apache/cloudstack
1
0
Fork 0
mirror of https://github.com/apache/cloudstack.git synced 2025-12-17 11:04:00 +01:00
Code Issues Packages Projects Releases Wiki Activity

Changed password script to work even if multiple password servers are listening for requests

Browse Source
This commit is contained in:
keshav 2011-03-03 11:52:53 -08:00
parent 4b09b69cb2
commit 1be21effc9
1 changed files with 58 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

72
setup/bindir/cloud-set-guest-password.in
View File

@ -11,55 +11,77 @@ user=root
# Add your DHCP lease folders here # Add your DHCP lease folders here
DHCP_FOLDERS="/var/lib/dhclient/* /var/lib/dhcp3/*" DHCP_FOLDERS="/var/lib/dhclient/* /var/lib/dhcp3/*"
password_received=0 password_received=0
file_count=0
error_count=0
for DHCP_FILE in $DHCP_FOLDERS for DHCP_FILE in $DHCP_FOLDERS
do do
if [ -f $DHCP_FILE ] if [ -f $DHCP_FILE ]
then then
file_count=$((file_count+1))
PASSWORD_SERVER_IP=$(grep dhcp-server-identifier $DHCP_FILE | tail -1 | awk '{print $NF}' | tr -d '\;') PASSWORD_SERVER_IP=$(grep dhcp-server-identifier $DHCP_FILE | tail -1 | awk '{print $NF}' | tr -d '\;')
if [ -n $PASSWORD_SERVER_IP ] if [ -n $PASSWORD_SERVER_IP ]
then then
logger -t "cloud" "Found password server IP $PASSWORD_SERVER_IP in $DHCP_FILE"
logger -t "cloud" "Sending request to password server at $PASSWORD_SERVER_IP" logger -t "cloud" "Sending request to password server at $PASSWORD_SERVER_IP"
password=$(wget -t 3 -T 20 -O - --header "DomU_Request: send_my_password" $PASSWORD_SERVER_IP:8080) password=$(wget -t 3 -T 20 -O - --header "DomU_Request: send_my_password" $PASSWORD_SERVER_IP:8080)
if [ $? -eq 0 ] if [ $? -eq 0 ]
then then
logger -t "cloud" "Got a password from server at $PASSWORD_SERVER_IP" logger -t "cloud" "Got response from server at $PASSWORD_SERVER_IP"
case $password in
"") logger -t "cloud" "Password server at $PASSWORD_SERVER_IP did not have any password for the VM"
continue
;;
"bad_request") logger -t "cloud" "VM sent an invalid request to password server at $PASSWORD_SERVER_IP"
error_count=$((error_count+1))
continue
;;
"saved_password") logger -t "cloud" "VM has already saved a password from the password server at $PASSWORD_SERVER_IP"
continue
;;
*) logger -t "cloud" "VM got a valid password from server at $PASSWORD_SERVER_IP"
password_received=1 password_received=1
break break
;;
esac
else
logger -t "cloud" "Failed to send request to password server at $PASSWORD_SERVER_IP"
error_count=$((error_count+1))
fi fi
else
logger -t "cloud" "Could not find password server IP in $DHCP_FILE"
error_count=$((error_count+1))
fi fi
fi fi
done done
if [ "$password_received" == "0" ] if [ "$password_received" == "0" ]
then then
logger -t "cloud" "Failed to get password from server" if [ "$error_count" == "$file_count" ]
then
logger -t "cloud" "Failed to get password from any server"
exit 1 exit 1
else
logger -t "cloud" "Did not need to change password."
exit 0
fi
fi fi
password=$(echo $password | tr -d '\r') password=$(echo $password | tr -d '\r')
case $password in logger -t "cloud" "Changing password ..."
echo $password | passwd --stdin $user
"") logger -t "cloud" "Password server did not have any password for the VM." if [ $? -gt 0 ]
exit 0 then
;;
"bad_request") logger -t "cloud" "VM sent an invalid request to password server."
exit 1
;;
"saved_password") logger -t "cloud" "VM has already saved a password from the password server."
exit 0
;;
*) logger -t "cloud" "Changing password for the VM..."
echo $password | passwd --stdin $user
if [ $? -gt 0 ]
then
usermod -p `mkpasswd $password 42` $user usermod -p `mkpasswd $password 42` $user
if [ $? -gt 0 ] if [ $? -gt 0 ]
@ -69,11 +91,9 @@ case $password in
else else
logger -t "cloud" "Successfully changed password for user $user" logger -t "cloud" "Successfully changed password for user $user"
fi fi
fi fi
logger -t "cloud" "Sending acknowledgment to password server at $PASSWORD_SERVER_IP" logger -t "cloud" "Sending acknowledgment to password server at $PASSWORD_SERVER_IP"
wget -t 3 -T 20 -O - --header "DomU_Request: saved_password" $PASSWORD_SERVER_IP:8080 wget -t 3 -T 20 -O - --header "DomU_Request: saved_password" $PASSWORD_SERVER_IP:8080
exit 0 exit 0
;;
esac