|
|
Sponsored Content
Top Forums
UNIX for Beginners Questions & Answers
Help with password 'maintenance' or maybe I just need to generate ssh keys?
Post 303030506 by newbie_01 on Tuesday 12th of February 2019 05:11:31 AM
02-12-2019
Help with password 'maintenance' or maybe I just need to generate ssh keys?
Hi gurus,
I am NOT the SA of the servers so very limited on what I can do. Basically the scenario is like this:
Every 6 months our password expires and we have to reset them to comply to some password rules. Thing is users, me included, tend to have plaintext copy of this difficult to remember password and copy and paste when we use PuTTY to ssh to the servers. There is about 20+ servers and we've been provided a passmass expect script to use whenever we need to do a password reset.
passmass works fine, it does the job in so far as password resetting to all servers is concern. Remembering the very difficult password however is a challenge. I use KeePass at the moment to save the password and copy and paste to PuTTY. We don't always ahve KeePass, so I want to save the password in one of the servers. I am thinking of creating a text file and openssl encrypt/decrypt and copy and paste the password every time I need to access my current password. I can't think of any other way
but I am sure may be I just don't know that there is a better way out there somewhere, hence I am posting this to the forum.
Question is, does generating ssh keys and placing it in all the servers make it easier so that I don't have to supply the password when I ssh to each server? Do I have to update the ssh keys as well every so often whenever I do a password reset which means I have to manually copy it to all the 20+ servers? Or maybe there is a way that I can store the password in PuTTY?
Please advise. Thanks in advance.
I am NOT the SA of the servers so very limited on what I can do. Basically the scenario is like this:
Every 6 months our password expires and we have to reset them to comply to some password rules. Thing is users, me included, tend to have plaintext copy of this difficult to remember password and copy and paste when we use PuTTY to ssh to the servers. There is about 20+ servers and we've been provided a passmass expect script to use whenever we need to do a password reset.
passmass works fine, it does the job in so far as password resetting to all servers is concern. Remembering the very difficult password however is a challenge. I use KeePass at the moment to save the password and copy and paste to PuTTY. We don't always ahve KeePass, so I want to save the password in one of the servers. I am thinking of creating a text file and openssl encrypt/decrypt and copy and paste the password every time I need to access my current password. I can't think of any other way
but I am sure may be I just don't know that there is a better way out there somewhere, hence I am posting this to the forum.Question is, does generating ssh keys and placing it in all the servers make it easier so that I don't have to supply the password when I ssh to each server? Do I have to update the ssh keys as well every so often whenever I do a password reset which means I have to manually copy it to all the 20+ servers? Or maybe there is a way that I can store the password in PuTTY?
Please advise. Thanks in advance.
|
|
10 More Discussions You Might Find Interesting
1. Red Hat
I setup the keys between 2 servers, but my user account has no password specified for it (never set one up on the account for security reasons). When I try to SSH to the server, SSH prompts for a password that doesn't exist (so I can never connect successfully).
Note: 'passwd -d Rynok' removes... (3 Replies)
Discussion started by: Rynok
3 Replies
2. Shell Programming and Scripting
Hi All,
I am having knowledge on some basics of ssh and wanted to know what are the public keys and how can we create and implement it in connecting server.
Please provide the information for the above, it would be helpful for me.
Thanks,
Ravindra (1 Reply)
Discussion started by: ravi3cha
1 Replies
3. Solaris
Hi Guys,
Virtual Machine - Solaris 10 ssh service is in maintenance mode, when i tried to disable it it got disabled but when i enabling it ( svcadm enable ssh) it is coming in maintenance mode......
Pls help (10 Replies)
Discussion started by: saurabh84g
10 Replies
4. Solaris
I have message "root password for system maintenance (control-d to bypass)" after Solaris 10 boots up.
Why it appears ?
thx for help. (3 Replies)
Discussion started by: presul
3 Replies
5. AIX
hello,
i am running an AIX 5.3 machine and i want to connect via ssh to the RPA Management site without prompting for password.
i already had a public key of this server as i use the same thing for ssh connection with other AIX machines.
i connected to the RPA Management Site and i run the... (9 Replies)
Discussion started by: omonoiatis9
9 Replies
6. UNIX for Dummies Questions & Answers
Hi!
Im trying to set access from ServerA(SunOS) to ServerB(Some custom Linux with Keyboard Interactive login) with SSH Keys. As a proof of concept I was able to do it between 2 virtual machines. Now in my real life scenario it isnt working.
I created the keys in ServerA, copied them to... (7 Replies)
Discussion started by: RedSpyder
7 Replies
7. UNIX for Dummies Questions & Answers
Hello,
I'm trying to perform these operations without entering any password, as user "fzd":fzd@machine1> scp /tmp/srcFile1 fzd@machine2:/tmp/$destFile
fzd@machine1> scp fzd@machine2:/tmp/$srcFile /tmp/$destFilebut alsofzd@machine1> scp /tmp/srcFile1 machine2:/tmp/$destFile
fzd@machine1> scp... (6 Replies)
Discussion started by: fzd
6 Replies
8. Linux
Recently I have been playing with password ageing and the usage of ssh keys. I have found that if usePAM yes (default) is set in the /etc/ssh/sshd_config file then any password ageing and inactiivity can adversely affect a client with ssh keys.
For example:
Set PASS_MAX_DAYS to 60 in... (5 Replies)
Discussion started by: smurphy_it
5 Replies
9. Shell Programming and Scripting
Dear All,
I have a requirement where I have to SFTP or SCP a file in a batch script. Unfortunately, the destination server setup is such that it doesn't allow for shell command line login. So, I am not able to set up SSH keys. My source server is having issues with Expect. So, unable to use... (5 Replies)
Discussion started by: ss112233
5 Replies
10. Shell Programming and Scripting
Hi,
I am trying to complete my bash script in order to find which SSH servers on LAN are still active with the ssh keys, but i am frozen at this step:
#!/bin/bash
# LAN SSH KEYS DISCOVERY SCRIPT
</etc/passwd \
grep /bin/bash |
cut -d: -f6 |
sudo xargs -i -- sh -c '
&& cat... (11 Replies)
Discussion started by: syrius
11 Replies
LEARN ABOUT SUSE
gpasswd
gpasswd(1) General Commands Manual gpasswd(1) NAME
gpasswd - change group password SYNOPSIS
gpasswd [-r|-l|-u] [group] DESCRIPTION
gpasswd changes passwords for group accounts. Only an administrator may change the password for any group. The used hash algorithmus is defined by the value of GROUP_CRYPT or, if not specified, CRYPT from /etc/default/passwd. If not configured, the traditinal des algorith- mus is used. OPTIONS
-r Remove group password. -l A system administrator can lock the password of the specified group. -u A system administrator can unlock the password of the specified group, if the group is not passwordless afterwards (it will not unlock a group that has only "!" as a password). FILES
/etc/group - group account information /etc/default/passwd - default values for password hash SEE ALSO
group(5), groupadd(8), groupdel(8), groupmod(8) AUTHOR
Thorsten Kukuk <kukuk@suse.de> pwdutils July 2006 gpasswd(1)