====================
Tool for the deployment of unique passwords for Windows and Unix systems. It is based on the serial number of computers and a secret key. The advantage is that no password is stored in a database and you can display them with a GLPI plugin, Webmin...
====================
Prerequisistes :
POSIX / GNU Linux/ Unix systems : Perl, Config::Crontab, Digest::SHA1, dmidecode and chpasswd
Microsoft Windows systems : ActivePerl
Installation :
Microsoft Windows x64 :
Microsoft Windows x86 :
For Microsoft Windows, you can deploy packages with the silent parameter "/S". (See GPO, Sysprep, PsExec, WPKG, OCSInventory NG, FusionInventory, Uranos...)
RHEL/CentOS/Fedora :
cd RPM yum install winadminpassword-1.5-0.1.noarch.rpm
OpenSuze :
yast2 --install perl perl-Config-Crontab perl-Digest-SHA1 dmidecode cd RPM rpm -ivh winadminpassword-1.5-0.1.noarch.rpm
Mandriva :
urpmi perl perl-Config-Crontab perl-Digest-SHA1 dmidecode cd RPM rpm -ivh winadminpassword-1.5-0.1.noarch.rpm
Debian/Ubuntu :
apt-get install dmidecode libdigest-sha1-perl cd DEB dpkg -i libconfig-crontab-perl_1.33-1_all.deb dpkg -i winadminpassword_1.5_all.deb
GNU Linux / BSD / POSIX :
cd Others perl Makefile.PL make make install
Use :
winadminpassword --help man winadminpassword
====================
Usage winadminpassword [-v] [-h] [--printserial] [--printpassword] [--changepassword] [-s serial] [-k secretkey] [-u username] [-w password] [-l length] [-a algorith] [-r color] [-z size] [-j] [-o] [-t] [-d date] [-x secondsecretkey] [-g] [--printdate]
Functions -v, --version Displays the script version -h, --help This information -y, --printdate Print date in WinAdminPassword format -m, --showserial, --printserial Print serial number of this computer -p, --showpasswd, --printpassword Print password (-k and -l are mandatory) -c, --chpasswd, --changepassword Change password for a user (-k, -u and -l are mandatory)
Options -o, --verbose Print generated password when you use --changepassword function -s, --serial=SERIAL Set the serial number default : the serial number of computer where the script is executed -k, --key=KEY The very secret key -x, --skey, --secondkey=KEY The second key (optional but really useful with the GLPI plugin because it is not stored in the database and it is requested each time to the passwords) you can use a simple passphrase -u, --user=USER Set the username of the local account to change his password -w, --passwd, --password=PASSWORD Set the password if you don't want use the generated password -l, --length=LENGTH Set the length of the generated password -a, --algo=ALGO Set the algorithm for generating the hash that will be use to generate password 1 : \$key.\$serial 2 : \$serial\$key 3 : \$serial\$key\$serial 4 : \$key\$serial\$key 5 : \$key\$serial default : 1 -j, --html Print the output of --printpassword in HTML -r, --color=COLOR Set the print color for the html output default : orange -z, --size=SIZE Set the size for the html output default : 16 -t, --time Add the current time to the hash, in order to generate a password based on the system time -g, --cron Add the command line to cron, it will be executed every hours. (Very useful with -t) -d, --date=DATE Set the date to find a timed generated password use "10.2011.Feb.12" for Feb 12 2011 at 10am Months : Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Hours : 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
!! On unix or GNU Linux systems, you must despecialize $ charaters with \ in your command line
Samples
PrintSerial :
print the serial number of this computerPrintDate :
print the current system date in WinAdminPassword formatChangePassword :
change the password for Administrator account. The password size will be 12.
The output will print the generated password
# winadminpassword --changepassword -k "myverysecretkey" -l "12" -u "root" -t
change the password for root account. The password size will be 12.
The generated password will be based on systemtime. Use -d parameter to find it.
# winadminpassword --changepassword -k "myverysecretkey" -l "12" -u "root" -t -g
add this command to cron. Every hour the password will be changed. Use -d parameter to find it.PrintPassword :
print the generated password with myverysecretkey and the second algorithm for the
AB4528CF serial. The output will be in HTML in red and with size 12.
# winadminpassword --printpassword -l 12 -s "AB4HGD" -k "myverysecretkey" -x "hello" -d "3.2011.Jul.28"
print the result of timed generated password at 3 Hours in July 28 2011.
The second secret key is "hello".====================
You can place winadminpassword script on Webmin software and call the command :
winadminpassword --printpassword -k "myverysecretkey" -s "$getserialfromform" -l "12" -j
You also have a GLPI plugin if you want to print them in GLPI (https://forge.indepnet.net/projects/winadminpassword)
====================
This module requires these other modules and libraries: Config::Crontab Digest::SHA1
====================
#