Re: [webmin-l] HP-UX Trusted Mode with Webmin

[Jamie C. <jca...@we...>]

On 24/Oct/2006 09:18 flq wrote ..
> Hi Jamie,
> 
> thanks for the reply.
> 
> I will have an HP Visualize Workstation running HP-UX 11i
> next Monday.  With root access thru ssh.
> 
> In the mean time, here is the mods I did in some Perl script
> in order to support some functions that I have to implement.
> 
> In "useradmin/userlib.pl"
> 
> I added these lines of code:
> 
> elsif ($pft == 99) {
>         # Just invoke the useradd command
>         &system_logged("useradd -u $_[0]->{'uid'} -g
> $_[0]->{'gid'} -c \"$_[0]->{'real'}\" -d $_[0]->{'home
> '} -s $_[0]->{'shell'} $_[0]->{'user'}");
>         # And set the password
>         &system_logged("/usr/lbin/modprpw -x -l
> $_[0]->{'user'} >/opt/webmin/tmp.p 2>&1");
>         &system_logged("/usr/bin/cat /opt/webmin/tmp.p |
> mailx -s \"Your new password for \`hostname\`\"
> my_email_addr\@company.com >/dev/null 2>&1");
>         }
> 
> and in "useradmin/hpux-lib.pl:
> 
> I changed:
> 
> sub passfiles_type
> {
> return 0;
> }
> 
> to
> 
> sub passfiles_type
> {
> return 99;
> }
> 
> 
> 
> I know it's not much of a mod but at least it lets me go
> forward with the implementation of the tool in our
> environment.
> 
> Let me know if it is ok for now.

That would work, although I would prefer to have Webmin write
to the config files directly .. I'll do it this way when I 
write the code.

> I will be able to give you information about HP-UX Trusted
> Mode as I know ins and outs of HP's implementation.
> 
> I have many "wish list" requests for Webmin in order to be a
> valid solution corporate wise.
> 
> Some examples:
> 
> 1 - Webmin accounts security should have password
> complexity, expiration date, etc...

Nice idea .. and certainly do-able.

> 2 - Integration with AD in order to control these Webmin
> accounts from a centralized location (LDAP authentication)

Already possible, if you have NSS-LDAP integration setup.

> 3 - The possibility for the Webmin user when he creates a
> user on a Unix box to enter an email address to send the
> password to.

Not a bad idea ..

> 4 - Using a Unix account as a template to create another
> user.

Also a good idea.

> 5 - Reason for a locked account

Where would this be stored though?

> 6 - In the "Change password" module instead of entering a
> new password, to just reset the account based on the reason
> why it was locked.

Again, most Unixes don't have a place to store the 'original'
password .. although HP/UX may differ.

> 7 - Change the expiry date of an account. e.g. a renewed
> consultant's contract.

This should already be do-able in the Users and Groups module.

 - Jamie

> These items are all pertaining to HP Trusted Mode.
> 
> TIA for your time
> 
> 
> Francis
> 
> 
> > On 23/Oct/2006 13:47 flq wrote ..
> > > Hi all,
> > > 
> > > I am using Webmin, a very useful tool btw, to manage
> > > users on many Unix platforms.
> > > 
> > > The hurdle I came across is the fact that Webmin does
> > > not fully support HP-UX in Trusted Mode.
> > > 
> > > I would like to know, since I did not find any threads
> > > on mailing lists regarding that matter, if there is an
> > > on-going effort to support the Trusted Mode.
> > > 
> > > I would really like to see it supported as all of the
> > > HP-UX installs I do are being setup in Trusted Mode.
> > > 
> > > If need be, I am willing to run with that flag and make
> > > it happen.
> > > 
> > > Please let me know if I can be of any help in order to
> > > resolve this issue.
> > > 
> > > TIA
> > > 
> > Hi Francis,
> > 
> > I am aware of HP/UX's trusted mode, but unfortunately
> > haven't put any effort into supporting it in Webmin, as I
> > don't have any HP/UX hardware of my own ..  and it isn't
> > as popular an OS as Linux or Solaris.
> > 
> > However, I would be glad to accept a patch to the Users
> > and Groups module to add trusted mode support. Or if you
> > could give me remote root access to a box with HP/UX
> > installed, I should be able to update Webmin to support
> > it.
> > 
> >  - Jamie
> > 
> > ----------------------------------------------------------
> > --------------- Using Tomcat but need to do more? Need to
> > support web services, security? Get stuff done quickly
> > with pre-integrated technology to make your job easier
> > Download IBM WebSphere Application Server v.1.0.1 based on
> > Apache Geronimo
> >
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> > -
> > Forwarded by the Webmin mailing list at
> > web...@li... To remove yourself
> > from this list, go to
> > http://lists.sourceforge.net/lists/listinfo/webadmin-list
> 
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list