Forum: Cfengine Help Subject: Re: Cfengine Help: Updating shadow encrypted fields Author: debheller Link to topic: https://cfengine.com/forum/read.php?3,22441,22477#msg-22477
Neil, yes, it doesn't seem to matter if hashes are the same, or not. But, it is thought that it is important not to tip the hat too easily to our secrets. For example, if a non-privileged user on two different hosts somehow observed the hash for the root user, it might give impetus to attempted cracking. I appreciate your thoughts on possible solutions. Thanks thinking out-loud here, because it gives me ideas for other cfengine application. For this particular exercise, I think we'll do this outside of cfengine with an expect script... For a one-time change, cfengine is probably not the right tool in this particular case. _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine