Re: sync root passwords?

2002-12-16 Thread Rich Puhek
sean finney wrote: um, under whose implementation of passwd? certainly not debian's. please correct me if i'm wrong, but passwd doesn't take as an argument the new password, as it rightly shouldn't. think about what that would mean. anyone with enough sense to run top -c (or it's ps counterpar

Re: sync root passwords?

2002-12-16 Thread sean finney
On Mon, Dec 16, 2002 at 07:08:29PM -0800, Alvin Oga wrote: > > > #/bin/sh > > > > > > servers="server1 server2 server3 server4"; > > > > > > for server in $servers; do > > > ssh $server passwd root $1; > > > done; > > > > > > which would ssh into every server in the list $servers, and change

Re: sync root passwords?

2002-12-16 Thread Alvin Oga
hi ya mike On Mon, 16 Dec 2002, Mike Egglestone wrote: > Quoting Rich Puhek <[EMAIL PROTECTED]>: > > > Hopefully, you're using ssh on all your machines. If so (and if you're > > set up to use public keys for authentication, instead of passwords) you > > could do something like: > > > > #/bin

Re: sync root passwords?

2002-12-16 Thread Mike Egglestone
Quoting Rich Puhek <[EMAIL PROTECTED]>: > Hopefully, you're using ssh on all your machines. If so (and if you're > set up to use public keys for authentication, instead of passwords) you > could do something like: > > #/bin/sh > > servers="server1 server2 server3 server4"; > > for server in $

Re: sync root passwords?

2002-12-07 Thread Rogier Wolff
On Wed, Dec 04, 2002 at 04:57:27PM -0500, Andrew Perrin wrote: > You might want to reconsider the project, frankly - why not make different > root passwords for different machines? That would seem to be a more secure > alternative. You can make them systematically different to save yourself > memor

Re: sync root passwords?

2002-12-06 Thread Andrew Perrin
On Thu, 5 Dec 2002, Pigeon wrote: > On Wed, Dec 04, 2002 at 07:58:19PM -0500, Andrew Perrin wrote: > > Take the canonical, one-password case, and give me a reasonably good > > password, say one generated from the phrase "I Procrastinate On Grading > > Papers By Debating Debian!": > > > > I!engsyg

Re: sync root passwords?

2002-12-05 Thread Pigeon
On Wed, Dec 04, 2002 at 07:58:19PM -0500, Andrew Perrin wrote: > Take the canonical, one-password case, and give me a reasonably good > password, say one generated from the phrase "I Procrastinate On Grading > Papers By Debating Debian!": > > I!engsygN > > (whoever finds the phrase->password algo

Re: sync root passwords?

2002-12-05 Thread debian
> >Thanks for any suggestions! > > Most would opt for NIS / NIS+ for this. > I'd be a bit worried that I couldn't get in if the network was down, even from the machine itself. I guess my own idea has that problem though. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsu

RE: sync root passwords?

2002-12-05 Thread Jan Johansson
>Thanks for any suggestions! Most would opt for NIS / NIS+ for this. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: sync root passwords?

2002-12-04 Thread debian
> Hi, > Is there a debian package for syncing root passwords on multiple servers? > If I had a 100 debian servers, and want the root passwords all be the same, > is there a util that will sync just the root password? IMV the best way to sync root passwords is to have none. Instead

Re: sync root passwords?

2002-12-04 Thread sean finney
On Wed, Dec 04, 2002 at 08:15:24PM -0500, Andrew Perrin wrote: > > ...and you're assuming that security through obscurity is just as secure > > as a secure encryption algorithm. > > Actually, I don't think I'm making any such assumption. I'm simply > claiming that systematic difference is a harder

Re: sync root passwords?

2002-12-04 Thread Andrew Perrin
On Thu, 5 Dec 2002, Cameron Hutchison wrote: > Once upon a time Andrew Perrin said... > > No, it's not more insecure; you're assuming the hypothetical hacker knows > > that there is an algorithm, and which character(s) are filled in by it. > > ...and you're assuming that security through obscur

Re: sync root passwords?

2002-12-04 Thread Cameron Hutchison
Once upon a time Andrew Perrin said... > No, it's not more insecure; you're assuming the hypothetical hacker knows > that there is an algorithm, and which character(s) are filled in by it. ...and you're assuming that security through obscurity is just as secure as a secure encryption algorithm.

Re: sync root passwords?

2002-12-04 Thread Andrew Perrin
No, it's not more insecure; you're assuming the hypothetical hacker knows that there is an algorithm, and which character(s) are filled in by it. Take the canonical, one-password case, and give me a reasonably good password, say one generated from the phrase "I Procrastinate On Grading Papers By

Re: sync root passwords?

2002-12-04 Thread bda
My philosophy has always been to make root's password completely random for each manchine, document it somewhere secure, and then use sudo for all management requirements. However, I've never worked in a situation where there were more than two or three active system admins for the entire network

RE: sync root passwords?

2002-12-04 Thread Charlie Reiman
> Quoting Andrew Perrin <[EMAIL PROTECTED]>: > > > You might want to reconsider the project, frankly - why not > make different > > root passwords for different machines? That would seem to be a > more secure > > alternative. You can make them systematically different to save yourself > > memoriz

Re: sync root passwords?

2002-12-04 Thread sean finney
On Wed, Dec 04, 2002 at 01:15:58PM -0800, Mike Egglestone wrote: > Hi, > Is there a debian package for syncing root passwords on multiple servers? > If I had a 100 debian servers, and want the root passwords all be the same, > is there a util that will sync just the root password? if you want to d

Re: sync root passwords?

2002-12-04 Thread sean finney
On Wed, Dec 04, 2002 at 04:57:27PM -0500, Andrew Perrin wrote: > You might want to reconsider the project, frankly - why not make different > root passwords for different machines? That would seem to be a more secure > alternative. You can make them systematically different to save yourself > memor

Re: sync root passwords?

2002-12-04 Thread nate
Mike Egglestone said: > Hi, > Is there a debian package for syncing root passwords on multiple servers? > If I had a 100 debian servers, and want the root passwords all be the > same, is there a util that will sync just the root password? it may be a bit overkill for just 1 account but there is LD

RE: sync root passwords?

2002-12-04 Thread Vince Hillier
> -Original Message- > From: Mike Egglestone [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, December 04, 2002 2:02 PM > To: debian > Subject: Re: sync root passwords? > > Quoting Andrew Perrin <[EMAIL PROTECTED]>: > > > You might want to reconsider

Re: sync root passwords?

2002-12-04 Thread Kirk Strauser
At 2002-12-04T21:57:27Z, Andrew Perrin <[EMAIL PROTECTED]> writes: > You might want to reconsider the project, frankly - why not make different > root passwords for different machines? That would seem to be a more secure > alternative. You can make them systematically different to save yourself >

Re: sync root passwords?

2002-12-04 Thread Mike Egglestone
Quoting Andrew Perrin <[EMAIL PROTECTED]>: > You might want to reconsider the project, frankly - why not make different > root passwords for different machines? That would seem to be a more secure > alternative. You can make them systematically different to save yourself > memorizing them all, by

Re: sync root passwords?

2002-12-04 Thread Andrew Perrin
You might want to reconsider the project, frankly - why not make different root passwords for different machines? That would seem to be a more secure alternative. You can make them systematically different to save yourself memorizing them all, by (for example) using the second letter of the hostnam

Re: sync root passwords?

2002-12-04 Thread Mike Egglestone
Quoting Rich Puhek <[EMAIL PROTECTED]>: > Hopefully, you're using ssh on all your machines. If so (and if you're > set up to use public keys for authentication, instead of passwords) you > could do something like: > I do have one server that already uses public keys and ssh's into the servers a

Re: sync root passwords?

2002-12-04 Thread Rich Puhek
Hopefully, you're using ssh on all your machines. If so (and if you're set up to use public keys for authentication, instead of passwords) you could do something like: #/bin/sh servers="server1 server2 server3 server4"; for server in $servers; do ssh $server passwd root $1; done; which wou

sync root passwords?

2002-12-04 Thread Mike Egglestone
Hi, Is there a debian package for syncing root passwords on multiple servers? If I had a 100 debian servers, and want the root passwords all be the same, is there a util that will sync just the root password? or perhaps someone has a script they use? At first glance, its appears that I start with