From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from v4.tansi.org (ns.km33513-03.keymachine.de [87.118.94.3]) by mail.saout.de (Postfix) with ESMTP for ; Fri, 1 Jul 2011 12:01:52 +0200 (CEST) Received: from gatewagner.dyndns.org (84-74-166-21.dclient.hispeed.ch [84.74.166.21]) by v4.tansi.org (Postfix) with ESMTPA id 81846205DCC for ; Fri, 1 Jul 2011 12:01:52 +0200 (CEST) Date: Fri, 1 Jul 2011 12:01:51 +0200 From: Arno Wagner Message-ID: <20110701100151.GA6533@tansi.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Subject: Re: [dm-crypt] Remote Passphrase management List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de Hi Karan, there is no passphrase reset function. However you can set multiple passphrases with LUKS and can, e.g., put a recovery passphrase in a specific slot. You can then make a header backup and store it in a database, in order to be able to reinstall that recovery passphrase. With ssh as root to the laptops, you can do this remotely and, as allways on Linux/Unix, scripted. There really is not need for a special "tool". Arno On Fri, Jul 01, 2011 at 10:14:05AM +0530, karna singh wrote: > Hi, > > Is there any integration which can be done with Dmcrypt setup so as to get > the passphrase reset function through a central management tool. > We need to roll out laptops in huge number. > laptop OS 64 Bit Ubuntu 10.04 LTS. > > -- > BR/ > *Karan* > _______________________________________________ > dm-crypt mailing list > dm-crypt@saout.de > http://www.saout.de/mailman/listinfo/dm-crypt -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier