Re^2: How do I send a password to a command I start with Perl's Expect.pm

We have a number of systems(redhat,hp-ux,aix,solaris) and for different customer we are using different centralize authentication system(MS-AD for redhat, YES we use MS, SunOne LDAP for our solaris) this system in question is HP-UX and they don't have a uniform user contents on /etc/passwd.

Comment on Re^2: How do I send a password to a command I start with Perl's Expect.pm

Replies are listed 'Best First'.
Re^3: How do I send a password to a command I start with Perl's Expect.pm by pemungkah (Priest) on Oct 25, 2010 at 16:00 UTC
Please don't tell me you use the same IDs and passwords at different customers. That's not at all safe. Does anyone other than yourselves have root (or admin privileges) on these machines? Consider the ramifications. Hacked copy of login, anyone? To be more direct: sharing passwords across customers could lead to a situation where one customer acquires access to a password belonging to the logins used by your company, giving them access to machines at your other customers, using an ID belong to your company. That would be a bad thing indeed. They might do anything; they could certainly masquerade as the user they got access to; if you use the same passwords internally too, then they could have access to YOUR machines. Consider getting a password manager for the machines at your company and using different passwords for every customer. Shared passwords used this way will sooner or later get you bitten.	[reply]

Replies are listed 'Best First'.

Re^3: How do I send a password to a command I start with Perl's Expect.pm
by pemungkah (Priest) on Oct 25, 2010 at 16:00 UTC

To be more direct: sharing passwords across customers could lead to a situation where one customer acquires access to a password belonging to the logins used by your company, giving them access to machines at your other customers, using an ID belong to your company. That would be a bad thing indeed. They might do anything; they could certainly masquerade as the user they got access to; if you use the same passwords internally too, then they could have access to YOUR machines. Consider getting a password manager for the machines at your company and using different passwords for every customer. Shared passwords used this way will sooner or later get you bitten.

[reply]