From 51984ac3d3da3006809c6866fdecd4ad83610731 Mon Sep 17 00:00:00 2001 From: ivan Date: Mon, 30 Jul 2001 07:36:04 +0000 Subject: templates!!! --- httemplate/docs/passwd.html | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100755 httemplate/docs/passwd.html (limited to 'httemplate/docs/passwd.html') diff --git a/httemplate/docs/passwd.html b/httemplate/docs/passwd.html new file mode 100755 index 000000000..a8f8151e2 --- /dev/null +++ b/httemplate/docs/passwd.html @@ -0,0 +1,16 @@ + + fs_passwd + + +

fs_passwd

+You may use fs_passwd/fs_passwd as a "passwd", "chfn" and "chsh" replacement on your shell machine(s) to cause password, gecos and shell changes to update your freeside machine. This can pose a security risk if not configured correctly. Do not use this feature unless you understand what you are doing! +

Currently it is assumed that the the crypt(3) function in the C library is the same on the Freeside machine as on the target machine. + + -- cgit v1.2.1 From 12a063fdd97054b7bfd412f3e77691fe3f497bbc Mon Sep 17 00:00:00 2001 From: ivan Date: Wed, 8 Aug 2001 09:47:35 +0000 Subject: doc clarification --- httemplate/docs/passwd.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'httemplate/docs/passwd.html') diff --git a/httemplate/docs/passwd.html b/httemplate/docs/passwd.html index a8f8151e2..e5242c200 100755 --- a/httemplate/docs/passwd.html +++ b/httemplate/docs/passwd.html @@ -11,6 +11,6 @@ You may use fs_passwd/fs_passwd as a "passwd", "chfn" and "chsh" replacement on
  • Copy fs_passwd/fs_passwd to /usr/local/bin on the shell machine(s). (chown freeside, chmod 4755). You may link it to passwd, chfn and chsh as well.
  • Copy fs_passwd/fs_passwdd to /usr/local/sbin on the shell machine(s). (chown freeside, chmod 500)
  • Create /usr/local/freeside on the shell machine(s). (chown freeside, chmod 700) -
  • Run an iteration of "fs_passwd/fs_passwd_server shell.machine" as the freeside user for each shell machine (this is a daemon process). +
  • Run an iteration of "fs_passwd/fs_passwd_server user shell.machine" as the freeside user for each shell machine (this is a daemon process). user refers to the freeside user from the mapsecrets configuration file. -- cgit v1.2.1 From 2093701338cf6d4531a33466cd64ad48bbf88856 Mon Sep 17 00:00:00 2001 From: ivan Date: Tue, 5 Feb 2002 16:48:27 +0000 Subject: web-based password changer! --- httemplate/docs/passwd.html | 19 +++++++++++++------ 1 file changed, 13 insertions(+), 6 deletions(-) (limited to 'httemplate/docs/passwd.html') diff --git a/httemplate/docs/passwd.html b/httemplate/docs/passwd.html index e5242c200..c4d91480c 100755 --- a/httemplate/docs/passwd.html +++ b/httemplate/docs/passwd.html @@ -3,14 +3,21 @@

    fs_passwd

    -You may use fs_passwd/fs_passwd as a "passwd", "chfn" and "chsh" replacement on your shell machine(s) to cause password, gecos and shell changes to update your freeside machine. This can pose a security risk if not configured correctly. Do not use this feature unless you understand what you are doing! +You may use fs_passwd/fs_passwd as a "passwd", "chfn" and "chsh" replacement on your shell machine(s) to cause password, gecos and shell changes to update your freeside machine. You can also use the fs_passwd/fs_passwd.html and fs_passwd/fs_passwd.cgi to run a public password change CGI on a public web server. This can pose a security risk if not configured correctly. Do not use this feature unless you understand what you are doing!

    Currently it is assumed that the the crypt(3) function in the C library is the same on the Freeside machine as on the target machine.
      -
    • Create a freeside account on the shell machine(s). -
    • Append the identity.pub from the freeside user on your freeside machine to the authorized_keys file of the newly created freeside user on the shell machine(s). +
    • Create a freeside account on the shell or web machine(s). +
    • Setup SSH keys: +
        +
      • As the freeside user (on your freeside machine), generate an authentication key using ssh-keygen. Since this is for unattended operation, use a blank passphrase. +
      • Append the newly-created identity.pub file to ~root +/.ssh/authorized_keys on the shell or web machine(s). +
      • Some new SSH v2 implementation accept v2 style keys only. Use the -t option to ssh-keygen, and append the created id_dsa.pub or id_rsa.pub to ~root/.ssh/authorized_keys2 on the remote machine(s). +
      +
    • Copy fs_passwd/fs_passwdd to /usr/local/sbin on the shell or web machine(s). (chown freeside, chmod 500) +
    • Create /usr/local/freeside on the shell or web machine(s). (chown freeside, chmod 700) +
    • Run an iteration of "fs_passwd/fs_passwd_server user shell.machine" as the freeside user for each shell or web machine (this is a daemon process). user refers to the freeside user from the mapsecrets configuration file.
    • Copy fs_passwd/fs_passwd to /usr/local/bin on the shell machine(s). (chown freeside, chmod 4755). You may link it to passwd, chfn and chsh as well. -
    • Copy fs_passwd/fs_passwdd to /usr/local/sbin on the shell machine(s). (chown freeside, chmod 500) -
    • Create /usr/local/freeside on the shell machine(s). (chown freeside, chmod 700) -
    • Run an iteration of "fs_passwd/fs_passwd_server user shell.machine" as the freeside user for each shell machine (this is a daemon process). user refers to the freeside user from the mapsecrets configuration file. +
    • Copy fs_passwd/fs_passwd.cgi to the cgi-bin directory on your web machine(s). Use suEXEC or suidperl to run fs_passwd.cgi as the freeside user.
    -- cgit v1.2.1 From 4bbd7408eb5df140f492ab9fb225b212a6a551ba Mon Sep 17 00:00:00 2001 From: ivan Date: Tue, 26 Mar 2002 13:20:55 +0000 Subject: doc --- httemplate/docs/passwd.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'httemplate/docs/passwd.html') diff --git a/httemplate/docs/passwd.html b/httemplate/docs/passwd.html index c4d91480c..481e01896 100755 --- a/httemplate/docs/passwd.html +++ b/httemplate/docs/passwd.html @@ -16,7 +16,7 @@ You may use fs_passwd/fs_passwd as a "passwd", "chfn" and "chsh" replacement on
  • Copy fs_passwd/fs_passwdd to /usr/local/sbin on the shell or web machine(s). (chown freeside, chmod 500)
  • Create /usr/local/freeside on the shell or web machine(s). (chown freeside, chmod 700) -
  • Run an iteration of "fs_passwd/fs_passwd_server user shell.machine" as the freeside user for each shell or web machine (this is a daemon process). user refers to the freeside user from the mapsecrets configuration file. +
  • Run an iteration of "fs_passwd/fs_passwd_server user shell.machine" as the freeside user for each shell or web machine (this is a daemon process). user refers to a freeside user added by freeside-adduser.
  • Copy fs_passwd/fs_passwd to /usr/local/bin on the shell machine(s). (chown freeside, chmod 4755). You may link it to passwd, chfn and chsh as well.
  • Copy fs_passwd/fs_passwd.cgi to the cgi-bin directory on your web machine(s). Use suEXEC or suidperl to run fs_passwd.cgi as the freeside user. -- cgit v1.2.1 From 1290c097176adcd62d48b1250233d53adb4b50a5 Mon Sep 17 00:00:00 2001 From: ivan Date: Tue, 16 Apr 2002 08:52:38 +0000 Subject: move the last of the real-time exports out of svc_acct.pm and into part_export --- httemplate/docs/passwd.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'httemplate/docs/passwd.html') diff --git a/httemplate/docs/passwd.html b/httemplate/docs/passwd.html index 481e01896..fc1dde956 100755 --- a/httemplate/docs/passwd.html +++ b/httemplate/docs/passwd.html @@ -10,9 +10,9 @@ You may use fs_passwd/fs_passwd as a "passwd", "chfn" and "chsh" replacement on
  • Setup SSH keys:
    • As the freeside user (on your freeside machine), generate an authentication key using ssh-keygen. Since this is for unattended operation, use a blank passphrase. -
    • Append the newly-created identity.pub file to ~root +
    • Append the newly-created identity.pub file to ~freeside /.ssh/authorized_keys on the shell or web machine(s). -
    • Some new SSH v2 implementation accept v2 style keys only. Use the -t option to ssh-keygen, and append the created id_dsa.pub or id_rsa.pub to ~root/.ssh/authorized_keys2 on the remote machine(s). +
    • Some new SSH v2 implementation accept v2 style keys only. Use the -t option to ssh-keygen, and append the created id_dsa.pub or id_rsa.pub to ~freeside/.ssh/authorized_keys2 on the remote machine(s).
  • Copy fs_passwd/fs_passwdd to /usr/local/sbin on the shell or web machine(s). (chown freeside, chmod 500)
  • Create /usr/local/freeside on the shell or web machine(s). (chown freeside, chmod 700) -- cgit v1.2.1