[Puppet Users] Re: Puppet for password management

2008-10-03 Thread AJ Christensen (Fujin)
I wrote a parser func that relies on mkpasswd on the master ages ago: http://pastie.org/pastes/222996 ## mkpasswd("password", "12345678") # needs an 8-char salt *always* module Puppet::Parser::Functions newfunction(:mkpasswd, :type => :rvalue) do |args| %x{/usr/bin/mkpasswd -H MD5 #{args[0]

[Puppet Users] Re: Puppet for password management

2008-10-03 Thread Mike Pountney
On 2 Oct 2008, at 18:01, Geoff Newell wrote: > I'm working on a turnkey Linux system where the post build config is > handled with puppet. > One of the unique constraints with a turnkey system is that > passwords are essentially set at build time and then stay fixed for > the life of the p

[Puppet Users] Re: Puppet for password management

2008-10-02 Thread Marti
I've done that on openbsd systems with something like this: exec { "setpass $name": onlyif => "grep '^$name:\*' /etc/master.passwd", command => "usermod -p '$pwstring' $name", require => User[$name], } Note that the onlyif on this command is intended to set the password only on accounts th