Setting ROOTPW not properly documented in fai-guide?

2010-02-25 Diskussionsfäden Henning Sprang
Hi,

When trying to figure out hot to change the default rootpassword of
installed clients by just changing the variable "ROOTPW" in a class
.var file,
I believe that the information in the fai-guide and comments in the
configs is not helpful to get a new password.

The only things I found that worked is

* copying a password value from a real /etc/shadow file
* using mkpasswd as written in
http://www.mail-archive.com/linux-fai@uni-koeln.de/msg00210.html

Both of these ways are not documented in the FAI-guide, and the hint
on crypt or md5 in the guide/comments would lead me to use the crypt
command (in the mcrypt package) or the md5sum command - both did not
work for me.

any experiences with this, or other ways how to do that?

Henning


-- 
Henning Sprang
http://www.sprang.de


Re: Setting ROOTPW not properly documented in fai-guide?

2010-02-25 Diskussionsfäden Toomas Tamm
Hello!

I can confirm that it works at least under FAI 3.1.8 (etch). I prepare
my encrypted passwords from the plain text with

makepasswd --clearfrom $PLAINFILE --crypt-md5 --randomseed NNN | awk '{ 
print $2 }'

(NN is an integer)

and store them in a closely guarded file. During FAI installation one of
my .var scripts extracts the correct encrypted password from that file
and sets ROOTPW to the value.

The actual password setting occurs in scripts/FAIBASE/10-misc (from the
sample scripts which came with FAI) and the corresponding lines are

# set root password
echo "root:$ROOTPW" | $ROOTCMD chpasswd --encrypted

Maybe you have modified that script, or it is not run at all in your
setup?

Toomas


On Thu, 2010-02-25 at 14:28 +0100, Henning Sprang wrote:
> Hi,
> 
> When trying to figure out hot to change the default rootpassword of
> installed clients by just changing the variable "ROOTPW" in a class
> .var file,
> I believe that the information in the fai-guide and comments in the
> configs is not helpful to get a new password.
> 
> The only things I found that worked is
> 
> * copying a password value from a real /etc/shadow file
> * using mkpasswd as written in
> http://www.mail-archive.com/linux-fai@uni-koeln.de/msg00210.html
> 
> Both of these ways are not documented in the FAI-guide, and the hint
> on crypt or md5 in the guide/comments would lead me to use the crypt
> command (in the mcrypt package) or the md5sum command - both did not
> work for me.
> 
> any experiences with this, or other ways how to do that?
> 
> Henning
> 
> 


Re: Setting ROOTPW not properly documented in fai-guide?

2010-02-25 Diskussionsfäden Henning Sprang
On Thu, Feb 25, 2010 at 3:12 PM, Toomas Tamm  wrote:
> Maybe you have modified that script, or it is not run at all in your
> setup?

No - you misunderstood me a little bit :)

The question was not if/how it works with mkpasswd - I got this
working as you write it - just with less security as it's less
critical and without all those options for mkpasswd.

The question is why using mkpasswd is not documented in the fai-guide,
and if/how the things documented in the fai-guide (it says only "use
crypt/md5") can be made to work.


Henning


FAI on a thumper

2010-02-25 Diskussionsfäden Carsten Aulbert
Hi all

we are currently trying FAI 3.3.3 on a thumper (Sun Fire x4500) but right now 
it does not like it too much:

[...]
Executing: parted -s /dev/sdy unit chs print free   
 
Executing: parted -s /dev/sdz unit TiB print
 
Executing: parted -s /dev/sdz unit B print free 
 
Executing: parted -s /dev/sdz unit chs print free   
 
Executing: vgdisplay --units m -s   
 
Executing: mdadm --detail --scan --verbose -c partitions
 
INTERNAL ERROR in setup-storage:
 
Invalid device /dev/sdy1
 
Please report this error to the Debian Bug Tracking System. 

the device /dev/sdy is there (I can query it via smartctl) but sdy1 is not 
(yet) there. If I run against another disk, e.g. sdc all is fine, but this 
machine can only boot from very specific disks :(

When enabling debugging the output get *very* lengthy, but I can try to 
capture it, if people would like to see it.

Any ideas how I can proceed?

Cheers

Carsten