#!/bin/bash # info: check user password # options: USER PASSWORD [IP] # # The function verifies user password from file #----------------------------------------------------------# # Variable&Function # #----------------------------------------------------------# # Argument defenition user=$1 password=$2; HIDE=2 ip=${3-127.0.0.1} # Includes source $VESTA/func/main.sh source $VESTA/conf/vesta.conf #----------------------------------------------------------# # Verifications # #----------------------------------------------------------# check_args '2' "$#" 'USER PASSWORD' validate_format 'user' # Checking user if [ ! -d "$VESTA/data/users/$user" ] && [ "$user" != 'root' ]; then echo "Error: password missmatch" echo "$DATE $TIME $user $ip failed to login" >> $VESTA/log/auth.log exit 9 fi # Checking user password is_password_valid # Checking empty password if [[ -z "$password" ]]; then echo "Error: password missmatch" echo "$DATE $TIME $user $ip failed to login" >> $VESTA/log/auth.log exit 9 fi #----------------------------------------------------------# # Action # #----------------------------------------------------------# # Parsing user's salt shadow=$(grep "^$user:" /etc/shadow) salt=$(echo "$shadow" |cut -f 3 -d \$) method=$(echo "$shadow" |cut -f 2 -d \$) if [ "$method" -eq '1' ]; then method='md5' else method='sha-512' fi if [ -z "$salt" ]; then echo "Error: password missmatch" echo "$DATE $TIME $user $ip failed to login" >> $VESTA/log/auth.log exit 9 fi # Generating SHA-512 hash=$($BIN/v-generate-password-hash $method $salt <<< $password) if [[ -z "$hash" ]]; then echo "Error: password missmatch" echo "$DATE $TIME $user $ip failed to login" >> $VESTA/log/auth.log exit 9 fi # Checking hash result=$(grep "^$user:$hash:" /etc/shadow 2>/dev/null) if [[ -z "$result" ]]; then echo "Error: password missmatch" echo "$DATE $TIME $user $ip failed to login" >> $VESTA/log/auth.log exit 9 fi #----------------------------------------------------------# # Vesta # #----------------------------------------------------------# # Logging echo "$DATE $TIME $user $ip successfully logged in" >> $VESTA/log/auth.log exit