A more secure way to change the password with sudo.

diff --git a/src/aute_smbldap.c b/src/aute_smbldap.c
index 29710c6e57e4dbaf486fe8380aa21587ef1d98db..9dd1dee7c679711eadbd4f529b20163f74ca2dc0 100644 (file)
--- a/src/aute_smbldap.c
+++ b/src/aute_smbldap.c
@@ -325,7 +325,8 @@ static gchar
                                                        g_warning ("Errore durante il cambio della password: impossibile ottenere l'host.");
                                                        return user_dn;
                                                }
-                                       host_ssh = parts[3]; g_message("HOST SSH: %s",host_ssh);
+                                       host_ssh = parts[3];
+                                       /*g_message("HOST SSH: %s",host_ssh);*/
                                        if (ssh_options_set (session, SSH_OPTIONS_HOST, host_ssh) < 0)
                                                {
                                                        ssh_disconnect (session);
@@ -371,8 +372,8 @@ static gchar
                                                        return user_dn;
                                                }
 
-                                       gchar *command = g_strdup_printf ("echo -e \\\"%s\\n\\\" | sudo -S -s \"echo -e \\\"%s\\n%s\\\" | /usr/sbin/smbldap-passwd \\\"%s\\\"\"", password, password_nuova, password_nuova, utente);
-                                       g_message ("COMMAND: %s", command);
+                                       gchar *command = g_strdup_printf ("echo -e \"%s\\n\" | sudo -k -S echo -e \"%s\\\\n%s\\\\n\" | sudo /usr/sbin/smbldap-passwd \"%s\"", password, password_nuova, password_nuova, utente);
+                                       /*g_message ("COMMAND: %s", command);*/
                                        rc = channel_request_exec (channel, command);
                                        if (rc < 0)
                                                {
@@ -389,7 +390,7 @@ static gchar
                                                                        rc = channel_read (channel, buf, sizeof (buf), 0);
                                                                        if (rc > 0)
                                                                                {
-                                                                                       fwrite (buf, 1, rc, stdout);
+                                                                                       /*fwrite (buf, 1, rc, stdout);*/
                                                                                }
                                                                }
                                                } while (rc > 0);