Re: create password in postinst

2006-02-05 Thread Anthony DeRobertis
Daniel Knabl wrote: ask the user for a password via debconf (store in $CLEARPASS) and then do HASH=`mkpasswd -S 35348090 -H md5 $CLEARPASS` and afterwards the usual sed -e s/default/$HASH/; ... No, that's not ok. First off, any funny characters in the password will cause errors. Second,

Re: create password in postinst

2006-02-05 Thread Justin Pryzby
On Sun, Feb 05, 2006 at 10:58:00AM -0500, Anthony DeRobertis wrote: Daniel Knabl wrote: ask the user for a password via debconf (store in $CLEARPASS) and then do HASH=`mkpasswd -S 35348090 -H md5 $CLEARPASS` and afterwards the usual sed -e s/default/$HASH/; ... No, that's not ok.

Re: create password in postinst

2006-02-05 Thread Max Vozeler
On Sun, Feb 05, 2006 at 11:26:08AM -0500, Justin Pryzby wrote: On Sun, Feb 05, 2006 at 10:58:00AM -0500, Anthony DeRobertis wrote: No, that's not ok. First off, any funny characters in the password will cause errors. Second, and probably more important, any user running 'ps' will be able

Re: create password in postinst

2006-01-27 Thread Nicolas François
Hello, You can look at debian/passwd.config in the passwd package for a solution written in perl. Regards, -- Nekral -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

create password in postinst

2006-01-26 Thread Daniel Knabl
Hi folks, me once again. In my postinst I need to generate a MD5 crypted password hash out of a userdefined password. Both of them have to replace the defaults in a MySQL dump file, which I tend to do the following way, unless there is a better solution: depend on mkpasswd ask the user for a

Re: create password in postinst

2006-01-26 Thread Justin Pryzby
On Thu, Jan 26, 2006 at 01:28:47PM +0100, Daniel Knabl wrote: Hi folks, me once again. In my postinst I need to generate a MD5 crypted password hash out of a userdefined password. Both of them have to replace the defaults in a MySQL dump file, which I tend to do the following way, unless

Re: create password in postinst

2006-01-26 Thread Daniel Knabl
Am Thu, 26 Jan 2006 10:41:02 -0500 schrieb Justin Pryzby [EMAIL PROTECTED]: Is this OK in the postinst, especially the dependency on mkpasswd? With the dependency, it is okay; without the dependency, you would have to be prepared for mkpasswd to be not available. (Most probably by disabling

Re: create password in postinst

2006-01-26 Thread Daniel Knabl
Hm, please don't hit me ;) Einst schrieb Frank K.[EMAIL PROTECTED]: If it is a password, it shouldn't be insecure. Even for a virtual admin. I'm working on this issue at the moment. Maybe md5sums could be useful, as Justin mentioned on [EMAIL PROTECTED] - we'll see :) * postinst is

Re: create password in postinst

2006-01-26 Thread gregor herrmann
On Thu, Jan 26, 2006 at 07:04:33PM +0100, Daniel Knabl wrote: file:///usr/share/doc/debian-policy/ policy.html/ch-maintainerscripts.html#s-mscriptsinstact Hm, I do understand that this is a very important and critical part of the policy. But, due to my non-perfect English, it's hard to get

Re: create password in postinst

2006-01-26 Thread Frank Küster
Daniel Knabl [EMAIL PROTECTED] wrote: file:///usr/share/doc/debian-policy/ policy.html/ch-maintainerscripts.html#s-mscriptsinstact Hm, I do understand that this is a very important and critical part of the policy. But, due to my non-perfect English, it's hard to get the meaning of some