67 lines
1.7 KiB
Go
67 lines
1.7 KiB
Go
package sshutil
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/AlexSSD7/linsk/utils"
|
|
"github.com/alessio/shellescape"
|
|
"github.com/pkg/errors"
|
|
"go.uber.org/multierr"
|
|
"golang.org/x/crypto/ssh"
|
|
)
|
|
|
|
func genericChangePass(ctx context.Context, sc *ssh.Client, user string, pwd string, cmd string) error {
|
|
if !utils.ValidateUnixUsername(user) {
|
|
return fmt.Errorf("invalid unix username")
|
|
}
|
|
|
|
return NewSSHSession(ctx, time.Second*10, sc, func(sess *ssh.Session) error {
|
|
stderr := bytes.NewBuffer(nil)
|
|
sess.Stderr = stderr
|
|
|
|
stdinPipe, err := sess.StdinPipe()
|
|
if err != nil {
|
|
return errors.Wrap(err, "stdin pipe")
|
|
}
|
|
|
|
err = sess.Start(cmd + " " + shellescape.Quote(user))
|
|
if err != nil {
|
|
return errors.Wrap(err, "start change user password cmd")
|
|
}
|
|
|
|
pwdBytes := []byte(pwd + "\n")
|
|
defer func() {
|
|
// Clearing the memory up for security.
|
|
for i := range pwdBytes {
|
|
pwdBytes[i] = 0
|
|
}
|
|
}()
|
|
|
|
go func() {
|
|
// Writing the password. We're doing this two times
|
|
// as we need to confirm the password.
|
|
_, _ = stdinPipe.Write(pwdBytes)
|
|
_, _ = stdinPipe.Write(pwdBytes)
|
|
}()
|
|
|
|
err = sess.Wait()
|
|
if err != nil {
|
|
return multierr.Combine(utils.WrapErrWithLog(err, "wait for change user password cmd", stderr.String()))
|
|
}
|
|
|
|
return nil
|
|
})
|
|
}
|
|
|
|
type ChangePassFunc func(ctx context.Context, sc *ssh.Client, user string, pwd string) error
|
|
|
|
func ChangeUnixPass(ctx context.Context, sc *ssh.Client, user string, pwd string) error {
|
|
return genericChangePass(ctx, sc, user, pwd, "passwd")
|
|
}
|
|
|
|
func ChangeSambaPass(ctx context.Context, sc *ssh.Client, user string, pwd string) error {
|
|
return genericChangePass(ctx, sc, user, pwd, "smbpasswd -a")
|
|
}
|