Changeset 1935 for trunk/LATMOS-Accounts/lib

Timestamp:

01/17/17 17:38:36 (7 years ago)

Author:

nanardon

Message:

Add a way to inject UNIX password into base supporting it

Location:

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases

Files:

• Ldap/User.pm (modified) (2 diffs)
• Objects.pm (modified) (1 diff)
• Sql/User.pm (modified) (1 diff)
• Unix/User.pm (modified) (1 diff)

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Ldap/User.pm

@@ -101 +101 @@
         },
         homeDirectory => { },
-        userPassword => { },
         loginShell => { },
         gecos => { },
@@ -298 +297 @@
 }
 
+=head2 _InjectCryptPasswd($cryptpasswd)
+
+Inject a password encrypted using standard UNIX method.
+
+Works only for unix authentification method inside LDAP
+
+=cut
+
+sub _InjectCryptPasswd {
+    my ($self, $cryptpasswd) = @_;
+
+    my $res = $self->set_fields(
+        userPassword => '{CRYPT}' . $cryptpasswd,
+    );
+
+    if ($res) {
+        $self->base->log(LA_NOTICE, 'Crypted password injected for %s', $self->id);
+        return 1;
+    } else {
+        $self->base->log(LA_ERR, 'Cannot inject crypted password for %s', $self->id);
+        return 0;
+    }
+}
+
 1;
 

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Objects.pm

@@ -551 +551 @@
 
     return fascist_check($password, $dictionary);
+}
+
+=head2 InjectCryptPasswd($cryptpasswd)
+
+Inject a password encrypted using standard UNIX method.
+
+=cut
+
+sub InjectCryptPasswd {
+    my ($self, $cryptpasswd) = @_;
+
+    if ($self->can('_InjectCryptPasswd')) {
+        return $self->_InjectCryptPasswd($cryptpasswd);
+    } else {
+        $self->base->log('Injecting unix crypt password is not supported');
+        return;
+    }
 }
 

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Sql/User.pm

@@ -1869 +1869 @@
 }
 
+=head2 _InjectCryptPasswd($cryptpasswd)
+
+Inject a password encrypted using standard UNIX method.
+
+The passwrod will be used to authenticate user inside the application but it
+will not be transmit to any other database.
+
+=cut
+
+sub _InjectCryptPasswd {
+    my ($self, $cryptpasswd) = @_;
+
+    if (my $current = $self->get_field('userPassword')) {
+        if ($cryptpasswd eq $current) {
+            return 1;
+        }
+    }
+    my $res = $self->set_fields('userPassword', $cryptpasswd);
+
+    if ($res) {
+        $self->base->log(LA_NOTICE, 'Crypted password injected for %s', $self->id);
+        return 1;
+    } else {
+        $self->base->log(LA_ERR, 'Cannot inject crypted password for %s', $self->id);
+        return 0;
+    }
+}
 
 =head2 GenPasswordResetId

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Unix/User.pm

@@ -138 +138 @@
 }
 
+=head2 _InjectCryptPasswd($cryptpasswd)
+
+Inject a password encrypted using standard UNIX method.
+
+=cut
+
+sub _InjectCryptPasswd {
+    my ($self, $cryptpasswd) = @_;
+
+    my $res = $self->set_c_fields(
+        userPassword => $cryptpasswd,
+    );
+
+    if ($res) {
+        $self->base->log(LA_NOTICE, 'Crypted password injected for %s', $self->id);
+        return 1;
+    } else {
+        $self->base->log(LA_ERR, 'Cannot inject crypted password for %s', $self->id);
+        return 0;
+    }
+}
+
 1;