Re: best way to remotely manage user credentials

[Thomas Goirand <thomas@goirand.fr>]

Wojciech Ziniewicz wrote:
> Hello
> I would like to hear some word in my problem.
> I have X servers with pam authentication and  ssh daemon.
> People use ftp servers and run their applications but there should be
> one central server that will manage passwords and users.
> 
> I would like to use something like
> 
> /usr/bin/changepassword <server_address> <user> <newpassword>
> 
> there's no problem writing such thing with bash and ssh keys but maybe
> someone knows better solution ?

There's more easy way than writing it with a bash script. Use NSSMySQL
and write a small php/python/ruby/perl/whatever-you-like web application
for your users to change the password stored in MySQL. The other
advantage is that it's going to be damned easy to reuse this with
network, and to do backups. You can encrypt the MySQL connection if you
wish to prevent sniffing.

Thomas