X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?a=blobdiff_plain;f=misc%2Fcheckpasswd-service;h=af72772f5a07e97cdaea739142e64eef41a07e56;hb=f7b4be5ac332970bb5937ae586cea6de64d14f66;hp=5418a7c54e23c9937e7608e72f6535b7797a8f8e;hpb=655e68e0dfac46ded70f143c4cee279a3d57a0d1;p=userv-utils.git

diff --git a/misc/checkpasswd-service b/misc/checkpasswd-service
index 5418a7c..af72772 100755
--- a/misc/checkpasswd-service
+++ b/misc/checkpasswd-service
@@ -1,10 +1,57 @@
 #!/usr/bin/perl -w
+# checkpasswd-service
+# part of userv-utils
+#
+#
+# protocols:
+#
+#   userv root checkpasswd-self <<'END'
+# < PASSWORD
+# < ^D
+# > STATUS MESSAGE...
+#
+#   userv root checkpasswd-other USERNAME <<'END'
+# < PASSWORD
+# < ^D
+# > STATUS MESSAGE...
+#
+# STATUS MESSAGE may be
+#   0 ok
+#   2 incorrect password
+#   4 no such user
+#   5 password disabled
+#
+#
+# Copyright (C) 2013 Ian Jackson
+#
+# This is free software; you can redistribute it and/or modify it
+# under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with userv-utils; if not, write to the Free Software
+# Foundation, 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+
+
 use strict;
 use IO::File;
 use Fcntl qw(:flock);
 
-die "$0: bad usage\n" unless @ARGV==1 && $ARGV[0] !~ m/^-/;
-my $username = shift @ARGV;
+my ($lockpath, $delay, $separator, $username) = @ARGV;
+
+die "$0: bad usage\n" unless
+    @ARGV == 4 ||
+    $lockpath =~ m#^/# ||
+    $delay =~ m/^[0-9.]+$/ ||
+    $separator eq '--' ||
+    $username =~ m/^\w/;
+
 $username = $ENV{'USERV_USER'} if $username eq 'SELF';
 
 sub result {
@@ -21,7 +68,6 @@ result 5, "password disabled" unless length $encrpw >= 13;
 $!=0; my $pw = <STDIN>;
 chomp $pw or die "reading password: $!\n";
 
-my $lockpath = "/var/run/checkpasswd.synch";
 my $lockf = new IO::File $lockpath, "w+" or die "open $lockpath: $!\n";
 flock($lockf, LOCK_EX) or die "lock $lockpath: $!\n";
 select(undef,undef,undef,0.5);