What does the default_password_crypted field do?

[Joe Linoff]

Hi Folks:

I recently decided to change the cobbler password and found that the
comment from "cobbler check" didn't really help. The comment said: 

  2 : The default password used by the sample templates for newly
installed machines     
      (default_password_crypted in /etc/cobbler/settings) is still set
to 'cobbler' 
      and should be changed, try:
      "openssl passwd -1 -salt 'random-phrase-here'
'your-password-here'" to generate new one

So I ran:

   % openssl passwd -1 'testit'
   <value>

and cut-n-pasted the <value> to the "default_password_crypted:" field in
/etc/cobbler/settings and updated everything:

   % service cobblerd restart
   % cobbler sync

Unfortunately this didn't fix anything and I still couldn't log into the
web interface with the new password. Note that I also tried using a salt
but that didn't help either. I chose no salt for my initial test because
the default entry did not use a salt.

I finally got it to work using htdigest as follows:

   % htdigest /etc/cobbler/users.digest "Cobbler" cobbler
   New password: testit
   Re-type new password: testit

   % htdigest /etc/cobbler/users.digest "Cobbler" jlinoff
   Adding user jlinoff in realm Cobbler
   New password: testit1
   Re-type new password: testit1

What does the default_password_crypted field do?

Best regards,

Joe

[Dylan Swift]

Hi Joe,


On 27 January 2011 02:28, Joe Linoff <jlinoff(a)tabula.com&gt; wrote:

>  Hi Folks:
>
>  I recently decided to change the cobbler password and found that the
>  comment from "cobbler check" didn't really help. The comment said:
>
>   2 : The default password used by the sample templates for newly
>  installed machines
>       (default_password_crypted in /etc/cobbler/settings) is still set
>  to 'cobbler'
>       and should be changed, try:
>       "openssl passwd -1 -salt 'random-phrase-here'
>  'your-password-here'" to generate new one
>
>  So I ran:
>
>    % openssl passwd -1 'testit'
>    <value>
>
>  and cut-n-pasted the <value> to the "default_password_crypted:" field in
>  /etc/cobbler/settings and updated everything:
>
>    % service cobblerd restart
>    % cobbler sync
>
>  Unfortunately this didn't fix anything and I still couldn't log into the
>  web interface with the new password. Note that I also tried using a salt
>  but that didn't help either. I chose no salt for my initial test because
>  the default entry did not use a salt.
>
>  I finally got it to work using htdigest as follows:
>
>    % htdigest /etc/cobbler/users.digest "Cobbler" cobbler
>    New password: testit
>    Re-type new password: testit
>
>    % htdigest /etc/cobbler/users.digest "Cobbler" jlinoff
>    Adding user jlinoff in realm Cobbler
>    New password: testit1
>    Re-type new password: testit1
>
>  What does the default_password_crypted field do?
>
>  Best regards,
>
>  Joe
>
>  _______________________________________________
>  cobbler mailing list
>  cobbler(a)lists.fedorahosted.org
>  https://fedorahosted.org/mailman/listinfo/cobbler
>  

the default_password_crypted field is used as the root password on any newly
provisioned machines where the root password is defined in the kickstart
file using this example from the file /var/lib/cobbler/kickstarts/basic.ks:

#Root password
rootpw --iscrypted $default_password_crypted



The value you set using htdigest is the password for the web interface for
the users cobbler & jlinoff



HTH

Dylan

[Joe Linoff]

Hi Dylan:

>  the default_password_crypted field is used as the root password on
> any 
>  newly provisioned machines where the root password is defined in the 
>  kickstart file using this example from the file 
>  /var/lib/cobbler/kickstarts/basic.ks: 
Thank you. That clears up my confusion.

Best regards,

Joe

From: cobbler-bounces(a)lists.fedorahosted.org
[mailto:[e-mail]] On Behalf Of Dylan Swift
Sent: Thursday, January 27, 2011 2:53 AM
To: cobbler mailing list
Subject: Re: What does the default_password_crypted field do?

Hi Joe,


On 27 January 2011 02:28, Joe Linoff <jlinoff(a)tabula.com&gt; wrote:
Hi Folks:

I recently decided to change the cobbler password and found that the
comment from "cobbler check" didn't really help. The comment said:

 2 : The default password used by the sample templates for newly
installed machines
     (default_password_crypted in /etc/cobbler/settings) is still set
to 'cobbler'
     and should be changed, try:
     "openssl passwd -1 -salt 'random-phrase-here'
'your-password-here'" to generate new one

So I ran:

  % openssl passwd -1 'testit'
  <value>

and cut-n-pasted the <value> to the "default_password_crypted:" field in
/etc/cobbler/settings and updated everything:

  % service cobblerd restart
  % cobbler sync

Unfortunately this didn't fix anything and I still couldn't log into the
web interface with the new password. Note that I also tried using a salt
but that didn't help either. I chose no salt for my initial test because
the default entry did not use a salt.

I finally got it to work using htdigest as follows:

  % htdigest /etc/cobbler/users.digest "Cobbler" cobbler
  New password: testit
  Re-type new password: testit

  % htdigest /etc/cobbler/users.digest "Cobbler" jlinoff
  Adding user jlinoff in realm Cobbler
  New password: testit1
  Re-type new password: testit1

What does the default_password_crypted field do?

Best regards,

Joe

_______________________________________________
cobbler mailing list
cobbler(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/cobbler


the default_password_crypted field is used as the root password on any newly provisioned
machines where the root password is defined in the kickstart file using this example from
the file /var/lib/cobbler/kickstarts/basic.ks:

#Root password
rootpw --iscrypted $default_password_crypted



The value you set using htdigest is the password for the web interface for the users
cobbler & jlinoff



HTH

Dylan