What does the default_password_crypted field do?

[Joe Linoff]

Hi Folks:

I recently decided to change the cobbler password and found that the
comment from "cobbler check" didn't really help. The comment said:

2 : The default password used by the sample templates for newly
installed machines     
      (default_password_crypted in /etc/cobbler/settings) is still set
to 'cobbler' 
      and should be changed, try:
      "openssl passwd -1 -salt 'random-phrase-here'
'your-password-here'" to generate new one

So I ran:

% openssl passwd -1 'testit'
   <value>

and cut-n-pasted the <value> to the "default_password_crypted:" field in
/etc/cobbler/settings and updated everything:

% service cobblerd restart
   % cobbler sync

Unfortunately this didn't fix anything and I still couldn't log into the
web interface with the new password. Note that I also tried using a salt
but that didn't help either. I chose no salt for my initial test because
the default entry did not use a salt.

I finally got it to work using htdigest as follows:

% htdigest /etc/cobbler/users.digest "Cobbler" cobbler
   New password: testit
   Re-type new password: testit

% htdigest /etc/cobbler/users.digest "Cobbler" jlinoff
   Adding user jlinoff in realm Cobbler
   New password: testit1
   Re-type new password: testit1

What does the default_password_crypted field do?

Best regards,

Joe

[Dylan Swift]

Hi Joe,

On 27 January 2011 02:28, Joe Linoff  wrote:
> Hi Folks:
>
> I recently decided to change the cobbler password and found that the
> comment from "cobbler check" didn't really help. The comment said:
>
> 2 : The default password used by the sample templates for newly
> installed machines
>      (default_password_crypted in /etc/cobbler/settings) is still set
> to 'cobbler'
>      and should be changed, try:
>      "openssl passwd -1 -salt 'random-phrase-here'
> 'your-password-here'" to generate new one
>
> So I ran:
>
> % openssl passwd -1 'testit'
>
>   <value>
>
> and cut-n-pasted the <value> to the "default_password_crypted:" field in
> /etc/cobbler/settings and updated everything:
>
> % service cobblerd restart
>   % cobbler sync
>
> Unfortunately this didn't fix anything and I still couldn't log into the
> web interface with the new password. Note that I also tried using a salt
> but that didn't help either. I chose no salt for my initial test because
> the default entry did not use a salt.
>
> I finally got it to work using htdigest as follows:
>
> % htdigest /etc/cobbler/users.digest "Cobbler" cobbler
>   New password: testit
>   Re-type new password: testit
>
> % htdigest /etc/cobbler/users.digest "Cobbler" jlinoff
>   Adding user jlinoff in realm Cobbler
>   New password: testit1
>   Re-type new password: testit1
>
> What does the default_password_crypted field do?
>
> Best regards,
>
> Joe
>
> cobbler mailing list
> [e-mail]
> https://fedorahosted.org/mailman/listinfo/cobbler

the default_password_crypted field is used as the root password on any newly
provisioned machines where the root password is defined in the kickstart
file using this example from the file /var/lib/cobbler/kickstarts/basic.ks:

#Root password
rootpw --iscrypted $default_password_crypted

The value you set using htdigest is the password for the web interface for
the users cobbler & jlinoff

HTH

Dylan

[Joe Linoff]

Hi Dylan:
> the default_password_crypted field is used as the root password on any 
> newly provisioned machines where the root password is defined in the 
> kickstart file using this example from the file 
> /var/lib/cobbler/kickstarts/basic.ks:

Thank you. That clears up my confusion.

Best regards,

Joe

From: [e-mail] [mailto:[e-mail]] On Behalf Of Dylan Swift
Sent: Thursday, January 27, 2011 2:53 AM
To: cobbler mailing list
Subject: Re: What does the default_password_crypted field do?

Hi Joe,

On 27 January 2011 02:28, Joe Linoff  wrote:
Hi Folks:

I recently decided to change the cobbler password and found that the
comment from "cobbler check" didn't really help. The comment said:

2 : The default password used by the sample templates for newly
installed machines
     (default_password_crypted in /etc/cobbler/settings) is still set
to 'cobbler'
     and should be changed, try:
     "openssl passwd -1 -salt 'random-phrase-here'
'your-password-here'" to generate new one

So I ran:

% openssl passwd -1 'testit'
  <value>

and cut-n-pasted the <value> to the "default_password_crypted:" field in
/etc/cobbler/settings and updated everything:

% service cobblerd restart
  % cobbler sync

Unfortunately this didn't fix anything and I still couldn't log into the
web interface with the new password. Note that I also tried using a salt
but that didn't help either. I chose no salt for my initial test because
the default entry did not use a salt.

I finally got it to work using htdigest as follows:

% htdigest /etc/cobbler/users.digest "Cobbler" cobbler
  New password: testit
  Re-type new password: testit

% htdigest /etc/cobbler/users.digest "Cobbler" jlinoff
  Adding user jlinoff in realm Cobbler
  New password: testit1
  Re-type new password: testit1

What does the default_password_crypted field do?

Best regards,

Joe

_______________________________________________
cobbler mailing list
[e-mail]
https://fedorahosted.org/mailman/listinfo/cobbler

the default_password_crypted field is used as the root password on any newly provisioned machines where the root password is defined in the kickstart file using this example from the file /var/lib/cobbler/kickstarts/basic.ks:

#Root password
rootpw --iscrypted $default_password_crypted

The value you set using htdigest is the password for the web interface for the users cobbler & jlinoff

HTH

Dylan