Subject: IMPORTANT: Mandatory password and ssh key change by 2011-11-30

Wolfgang S. Rupprecht wolfgang.rupprecht at gmail.com
Wed Oct 12 18:48:20 UTC 2011


Kevin Fenzi <kevin at scrye.com> writes:
> All existing users of the Fedora Account System (FAS) at 
> https://admin.fedoraproject.org/accounts are required to change their 
> password and upload a NEW ssh public key before 2011-11-30. 
> Failure to do so may result in your account being marked inactive. 
> Passwords changed and NEW ssh public keys uploaded after 2011-10-10 
> will meet this requirement. 

The system doesn't allow one to simply delete the recorded RSA key.  It
seems overkill to inactivate the account when simply deleting all old
RSA public keys is sufficient.

I do change my RSA keys once per year and never allow the private key
off the system.  It is a real pain to update all the affected systems
whenever I change keys.  I'm not going to be doing it again for 8 more
months.

-wolfgang
-- 
g+:  https://plus.google.com/114566345864337108516/posts



More information about the users mailing list