Hello,

using sed on your /etc/shadow is a very harsh way to do it. On Red Hat
the passwd command supports the --stdin parameter which is much cleaner

echo supersecret | passwd --stdin root

Run this as a remote action and you are good.

Alternatively, you can create a dummy RPM where this is a %post action
and deploy this RPM. This should work as well and the version of that
dummy RPM will actually give you a hint on which of your rotated passwords
it is.

Kind regards,
  Steve

Am 2015-08-25 22:24, schrieb Justin Edmands:
You change the root pw on one machine, grab the /etc/shadow entry, and
sed replace the root line in the shadow file into a remote command to
whatever systems you need to change.


On Aug 25, 2015, at 4:13 PM, Franky Van Liedekerke <[email protected]> wrote:

On Tue, 25 Aug 2015 19:45:06 +0000
"Armstrong, Kenneth Lawrence (SYSADMIN)" <[email protected]>
wrote:

Is there a way to deploy a root password change to a group of servers
in Satellite 5.6?  I imagine something like this might be possible in
Satellite 6.x, but we don’t have that deployed yet.

Since spacewalk only has the root-pwd there for kickstart I don't think
that is possible. I don't know if this helps, but: loop through your
servers, do sudo and:

echo "root:newpass"|chpasswd

I know, it is not the config-method you're looking for (puppet,
ansible), but sometimes the simplest things are sufficient too ...

Franky

_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list

_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list

_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list

Reply via email to