[freeside] exporting shell ???

Kristian Hoffmann khoff at pc-intouch.com
Wed Jun 19 09:30:55 PDT 2002


I should have remembered that.  My bad.  That wouldn't have worked anyway.
The password has to be encrypted when passed on the command line.

-Kristian

On Mon, 17 Jun 2002, ivan wrote:

> On Mon, Jun 17, 2002 at 09:16:00AM -0700, Kristian Hoffmann wrote:
> > You can set the password with the shellcommands export.  It just doesn't
> > do it by default. Adding "-p $_password" to the useradd command in the
> > export you defined ought to do the trick.
>
> I think I'd consider this a bug and want to make sure it doesn't work, or
> at least spit out loud and obnoxious warnings.  Using passwords on the
> command line is a security risk.
>
> Passwords should be passed to remote commands on STDIN.  Hopefully I'll
> get around to updating (or someone will send patches) the shellcommands
> export soon.
>
> > From looking at the code, it looks like for the modify event, all the old
> > fields are mapped as $old_fieldname, and new fields, $new_fieldname.  So
> > for example, $old_username would be the old username and $new_username
> > would be the new username.
> >
> > Ivan, does that make the new and old password $new__password and
> > $old__password?
> >
> > -Kristian
> >
> > On Tue, 18 Jun 2002, Mario wrote:
> >
> > > Can someone please explain to me why when you export via the
> > > shellcommands, useradd etc, that it does not pass the password ??
> > >
> > > This seems extremely perculiar to me, as if i go to add a dialup
> > > account, i want to bill them via email, so the username/password is
> > > entered
> > > exported to my IC Radius database, but the shellcommand only creates the
> > > username, and no password associated, rendering the account unusable.
> > >
> > > Is there a way around this ??
> > >
> > > I would very much like to hear from the developers and Ivan on this one,
> > > as well as everyone else out there and exactly what type of applications
> > > and scenarios that you are all using freeside with for such
> > > circumstances???
> > >
> > > how do you go about adding email / hosting accounts when the passwords
> > > cannot be exported also ?? etc etc, i would really like to get a lot of
> > > peoples
> > > feedback from this, while i sit here and ponder on it
> > >
> > >
> > > Thank You
> > >
> > > Mario Zuppini
> > > Systems Administrator
> > >
> > >
> > > Total Cybersolutions
> > > PO BOX 2081
> > > Windsor QLD 4030, Australia
> > > Phone : +617-3861-0882
> > > Fax : +617-3861-0884
> > > Web : http://www.cybersol.com.au <http://www.cybersol.com.au/>
> > > sysadmin at cybersol.com.au
> > >
> > >
> >
>
> --
> _ivan
>




More information about the freeside-users mailing list