Server Password Updater Tool

This tool allows you to update root passwords on multiple servers using Chef's knife tool. It supports search queries for selecting servers and verifies that the password was changed successfully. To use this tool, you need SSH access and sudo privileges on the target servers.

Prerequisites

Before using this tool, ensure the following commands are installed and available on your system:

• openssl: Used for password hashing.
• sshpass: Required for non-interactive ssh password authentication.
• knife: Essential for interacting with Chef servers.

You can check if these are installed by running command -v <command-name> for each command (replace <command-name> with openssl, sshpass, or knife). If any of these commands are not installed, you will need to install them before proceeding.

Installation

Download the tool here.

Usage

Display Help

To display help and see all available options, run:

./update-root-pass.sh --help

Options

• -p Specify the password in clear text (will be hashed).
• -h Specify an existing password hash to use.
• -o Specify an output file to save the results.
• -l List the machines without changing passwords.
• --hosts Specify a list of hosts separated by space.
• --help Display this help message.

Examples

• List all CentOS machines without changing passwords and save the results to a file:

  ./update-root-pass.sh -l -o results.txt 'platform:centos'

• Change the password on all hosts specified in the list:

  ./update-root-pass.sh -p 'myPassword123' --hosts 'host1 host2'

• Change the password on all nodes in the Chef server matching the search query:

  ./update-root-pass.sh -p 'myPassword123' 'name:*'

• Change the password on all nodes in the Chef server matching the search query using the specified password hash:

  ./update-root-pass.sh -p 'myPassword123' -h '$6$saltsalt$hashedpasswordhere' 'name:*'