Viewing file: htpasswd-file-lib.pl (5.95 KB) -rwxr-xr-x Select action/file-type: (+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
# htpasswd-file-lib.pl # Functions for reading and writing a .htpasswd format file # XXX md5 and old password
BEGIN { push(@INC, ".."); }; use WebminCore; if (!$module_name) { &init_config(); %access = &get_module_acl(); } do 'md5-lib.pl'; $htdigest_command = &has_command("htdigest") || &has_command("htdigest2");
# list_users([file]) # Returns an array of user and password details from the given file sub list_users { local $file = $_[0] || $config{'file'}; if (!defined($list_authusers_cache{$file})) { $list_authusers_cache{$file} = [ ]; local $_; local $lnum = 0; local $count = 0; open(HTPASSWD, $file); while(<HTPASSWD>) { if (/^(#?)\s*([^:]+):(\S*)/) { push(@{$list_authusers_cache{$file}}, { 'user' => $2, 'pass' => $3, 'enabled' => !$1, 'file' => $file, 'line' => $lnum, 'index' => $count++ }); } $lnum++; } close(HTPASSWD); } return $list_authusers_cache{$file}; }
# list_digest_users([file]) # Returns an array of user, domain and password details from the given file sub list_digest_users { local $file = $_[0] || $config{'file'}; if (!defined($list_authusers_cache{$file})) { $list_authusers_cache{$file} = [ ]; local $_; local $lnum = 0; local $count = 0; open(HTPASSWD, $file); while(<HTPASSWD>) { if (/^(#?)\s*(\S+):(\S+):(\S*)/) { push(@{$list_authusers_cache{$file}}, { 'user' => $2, 'dom' => $3, 'pass' => $4, 'enabled' => !$1, 'digest' => 1, 'file' => $file, 'line' => $lnum, 'index' => $count++ }); } $lnum++; } close(HTPASSWD); } return $list_authusers_cache{$file}; }
# modify_user(&user) sub modify_user { local $lref = &read_file_lines($_[0]->{'file'}); if ($_[0]->{'digest'}) { $lref->[$_[0]->{'line'}] = ($_[0]->{'enabled'} ? "" : "#"). "$_[0]->{'user'}:$_[0]->{'dom'}:$_[0]->{'pass'}"; } else { $lref->[$_[0]->{'line'}] = ($_[0]->{'enabled'} ? "" : "#"). "$_[0]->{'user'}:$_[0]->{'pass'}"; } &flush_file_lines($_[0]->{'file'}); }
# create_user(&user, [file]) sub create_user { $_[0]->{'file'} = $_[1] || $config{'file'}; local $lref = &read_file_lines($_[0]->{'file'}); $_[0]->{'line'} = @$lref; if ($_[0]->{'digest'}) { push(@$lref, ($_[0]->{'enabled'} ? "" : "#"). "$_[0]->{'user'}:$_[0]->{'dom'}:$_[0]->{'pass'}"); } else { push(@$lref, ($_[0]->{'enabled'} ? "" : "#"). "$_[0]->{'user'}:$_[0]->{'pass'}"); } &flush_file_lines($_[0]->{'file'}); $_[0]->{'index'} = @{$list_authusers_cache{$_[0]->{'file'}}}; push(@{$list_authusers_cache{$_[0]->{'file'}}}, $_[0]); }
# delete_user(&user) sub delete_user { local $lref = &read_file_lines($_[0]->{'file'}); splice(@$lref, $_[0]->{'line'}, 1); &flush_file_lines($_[0]->{'file'}); splice(@{$list_authusers_cache{$_[0]->{'file'}}}, $_[0]->{'index'}, 1); map { $_->{'line'}-- if ($_->{'line'} > $_[0]->{'line'}) } @{$list_authusers_cache{$_[0]->{'file'}}}; }
# encrypt_password(string, [old], md5mode) sub encrypt_password { &seed_random(); if ($_[2] == 1) { # MD5 return &encrypt_md5($_[0], $_[1]); } elsif ($_[2] == 2) { # SHA1 return &encrypt_sha1($_[0]); } elsif ($_[2] == 3) { # Digest return &digest_password(undef, undef, $_[0]); } else { # Crypt if ($gconfig{'os_type'} eq 'windows' && &has_command("htpasswd")) { # Call htpasswd program local $qp = quotemeta($_[0]); local $out = `htpasswd -n -b foo $qp 2>&1 <$null_file`; if ($out =~ /^foo:(\S+)/) { return $1; } else { &error("htpasswd failed : $out"); } } else { # Use built-in encryption code local $salt = $_[1] || chr(int(rand(26))+65).chr(int(rand(26))+65); return &unix_crypt($_[0], $salt); } } }
# digest_password(user, realm, pass) # Encrypts a password in the format used by htdigest sub digest_password { local ($user, $dom, $pass) = @_; local $temp = &tempname(); eval "use Digest::MD5"; if (!$@) { # Use the digest::MD5 module to do the encryption directly return Digest::MD5::md5_hex("$user:$dom:$pass"); } else { # Shell out to htdigest command &foreign_require("proc", "proc-lib.pl"); local ($fh, $fpid) = &proc::pty_process_exec("$htdigest_command -c $temp ".quotemeta($dom)." ".quotemeta($user)); &wait_for($fh, "password:"); &sysprint($fh, "$pass\n"); &wait_for($fh, "password:"); &sysprint($fh, "$pass\n"); &wait_for($fh); close($fh); local $tempusers = &list_digest_users($temp); unlink($temp); return $tempusers->[0]->{'pass'}; } }
# list_groups(file) # Returns an array of group details from the given file sub list_groups { local $file = $_[0]; if (!defined($list_authgroups_cache{$file})) { $list_authgroups_cache{$file} = [ ]; local $_; local $lnum = 0; local $count = 0; open(HTPASSWD, $file); while(<HTPASSWD>) { if (/^(#?)\s*(\S+):\s*(.*)/) { push(@{$list_authgroups_cache{$file}}, { 'group' => $2, 'enabled' => !$1, 'members' => [ split(/\s+/, $3) ], 'file' => $file, 'line' => $lnum, 'index' => $count++ }); } $lnum++; } close(HTPASSWD); } return $list_authgroups_cache{$file}; }
# modify_group(&group) sub modify_group { local $lref = &read_file_lines($_[0]->{'file'}); $lref->[$_[0]->{'line'}] = ($_[0]->{'enabled'} ? "" : "#"). "$_[0]->{'group'}: ". join(" ", @{$_[0]->{'members'}}); &flush_file_lines(); }
# create_group(&group, [file]) sub create_group { $_[0]->{'file'} = $_[1] || $config{'file'}; local $lref = &read_file_lines($_[0]->{'file'}); $_[0]->{'line'} = @$lref; push(@$lref, ($_[0]->{'enabled'} ? "" : "#"). "$_[0]->{'group'}: ". join(" ", @{$_[0]->{'members'}})); &flush_file_lines(); $_[0]->{'index'} = @{$list_authgroups_cache{$_[0]->{'file'}}}; push(@{$list_authgroups_cache{$_[0]->{'file'}}}, $_[0]); }
# delete_group(&group) sub delete_group { local $lref = &read_file_lines($_[0]->{'file'}); splice(@$lref, $_[0]->{'line'}, 1); &flush_file_lines(); splice(@{$list_authgroups_cache{$_[0]->{'file'}}}, $_[0]->{'index'}, 1); map { $_->{'line'}-- if ($_->{'line'} > $_[0]->{'line'}) } @{$list_authgroups_cache{$_[0]->{'file'}}}; }
1;
|