[LON-CAPA-admin] [was LON-CAPA-users] mass resetting internal aauth passwords

[H. K. Ng]

This semester, on fsuK12 domain, I have to reset a lot of passwords 
so I wrote a script that resets a student password to the username. 
It is linked from a resource on the res space. When a course 
coordinator clicks on the link, it displays another link which 
displays the class list for students with internal passwords only. 
There is a select button next to the student name. If the cc clicks 
on it, the script resets the password, one at a time - not what Ray 
wants but still a lot faster than doing it via dc.

Not sure if people wants it - currently it is not general enough 
since the script runs on the lib server and it is hard coded in. Is 
there is way to get the library server name for a user domain?

-hk


>>On Thu, 14 Sep 2006, Ray Batchelor wrote:
>>>
>>>     How can one quickly reset the passwords for a bunch of internally
>>>authenticated students in a hosted course??  Course coordinators
>>>can't reset
>>>passwords, it seems to me.
>
>
>On Sep 14, 2006, at 8:05 PM, lucasm at ohiou.edu wrote:
>
>>
>>Have fun, Ray. This is a domain coordinator only ability as far as
>>I know.
>
>Yep. At some point, I would like to add the functionality that if a
>domain coordinator impersonates a course coordinator, they can upload
>class lists and overwrite the password. I have spend longer than I
>care to admit resetting passwords one-by-one by hand.
>
>>I have considered writing a script to do this, but I'm not sure
>>this is sanctioned behavior for root!
>
>A script is the way to go for now, I think. The file is
>
>/home/httpd/lonUsers/(your_domain)/(first)/(second)/(third)/ 
>(username)/password
>
>for example
>
>/home/httpd/lonUsers/msu/k/o/r/kortemey/password
>
>For internally authenticated, it looks like this:
>
>internal:3XbDe45Bh
>
>where the latter is the encrypted password.
>
>Reset one password by hand, and copy that file to the rest of the
>users. Somebody probably already has a script like that ...
>
>BTW, the reason that course coordinators cannot do this is that the
>confusion would be great if a kid is already in some courses, and
>then their password gets messed up because they were added to another
>course. We didn't want passwords to bounce around like that at the
>discretion of just any course coordinator.
>
>- Gerd.
>_______________________________________________
>LON-CAPA-admin mailing list
>LON-CAPA-admin at mail.lon-capa.org
>http://mail.lon-capa.org/mailman/listinfo/lon-capa-admin