Issue #1025 has been updated by Nigel Kersten.

Status changed from Accepted to Closed
Assignee changed from Jeff McCune to Nigel Kersten

This was resolved quite a while ago when we moved to supplying the whole hash 
in the password field.
----------------------------------------
Feature #1025: Directory Service Provider: Password Setting is Looping
https://projects.puppetlabs.com/issues/1025

Author: Jeff McCune
Status: Closed
Priority: Normal
Assignee: Nigel Kersten
Category: Darwin
Target version: unplanned
Patch: None
Affected Puppet version: 0.25.4
Keywords: 
Branch: 


The directory service provider currently cannot properly check if a password is 
set for a local account.

I'd like to add a number enhancements related to user passwords:

 - Use the dirt system command to check the cleartext password.
 - Make sure dirt does not have the cleartext passphrase in the process table.  
We might leverage ruby's expect module and popen3, though finding out the exit 
status of the process is not clear to me using this method.
 - Check and set the shadow hash directly.
 - Mac OS X defaults to Salted SHA passwords in /var/db/shadow/hash files named 
after the GUID.
 - We might simply embed {SSHA}XXXXXXXXX...X strings directly into a 
[[DirectoryService]] attribute of the user account.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to