[freeside] exporting shell ???

[ivan]

On Mon, Jun 17, 2002 at 09:16:00AM -0700, Kristian Hoffmann wrote:
> You can set the password with the shellcommands export.  It just doesn't
> do it by default. Adding "-p $_password" to the useradd command in the
> export you defined ought to do the trick.

I think I'd consider this a bug and want to make sure it doesn't work, or
at least spit out loud and obnoxious warnings.  Using passwords on the
command line is a security risk.

Passwords should be passed to remote commands on STDIN.  Hopefully I'll
get around to updating (or someone will send patches) the shellcommands
export soon. 

> From looking at the code, it looks like for the modify event, all the old
> fields are mapped as $old_fieldname, and new fields, $new_fieldname.  So
> for example, $old_username would be the old username and $new_username
> would be the new username.
> 
> Ivan, does that make the new and old password $new__password and
> $old__password?
> 
> -Kristian
> 
> On Tue, 18 Jun 2002, Mario wrote:
> 
> > Can someone please explain to me why when you export via the
> > shellcommands, useradd etc, that it does not pass the password ??
> >
> > This seems extremely perculiar to me, as if i go to add a dialup
> > account, i want to bill them via email, so the username/password is
> > entered
> > exported to my IC Radius database, but the shellcommand only creates the
> > username, and no password associated, rendering the account unusable.
> >
> > Is there a way around this ??
> >
> > I would very much like to hear from the developers and Ivan on this one,
> > as well as everyone else out there and exactly what type of applications
> > and scenarios that you are all using freeside with for such
> > circumstances???
> >
> > how do you go about adding email / hosting accounts when the passwords
> > cannot be exported also ?? etc etc, i would really like to get a lot of
> > peoples
> > feedback from this, while i sit here and ponder on it
> >
> >
> > Thank You
> >
> > Mario Zuppini
> > Systems Administrator
> >
> >
> > Total Cybersolutions
> > PO BOX 2081
> > Windsor QLD 4030, Australia
> > Phone : +617-3861-0882
> > Fax : +617-3861-0884
> > Web : http://www.cybersol.com.au <http://www.cybersol.com.au/>
> > sysadmin at cybersol.com.au
> >
> >
> 

-- 
_ivan