[9fans] change password from a terminal?

[9fans] change password from a terminal?

[YAMANASHI Takeshi]

Hi, I am curious about changing password.

"Password Change" section in authsrv(6) seems suggesting
it is possible to change a password from a terminal with
interaction with the appropriate AS.  But changeuser(8)
states that these command run only on AS.

Must I go to the AS console when I feel like to change
my password?  What's wrong with my understanding?
--
YAMANASH Takeshi

Re: [9fans] change password from a terminal?

[boyd, rounin]

> Must I go to the AS console when I feel like to change
> my password?  What's wrong with my understanding?

it's 0600 local, and iirc, you can change your password on
the terminal.  you can obviously do it in on the AS.

however, from the terminal it must be a 'local' window to
avoid the password change flying around _in the clear_.

buy a copy of Network Security, Kaufman et al ...

Re: [9fans] change password from a terminal?

[YAMANASHI Takeshi]

> however, from the terminal it must be a 'local' window to
> avoid the password change flying around _in the clear_.

Both old and new password look like encrypted with the key Kn:
	UserProc->AS	Kn{AuthPass, "old password", "new password"}
	(authsrv(6))

and UserProc doesn't necessarily run on the AS only, I think.

By the way, your "rounin" means boss-less Samurai? :)
--

Re: [9fans] change password from a terminal?

[boyd, rounin]

[-- Attachment #1: Type: text/plain, Size: 620 bytes --]

> By the way, your "rounin" means boss-less Samurai? :)

it means:

    1) masterless samurai [http://japan.chez.tiscali.fr/TokyoWeb/E-Ronin.htm]
    2) unemployed man
    3) a college student failing his [entrance?] exams [my japanese dictionary
        is somewhere in 7 boxes, so i'm not 100% sure on this last one]

i saw where they [the 47] are buried in tokyo in the late '80s,
well before the film RONIN:

    http://us.imdb.com/Title?0122690

whose romaji is wrong.

and i have have the tattoo [~6x3cm] on my left upper arm, just covered
by a t-shirt sleeve.

gaijin dakara, wakaranai ... :)

[-- Attachment #2: rounin.jpg --]
[-- Type: image/jpeg, Size: 16624 bytes --]

Re: [9fans] change password from a terminal?

[Russ Cox]

> however, from the terminal it must be a 'local' window to
> avoid the password change flying around _in the clear_.

the password change doesn't fly around
in the clear anymore -- cpu connections
are encrypted.  i type "service=terminal passwd"
all the time.

Re: [9fans] change password from a terminal?

[boyd, rounin]

> the password change doesn't fly around
> in the clear anymore ...

sure, i was thinking old 9p.

Re: [9fans] change password from a terminal?

[David Presotto]

[-- Attachment #1: Type: text/plain, Size: 59 bytes --]

I'll change passwd to not require service=terminal anymore.

[-- Attachment #2: Type: message/rfc822, Size: 1737 bytes --]

From: "Russ Cox" <rsc@plan9.bell-labs.com>
To: 9fans@cse.psu.edu
Subject: Re: [9fans] change password from a terminal?
Date: Tue, 10 Jun 2003 02:10:45 -0400
Message-ID: <332f08827184f9626b4af6a39f4fe390@plan9.bell-labs.com>

> however, from the terminal it must be a 'local' window to
> avoid the password change flying around _in the clear_.

the password change doesn't fly around
in the clear anymore -- cpu connections
are encrypted.  i type "service=terminal passwd"
all the time.

Re: [9fans] change password from a terminal?

[Dan Cross]

David Presotto <presotto@closedmind.org> writes:
> I'll change passwd to not require service=terminal anymore.

Oh.  Uhh, nevermind my last post.

	- Dan C.

Re: [9fans] change password from a terminal?

[Dan Cross]

"Russ Cox" <rsc@plan9.bell-labs.com> writes:
> the password change doesn't fly around
> in the clear anymore -- cpu connections
> are encrypted.  i type "service=terminal passwd"
> all the time.

This begs the question; is there any reason to check the service when
changing one's password anymore?

	- Dan C.

Re: [9fans] change password from a terminal?

[Russ Cox]

> "Password Change" section in authsrv(6) seems suggesting
> it is possible to change a password from a terminal with
> interaction with the appropriate AS.  But changeuser(8)
> states that these command run only on AS.

run passwd.

Re: [9fans] change password from a terminal?

[YAMANASHI Takeshi]

> run passwd.

Beautifull.  Sorry for my silly question and thanks for both of you,
Boyd and Russ.

P.S.
I will write on my white-board `lookman ordinary_unix_command`
a considerable times.
--
YAMANASHI Takeshi

[9fans] lookman

[rog]

> P.S.
> I will write on my white-board `lookman ordinary_unix_command`
> a considerable times.

that reminds me.
i've been using the following version of lookman for ages now, and
often find it more useful than the one distributed.

it does the usual keyword lookup but does a grep too so that you get
some immediate context for the hits.

e.g.
% lookman serial
9p(2)
	               fully terminate the serial conversation once the file
draw(2)
	               Turns on or off debugging output (usually to a serial
html(2)
	          serial number for the form within the document.  Name is the
	          Fbutton, Fselect or Ftextarea.  Fieldid is a serial number
	          Tableid is a serial number for the table within the docu-
	          Cellid provides a serial number for the cell within the
memdraw(2)
	          the kernel, iprint prints to a serial line rather than the
[...]

it has some obvious flaws, but is nonetheless useful, i think.

  cheers,
    rog.


#!/bin/rc
# Usage: lookman key ...
#	prints out the names of all manual pages containing all the given keywords
index=/sys/lib/man/lookman/index
t1=/tmp/look1.$pid
t2=/tmp/look2.$pid
fn sigexit sigint sighup sigterm{
	rm -f $t1 $t2
	exit 1
}
*=`{echo $*|tr A-Z a-z|tr -dc 'a-z \012'}	# fold case, delete funny chars
if(~ $#* 0){
	echo Usage: lookman key ... >/fd/2
	exit 1
}
look -x $1 $index|sed 's/.*	//'|sort -u >$t1
allkey=$*
shift
for(i in $*){
	look -x $i $index|sed 's/.*	//'|sort -u|
		awk 'BEGIN {
			while (getline < "'$t1'" > 0) table[$0] = 1;
			}
			{ if (table[$0]) print }
			' > $t2
	mv $t2 $t1
}
for (i in `{sort $t1}) {
	echo $i | sed 's:/sys/man/([0-9])/(.*):\2(\1):'
	for (j in $allkey) {
		nroff -man $i | grep -i -e $j | sed 's/^/	/'
	}
}

rm -f $t1 $t2
exit 0