On Mon, Nov 10, 2003 at 09:59:49PM +0000, [EMAIL PROTECTED] wrote:

> I am probably missing the obvious, but I know how to add a nessus user
> and I know how to remove a nessus user, but I'm not sure how to change
> an existing nessus user password.  Is it simply using the add user
> script and typing a new password for an existing username?

In the user's auth directory, there should be one of two files: 

   - 'password' holds the password in plaintext.
   - 'hash' holds the password encrypted using MD5 along with 
     a seed.

nessus-adduser checks whether the user already exists so that method is
out. 

If the former, then you can simply edit the file and put the new
password in there; otherwise, use md5sum or "openssl md5" to generate
the necessary contents (see how it's done in the nessus-adduser script). 


George
-- 
[EMAIL PROTECTED]

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to