freia for Observers: Password Change on First Login

Before you start

You may want to use a password manager, though not a requirement for using IDL software at IRTF, to generate secure passwords & manage them. One, of many, example is KeePassXC (GUI) that is available at least for MS Windows, Apple macOS, Linux, & FreeBSD systems.

Do not share passwords, certainly not via email, either as text as as image. Do not send any password in relation to any account issues. If IRTF staff would need to access your account, they (Anubav A for now) will reset your password and notify you of the reset.

Generating a new password

Refer to your password manager if you are using one.

On Linux, apg package provides the command of same name. To generate a password between 16-24 characters, run in a terminal ... 

   apg -n 1 -m 16 -x 24

SSH (including SFTP) Login Password Change

Before you would have changed the temporary password, in order to avoid login issues make sure that you ...

  • are not saving or caching the SSH password by avoiding use of ssh-add, ssh-agent, ssh-askpass, & similar commands;
  • are not sharing or caching the SSH connection, which can be disabled with option of "-S none" of ssh command as shown in the example later.

New users will be asked to set a new password that is at least 16 characters long. Please have it ready before logging in.

An example session of change of login password for fictitious user "USER-NAME" would be ('Current password' is the password provided to you initially) ... 

   ssh  -S none  USER-NAME@freia.ifa.hawaii.edu
   USER-NAME@freia.ifa.hawaii.edu's password:
   You are required to change your password immediately (administrator enforced)

   Last login: <date> from <IP address>
   WARNING: Your password has expired.
   You must change your password now and login again!
   Changing password for user USER-NAME.
   Current password:
   New password:
   Retype new password:
   passwd: all authentication tokens updated successfully.

VNC Password Change

After changing your login password, you are highly encouraged to change your VNC password via vncpasswd command. The new VNC password will go in effect only after re-start of the VNC server, so ask Anubhav (or any other available IT staff) for a re-start of the VNC server for your account.

  1. Have 8-character long password ready.
  2. Log on to freia host via SSH.
  3. Type vncpasswd on the command line.
  4. On prompt, supply your password.
  5. Let IRTF staff know to re-start the VNC server after you would have changed your VNC password.

An example session of change of VNC password for fictitious user "USER-NAME" would be ... 

   ssh USER-NAME@freia.ifa.hawaii.edu
   vncpasswd
   Password:
   Verify:
   Would you like to enter a view-only password (y/n)?
   A view-only password is not used

... then send an email to the staff to restart VNC server for your account.