crans/scripts
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

en fait c'est comme on veut, insensible la casse, mme si beaucoup

Browse source 
prfrent des majuscules.
pour mettre tout le monde content, on est completement insensible  la casse

darcs-hash:20060428000945-4ec08-5e9d3af39d4ce4ca82d6361b26e3daf2ed2811db.gz
This commit is contained in:
chove 2006-04-28 02:09:45 +02:00
parent 0c43bc40d8
commit 219e0d050e
1 changed files with 24 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

58
gestion/ldap_passwd.py
View file

@ -1,7 +1,7 @@
# -*- coding: iso8859-15 -*- # -*- coding: iso8859-15 -*-
############################################################################### ###############################################################################
# ldap_passwd.py : manipulation des mots de passes LDAP # ldap_passwd.py : manipulation des mots de passes LDAP
# $Id: ldap_passwd.py,v 1.2 2006-04-28 00:01:09 chove Exp $ # $Id: ldap_passwd.py,v 1.3 2006-04-28 00:09:45 chove Exp $
############################################################################### ###############################################################################
# The authors of this code are # The authors of this code are
# Bjorn Ove Grotan <bgrotan@grotan.com> # Bjorn Ove Grotan <bgrotan@grotan.com>
@ -57,6 +57,19 @@ try:
except: except:
smb = False smb = False
algos={}
algos = {
'ssha':'Seeded SHA',
'sha':'Secure Hash Algorithm',
'md5':'MD5',
'smd5':'Seeded MD5',
'crypt':'standard unix crypt'
}
if smb:
algos['lmpassword'] = 'lan man hash'
algos['ntpassword'] = 'nt hash'
def getsalt(chars=string.letters+string.digits, length=16): def getsalt(chars=string.letters+string.digits, length=16):
''' Generate a random salt. Default length is 16 ''' ''' Generate a random salt. Default length is 16 '''
salt = '' salt = ''
@ -70,37 +83,25 @@ def mkpasswd(pwd, sambaver=3, algo='SSHA', salt=getsalt()):
LDAP - so default is seeded sha LDAP - so default is seeded sha
''' '''
alg = { if algo not in algos.keys():
'SSHA':'Seeded SHA',
'SHA':'Secure Hash Algorithm',
'MD5':'MD5',
'SMD5':'Seeded MD5',
'crypt':'standard unix crypt'
}
if smb:
alg['LMPassword'] = 'lan man hash'
alg['NTPassword'] = 'nt hash'
if algo not in alg.keys():
raise TypeError, 'Algorithm <%s> not supported in this version.' % algo raise TypeError, 'Algorithm <%s> not supported in this version.' % algo
if algo == 'SSHA': if algo == 'ssha':
pwdhash = "{SSHA}" + base64.encodestring(sha.new(str(pwd) + salt).digest() + salt) pwdhash = "{SSHA}" + base64.encodestring(sha.new(str(pwd) + salt).digest() + salt)
elif algo =='SHA': elif algo =='sha':
pwdhash = "{SHA}" + base64.encodestring(sha.new(str(pwd)).digest()) pwdhash = "{SHA}" + base64.encodestring(sha.new(str(pwd)).digest())
elif algo =='MD5': elif algo =='md5':
pwdhash = "{MD5}" + base64.encodestring(md5.new(str(pwd)).digest()) pwdhash = "{MD5}" + base64.encodestring(md5.new(str(pwd)).digest())
elif algo == 'SMD5': elif algo == 'smd5':
pwdhash = "{SMD5}" + base64.encodestring(md5.new(str(pwd) + salt).digest() + salt) pwdhash = "{SMD5}" + base64.encodestring(md5.new(str(pwd) + salt).digest() + salt)
elif algo =='crypt': elif algo =='crypt':
pwdhash = "{crypt}" + crypt.crypt(str(pwd),getsalt(length=2)) # crypt only uses a salt of length 2 pwdhash = "{CRYPT}" + crypt.crypt(str(pwd),getsalt(length=2)) # crypt only uses a salt of length 2
elif algo == 'LMPassword': elif algo == 'lmpassword':
if sambaver==3: if sambaver==3:
pwdhash = "{sambaLMPassword}" + smbpasswd.lmhash(pwd) pwdhash = "{sambaLMPassword}" + smbpasswd.lmhash(pwd)
elif sambaver==2: elif sambaver==2:
pwdhash = "{lmPassword}" + smbpasswd.lmhash(pwd) pwdhash = "{lmPassword}" + smbpasswd.lmhash(pwd)
elif algo == 'NTPassword': elif algo == 'ntpassword':
if sambaver == 3: if sambaver == 3:
pwdhash = "{sambaNTPassword}" + smbpasswd.lmhash(pwd) pwdhash = "{sambaNTPassword}" + smbpasswd.lmhash(pwd)
elif sambaver == 2: elif sambaver == 2:
@ -110,19 +111,8 @@ def mkpasswd(pwd, sambaver=3, algo='SSHA', salt=getsalt()):
def checkpwd(pwd, pwdhash): def checkpwd(pwd, pwdhash):
''' Check if the password matches the hash ''' ''' Check if the password matches the hash '''
alg = {
'SSHA':'Seeded SHA',
'SHA':'Secure Hash Algorithm',
'MD5':'MD5',
'SMD5':'Seeded MD5',
'crypt':'standard unix crypt'
}
if smb:
alg['LMPassword'] = 'lan man hash'
alg['NTPassword'] = 'nt hash'
algo = pwdhash[1:].split('}')[0] algo = pwdhash[1:].split('}')[0]
algo = algo.lower()
if algo.startswith('samba'): if algo.startswith('samba'):
sambaver = 3 sambaver = 3
@ -130,7 +120,7 @@ def checkpwd(pwd, pwdhash):
else: else:
sambaver = 2 sambaver = 2
if not algo in alg.keys(): if not algo in algos.keys():
raise TypeError, 'Algorithm <%s> not supported in this version.' % algo raise TypeError, 'Algorithm <%s> not supported in this version.' % algo
if alg[algo].startswith('Seeded '): if alg[algo].startswith('Seeded '):