On Tue, Aug 31, 2004 at 11:21:56AM -0500, [EMAIL PROTECTED] wrote:

> Is there a way to change the password for a user?

Not really - passwords are stored in a file within the user's auth
directory within the Nessus user base.  The file is named 'hash' if
it's stored as an MD5 hash or 'password' if it's plaintext.

> I would like to set it
> up so people can manage their own passwords.

It would be fairly straightforward to write a script to do this provided
all your users have shell access on the Nessus server.  Look at
nessus-adduser to see how it's done when saving the password initially. 

Alternatively, have you considered setting users up to authenticate with
certificates? This would enable them to change their passwords (pass
phrases) by themselves using OpenSSL on whichever platform it's
available (eg, *nix, MacOS, Windows). 

George
-- 
[EMAIL PROTECTED]

Attachment: pgp24bQMCrF4C.pgp
Description: PGP signature

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to