mxmehl/uberspace-webadmin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

password anti-disclosure for python script

Browse Source
This commit is contained in:
mxmehl
2015-07-10 14:25:02 +03:00
parent e39023e6fd
commit 36241cc688
2 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
action.sh
View File

@@ -29,9 +29,10 @@
if [ ! -e config.cfg ]; then echo "Missing config.cfg file. Edit and rename config.cfg.sample"; exit 1; fi if [ ! -e config.cfg ]; then echo "Missing config.cfg file. Edit and rename config.cfg.sample"; exit 1; fi
source config.cfg source config.cfg
ACTION="$1" # adduser, changepw, listusers, userdetail, deluser, sizeall, sizeuser, viewdata ACTION=$1 # adduser, changepw, listusers, userdetail, deluser, sizeall, sizeuser, viewdata
USER="$2" USER=$2
PASS=$(cat "$3") # $3 is a file containing the password PASSFILE=$3 # $3 is a file containing the password
PASS=$(cat "$3")
## FUNCTIONS ## FUNCTIONS
function checkaction { function checkaction {
@@ -199,7 +200,7 @@ if [ "$ACTION" == "changepw" ]; then
exit 1 exit 1
fi fi
python changepw.py "$USER" "$PASS" python changepw.py "$USER" "$PASSFILE"
if [ $? == 0 ]; then if [ $? == 0 ]; then
# Send infomail # Send infomail

7
changepw.py
View File

@@ -5,7 +5,12 @@ import pexpect
# Read variables of first and second given argument # Read variables of first and second given argument
user = str(sys.argv[1]) user = str(sys.argv[1])
password = str(sys.argv[2]) passwordfile = str(sys.argv[2])
# Read content of passwordfile and put as variable "password"
with open (passwordfile, "r") as myfile:
password=myfile.read().replace('\n', '')
# Define function # Define function
def _vchangepw(user, password): def _vchangepw(user, password):