Re: MD5 Support

[S�bastien GALLET]

Thank you very much for your councils, Andrew. I used them to develop following scripts.
If you want to add it to your faqomatic, read below

- Define a class MD5 for your config
- Add a script DEFAULT/S10 to reconfigure packet
#! /bin/sh
if ifclass MD5; then
echo "set passwd/md5 true" | $ROOTCMD debconf-communicate
echo "set passwd/shadow true" | $ROOTCMD debconf-communicate
$ROOTCMD dpkg-reconfigure -fnoninteractive passwd
fi
exit 0
- patch the DEFAULT/S20
# add second root account using tcsh
# insert encrypted root password
# { ${target}/etc/passwd
# LocateLineMatching "^root:.*"
# InsertLine "roott::0:0:root:/root:/usr/bin/tcsh"
# ReplaceAll "^root::" With "root:${rootpw}:"
# ReplaceAll "^roott::" With "roott:${rootpw}:"
# }
...
#Support of md5/shadow password
MD5::
{ ${target}/etc/passwd
LocateLineMatching "^root:.*"
InsertLine "roott:x:0:0:root:/root:/usr/bin/tcsh"
}

{ ${target}/etc/shadow
LocateLineMatching "^root:.*"
InsertLine "roott::12081:0:99999:7:::"
ReplaceAll "^root::" With "root:${rootpw}:"
ReplaceAll "^roott::" With "roott:${rootpw}:"
}


!MD5::
{ ${target}/etc/passwd
LocateLineMatching "^root:.*"
InsertLine "roott::0:0:root:/root:/usr/bin/tcsh"
ReplaceAll "^root::" With "root:${rootpw}:"
ReplaceAll "^roott::" With "roott:${rootpw}:"
}

and that's works

Andrew Pollock wrote:

On Tue, Jan 28, 2003 at 11:51:09PM +1100, [EMAIL PROTECTED] wrote:

On 28 Jan 2003 at 21:13, Andrew Pollock shaped the electrons to say...

A less kludgey method of enabling MD5 password support is:

echo "set passwd/md5 true" | chroot /tmp/target debconf-communicate
DEBIAN_FRONTEND=Noninteractive chroot /tmp/target dpkg-reconfigure passwd

Is there a FAQ for FAI? This MD5 question pops up every now and then...

Andrew

Ahh, that is truly fantastic Andrew! I've since reading your e-mail *discovered* debconf... it's incredible! I've found out about debconf-show also (to show what variables I can preconfigure for a any given package that is being installed in non-
interactive mode), which is really important for a good FAI setup.

Glad to me of help :-)

Quick question: where is the best place to set my debconf variables in relation to FAI? In /fai/scripts/S100 and then list all the packages I want to pre-configure in there or is it better to use a template(per class)? or how/where? I mean it would make more sense to set the package configs prior to installing the package, but I'm not sure if that would break something...I've noticed for example that in /fai/scripts/S20, the fai root password is being set, so this would mean it would be set prior to enabling passwd/md5 or passwd/shadow support (yes, it is also writing to /etc/passwd not /etc/shadow...) though this is easy to change or comment out.

You can always use class specific scripts to set the appropriate
variables, after the software has been installed, and reconfigure the
packages then. That's usually how I do it, or you could set them all up front I guess, earlier in the piece like you suggest.

Lastly, yes there is a FAQ for FAI at /usr/share/doc/fai/FAQ (not on the web) which is installed when you install FAI, although it is rather 'minimal' at this time. I'm sorry I had not realised this topic had been covered previously, though I did make an effort to search the mail-archives for both MD5 and md5 and only found one hit talking about something unrelated.

Hmmm, methinks a web based FAQ could be useful. I'm happy to bang up a FAQoMatic if people want to contribute items...

My apologies.

I'm going to go search this list now for experiences with debconf+FAI as it seems the way to go ;-)

You'll find a few references to it in the archives.

Thanks for the help...

No problem.

Andrew