Password change option for Samba server

sshutil/pass.go

@@ -0,0 +1,65 @@
+package sshutil
+
+import (
+	"bytes"
+	"context"
+	"fmt"
+	"time"
+
+	"github.com/AlexSSD7/linsk/utils"
+	"github.com/alessio/shellescape"
+	"github.com/pkg/errors"
+	"go.uber.org/multierr"
+	"golang.org/x/crypto/ssh"
+)
+
+func genericChangePass(ctx context.Context, sc *ssh.Client, user string, pwd string, cmd string) error {
+	if !utils.ValidateUnixUsername(user) {
+		return fmt.Errorf("invalid unix username")
+	}
+
+	return NewSSHSession(ctx, time.Second*10, sc, func(sess *ssh.Session) error {
+		stderr := bytes.NewBuffer(nil)
+		sess.Stderr = stderr
+
+		stdinPipe, err := sess.StdinPipe()
+		if err != nil {
+			return errors.Wrap(err, "stdin pipe")
+		}
+
+		err = sess.Start(cmd + " " + shellescape.Quote(user))
+		if err != nil {
+			return errors.Wrap(err, "start change user password cmd")
+		}
+
+		pwdBytes := []byte(pwd + "\n")
+		defer func() {
+			// Clearing the memory up for security.
+			for i := range pwdBytes {
+				pwdBytes[i] = 0
+			}
+		}()
+
+		go func() {
+			// Writing the password. We're doing this two times
+			// as we need to confirm the password.
+			_, _ = stdinPipe.Write(pwdBytes)
+			_, _ = stdinPipe.Write(pwdBytes)
+		}()
+
+		err = sess.Wait()
+		if err != nil {
+			return multierr.Combine(utils.WrapErrWithLog(err, "wait for change user password cmd", stderr.String()))
+		}
+
+		return nil
+	})
+}
+
+func ChangeUnixPass(ctx context.Context, sc *ssh.Client, user string, pwd string) error {
+	return genericChangePass(ctx, sc, user, pwd, "passwd")
+}
+
+func ChangeSambaPass(ctx context.Context, sc *ssh.Client, user string, pwd string) error {
+	return genericChangePass(ctx, sc, user, pwd, "smbpasswd -a")
+}