AFP548 Changing the world one server at a time.

Encrypt password in create user script

Home › Forums › OS X Server and Client Discussion › Misc. › Encrypt password in create user script

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • January 15, 2010 at 12:32 pm #377824
    psychozz
    Participant

    I’d like to encrypt a password, set it as a variable in a script and then pass the encrypted password to dscl to set a user’s password.

    Like this:

    #!/bin/bash

USER=username
PASSWD=encrypted_password_hash

dscl . -passwd /Users/$USER $PASSWD

    Is this possible? I have googled this problem for hours now and have not found anything! I thought people out there where more paranoid 🙂

    I have tried setting the output from:

    openssl passwd -1
    openssl passwd -1 -salt randomch

    with no luck…

    Is there any auth key type in the users record I have to append/set?

    February 19, 2010 at 4:31 am #378024
    khiltd
    Participant

    If the script contains the logic necessary to decrypt the password stored within it then it might as well not be encrypted at all.

    March 2, 2010 at 7:21 pm #378113
    tlarkin
    Participant

    Whenever I need to use a password in a script I always make it self destruct and then purge the logs. I know that keeping passwords in scripts is not considered best practice but all of my scripts that have passwords are typically post image scripts. Then they self destruct and flush the logs.

  • Author
    Posts
Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.