Forum: Cfengine Help
Subject: Re: Cfengine Help: Updating shadow encrypted fields
Author: debheller
Link to topic: https://cfengine.com/forum/read.php?3,22441,22477#msg-22477

Neil, yes, it doesn't seem to matter if hashes are the same, or not.  

But, it is thought that it is important not to tip the hat too easily to our 
secrets.  For example, if a non-privileged user on two different hosts somehow 
observed the hash for the root user, it might give impetus to attempted 
cracking.  

I appreciate your thoughts on possible solutions.  Thanks thinking out-loud 
here, because it gives me ideas for other cfengine application.  For this 
particular exercise, I think we'll do this outside of cfengine with an expect 
script... For a one-time change, cfengine is probably not the right tool in 
this particular case.

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to