diff options
author | Hugues Hiegel <root@paranoid> | 2015-02-22 12:58:46 +0100 |
---|---|---|
committer | Hugues Hiegel <root@paranoid> | 2015-02-22 12:58:46 +0100 |
commit | b2034fdfec040a67988e543a911208ef2491ce7a (patch) | |
tree | f970dfabc63f59adac7b948cb0211d6ae926d29f /password/helpers/chpass-wrapper.py |
New RoundCube Plugins Git folder
Diffstat (limited to 'password/helpers/chpass-wrapper.py')
-rw-r--r-- | password/helpers/chpass-wrapper.py | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/password/helpers/chpass-wrapper.py b/password/helpers/chpass-wrapper.py new file mode 100644 index 0000000..61bba84 --- /dev/null +++ b/password/helpers/chpass-wrapper.py @@ -0,0 +1,32 @@ +#!/usr/bin/env python + +import sys +import pwd +import subprocess + +BLACKLIST = ( + # add blacklisted users here + #'user1', +) + +try: + username, password = sys.stdin.readline().split(':', 1) +except ValueError, e: + sys.exit('Malformed input') + +try: + user = pwd.getpwnam(username) +except KeyError, e: + sys.exit('No such user: %s' % username) + +if user.pw_uid < 1000: + sys.exit('Changing the password for user id < 1000 is forbidden') + +if username in BLACKLIST: + sys.exit('Changing password for user %s is forbidden (user blacklisted)' % + username) + +handle = subprocess.Popen('/usr/sbin/chpasswd', stdin = subprocess.PIPE) +handle.communicate('%s:%s' % (username, password)) + +sys.exit(handle.returncode) |