You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
132 lines
3.2 KiB
132 lines
3.2 KiB
#!/bin/bash
|
|
# info: get user salt
|
|
# options: USER [IP] [FORMAT]
|
|
#
|
|
# example: v-get-user-salt admin
|
|
#
|
|
# This function provides users salt
|
|
|
|
#----------------------------------------------------------#
|
|
# Variables & Functions #
|
|
#----------------------------------------------------------#
|
|
|
|
# Argument definition
|
|
user=$1
|
|
ip46=${2-127.0.0.1}
|
|
format=${3-shell}
|
|
|
|
# Includes
|
|
# shellcheck source=/etc/hestiacp/hestia.conf
|
|
source /etc/hestiacp/hestia.conf
|
|
# shellcheck source=/usr/local/hestia/func/main.sh
|
|
source $HESTIA/func/main.sh
|
|
# shellcheck source=/usr/local/hestia/conf/hestia.conf
|
|
source $HESTIA/conf/hestia.conf
|
|
# load config file
|
|
source_conf "$HESTIA/conf/hestia.conf"
|
|
|
|
time_n_date=$(date +'%T %F')
|
|
time=$(echo "$time_n_date" | cut -f 1 -d \ )
|
|
date=$(echo "$time_n_date" | cut -f 2 -d \ )
|
|
|
|
# JSON list function
|
|
json_list() {
|
|
echo '{'
|
|
echo ' "'$user'": {
|
|
"METHOD": "'$method'",
|
|
"SALT": "'$salt'",
|
|
"TIME": "'$time'",
|
|
"DATE": "'$date'",
|
|
"ROUND":"'$round'"
|
|
}'
|
|
echo '}'
|
|
}
|
|
|
|
# SHELL list function
|
|
shell_list() {
|
|
echo "METHOD: $method"
|
|
echo "SALT: $salt"
|
|
echo "ROUND: $round"
|
|
}
|
|
|
|
# PLAIN list function
|
|
plain_list() {
|
|
echo -e "$method\t$salt\t$round"
|
|
}
|
|
|
|
# CSV list function
|
|
csv_list() {
|
|
echo "METHOD,SALT,ROUND"
|
|
echo "$method, $salt, $round"
|
|
}
|
|
|
|
#----------------------------------------------------------#
|
|
# Verifications #
|
|
#----------------------------------------------------------#
|
|
|
|
check_args '1' "$#" 'USER [IP] [FORMAT]'
|
|
is_format_valid 'user' 'ip46'
|
|
|
|
# Checking user
|
|
if [ ! -d "$HESTIA/data/users/$user" ]; then
|
|
echo "Error: password missmatch"
|
|
echo "$date $time $user $ip46 failed to login" >> $HESTIA/log/auth.log
|
|
exit 9
|
|
fi
|
|
|
|
#----------------------------------------------------------#
|
|
# Action #
|
|
#----------------------------------------------------------#
|
|
|
|
# Parsing user's salt
|
|
shadow=$(grep "^$user:" /etc/shadow | cut -f 2 -d :)
|
|
|
|
if echo "$shadow" | grep -qE '^\$[0-9a-z]+\$[^\$]+\$'; then
|
|
salt=$(echo "$shadow" | cut -f 3 -d \$)
|
|
round=""
|
|
if [[ "$salt" =~ ^rounds= ]]; then
|
|
round=$salt
|
|
salt=$(echo "$shadow" | cut -f 4 -d \$)
|
|
fi
|
|
method=$(echo "$shadow" | cut -f 2 -d \$)
|
|
if [ "$method" = "y" ]; then
|
|
method='yescrypt'
|
|
salt=$(echo "$shadow" | cut -f 4 -d \$)
|
|
elif [ "$method" -eq '1' ]; then
|
|
method='md5'
|
|
elif [ "$method" -eq '6' ]; then
|
|
method='sha-512'
|
|
else
|
|
echo "Error: password missmatch"
|
|
echo "$date $time $user $ip46 failed to login" >> $HESTIA/log/auth.log
|
|
exit 9
|
|
fi
|
|
elif [[ "$shadow" =~ ! ]]; then
|
|
echo "Error: Account has been suspended"
|
|
echo "$date $time $user $ip46 has been suspended" >> $HESTIA/log/auth.log
|
|
exit 5
|
|
else
|
|
salt=${shadow:0:2}
|
|
method='des'
|
|
fi
|
|
|
|
if [ -z "$salt" ]; then
|
|
echo "Error: password missmatch"
|
|
echo "$date $time $user $ip46 failed to login" >> $HESTIA/log/auth.log
|
|
exit 9
|
|
fi
|
|
|
|
# Listing data
|
|
case $format in
|
|
json) json_list ;;
|
|
plain) plain_list ;;
|
|
csv) csv_list ;;
|
|
shell) shell_list ;;
|
|
esac
|
|
|
|
#----------------------------------------------------------#
|
|
# Hestia #
|
|
#----------------------------------------------------------#
|
|
|
|
exit
|