Debian Developers - How to tell user default random pass for daemon?

This is Interesting: Free IT Magazines  
Home > Archive > Debian Developers > July 2005 > How to tell user default random pass for daemon?





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author How to tell user default random pass for daemon?
Olaf van der Spek

2005-07-06, 5:53 pm

Hi,

Suppose you'd like to generate a random pass by default after your
daemon is installed. How should you get that pass to the user?
Is it allowed to write it to a file in root's home dir?
John Hasler

2005-07-06, 5:53 pm

> Suppose you'd like to generate a random pass by default after your daemon
> is installed. How should you get that pass to the user? Is it allowed to
> write it to a file in root's home dir?


Chrony puts it in a file in /etc/chrony.
--
John Hasler


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Goswin von Brederlow

2005-07-06, 5:53 pm

John Hasler <jhasler@debian.org> writes:

>
> Chrony puts it in a file in /etc/chrony.


And protects it from being read by unauthorized persons.

MfG
Goswin


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
sean finney

2005-07-06, 5:53 pm

On Wed, Jul 06, 2005 at 07:07:06PM +0200, Olaf van der Spek wrote:
> Suppose you'd like to generate a random pass by default after your
> daemon is installed. How should you get that pass to the user?
> Is it allowed to write it to a file in root's home dir?


would be very wrong to write a file into root's home directory, as it
is questionably in violation of FHS/policy, and also is not guaranteed
to work (as /root may be part of a read-only filesystem according to
debian policy).

as a general rule writing out a password as part of a configuration file
in /etc (following standard policy rules) is an acceptable alternative.


sean

--

Andrew Suffield

2005-07-08, 5:54 pm

On Wed, Jul 06, 2005 at 07:07:06PM +0200, Olaf van der Spek wrote:
> Suppose you'd like to generate a random pass by default after your
> daemon is installed. How should you get that pass to the user?
> Is it allowed to write it to a file in root's home dir?


Mail it to root.

--
.''`. ** Debian GNU/Linux ** | Andrew Suffield
: :' : http://www.debian.org/ |
`. `' |
`- -><- |

sean finney

2005-07-08, 5:54 pm

On Fri, Jul 08, 2005 at 02:30:22PM +0100, Andrew Suffield wrote:
> On Wed, Jul 06, 2005 at 07:07:06PM +0200, Olaf van der Spek wrote:
>
> Mail it to root.


that's a horrible idea. root's mail often is forwarded, which then
puts the password on the wire, likely in the clear.


sean

--

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com