Password change

Due to a security incident on Hawk within the pre-production timeframe, all users must change their passwords and remove/replace ssh-keys before June 3rd 2020. This page provide more detailed information and help for some problems.

• If your account is enabled for multiple ressources, you have to do the changing procedure only once.
• If you get an error while changing the password, check your environment. Passwd is a simple bash script located in ( /opt/system/wrappers/passwd on Vulcan or /opt/passwd on change.hww.hlrs.de).

Todo so following steps are necessary:

Login on an frontend system which is accessable for you.

Vulcan users:

  ssh –l <your login> cl5fr2.hww.hlrs.de
  Run the passwd command to change your password. Please read information and watch output of this command. On success following text is displayed: Password changed successfully.
  Wait for a minimum of 20 minutes to redistribute the password
  Remove your ssh-keys (see below)

Users with accounts on Hawk only

 A server has been set up to provide a mechanism for the change:
    ssh –l  <your login> change.hww.hlrs.de
 Run the passwd command to change your password. Please read information and watch output of this command. On success following text is displayed: Password changed successfully.
  Remove your ssh-keys (see below)

remove compromised ssh-keys

cd      #  change into your HOME Directory
rm –rf .ssh 
mkdir .ssh
chmod 700 .ssh
chmod og-w ~