Forum: Cfengine Help
Subject: Re: Looking for some guidance with syncronizing passwords in AIX
Author: gusto
Link to topic: https://cfengine.com/forum/read.php?3,20589,20617#msg-20617

Yeah the AIX command does not let you sent in the crypted text like linux 
(chpasswd -e). But you can use the openssl block cipher for an additional 
steps. I unfortunately have just buried this to a locked area (700) which has 
been working for me. I agree with the company rules as it makes sense if you 
have n+ hosts and most places have a common local account structure its a tough 
to justify handling credentials in clear text. My accounts are mostly random 
password anyway, which lead to a central crypt repo.

The only common method I have found is the openssl but have not implemented it 
yet. I looks simple on docs but then your managing another set of keys. I 
always thought of using the PPkeys for this as it would sew up a nice password 
management solution leveraging Cfengine.

Gusto.

_______________________________________________
Help-cfengine mailing list
[email protected]
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to