From: Andrea Zagli <azagli@libero.it>
Date: Sat, 4 Sep 2010 15:00:58 +0000 (+0200)
Subject: A more secure way to change the password with sudo.
X-Git-Tag: v0.1.1~9
X-Git-Url: https://saetta.ns0.it/gitweb?a=commitdiff_plain;h=308bc3c54fbdfd18aa0f8611f8f34691a441f65c;p=zakauthe%2Fplugins%2Fsmbldap

A more secure way to change the password with sudo.
---

diff --git a/src/aute_smbldap.c b/src/aute_smbldap.c
index 29710c6..9dd1dee 100644
--- a/src/aute_smbldap.c
+++ b/src/aute_smbldap.c
@@ -325,7 +325,8 @@ static gchar
 							g_warning ("Errore durante il cambio della password: impossibile ottenere l'host.");
 							return user_dn;
 						}
-					host_ssh = parts[3]; g_message("HOST SSH: %s",host_ssh);
+					host_ssh = parts[3];
+					/*g_message("HOST SSH: %s",host_ssh);*/
 					if (ssh_options_set (session, SSH_OPTIONS_HOST, host_ssh) < 0)
 						{
 							ssh_disconnect (session);
@@ -371,8 +372,8 @@ static gchar
 							return user_dn;
 						}
 
-					gchar *command = g_strdup_printf ("echo -e \\\"%s\\n\\\" | sudo -S -s \"echo -e \\\"%s\\n%s\\\" | /usr/sbin/smbldap-passwd \\\"%s\\\"\"", password, password_nuova, password_nuova, utente);
-					g_message ("COMMAND: %s", command);
+					gchar *command = g_strdup_printf ("echo -e \"%s\\n\" | sudo -k -S echo -e \"%s\\\\n%s\\\\n\" | sudo /usr/sbin/smbldap-passwd \"%s\"", password, password_nuova, password_nuova, utente);
+					/*g_message ("COMMAND: %s", command);*/
 					rc = channel_request_exec (channel, command);
 					if (rc < 0)
 						{
@@ -389,7 +390,7 @@ static gchar
 									rc = channel_read (channel, buf, sizeof (buf), 0);
 									if (rc > 0)
 										{
-											fwrite (buf, 1, rc, stdout);
+											/*fwrite (buf, 1, rc, stdout);*/
 										}
 								}
 						} while (rc > 0);