Compliance: change default password for log-hybrid sftp/upload accounts
2 years ago
Originally Published: 2015-01-30
Article Number
000058770
Applies To
RSA Product Set: Security Analytics
RSA Product/Service Type: SA Core Appliance
RSA Version/Condition: 10.4.0.2
Platform: Linux
Product Name: SA-HYBRID-L
Product Description: SecAnlytcs Hybrd Dplymnt Logs
Issue
How to procedure to change default passwords throughout the system.
What is the default password for the below accounts and can they be modified?

Mostly concerned with the rssh account since this one appears to be able to shell in.
This is after SSH into the log-hybrid. sftp:x:500:500:Nw Log Collector Upload User:/upload:/sbin/nologin sftp:XXXXXXXXXXX:1:60:7::: default password? upload:x:501:501:Nw Log Collector Upload User:/home/upload:/usr/bin/rssh upload:XXXXXXXXXX:0:1:60:7::: default password?
Resolution
In this case Both the sftp user and the upload user, when created, have random default passwords. The upload user password can be changed/modified using the 'sudo passwd upload' command as I mentioned before. You can do the same for the sftp user, but the authentication session requires you to only use public key exchange, so there is no point of the password for the sftp user.