How we can change root password on a host collections

Support
1

I try to figure out how i can replace the root password each 90day as
policy password and security protection also because at this moment is hard
to do this manually as all the host are reported with foreman is any way or
how we can achieve this, any ideas or suggestions are welcome.

2

Changes to existing hosts is the job of your configuration management.
Foreman does send the current encrypted root password via the ENC to
Puppet, so using Puppet to set the password based on the data in the
ENC should be straightforward. Once the hosts are correctly consuming
the password set in Foreman, it should be a trivial matter to update
the Hostgroup root password when you need to (you could even automate
that via Hammer, Foreman's CLI tool).

Greg

··· On 22 February 2015 at 07:18, Mario Gamboa wrote: > I try to figure out how i can replace the root password each 90day as policy > password and security protection also because at this moment is hard to do > this manually as all the host are reported with foreman is any way or how we > can achieve this, any ideas or suggestions are welcome.
3

Hi Greg

Thank you for kindly response could be possible give an example via hammer
? or explain me for in detail the process i try to implementing katello in
my enviroment but this requirement is make me crazy i can't figure out how
to achieve this, thanks again for you help

··· On Wednesday, February 25, 2015 at 10:45:32 PM UTC+11, Greg Sutcliffe wrote:

On 22 February 2015 at 07:18, Mario Gamboa <mario....@gmail.com > <javascript:>> wrote:

I try to figure out how i can replace the root password each 90day as
policy
password and security protection also because at this moment is hard to
do
this manually as all the host are reported with foreman is any way or
how we
can achieve this, any ideas or suggestions are welcome.

Changes to existing hosts is the job of your configuration management.
Foreman does send the current encrypted root password via the ENC to
Puppet, so using Puppet to set the password based on the data in the
ENC should be straightforward. Once the hosts are correctly consuming
the password set in Foreman, it should be a trivial matter to update
the Hostgroup root password when you need to (you could even automate
that via Hammer, Foreman’s CLI tool).

Greg