X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=web%2Fpassword.html;h=38241d84d904a67e7f2f6cba93967d30d2021854;hb=8d364cde8a727736ecdbbb20dbdf2c018a8648d1;hp=3ec383fbf2a20c07519e7ebf2606fef556a37f5b;hpb=fb6e12faf7e0f8dde1e42b0904a019c30bd68779;p=mirror%2Fuserdir-ldap.git diff --git a/web/password.html b/web/password.html index 3ec383f..38241d8 100644 --- a/web/password.html +++ b/web/password.html @@ -8,8 +8,8 @@ - - + + @@ -35,35 +35,35 @@

If you have lost or forgotten your LDAP password (and by extension, your machine login password) you can have it reset by sending a PGP signed -message to the mail gateway: +message to the mail gateway:

 echo "Please change my Debian password" | gpg --clearsign | mail chpasswd@db.debian.org
+or
 echo "Please change my Debian password" | pgp -fast | mail chpasswd@db.debian.org

The daemon will then respond with a new randomized password encrypted with your key. You can then use the -SSL Web pages to change your +SSL Web pages to change your password to something you can remember. You cannot set a new password via the mail gateway.

Alternatively, you can do without a password and use PGP to manipulate your -LDAP information through the mail gateway and use +LDAP information through the mail gateway and use SSH RSA Authentication to access the servers. To setup OpenSSH for RSA you need to first generate a private RSA key using ssh-keygen and select -a good password for it. Then send the public portion of the key to the LDAP +a good passphrase for it. Then send the public portion of the key to the LDAP directory:

 gpg --clearsign < ~/.ssh/identity.pub | mail change@db.debian.org

You can then use this key to authenticate to the machines. Using ssh-agent (automatically run by Debian's X configuration) you can use ssh-add to 'cache' -your password once. Note: Very few -machines have the patched SSH required to support this yet. +your passphrase once.

Back to the Debian Project homepage.

You can contact us at admin@db.debian.org.