Re: Changing user credentials in Pegasus on Linux

Hi Anuj!


I have right now a feature request on the table about allowing remote 
change of a user's password. Though in this specific case invented to 
allow an update of an expired password, the same mechanism probably could 
be used. As Ashok wrote, on Linux people usually use PAM to handle their 
authentication needs.

The Bug report for this is: 
http://bugzilla.openpegasus.org/show_bug.cgi?id=9641 , planned to be 
implemented in OpenPegasus 2.13.


Kind regards
Marek Szermutzky
 
Software Engineer
IBM Systems &Technology Group, Systems Software Development / SW Linux on 
System z Development
-------------------------------------------------------------------------------------------------------------------------------------------
IBM Deutschland
Schoenaicher Str. 220
71032 Boeblingen
Phone: +49-7031-16-5182
E-Mail: [email protected]
-------------------------------------------------------------------------------------------------------------------------------------------
IBM Deutschland Research & Development GmbH / Vorsitzende des 
Aufsichtsrats: Martina Koederitz
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft: Böblingen / Registergericht: Amtsgericht Stuttgart, 
HRB 243294 



From:   Ashok K Pathak <[email protected]>
To:     Anuj Jain <[email protected]>, 
Cc:     "[email protected]" <[email protected]>
Date:   10.05.2013 11:16
Subject:        Re: Changing user credentials in Pegasus on Linux





Pegasus does  authentication/password management using system
user/passwords (PAM)

In other words,  Pegasus exploits PAM to  authentication & password
management
The PAM conf file for  Open Pegasus uses is usually
named /etc/pam.d/wbem.

For Setting up PAM authentication refer notes.txt  in folder
pegasus/src/Executor

>>>>
      First compile with PEGASUS_PAM_AUTHENTICATION.

        Next install the PAM configuration file.

            % cd $PEGASUS_ROOT
            % cp rpm/wbem /etc/pam.d
            % chmod 0644 /etc/pam.d/wbem

      To build for standalone PAM authentication, compile with these:

            PEGASUS_PAM_AUTHENTICATION
            PEGASUS_USE_PAM_STANDALONE_PROC

       To run cimserver to use PAM
            enableAuthentication=true


<<<<
Hope it helps.

Regards
Ashok



 
             Anuj Jain 
             <anujjain.work@gm 
             ail.com>                                                   To 

                                       "[email protected]" 
             05/08/2013 08:51          <[email protected]>, 
             PM                                                         cc 

 
                                                                   Subject 

                                       Changing user credentials in 
                                       Pegasus on Linux 
 
 
 
 
 
 




Hi,
I am trying to figure out the right way of changing user credentials using
Pegasus. This is on a Linux GNU x64 platform.
The user in questions is the current user logged into the cimserver. The
operation needs to modify the password of this user and the expectation is
that the new password is used not only for the cimuser but also when this
user logs in to the Linux box, say using ssh.

What would be the logical steps to implementint something like this?

Thanks a lot!
Anuj