reset.
passmass works fine, it does the job in so far as password resetting to all servers is concern. Remembering the very difficult password however is a challenge. I use KeePass at the moment to save the password and copy and paste to PuTTY. We don't always ahve KeePass, so I want to save the password in one of the servers. I am thinking of creating a text file and openssl encrypt/decrypt and copy and paste the password every time I need to access my current password. I can't think of any other way
but I am sure may be I just don't know that there is a better way out there somewhere, hence I am posting this to the forum.Question is, does generating ssh keys and placing it in all the servers make it easier so that I don't have to supply the password when I ssh to each server? Do I have to update the ssh keys as well every so often whenever I do a password reset which means I have to manually copy it to all the 20+ servers? Or maybe there is a way that I can store the password in PuTTY?
Please advise. Thanks in advance.
|
|
10 More Discussions You Might Find Interesting
1. Red Hat
I setup the keys between 2 servers, but my user account has no password specified for it (never set one up on the account for security reasons). When I try to SSH to the server, SSH prompts for a password that doesn't exist (so I can never connect successfully).
Note: 'passwd -d Rynok' removes... (3 Replies)
Discussion started by: Rynok
3 Replies
2. Shell Programming and Scripting
Hi All,
I am having knowledge on some basics of ssh and wanted to know what are the public keys and how can we create and implement it in connecting server.
Please provide the information for the above, it would be helpful for me.
Thanks,
Ravindra (1 Reply)
Discussion started by: ravi3cha
1 Replies
3. Solaris
Hi Guys,
Virtual Machine - Solaris 10 ssh service is in maintenance mode, when i tried to disable it it got disabled but when i enabling it ( svcadm enable ssh) it is coming in maintenance mode......
Pls help (10 Replies)
Discussion started by: saurabh84g
10 Replies
4. Solaris
I have message "root password for system maintenance (control-d to bypass)" after Solaris 10 boots up.
Why it appears ?
thx for help. (3 Replies)
Discussion started by: presul
3 Replies
5. AIX
hello,
i am running an AIX 5.3 machine and i want to connect via ssh to the RPA Management site without prompting for password.
i already had a public key of this server as i use the same thing for ssh connection with other AIX machines.
i connected to the RPA Management Site and i run the... (9 Replies)
Discussion started by: omonoiatis9
9 Replies
6. UNIX for Dummies Questions & Answers
Hi!
Im trying to set access from ServerA(SunOS) to ServerB(Some custom Linux with Keyboard Interactive login) with SSH Keys. As a proof of concept I was able to do it between 2 virtual machines. Now in my real life scenario it isnt working.
I created the keys in ServerA, copied them to... (7 Replies)
Discussion started by: RedSpyder
7 Replies
7. UNIX for Dummies Questions & Answers
Hello,
I'm trying to perform these operations without entering any password, as user "fzd":fzd@machine1> scp /tmp/srcFile1 fzd@machine2:/tmp/$destFile
fzd@machine1> scp fzd@machine2:/tmp/$srcFile /tmp/$destFilebut alsofzd@machine1> scp /tmp/srcFile1 machine2:/tmp/$destFile
fzd@machine1> scp... (6 Replies)
Discussion started by: fzd
6 Replies
8. Linux
Recently I have been playing with password ageing and the usage of ssh keys. I have found that if usePAM yes (default) is set in the /etc/ssh/sshd_config file then any password ageing and inactiivity can adversely affect a client with ssh keys.
For example:
Set PASS_MAX_DAYS to 60 in... (5 Replies)
Discussion started by: smurphy_it
5 Replies
9. Shell Programming and Scripting
Dear All,
I have a requirement where I have to SFTP or SCP a file in a batch script. Unfortunately, the destination server setup is such that it doesn't allow for shell command line login. So, I am not able to set up SSH keys. My source server is having issues with Expect. So, unable to use... (5 Replies)
Discussion started by: ss112233
5 Replies
10. Shell Programming and Scripting
Hi,
I am trying to complete my bash script in order to find which SSH servers on LAN are still active with the ssh keys, but i am frozen at this step:
#!/bin/bash
# LAN SSH KEYS DISCOVERY SCRIPT
</etc/passwd \
grep /bin/bash |
cut -d: -f6 |
sudo xargs -i -- sh -c '
&& cat... (11 Replies)
Discussion started by: syrius
11 Replies
LEARN ABOUT SUSE
nwvolinfo
NWVOLINFO(8) nwvolinfo NWVOLINFO(8) NAME
nwvolinfo - Diplay info on NetWare Volumes SYNOPSIS
nwvolinfo [ -h ] [ -S server ] [ -U user name ] [ -P password | -n ] [ -C ] [ -v volume ] [ -N ] DESCRIPTION
nwvolinfo displays information on a NetWare Server Volume. nwvolinfo looks up the file $HOME/.nwclient to find a file server, a user name and possibly a password. See nwclient(5) for more informa- tion. Please note that the access permissions of $HOME/.nwclient MUST be 600 for security reasons. OPTIONS
-h -h is used to print out a short help text. -S server server is the name of the server you want to use. -U user user is the user name to use for login. -P password password is the password to use for login. If neither -n nor -P are given, and the user has no open connection to the server, nwvolinfo prompts for a password. -n -n should be given if no password is required for the login. -C By default, passwords are converted to uppercase before they are sent to the server, because most servers require this. You can turn off this conversion by -C. -v volume The volume name to be used. Defaults to 'SYS'. -N Display the information in numeric-only format for use in a pipe. AUTHORS
nwvolinfo was written by Jacek Stepniewski <cunio@gazeta.pl> based on utilities by Volker Lendecke. nwvolinfo 7/9/1996 NWVOLINFO(8)