wrapper for kpasswd
Changing the Kerberos password using a web browser is sort of
uncomfortable. The following script uses kdialog boxes and could be
executed via ALT-F2 or via a .desktop file. It works for me. To be
useable in GNOME as well, xdialog would be better though but IIRC it
looks ugly.
---
#!/bin/bash
#
#/usr/local/bin/kpwd
#
# change Kerberos-Password
read_old_pw() {
PASSold=$(kdialog --password Please enter your current password:);
if [ $? != 0 ]; then
kdialog --error 'Cancelled. Password wasn't changed.'
exit 1
fi
}
read_new_pw() {
PASSnew=$(kdialog --password Please enter the new password:);
PASSnew2=$(kdialog --password Please enter the new password again:);
if [ $PASSnew != $PASSnew2 ]; then
kdialog --sorry 'The entries didn't match. Please try again.'
else
NEW=true
fi
}
read_old_pw
NEW=false
while [ $NEW = false ];
do
read_new_pw
done
if kpasswd EOF
$PASSold
$PASSnew
$PASSnew
EOF
then
kdialog --msgbox 'The password was changed successfully.'
else
kdialog --sorry 'The current password was incorrect. \n Please start
again.'
fi
--
Wolfgang
signature.asc
Description: Digital signature
Re: wrapper for kpasswd
[Wolfgang Schweer] Changing the Kerberos password using a web browser is sort of uncomfortable. Yes, but required to get the Samba and LDAP password updated at the same time. :( If we want to properly handle Samba and LDAP access, we need to keep these in sync. Since yesterday (thanks to #656309), if you only want to change the Kerberos password, you can use 'passwd', the KDE control panel (password user account or something like that), or any other program using PAM. I am wondering if we should disable the PAM option and tell everyone to use the web page, to make sure Samba and LDAP access keep working without confusing users and admins, but am not sure. In Wheezy, the kerberos server get hooks that can be used when changing passwords, allowing the Kerberos server to update the Samba and LDAP password. But until then, we are out of luck. See #588968 for the details. The following script uses kdialog boxes and could be executed via ALT-F2 or via a .desktop file. It works for me. To be useable in GNOME as well, xdialog would be better though but IIRC it looks ugly. It seem redundant to the passwd and KDE control panel options. Any particular reason why you want a third option? -- Happy hacking Petter Reinholdtsen -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120120173655.gk...@login2.uio.no
debian-edu-config_1.448~svn75608_i386.changes ACCEPTED
Accepted: debian-edu-config-gosa-netgroups_1.448~svn75608_all.deb to pool/local/d/debian-edu-config/debian-edu-config-gosa-netgroups_1.448~svn75608_all.deb debian-edu-config_1.448~svn75608.dsc to pool/local/d/debian-edu-config/debian-edu-config_1.448~svn75608.dsc debian-edu-config_1.448~svn75608.tar.gz to pool/local/d/debian-edu-config/debian-edu-config_1.448~svn75608.tar.gz debian-edu-config_1.448~svn75608_all.deb to pool/local/d/debian-edu-config/debian-edu-config_1.448~svn75608_all.deb Override entries for your package: debian-edu-config-gosa-netgroups_1.448~svn75608_all.deb - extra local/misc debian-edu-config_1.448~svn75608.dsc - extra local/misc debian-edu-config_1.448~svn75608_all.deb - extra local/misc Announcing to comm...@skolelinux.org Thank you for your contribution to Debian-Edu/Skolelinux archive. -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1roikx-0004l7...@administrator.skolelinux.no
debian-edu-config_1.448~svn75616_i386.changes ACCEPTED
Accepted: debian-edu-config-gosa-netgroups_1.448~svn75616_all.deb to pool/local/d/debian-edu-config/debian-edu-config-gosa-netgroups_1.448~svn75616_all.deb debian-edu-config_1.448~svn75616.dsc to pool/local/d/debian-edu-config/debian-edu-config_1.448~svn75616.dsc debian-edu-config_1.448~svn75616.tar.gz to pool/local/d/debian-edu-config/debian-edu-config_1.448~svn75616.tar.gz debian-edu-config_1.448~svn75616_all.deb to pool/local/d/debian-edu-config/debian-edu-config_1.448~svn75616_all.deb Override entries for your package: debian-edu-config-gosa-netgroups_1.448~svn75616_all.deb - extra local/misc debian-edu-config_1.448~svn75616.dsc - extra local/misc debian-edu-config_1.448~svn75616_all.deb - extra local/misc Announcing to comm...@skolelinux.org Thank you for your contribution to Debian-Edu/Skolelinux archive. -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1roka1-0006vn...@administrator.skolelinux.no
Re: wrapper for kpasswd
On Fr, 20 Jan 2012, Petter Reinholdtsen wrote: [Wolfgang Schweer] Changing the Kerberos password using a web browser is sort of uncomfortable. Yes, but required to get the Samba and LDAP password updated at the same time. :( If we want to properly handle Samba and LDAP access, we need to keep these in sync. Since yesterday (thanks to #656309), if you only want to change the Kerberos password, you can use 'passwd', the KDE control panel (password user account or something like that), or any other program using PAM. Thanks, I wasn't aware of #656309 I am wondering if we should disable the PAM option and tell everyone to use the web page, to make sure Samba and LDAP access keep working without confusing users and admins, but am not sure. Well, it couldn't be more confusing than atm. No simple way to explain yet given all the other changes since Lenny. The following script uses kdialog boxes and could be executed via ALT-F2 or via a .desktop file. It works for me. To be useable in GNOME as well, xdialog would be better though but IIRC it looks ugly. It seem redundant to the passwd and KDE control panel options. Any particular reason why you want a third option? No longer. Wolfgang signature.asc Description: Digital signature
