From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 81304C433EF for ; Tue, 24 May 2022 11:17:26 +0000 (UTC) Subject: Forced password change in first login To: openembedded-core@lists.openembedded.org From: "Livius" X-Originating-Location: =?utf-8?q?Stuttgart=2C_Baden-W=C3=BCrttemberg=2C_DE_?= =?utf-8?q?=28194=2E39=2E218=2E10=29?= X-Originating-Platform: Windows Chrome 101 User-Agent: GROUPS.IO Web Poster MIME-Version: 1.0 Date: Tue, 24 May 2022 04:17:24 -0700 Message-ID: Content-Type: multipart/alternative; boundary="S5w5PUIt7oQXmihMUkI3" List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 24 May 2022 11:17:26 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/166056 --S5w5PUIt7oQXmihMUkI3 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi! In extrausers.bbclass ( https://github.com/openembedded/openembedded-core/b= lob/honister/meta/classes/extrausers.bbclass ) there is a quite new=C2=A0pa= sswd-expire ( https://www.mail-archive.com/yocto@lists.yoctoproject.org/msg= 05373.html ) to force password change on first login. I am using honister r= elease now, my experience is that my root user has always an expired passwo= rd in default and i need to change it in every first login of my flashed im= age,=C2=A0even though I pre-configured my root password by usermod -p and i am not using new passwd-expire command. Can i disable that new method somehow to be avoid to change password in fir= st login? --S5w5PUIt7oQXmihMUkI3 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Hi!

In extrausers.bbclass there is a quite new passwd-expire to force passw= ord change on first login. I am using honister release now, my experience i= s that my root user has always an expired password in default and i need to= change it in every first login of my flashed image, even though I pre= -configured my root password by usermod -p <hash_pass>&= nbsp;and i am not using new passwd-expire command.

Can i disable that new method somehow to be avoid to change password in = first login?

--S5w5PUIt7oQXmihMUkI3-- From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C8D27C43334 for ; Fri, 3 Jun 2022 21:45:15 +0000 (UTC) Subject: Re: Forced password change in first login To: openembedded-core@lists.openembedded.org From: "Livius" X-Originating-Location: =?utf-8?q?Fegyvernek=2C_J=C3=A1sz-Nagykun-Szolnok=2C?= =?utf-8?q?_HU_=28178=2E48=2E208=2E198=29?= X-Originating-Platform: Windows Chrome 102 User-Agent: GROUPS.IO Web Poster MIME-Version: 1.0 Date: Fri, 03 Jun 2022 14:45:12 -0700 References: In-Reply-To: Message-ID: <11484.1654292712146430411@lists.openembedded.org> Content-Type: multipart/alternative; boundary="98pSkTMgl8RAmr1761ZR" List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 03 Jun 2022 21:45:15 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/166530 --98pSkTMgl8RAmr1761ZR Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Finaly, i found the problem and i could solve it. SHA-256 is too weak to ma= ke a password hash, this is why on first login we need to change password a= lways. Please fix it in Yocto manual ( https://docs.yoctoproject.org/singleindex.h= tml#term-EXTRA_USERS_PARAMS ). When i set it to generate=C2=A0sha512crypt h= ash it works fine, there are no any change request on first login. --98pSkTMgl8RAmr1761ZR Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Finaly, i found the problem and i could solve it. SHA-256 is too weak to= make a password hash, this is why on first login we need to change passwor= d always.