- Infos im HLRS Wiki sind nicht rechtsverbindlich und ohne Gewähr -
Due to a security incident on Hawk within the pre-production timeframe, all users must change their passwords and remove/replace ssh-keys before June 3rd 2020. This page provide more detailed information and help for some problems.
- If your account is enabled for multiple ressources, you have to do the changing procedure only once.
- If you get an error while changing the password, check your environment. Passwd is a simple bash script located in ( /opt/system/wrappers/passwd on Vulcan or /opt/passwd on change.hww.hlrs.de).
Todo so following steps are necessary:
Login on an frontend system which is accessable for you.
ssh –l <your login> vulcan.hww.hlrs.de Run the passwd command to change your password. Please read information and watch output of this command. On success following text is displayed: Password changed successfully. Wait for a minimum of 20 minutes to redistribute the password Remove your ssh-keys (see below)
Users with accounts on Hawk only
A server has been set up to provide a mechanism for the change: ssh –l <your login> change.hww.hlrs.de Run the passwd command to change your password. Please read information and watch output of this command. On success following text is displayed: Password changed successfully. Remove your ssh-keys (see below)
remove compromised ssh-keys
cd # change into your HOME Directory rm –rf .ssh mkdir .ssh chmod 700 .ssh chmod og-w ~
If you change your password for hawk using change.hww.hlrs.de, this will currently not updated on change, because some hawk related infrastructure is currently unavailable. As soon as this infrastructure is available passwords on change are updated.