diff options
author | rcritten@redhat.com <rcritten@redhat.com> | 2007-09-21 10:24:36 -0400 |
---|---|---|
committer | rcritten@redhat.com <rcritten@redhat.com> | 2007-09-21 10:24:36 -0400 |
commit | 7b969737112c7a26711c3d4a9713ef1ca30f1be8 (patch) | |
tree | 27c9475aaa3951de88eabedfe2e1a125225fe2fe /ipa-admintools/ipa-passwd | |
parent | 919d037189cd3134d3eb4ba07b5ce131f018936f (diff) | |
download | freeipa-7b969737112c7a26711c3d4a9713ef1ca30f1be8.tar.gz freeipa-7b969737112c7a26711c3d4a9713ef1ca30f1be8.tar.xz freeipa-7b969737112c7a26711c3d4a9713ef1ca30f1be8.zip |
Give ipa-adduser, ipa-addgroup and ipa-usermod an interactive mode
Add ipa-passwd tool
Add simple field validation package
This patch adds a package requirement, python-krbV. This is needed to
determine the current user based on their kerberos ticket.
Diffstat (limited to 'ipa-admintools/ipa-passwd')
-rw-r--r-- | ipa-admintools/ipa-passwd | 99 |
1 files changed, 99 insertions, 0 deletions
diff --git a/ipa-admintools/ipa-passwd b/ipa-admintools/ipa-passwd new file mode 100644 index 00000000..20dea562 --- /dev/null +++ b/ipa-admintools/ipa-passwd @@ -0,0 +1,99 @@ +#! /usr/bin/python -E +# Authors: Rob Crittenden <rcritten@redhat.com> +# +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of the GNU General Public License as +# published by the Free Software Foundation; version 2 only +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, write to the Free Software +# Foundation, Inc., 59 Tempal Place, Suite 330, Boston, MA 02111-1307 USA +# + +import sys +from optparse import OptionParser +import ipa +import ipa.ipaclient as ipaclient +import ipa.config + +import xmlrpclib +import kerberos +import krbV +import ldap +import getpass + +def usage(): + print "ipa-passwd [user]" + sys.exit(1) + +def parse_options(): + parser = OptionParser() + parser.add_option("--usage", action="store_true", + help="Program usage") + + args = ipa.config.init_config(sys.argv) + options, args = parser.parse_args(args) + + return options, args + +def get_principal(): + try: + ctx = krbV.default_context() + ccache = ctx.default_ccache() + cprinc = ccache.principal() + except krbV.Krb5Error, e: + print "Unable to get kerberos principal: %s" % e[1] + return None + + return cprinc.name + +def main(): + match = False + + options, args = parse_options() + + if len(args) == 2: + username = args[1] + else: + username = get_principal() + if username is None: + return 1 + + u = username.split('@') + if len(u) > 1: + username = u[0] + + print "Changing password for %s" % username + + while (match != True): + # No syntax checking of the password is required because that is done + # on the server side + password = getpass.getpass(" New Password: ") + confirm = getpass.getpass(" New Password (again): ") + if (password != confirm): + print "Passwords do not match" + match = False + else: + match = True + if (len(password) < 1): + print "Password cannot be empty" + match = False + + try: + client = ipaclient.IPAClient() + client.modifyPassword(username, None, password) + except ipa.ipaerror.IPAError, e: + print "%s" % (e.message) + return 1 + + return 0 + +main() |