[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Single-use root account?



On Sat, 2003-11-08 at 10:47, John Hasler wrote:
> Here's a one-time root script:
--snip--
> Create the user 'onetimeuser' with UID 0.  Generate a bunch of encrypted
> passwords with 'makepasswd --crypt' and put them in the file onetimewords
> in onetimeuser's home directory.  Print out the unencrypted passwords and
> carry the list with you.  Call the above script from onetimeuser's .login.
> Put 'test -e ~/onetimewords || deluser onetimeuser' in onetimeuser's
> .logout.  The first time onetimeuser logs in his password will be whatever
> you assigned when you created the account.  The second time it will be the
> first password on the list.  The third time it will be the second on the
> list, and so on.  When the last password has been used the account will be
> deleted when the user logs out.

Great! This is EXACTLY what I wanted! Thanks a lot! :)

-- 
Alex Malinovich
Support Free Software, delete your Windows partition TODAY!
Encrypted mail preferred. You can get my public key from any of the
pgp.net keyservers. Key ID: A6D24837

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: