ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Scripting - How do you store your credentials and call them later?

    Scheduled Pinned Locked Moved Solved IT Discussion
    shellscriptcredentialshashing
    79 Posts 7 Posters 6.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DustinB3403D
      DustinB3403 @dafyre
      last edited by

      @dafyre said in Scripting - How do you store your credentials and call them later?:

      @DustinB3403 :

      What about something like this:

      c15c9c1d-36c5-4c8b-84fd-14ee1d9a4707-image.png

      (taken from: https://superuser.com/questions/401906/how-to-pass-password-to-sudo-commands)

      In your case it would be echo $PASSWORD | sudo -S -U $USER <command>

      I just tested this on my Mac and it works.

      Maybe. . . it's not working with my naming computer script from yesterday.

      1 Reply Last reply Reply Quote 0
      • DustinB3403D
        DustinB3403
        last edited by

        When running

        #!/bin/sh
        
        read -s -p "Enter a wheel username: " USER
        read -s -p "Enter a password for wheel: " PASS
        
        # Setting (office) offname variable
        read -p 'What office are you in?: ' offname
        
        # Setting (computer username variable) compuser variable
        read -p 'Enter this computers username (SAMAccountName) IE jdoe: ' compuser
        
        # Setting the asset tag (tagnumber) variable
        read -p 'Enter this computers asset tag: ' tagnumber
        
        echo $PASS | sudo -S -U $USER -l scutil --set HostName $offname$compuser && scutil --set ComputerName $compuser$tagnumber && scutil --set LocalHostName $offname$compuser$tagnumber
        

        I'm met with

        Enter a wheel user Enter a password for wheel what office are you in
        enter this computers user. . .
        enter this computers tag

        And that I have to use -l with -U (that is lower case L).

        dafyreD 1 Reply Last reply Reply Quote 0
        • DustinB3403D
          DustinB3403
          last edited by

          sudo: the `-U' option may only be used with the `-l' option
          usage: sudo -h | -K | -k | -V
          usage: sudo -v [-AknS] [-g group] [-h host] [-p prompt] [-u user]
          usage: sudo -l [-AknS] [-g group] [-h host] [-p prompt] [-U user] [-u user] [command]
          usage: sudo [-AbEHknPS] [-C num] [-g group] [-h host] [-p prompt] [-u user] [VAR=value] [-i|-s] [<command>]
          usage: sudo -e [-AknS] [-C num] [-g group] [-h host] [-p prompt] [-u user] file ...
          

          fun times. . ..

          1 Reply Last reply Reply Quote 0
          • dafyreD
            dafyre @DustinB3403
            last edited by dafyre

            @DustinB3403 said in Scripting - How do you store your credentials and call them later?:

            When running

            #!/bin/sh

            read -s -p "Enter a wheel username: " USER
            read -s -p "Enter a password for wheel: " PASS

            Setting (office) offname variable

            read -p 'What office are you in?: ' offname

            Setting (computer username variable) compuser variable

            read -p 'Enter this computers username (SAMAccountName) IE jdoe: ' compuser

            Setting the asset tag (tagnumber) variable

            read -p 'Enter this computers asset tag: ' tagnumber

            echo $PASS | sudo -S -U $USER -l scutil --set HostName $offname$compuser && scutil --set ComputerName $compuser$tagnumber && scutil --set LocalHostName $offname$compuser$tagnumber

            I'm met with

            Enter a wheel user Enter a password for wheel what office are you in
            enter this computers user. . .
            enter this computers tag

            And that I have to use -l with -U (that is lower case L).

            Are you doing:

            sudo myscript.sh ? Or are you just running the script and letting it call sudo?

            Also... What do you have to use -U $USER?

            DustinB3403D 1 Reply Last reply Reply Quote 0
            • DustinB3403D
              DustinB3403
              last edited by

              This is the entire portion of the script I'm just testing with (so for the moment it is it's own script).

              #!/bin/sh
              
              read -s -p "Enter a wheel username: " USER
              read -s -p "Enter a password for wheel: " PASS
              
              # Setting (office) offname variable
              read -p 'What office are you in?: ' offname
              
              # Setting (computer username variable) compuser variable
              read -p 'Enter this computers username (SAMAccountName) IE jdoe: ' compuser
              
              # Setting the asset tag (tagnumber) variable
              read -p 'Enter this computers asset tag: ' tagnumber
              
              echo $PASS | sudo -S -U $USER $PASS scutil --set HostName $offname$compuser && sudo -S -U $USER scutil --set ComputerName $compuser$tagnumber && sudo -S -U $USER scutil --set LocalHostName $offname$compuser$tagnumber
              

              The script is run from a local wheel user so to run it, first I go su wheel-user (because our users by default aren't wheel users and thus need to jump to one) and then call that script.

              1 Reply Last reply Reply Quote 0
              • DustinB3403D
                DustinB3403 @dafyre
                last edited by DustinB3403

                @dafyre said in Scripting - How do you store your credentials and call them later?:

                @DustinB3403 said in Scripting - How do you store your credentials and call them later?:

                When running

                #!/bin/sh
                
                read -s -p "Enter a wheel username: " USER
                read -s -p "Enter a password for wheel: " PASS
                
                # Setting (office) offname variable
                read -p 'What office are you in?: ' offname
                
                # Setting (computer username variable) compuser variable
                read -p 'Enter this computers username (SAMAccountName) IE jdoe: ' compuser
                
                # Setting the asset tag (tagnumber) variable
                read -p 'Enter this computers asset tag: ' tagnumber
                
                echo $PASS | sudo -S -U $USER -l scutil --set HostName $offname$compuser && scutil --set ComputerName $compuser$tagnumber && scutil --set LocalHostName $offname$compuser$tagnumber
                

                I'm met with

                Enter a wheel user Enter a password for wheel what office are you in
                enter this computers user. . .
                enter this computers tag

                And that I have to use -l with -U (that is lower case L).

                Are you doing:

                sudo myscript.sh ? Or are you just running the script and letting it call sudo?

                Also... What do you have to use -U $USER?

                running su <wheel-user> then ./rename.sh

                @dafyre said in Scripting - How do you store your credentials and call them later?:

                Also... What do you have to use -U $USER?

                what?

                dafyreD 1 Reply Last reply Reply Quote 0
                • dafyreD
                  dafyre @DustinB3403
                  last edited by

                  @DustinB3403 said in Scripting - How do you store your credentials and call them later?:

                  @dafyre said in Scripting - How do you store your credentials and call them later?:

                  @DustinB3403 said in Scripting - How do you store your credentials and call them later?:

                  When running

                  #!/bin/sh
                  
                  read -s -p "Enter a wheel username: " USER
                  read -s -p "Enter a password for wheel: " PASS
                  
                  # Setting (office) offname variable
                  read -p 'What office are you in?: ' offname
                  
                  # Setting (computer username variable) compuser variable
                  read -p 'Enter this computers username (SAMAccountName) IE jdoe: ' compuser
                  
                  # Setting the asset tag (tagnumber) variable
                  read -p 'Enter this computers asset tag: ' tagnumber
                  
                  echo $PASS | sudo -S -U $USER -l scutil --set HostName $offname$compuser && scutil --set ComputerName $compuser$tagnumber && scutil --set LocalHostName $offname$compuser$tagnumber
                  

                  I'm met with

                  Enter a wheel user Enter a password for wheel what office are you in
                  enter this computers user. . .
                  enter this computers tag

                  And that I have to use -l with -U (that is lower case L).

                  Are you doing:

                  sudo myscript.sh ? Or are you just running the script and letting it call sudo?

                  Also... What do you have to use -U $USER?

                  running su <wheel-user> then ./rename.sh

                  @dafyre said in Scripting - How do you store your credentials and call them later?:

                  Also... What do you have to use -U $USER?

                  what?

                  Sorry, Missed that... I meant to say WHY do you have to use -U $USER ?

                  sudo rename.sh doesn't work?

                  DustinB3403D 2 Replies Last reply Reply Quote 0
                  • DustinB3403D
                    DustinB3403 @dafyre
                    last edited by

                    @dafyre said in Scripting - How do you store your credentials and call them later?:

                    Sorry, Missed that... I meant to say WHY do you have to use -U $USER ?

                    Because you need to elevate to root.

                    @dafyre said in Scripting - How do you store your credentials and call them later?:

                    sudo rename.sh doesn't work?

                    It does, but you are prompted to enter a username and password 3 times to make the edits. It's easy to fill-in but annoying to have to do repeatedly.

                    Hence my attempt at scripting the responses to the prompt windows (example below) Imagine having to type creds 3 times, for 100+ machines.

                    R4YZS0B19iFjV9eMoQ5WRzipOS6IVXMy.png

                    1 Reply Last reply Reply Quote 0
                    • DustinB3403D
                      DustinB3403 @dafyre
                      last edited by

                      @dafyre said in Scripting - How do you store your credentials and call them later?:

                      @DustinB3403 said in Scripting - How do you store your credentials and call them later?:

                      @dafyre said in Scripting - How do you store your credentials and call them later?:

                      @DustinB3403 said in Scripting - How do you store your credentials and call them later?:

                      When running

                      #!/bin/sh
                      
                      read -s -p "Enter a wheel username: " USER
                      read -s -p "Enter a password for wheel: " PASS
                      
                      # Setting (office) offname variable
                      read -p 'What office are you in?: ' offname
                      
                      # Setting (computer username variable) compuser variable
                      read -p 'Enter this computers username (SAMAccountName) IE jdoe: ' compuser
                      
                      # Setting the asset tag (tagnumber) variable
                      read -p 'Enter this computers asset tag: ' tagnumber
                      
                      echo $PASS | sudo -S -U $USER -l scutil --set HostName $offname$compuser && scutil --set ComputerName $compuser$tagnumber && scutil --set LocalHostName $offname$compuser$tagnumber
                      

                      I'm met with

                      Enter a wheel user Enter a password for wheel what office are you in
                      enter this computers user. . .
                      enter this computers tag

                      And that I have to use -l with -U (that is lower case L).

                      Are you doing:

                      sudo myscript.sh ? Or are you just running the script and letting it call sudo?

                      Also... What do you have to use -U $USER?

                      running su <wheel-user> then ./rename.sh

                      @dafyre said in Scripting - How do you store your credentials and call them later?:

                      Also... What do you have to use -U $USER?

                      what?

                      Sorry, Missed that... I meant to say WHY do you have to use -U $USER ?

                      Also you said to do this, not I.

                      1 Reply Last reply Reply Quote 0
                      • DustinB3403D
                        DustinB3403
                        last edited by

                        Woot got it!

                        dafyreD 1 Reply Last reply Reply Quote 0
                        • dafyreD
                          dafyre
                          last edited by

                          Try this script...

                          #!/bin/sh
                          
                          # Setting (office) offname variable
                          read -p 'What office are you in?: ' offname
                          
                          # Setting (computer username variable) compuser variable
                          read -p 'Enter this computers username (SAMAccountName) IE jdoe: ' compuser
                          
                          # Setting the asset tag (tagnumber) variable
                          read -p 'Enter this computers asset tag: ' tagnumber
                          
                          sudo scutil --set HostName $offname$compuser
                          sudo scutil --set ComputerName $compuser$tagnumber
                          sudo scutil --set LocalHostName $offname$compuser$tagnumber
                          

                          Then just run the script with ... sudo ./myscript.sh

                          You have to enter your password once at the beginning.

                          1 Reply Last reply Reply Quote 0
                          • dafyreD
                            dafyre @DustinB3403
                            last edited by

                            @DustinB3403 said in Scripting - How do you store your credentials and call them later?:

                            Woot got it!

                            Sweet! What did you wind up doing?

                            1 Reply Last reply Reply Quote 0
                            • DustinB3403D
                              DustinB3403
                              last edited by

                              #!/bin/sh
                              
                              read -s -p "Enter a wheel username: " USER
                              read -s -p "Enter a password for wheel: " PASS
                              
                              # Setting (office) offname variable
                              read -p 'What office are you in?: ' offname
                              
                              # Setting (computer username variable) compuser variable
                              read -p 'Enter this computers username (SAMAccountName) IE jdoe: ' compuser
                              
                              # Setting the asset tag (tagnumber) variable
                              read -p 'Enter this computers asset tag: ' tagnumber
                              
                              echo $PASS | sudo -S scutil --set HostName $offname$compuser && sudo -S scutil --set ComputerName $compuser$tagnumber && sudo -S scutil --set LocalHostName $offname$compuser$tagnumber
                              
                              1 Reply Last reply Reply Quote 3
                              • DustinB3403D
                                DustinB3403
                                last edited by

                                @dafyre thanks for helping out there, it was almost there the sudo -S bit was all it needed, but for some odd flipping reason it recommends using -U flag as well which is weird.

                                But at least it works, now to fold this into the larger script and see how it all works.

                                dafyreD 1 Reply Last reply Reply Quote 2
                                • dafyreD
                                  dafyre @DustinB3403
                                  last edited by

                                  @DustinB3403 said in Scripting - How do you store your credentials and call them later?:

                                  @dafyre thanks for helping out there, it was almost there the sudo -S bit was all it needed, but for some odd flipping reason it recommends using -U flag as well which is weird.

                                  But at least it works, now to fold this into the larger script and see how it all works.

                                  I'll be over here in the corner with my hard hat on, watching for nuclear fallout, lol.

                                  Glad you got it going!

                                  DustinB3403D 1 Reply Last reply Reply Quote 0
                                  • DustinB3403D
                                    DustinB3403 @dafyre
                                    last edited by

                                    @dafyre said in Scripting - How do you store your credentials and call them later?:

                                    atching for nuclear fallout, lol.

                                    I've already made a backup of the master script 🙂 before edits.

                                    1 Reply Last reply Reply Quote 1
                                    • DustinB3403D
                                      DustinB3403
                                      last edited by

                                      I think my header really sells it.

                                      powershell_wJLd1e1YLE.png

                                      1 Reply Last reply Reply Quote 2
                                      • DustinB3403D
                                        DustinB3403
                                        last edited by

                                        I'm of course just kidding, lord knows I'd actually get dragged to court with a disclaimer like this. . .

                                        Time to find the GNU license and insert that. . .

                                        1 Reply Last reply Reply Quote 1
                                        • IRJI
                                          IRJ
                                          last edited by

                                          I'm glad you found a solution, but have you considered ansible for tasks like this?

                                          DustinB3403D 1 Reply Last reply Reply Quote 0
                                          • DustinB3403D
                                            DustinB3403 @IRJ
                                            last edited by

                                            @IRJ said in Scripting - How do you store your credentials and call them later?:

                                            I'm glad you found a solution, but have you considered ansible for tasks like this?

                                            Have you consider our lord and savor jesus christ?

                                            FFS man...

                                            Of course I have I just don't understand it as all of their documentation is god awful and I'd have to take numerous pounds of coke up the backdoor to understand what the hell I'm supposed to do.

                                            On a positive note, if you want to jump on a skype call some time or another I'd be happy to learn if you're willing to teach.

                                            stacksofplatesS IRJI 2 Replies Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 2 / 4
                                            • First post
                                              Last post