Re: Changing user credentials in Pegasus on Linux

Anuj Jain <[email protected]> Mon, 13 May 2013 11:27:54 -0400
Newsgroups gmane.network.open-pegasus.general
Message-ID <CAP1zRLdAQ7WYSjyx=ZKTAeX2g+XqrQ732byrocpmkbDS52DXqQ@mail.gmail.com>
Thank you Ashok/Marek,
This gives me good information. I might have to get back to you folks with
more questions.
Anuj


On Mon, May 13, 2013 at 11:13 AM, Marek Szermutzky
<[email protected]>wrote:

> Hi Anuj!
>
>
> I have right now a feature request on the table about allowing remote
> change of a user's password. Though in this specific case invented to allow
> an update of an expired password, the same mechanism probably could be
> used. As Ashok wrote, on Linux people usually use PAM to handle their
> authentication needs.
>
> The Bug report for this is:
> http://bugzilla.openpegasus.org/show_bug.cgi?id=9641 , planned to be
> implemented in OpenPegasus 2.13.
>
>
> Kind regards
> Marek Szermutzky
>
> Software Engineer
> IBM Systems &Technology Group, Systems Software Development / SW Linux on
> System z Development
>
> -------------------------------------------------------------------------------------------------------------------------------------------
> IBM Deutschland
> Schoenaicher Str. 220
> 71032 Boeblingen
> Phone: +49-7031-16-5182
> E-Mail: [email protected]
>
> -------------------------------------------------------------------------------------------------------------------------------------------
> IBM Deutschland Research & Development GmbH / Vorsitzende des
> Aufsichtsrats: Martina Koederitz
> Geschäftsführung: Dirk Wittkopp
> Sitz der Gesellschaft: Böblingen / Registergericht: Amtsgericht Stuttgart,
> HRB 243294
>
>
>
> From:        Ashok K Pathak <[email protected]>
> To:        Anuj Jain <[email protected]>,
> Cc:        "[email protected]" <[email protected]>
> Date:        10.05.2013 11:16
> Subject:        Re: Changing user credentials in Pegasus on Linux
> ------------------------------
>
>
>
>
>
> Pegasus does  authentication/password management using system
> user/passwords (PAM)
>
> In other words,  Pegasus exploits PAM to  authentication & password
> management
> The PAM conf file for  Open Pegasus uses is usually
> named /etc/pam.d/wbem.
>
> For Setting up PAM authentication refer notes.txt  in folder
> pegasus/src/Executor
>
> >>>>
>      First compile with PEGASUS_PAM_AUTHENTICATION.
>
>        Next install the PAM configuration file.
>
>            % cd $PEGASUS_ROOT
>            % cp rpm/wbem /etc/pam.d
>            % chmod 0644 /etc/pam.d/wbem
>
>      To build for standalone PAM authentication, compile with these:
>
>            PEGASUS_PAM_AUTHENTICATION
>            PEGASUS_USE_PAM_STANDALONE_PROC
>
>       To run cimserver to use PAM
>            enableAuthentication=true
>
>
> <<<<
> Hope it helps.
>
> Regards
> Ashok
>
>
>
>
>             Anuj Jain
>             <anujjain.work@gm
>             ail.com>                                                   To
>                                       "[email protected]"
>             05/08/2013 08:51          <[email protected]>,
>             PM                                                         cc
>
>                                                                   Subject
>                                       Changing user credentials in
>                                       Pegasus on Linux
>
>
>
>
>
>
>
>
>
>
> Hi,
> I am trying to figure out the right way of changing user credentials using
> Pegasus. This is on a Linux GNU x64 platform.
> The user in questions is the current user logged into the cimserver. The
> operation needs to modify the password of this user and the expectation is
> that the new password is used not only for the cimuser but also when this
> user logs in to the Linux box, say using ssh.
>
> What would be the logical steps to implementint something like this?
>
> Thanks a lot!
> Anuj
>
>
>
>