highperfocused/raspiblitz
1
0
Fork 0
mirror of https://github.com/raspiblitz/raspiblitz.git synced 2025-09-27 20:16:22 +02:00
Code Issues Packages Projects Releases Wiki Activity

enforce password A rules

Browse Source
This commit is contained in:
rootzoll
2019-01-14 17:42:44 +01:00
parent 61a2793a21
commit 181a35949f
1 changed files with 36 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
home.admin/config.scripts/blitz.setpassword.sh
View File

@@ -65,6 +65,7 @@ fi
echo "Changing Password ${abcd} ..." echo "Changing Password ${abcd} ..."
echo "" echo ""
############################
# PASSWORD A # PASSWORD A
if [ "${abcd}" = "a" ]; then if [ "${abcd}" = "a" ]; then
@@ -73,7 +74,7 @@ if [ "${abcd}" = "a" ]; then
# ask user for new password A (first time) # ask user for new password A (first time)
dialog --backtitle "RaspiBlitz - Setup"\ dialog --backtitle "RaspiBlitz - Setup"\
--insecure --passwordbox "Please enter your Master/Admin Password A:\n!!! This is new password to login per SSH !!!" 10 52 2>$_temp --insecure --passwordbox "Please enter your Master/Admin Password A:\n(min 8chars, 1word, chars+number, no specials)" 10 52 2>$_temp
# get user input # get user input
password1=$( cat $_temp ) password1=$( cat $_temp )
@@ -81,45 +82,63 @@ if [ "${abcd}" = "a" ]; then
# ask user for new password A (second time) # ask user for new password A (second time)
dialog --backtitle "RaspiBlitz - Setup"\ dialog --backtitle "RaspiBlitz - Setup"\
--insecure --passwordbox "Please enter your Master/Admin Password A:\n!!! This is new password to login per SSH !!!" 10 52 2>$_temp --insecure --passwordbox "Re-Enter Password A:\n(This is new password to login per SSH)" 10 52 2>$_temp
# get user input # get user input
password2=$( cat $_temp ) password2=$( cat $_temp )
shred $_temp shred $_temp
echo "password1(${password1})"
echo "password2(${password2})"
# check if passwords match # check if passwords match
if [ "${password1}" != "${password2}" ]; then if [ "${password1}" != "${password2}" ]; then
echo "TODO: Paswords dont match" dialog --backtitle "RaspiBlitz - Setup" --msgbox "FAIL -> Passwords dont Match\nPlease try again ..." 6 52
sudo /home/admin/config.scripts/blitz.setpassword.sh a
exit 1
fi
# password zero
if [ ${#password1} -eq 0 ]; then
dialog --backtitle "RaspiBlitz - Setup" --msgbox "FAIL -> Password cannot be empty\nPlease try again ..." 6 52
sudo /home/admin/config.scripts/blitz.setpassword.sh a
exit 1
fi fi
# check that password does not contain bad characters # check that password does not contain bad characters
passwordValid=1
clearedResult=$(echo "${result}" | tr -dc '[:alnum:]-.' | tr -d ' ') clearedResult=$(echo "${result}" | tr -dc '[:alnum:]-.' | tr -d ' ')
if [ ${#clearedResult} != ${#result} ] || [ ${#clearedResult} -eq 0 ]; then if [ ${#clearedResult} != ${#result} ] || [ ${#clearedResult} -eq 0 ]; then
echo "FAIL - Password contained not allowed chars" dialog --backtitle "RaspiBlitz - Setup" --msgbox "FAIL -> Contains bad characters\nPlease try again ..." 6 52
echo "Press ENTER to continue .." sudo /home/admin/config.scripts/blitz.setpassword.sh a
passwordValid=0 exit 1
fi fi
# password longer than 8
if [ ${#password1} -lt 8 ]; then
dialog --backtitle "RaspiBlitz - Setup" --msgbox "FAIL -> Password length under 8\nPlease try again ..." 6 52
sudo /home/admin/config.scripts/blitz.setpassword.sh a
exit 1 exit 1
fi
# use entred password now as parameter
newPassword="${password1}"
fi fi
# change user passwords and then change hostname # change user passwords and then change hostname
# echo "pi:$result" | sudo chpasswd echo "pi:$newPassword" | sudo chpasswd
# echo "root:$result" | sudo chpasswd echo "root:$newPassword" | sudo chpasswd
# echo "bitcoin:$result" | sudo chpasswd echo "bitcoin:$newPassword" | sudo chpasswd
# echo "admin:$result" | sudo chpasswd echo "admin:$newPassword" | sudo chpasswd
# sleep 1 sleep 1
echo ""
echo "OK - password A changed for user pi, root, admin & bitcoin"
############################
# PASSWORD B # PASSWORD B
elif [ "${abcd}" = "b" ]; then elif [ "${abcd}" = "b" ]; then
echo "TODO: Password B" echo "TODO: Password B"
############################
# PASSWORD C # PASSWORD C
elif [ "${abcd}" = "c" ]; then elif [ "${abcd}" = "c" ]; then
@@ -151,6 +170,7 @@ elif [ "${abcd}" = "c" ]; then
echo "" echo ""
echo "OK" echo "OK"
############################
# PASSWORD D # PASSWORD D
elif [ "${abcd}" = "d" ]; then elif [ "${abcd}" = "d" ]; then