Help with password 'maintenance' or maybe I just need to generate ssh keys?


 
Thread Tools Search this Thread
Top Forums UNIX for Beginners Questions & Answers Help with password 'maintenance' or maybe I just need to generate ssh keys?
# 1  
Old 02-12-2019
Help with password 'maintenance' or maybe I just need to generate ssh keys?

Hi gurus,

I am NOT the SA of the servers so very limited on what I can do. Basically the scenario is like this:

Every 6 months our password expires and we have to reset them to comply to some password rules. Thing is users, me included, tend to have plaintext copy of this difficult to remember password and copy and paste when we use PuTTY to ssh to the servers. There is about 20+ servers and we've been provided a passmass expect script to use whenever we need to do a password reset.

passmass works fine, it does the job in so far as password resetting to all servers is concern. Remembering the very difficult password however is a challenge. I use KeePass at the moment to save the password and copy and paste to PuTTY. We don't always ahve KeePass, so I want to save the password in one of the servers. I am thinking of creating a text file and openssl encrypt/decrypt and copy and paste the password every time I need to access my current password. I can't think of any other way Smilie but I am sure may be I just don't know that there is a better way out there somewhere, hence I am posting this to the forum.

Question is, does generating ssh keys and placing it in all the servers make it easier so that I don't have to supply the password when I ssh to each server? Do I have to update the ssh keys as well every so often whenever I do a password reset which means I have to manually copy it to all the 20+ servers? Or maybe there is a way that I can store the password in PuTTY?

Please advise. Thanks in advance.
# 2  
Old 02-12-2019
Just move to password-less SSH using shared crypto keys and be happy and more secure too!
# 3  
Old 02-13-2019
If you know credentials to access each server, then you should be able to create an SSH key-pair locally and put the public key on each server.

Do you know how to do this? There are various threads on this board to help you. You can probably find many by searching for passwordless


Kind regards,
Robin
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Find active SSH servers w/ ssh keys on LAN

Hi, I am trying to complete my bash script in order to find which SSH servers on LAN are still active with the ssh keys, but i am frozen at this step: #!/bin/bash # LAN SSH KEYS DISCOVERY SCRIPT </etc/passwd \ grep /bin/bash | cut -d: -f6 | sudo xargs -i -- sh -c ' && cat... (11 Replies)
Discussion started by: syrius
11 Replies

2. Shell Programming and Scripting

SFTP or scp with password in a batch script without using SSH keys and expect script

Dear All, I have a requirement where I have to SFTP or SCP a file in a batch script. Unfortunately, the destination server setup is such that it doesn't allow for shell command line login. So, I am not able to set up SSH keys. My source server is having issues with Expect. So, unable to use... (5 Replies)
Discussion started by: ss112233
5 Replies

3. Linux

Linux password aging and ssh keys

Recently I have been playing with password ageing and the usage of ssh keys. I have found that if usePAM yes (default) is set in the /etc/ssh/sshd_config file then any password ageing and inactiivity can adversely affect a client with ssh keys. For example: Set PASS_MAX_DAYS to 60 in... (5 Replies)
Discussion started by: smurphy_it
5 Replies

4. UNIX for Dummies Questions & Answers

[SSH-RSA] Still prompting for password after generating keys

Hello, I'm trying to perform these operations without entering any password, as user "fzd":fzd@machine1> scp /tmp/srcFile1 fzd@machine2:/tmp/$destFile fzd@machine1> scp fzd@machine2:/tmp/$srcFile /tmp/$destFilebut alsofzd@machine1> scp /tmp/srcFile1 machine2:/tmp/$destFile fzd@machine1> scp... (6 Replies)
Discussion started by: fzd
6 Replies

5. UNIX for Dummies Questions & Answers

SSH Keys Authentication keeps asking for password

Hi! Im trying to set access from ServerA(SunOS) to ServerB(Some custom Linux with Keyboard Interactive login) with SSH Keys. As a proof of concept I was able to do it between 2 virtual machines. Now in my real life scenario it isnt working. I created the keys in ServerA, copied them to... (7 Replies)
Discussion started by: RedSpyder
7 Replies

6. AIX

ssh keys - no password prompt from AIX to RPA

hello, i am running an AIX 5.3 machine and i want to connect via ssh to the RPA Management site without prompting for password. i already had a public key of this server as i use the same thing for ssh connection with other AIX machines. i connected to the RPA Management Site and i run the... (9 Replies)
Discussion started by: omonoiatis9
9 Replies

7. Solaris

root password for system maintenance (control-d to bypass)

I have message "root password for system maintenance (control-d to bypass)" after Solaris 10 boots up. Why it appears ? thx for help. (3 Replies)
Discussion started by: presul
3 Replies

8. Solaris

Helpme !! ssh service in maintenance mode

Hi Guys, Virtual Machine - Solaris 10 ssh service is in maintenance mode, when i tried to disable it it got disabled but when i enabling it ( svcadm enable ssh) it is coming in maintenance mode...... Pls help (10 Replies)
Discussion started by: saurabh84g
10 Replies

9. Shell Programming and Scripting

What are public keys in ssh and how do we create the public keys??

Hi All, I am having knowledge on some basics of ssh and wanted to know what are the public keys and how can we create and implement it in connecting server. Please provide the information for the above, it would be helpful for me. Thanks, Ravindra (1 Reply)
Discussion started by: ravi3cha
1 Replies

10. Red Hat

SSH Prompts for Password After Keys Setup Successfully

I setup the keys between 2 servers, but my user account has no password specified for it (never set one up on the account for security reasons). When I try to SSH to the server, SSH prompts for a password that doesn't exist (so I can never connect successfully). Note: 'passwd -d Rynok' removes... (3 Replies)
Discussion started by: Rynok
3 Replies
Login or Register to Ask a Question