I made this change here at BNL. What about the public view of the cvs
tree where old versions of the files can be viewed:
http://lcgapp.cern.ch/cgi-bin/viewcvs/viewcvs.cgi/?cvsroot=lcgdeploy
Shouldn't everyone also change their passwords now? What is the
procedure for doing that with LCFGng? Will changing the config files
and publishing updated node profiles cause the password to be changed or
does this have to be done manually and in the config file?
~Jason
On Tue, 2003-11-11 at 03:19, Emanuele LEONARDI wrote:
> Hi Gergo.
>
> Yes, your remark is indeed correct. We had some discussion about this in
> the past but left the issue for the future.
>
> As, as you say, we are now quite visible, we should start caring more
> about this issues. Here is my proposal:
>
> All site managers create a file named, e.g., private-cfg.h which is NOT
> checked in the CVS repository. In this file they copy the root password
> setting line from local-cfg.h (I mean the line which goes "+auth.rootpwd
> hnd78fa8976y").
>
> Then they edit the local-cfg.h file and replace the auth.rootpwd line with:
>
> #include "private-cfg.h"
>
> After that they can check the new local-cfg.h file in CVS.
>
> If anybody has comments or other proposal on this issue, please let me know.
>
> Cheers
>
> Emanuele
>
>
> Debreczeni Gergely wrote:
> > Hi,
> >
> > Just a proposal:
> > Since google search "lcg cvs" gives out the cvs
> > reprository as the first entry, it is very
> > easy to find node config files...
> >
> > ! I would recommend not to store the root and user passwords in CVS !
> >
> > It took me only 3 ours (on a AMD ATHLON 2000+) to decrypt a 5 letter long
> > passwd which contains capital letters and numbers...
> > A 6 letter long would take 211 ours ... but I have 50 processors ;-))))
> >
> > cheers
> > Gergo
> >
> >
> > --
>
>
> --
> /------------------- Emanuele Leonardi -------------------\
> | eMail: [log in to unmask] - Tel.: +41-22-7674066 |
> | IT division - Bat.31 2-012 - CERN - CH-1211 Geneva 23 |
> \---------------------------------------------------------/
--
/------------------------------------------------------------------\
| Jason A. Smith Email: [log in to unmask] |
| Atlas Computing Facility, Bldg. 510M Phone: (631)344-4226 |
| Brookhaven National Lab, P.O. Box 5000 Fax: (631)344-7616 |
| Upton, NY 11973-5000 |
\------------------------------------------------------------------/
|