File manager

File manager - Edit - /home/wwwroot/httpd-2.4.62/support/dbmmanage.in

Back
#!@perlbin@ # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. #for more functionality see the HTTPD::UserAdmin module: # http://www.perl.com/CPAN/modules/by-module/HTTPD/HTTPD-Tools-x.xx.tar.gz # # usage: dbmmanage <DBMfile> <command> <user> <password> <groups> <comment> package dbmmanage; # -ldb -lndbm -lgdbm -lsdbm BEGIN { @AnyDBM_File::ISA = qw(DB_File NDBM_File GDBM_File SDBM_File) } use strict; use Fcntl; use AnyDBM_File (); sub usage { my $cmds = join "\|", sort keys %dbmc::; die <<SYNTAX; Usage: dbmmanage [enc] dbname command [username [pw [group[,group] [comment]]]] where enc is -d for crypt hashing (default except on Win32, Netware) -m for MD5 hashing (default on Win32, Netware) -s for SHA1 hashing -p for plaintext command is one of: $cmds pw of . for update command retains the old password pw of - (or blank) for update command prompts for the password groups or comment of . (or blank) for update command retains old values groups or comment of - for update command clears the existing value groups or comment of - for add and adduser commands is the empty value SYNTAX } sub need_sha1_hash { if (!eval ('require "Digest/SHA1.pm";')) { print STDERR <<SHAERR; dbmmanage SHA1 passwords require the interface or the module Digest::SHA1 available from CPAN: http://www.cpan.org/modules/by-module/Digest/Digest-MD5-2.12.tar.gz Please install Digest::SHA1 and try again, or use a different hashing option: SHAERR usage(); } } sub need_md5_hash { if (!eval ('require "Crypt/PasswdMD5.pm";')) { print STDERR <<MD5ERR; dbmmanage MD5 passwords require the module Crypt::PasswdMD5 available from CPAN http://www.cpan.org/modules/by-module/Crypt/Crypt-PasswdMD5-1.1.tar.gz Please install Crypt::PasswdMD5 and try again, or use a different hashing option: MD5ERR usage(); } } # if your osname is in $newstyle_salt, then use new style salt (starts with '_' and contains # four bytes of iteration count and four bytes of salt). Otherwise, just use # the traditional two-byte salt. # see the man page on your system to decide if you have a newer crypt() lib. # I believe that 4.4BSD derived systems do (at least BSD/OS 2.0 does). # The new style crypt() allows up to 20 characters of the password to be # significant rather than only 8. # my $newstyle_salt_platforms = join '\|', qw{bsdos}; #others? my $newstyle_salt = $^O =~ /(?:$newstyle_salt_platforms)/; # Some platforms just can't crypt() for Apache # my $crypt_not_supported_platforms = join '\|', qw{MSWin32 NetWare}; #others? my $crypt_not_supported = $^O =~ /(?:$crypt_not_supported_platforms)/; my $hash_method = "crypt"; if ($crypt_not_supported) { $hash_method = "md5"; } # Some platforms won't jump through our favorite hoops # my $not_unix_platforms = join '\|', qw{MSWin32 NetWare}; #others? my $not_unix = $^O =~ /(?:$not_unix_platforms)/; if ($crypt_not_supported) { $hash_method = "md5"; } if (@ARGV[0] eq "-d") { shift @ARGV; if ($crypt_not_supported) { print STDERR "Warning: Apache/$^O does not support crypt()ed passwords!\n\n"; } $hash_method = "crypt"; } if (@ARGV[0] eq "-m") { shift @ARGV; $hash_method = "md5"; } if (@ARGV[0] eq "-p") { shift @ARGV; if (!$crypt_not_supported) { print STDERR "Warning: Apache/$^O does not support plaintext passwords!\n\n"; } $hash_method = "plain"; } if (@ARGV[0] eq "-s") { shift @ARGV; need_sha1_hash(); $hash_method = "sha1"; } if ($hash_method eq "md5") { need_md5_hash(); } my($file,$command,$key,$hashed_pwd,$groups,$comment) = @ARGV; usage() unless $file and $command and defined &{$dbmc::{$command}}; # remove extension if any my $chop = join '\|', qw{db.? pag dir}; $file =~ s/\.($chop)$//; my $is_update = $command eq "update"; my %DB = (); my @range = (); my($mode, $flags) = $command =~ /^(?:view\|check)$/ ? (0644, O_RDONLY) : (0644, O_RDWR\|O_CREAT); tie (%DB, "AnyDBM_File", $file, $flags, $mode) \|\| die "Can't tie $file: $!"; dbmc->$command(); untie %DB; my $x; sub genseed { my $psf; if ($not_unix) { srand (time ^ $$ or time ^ ($$ + ($$ << 15))); } else { for (qw(-xlwwa -le)) { `ps $_ 2>/dev/null`; $psf = $_, last unless $?; } srand (time ^ $$ ^ unpack("%L*", `ps $psf \| gzip -f`)); } @range = (qw(. /), '0'..'9','a'..'z','A'..'Z'); $x = int scalar @range; } sub randchar { join '', map $range[rand $x], 1..shift\|\|1; } sub saltpw_crypt { genseed() unless @range; return $newstyle_salt ? join '', "_", randchar, "a..", randchar(4) : randchar(2); } sub hashpw_crypt { my ($pw, $salt) = @_; $salt = saltpw_crypt unless $salt; crypt $pw, $salt; } sub saltpw_md5 { genseed() unless @range; randchar(8); } sub hashpw_md5 { my($pw, $salt) = @_; $salt = saltpw_md5 unless $salt; Crypt::PasswdMD5::apache_md5_crypt($pw, $salt); } sub hashpw_sha1 { my($pw, $salt) = @_; '{SHA}' . Digest::SHA1::sha1_base64($pw) . "="; } sub hashpw { if ($hash_method eq "md5") { return hashpw_md5(@_); } elsif ($hash_method eq "sha1") { return hashpw_sha1(@_); } elsif ($hash_method eq "crypt") { return hashpw_crypt(@_); } @_[0]; # otherwise return plaintext } sub getpass { my $prompt = shift \|\| "Enter password:"; unless($not_unix) { open STDIN, "/dev/tty" or warn "couldn't open /dev/tty $!\n"; system "stty -echo;"; } my($c,$pwd); print STDERR $prompt; while (($c = getc(STDIN)) ne '' and $c ne "\n" and $c ne "\r") { $pwd .= $c; } system "stty echo" unless $not_unix; print STDERR "\n"; die "Can't use empty password!\n" unless length $pwd; return $pwd; } sub dbmc::update { die "Sorry, user `$key' doesn't exist!\n" unless $DB{$key}; $hashed_pwd = (split /:/, $DB{$key}, 3)[0] if $hashed_pwd eq '.'; $groups = (split /:/, $DB{$key}, 3)[1] if !$groups \|\| $groups eq '.'; $comment = (split /:/, $DB{$key}, 3)[2] if !$comment \|\| $comment eq '.'; if (!$hashed_pwd \|\| $hashed_pwd eq '-') { dbmc->adduser; } else { dbmc->add; } } sub dbmc::add { die "Can't use empty password!\n" unless $hashed_pwd; unless($is_update) { die "Sorry, user `$key' already exists!\n" if $DB{$key}; } $groups = '' if $groups eq '-'; $comment = '' if $comment eq '-'; $groups .= ":" . $comment if $comment; $hashed_pwd .= ":" . $groups if $groups; $DB{$key} = $hashed_pwd; my $action = $is_update ? "updated" : "added"; print "User $key $action with password hashed to $DB{$key} using $hash_method\n"; } sub dbmc::adduser { my $value = getpass "New password:"; die "They don't match, sorry.\n" unless getpass("Re-type new password:") eq $value; $hashed_pwd = hashpw $value; dbmc->add; } sub dbmc::delete { die "Sorry, user `$key' doesn't exist!\n" unless $DB{$key}; delete $DB{$key}, print "`$key' deleted\n"; } sub dbmc::view { print $key ? "$key:$DB{$key}\n" : map { "$_:$DB{$_}\n" if $DB{$_} } keys %DB; } sub dbmc::check { die "Sorry, user `$key' doesn't exist!\n" unless $DB{$key}; my $chkpass = (split /:/, $DB{$key}, 3)[0]; my $testpass = getpass(); if (substr($chkpass, 0, 6) eq '$apr1$') { need_md5_hash; $hash_method = "md5"; } elsif (substr($chkpass, 0, 5) eq '{SHA}') { need_sha1_hash; $hash_method = "sha1"; } elsif (length($chkpass) == 13 && $chkpass ne $testpass) { $hash_method = "crypt"; } else { $hash_method = "plain"; } print $hash_method . (hashpw($testpass, $chkpass) eq $chkpass ? " password ok\n" : " password mismatch\n"); } sub dbmc::import { while(defined($_ = <STDIN>) and chomp) { ($key,$hashed_pwd,$groups,$comment) = split /:/, $_, 4; dbmc->add; } }

| ver. 1.4 | Github | . | PHP 7.2.34 | Generation time: 0.25 | proxy | phpinfo | Settings