Questions about changing default username or password

Thomaiyar, Richard Marian richard.marian.thomaiyar at linux.intel.com
Mon Jun 3 04:25:25 AEST 2019


For #1 --> you can inherit extrausers class and override the users 
accordingly, and the password

For #2 --> There is no direct way to update /etc/ipmi_pass, but once 
this image is flashed, login to bmc serial console, then try to execute 
passwd and update the password to the desired one (during this scenario, 
the new password is stored back in /etc/ipmi_pass). Now copy this 
/etc/ipmi_pass from your BMC to your development environment, and 
override it using bbappend.

Note: Our ultimate goal is to get rid of the default user name and 
password from the system (to whichever project it is feasible for 
security reason -- 
https://github.com/openbmc/docs/blob/master/user_management.md#deployment---out-of-factory) 


Let me know if you need any further clarifications

Regards,

Richard


On 5/31/2019 5:56 AM, Simon Zhu(朱英澍) wrote:
> Hello ,
>
> 	I want to change default username and password in local.conf.sample.
>
> 	But caused an invalid username error.
>
> 	I fixed it in the following way in /openbmc/openbmc/meta/recipes-extended/shadow/shadow.inc:
> 	I moved the patch shadow-relaxed-usernames.patch from SRC_URI_append_class-target to SRC_URI.
> 	
>
> 	And If I changed the default username or password, I failed to use IPMI through lanplus interface because of authentication failure.
> 	I need to generate my own ipmi_pass and install it to /etc/ipmi_pass。
>
> 	Do these two issues need to be fixed?
>
> Best regards,
>
> Simon


More information about the openbmc mailing list