ReleaseEngineering/How To/Reset a Password with Puppet: Difference between revisions

no edit summary
No edit summary
Line 1: Line 1:
{{Release Engineering How To|Reset the cltbld Password with Puppet}}
{{Release Engineering How To|Reset the cltbld Password with Puppet}}
Passwords are stored in a hashed format alongside other user information. We do not put the hashes in a public location for hopefully obvious reasons - please make sure you don't do this by accident.
User passwords are stored in a hashed format alongside other user information. We do not put the hashes in a public location for hopefully obvious reasons - please make sure you don't do this by accident.


Let's say you want to update cltbld's password. First, you need to generate the new hash. You can do that by running the following:
Let's say you want to update cltbld's password. First, you need to generate the new hash. You can do that by running the following:
  makepasswd --clearfrom=- --crypt-md5
  makepasswd --clearfrom=- --crypt-md5
  # now type the password and hit ^D a couple times
  # now type the password and hit ^D a couple times
Now, copy and paste that password into /etc/puppet/manifests/build/cltbld.pp as the 'password' for the cltbld user. Do this on all active puppet masters.  '''do not check this change in!'''
Now, copy and paste that password into /etc/puppet/manifests/secrets.pp as the 'password' for the cltbld user. Do this on all active puppet masters.  '''do not check this change in!'''
 
Both the root and cltbld passwords can be updated this way.
canmove, Confirmed users
6,439

edits