[Deb-SEC]oddball ssh remote passwd question

2002-01-15 Thread David Ehle

Hello all,

This is far from as serious an issue as some of the items on the list
right now,
but I thought I'd see if anyone has some input.

I'm running some synchronized machines, and I only want users to change
passwords on the master. So, I thought of writing a script to replace
password that just uses ssh to remotely call password on the master
machine and let them change it there... 

Well, here's the rub.

if you do:
ssh [EMAIL PROTECTED] password

ssh will have you authenticate to host, and then bring up the password
change prompt
(current) UNIX password: 
on the remote machine.  

BUT when you start typing, the characters show up on screen- not hashed
or unprinted. 
What is it that is striping this functionality from passwd? 

Failing finding a way to get ssh to not express these characters, I
could swear there is a simple way of turning off echoing input to the
screen, but for the life of me I can't remember the command or variable
in bash.

Anyone feeling charitable and want to help out since my memory is
failing?

Thanks,

David.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: [Deb-SEC]oddball ssh remote passwd question

2002-01-15 Thread Tim Haynes

David Ehle [EMAIL PROTECTED] writes:

 Hello all,
 if you do:
 ssh [EMAIL PROTECTED] password

What is `password'?

 ssh will have you authenticate to host, and then bring up the password
 change prompt
 (current) UNIX password: 
 on the remote machine.  

 BUT when you start typing, the characters show up on screen- not hashed
 or unprinted. What is it that is striping this functionality from passwd?

 Failing finding a way to get ssh to not express these characters, I
 could swear there is a simple way of turning off echoing input to the
 screen, but for the life of me I can't remember the command or variable
 in bash.

ssh(1):

 | -t  Force pseudo-tty allocation.  This can be used to execute arbi
 | trary screen-based programs on a remote machine, which can be
 | very useful, e.g., when implementing menu services. Multiple
 | -t options force tty allocation, even if ssh has no local tty.

That any use?

~Tim
-- 
http://spodzone.org.uk/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: [Deb-SEC]oddball ssh remote passwd question

2002-01-15 Thread David Ehle

Tim,

Yep that does it :)  Thanks mucho!

I knew it was something VERY simple but my brain is just stir-fried
today and I couldn't think of it.

Thanks again.

David.

Tim Haynes wrote:
 
 David Ehle [EMAIL PROTECTED] writes:
 
  Hello all,
  if you do:
  ssh [EMAIL PROTECTED] password
 
 What is `password'?
 
  ssh will have you authenticate to host, and then bring up the password
  change prompt
  (current) UNIX password:
  on the remote machine.
 
  BUT when you start typing, the characters show up on screen- not hashed
  or unprinted. What is it that is striping this functionality from passwd?
 
  Failing finding a way to get ssh to not express these characters, I
  could swear there is a simple way of turning off echoing input to the
  screen, but for the life of me I can't remember the command or variable
  in bash.
 
 ssh(1):
 
  | -t  Force pseudo-tty allocation.  This can be used to execute arbi
  | trary screen-based programs on a remote machine, which can be
  | very useful, e.g., when implementing menu services. Multiple
  | -t options force tty allocation, even if ssh has no local tty.
 
 That any use?
 
 ~Tim
 --
 http://spodzone.org.uk/
 
 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




[Deb-SEC]oddball ssh remote passwd question

2002-01-15 Thread David Ehle
Hello all,

This is far from as serious an issue as some of the items on the list
right now,
but I thought I'd see if anyone has some input.

I'm running some synchronized machines, and I only want users to change
passwords on the master. So, I thought of writing a script to replace
password that just uses ssh to remotely call password on the master
machine and let them change it there... 

Well, here's the rub.

if you do:
ssh [EMAIL PROTECTED] password

ssh will have you authenticate to host, and then bring up the password
change prompt
(current) UNIX password: 
on the remote machine.  

BUT when you start typing, the characters show up on screen- not hashed
or unprinted. 
What is it that is striping this functionality from passwd? 

Failing finding a way to get ssh to not express these characters, I
could swear there is a simple way of turning off echoing input to the
screen, but for the life of me I can't remember the command or variable
in bash.

Anyone feeling charitable and want to help out since my memory is
failing?

Thanks,

David.



Re: [Deb-SEC]oddball ssh remote passwd question

2002-01-15 Thread David Ehle
Tim,

Yep that does it :)  Thanks mucho!

I knew it was something VERY simple but my brain is just stir-fried
today and I couldn't think of it.

Thanks again.

David.

Tim Haynes wrote:
 
 David Ehle [EMAIL PROTECTED] writes:
 
  Hello all,
  if you do:
  ssh [EMAIL PROTECTED] password
 
 What is `password'?
 
  ssh will have you authenticate to host, and then bring up the password
  change prompt
  (current) UNIX password:
  on the remote machine.
 
  BUT when you start typing, the characters show up on screen- not hashed
  or unprinted. What is it that is striping this functionality from passwd?
 
  Failing finding a way to get ssh to not express these characters, I
  could swear there is a simple way of turning off echoing input to the
  screen, but for the life of me I can't remember the command or variable
  in bash.
 
 ssh(1):
 
  | -t  Force pseudo-tty allocation.  This can be used to execute arbi
  | trary screen-based programs on a remote machine, which can be
  | very useful, e.g., when implementing menu services. Multiple
  | -t options force tty allocation, even if ssh has no local tty.
 
 That any use?
 
 ~Tim
 --
 http://spodzone.org.uk/
 
 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]