CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

[refactor] Generic user create and check password functions

Browse Source
This commit is contained in:
William Wernert
2020-04-18 18:16:11 -04:00
parent 9331ede408
commit b009c2677b
1 changed files with 38 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files

87
setup/so-functions
View File

@@ -51,46 +51,41 @@ add_master_hostfile() {
local exitstatus=$? local exitstatus=$?
whiptail_check_exitstatus $exitstatus whiptail_check_exitstatus $exitstatus
}
# $1 => username
# $2 => uid
# $3 => gid
# $4 => home dir
# $5 => create home dir
# $6 => (optional) password variable
so_add_user() {
echo "Add $1 user" >> "$SETUPLOG" 2>&1
groupadd --gid "$3" "$1"
if [ "$5" == 0 ]; then
useradd --uid "$2" --gid "$3" --home-dir "$4" --no-create-home "$1"
else
useradd --uid "$2" --gid "$3" --home-dir "$4" "$1"
fi
# If a password has been passed in, set the password
if [ "$6" ]; then
echo "$1":"$6" | chpasswd --crypt-method=SHA512
fi
} }
add_socore_user_master() { add_socore_user_master() {
so_add_user "socore" "939" "939" "/opt/so" 1
echo "Add socore on the master" >>~/sosetup.log 2>&1
# Add user "socore" to the master. This will be for things like accepting keys.
if [ $OS == 'centos' ]; then
local ADDUSER=adduser
else
local ADDUSER=useradd
fi
groupadd --gid 939 socore
$ADDUSER --uid 939 --gid 939 --home-dir /opt/so socore
} }
add_soremote_user_master() { add_soremote_user_master() {
so_add_user "soremote" "947" "947" "/home/soremote" 1 "$SOREMOTEPASS1"
echo "Add soremote on the master" >>~/sosetup.log 2>&1
# Add user "soremote" to the master. This will be for things like accepting keys.
if [ $OS == 'centos' ]; then
local ADDUSER=adduser
else
local ADDUSER=useradd
fi
groupadd --gid 947 soremote
$ADDUSER --uid 947 --gid 947 soremote
# Set the password for soremote that we got during setup
echo soremote:$SOREMOTEPASS1 | chpasswd --crypt-method=SHA512
} }
add_socore_user_notmaster() { add_socore_user_notmaster() {
echo "Add socore user on non master" >> "$SETUPLOG" 2>&1 so_add_user "soremote" "939" "939" "/opt/so" 0
# Add socore user to the non master system. Probably not a bad idea to make system user
groupadd --gid 939 socore
$ADDUSER --uid 939 --gid 939 --home-dir /opt/so --no-create-home socore
} }
wait_for_identity_db_to_exist() { wait_for_identity_db_to_exist() {
@@ -100,13 +95,14 @@ wait_for_identity_db_to_exist() {
# Check and see if the DB file is in there # Check and see if the DB file is in there
if [ -f /opt/so/conf/kratos/db/db.sqlite ]; then if [ -f /opt/so/conf/kratos/db/db.sqlite ]; then
echo "Database file exists at $(date)" echo "Database file exists at $(date)"
attempts=$MAXATTEMPTS return 0
else else
echo "Identity database does not yet exist; waiting 5 seconds and will check again ($attempts/$MAXATTEMPTS)..." echo "Identity database does not yet exist; waiting 5 seconds and will check again ($attempts/$MAXATTEMPTS)..."
sleep 5 sleep 5
attempts=$((attempts+1)) attempts=$((attempts+1))
fi fi
done done
return 1
} }
add_web_user() { add_web_user() {
@@ -199,13 +195,7 @@ calculate_useable_cores() {
} }
check_admin_pass() { check_admin_pass() {
check_pass_match "$ADMINPASS1" "$ADMINPASS2" "APMATCH"
if [ $ADMINPASS1 == $ADMINPASS2 ]; then
APMATCH=yes
else
whiptail_passwords_dont_match
fi
} }
check_hive_init_then_reboot() { check_hive_init_then_reboot() {
@@ -245,24 +235,23 @@ check_network_manager_conf() {
fi fi
} }
check_soremote_pass() { # $1 => password
# $2 => confirm password
if [ $SOREMOTEPASS1 == $SOREMOTEPASS2 ]; then # $3 => variable to set
SCMATCH=yes check_pass_match() {
if [ "$1" == "$2" ]; then
eval "$3"="\"yes\""
else else
whiptail_passwords_dont_match whiptail_passwords_dont_match
fi fi
}
check_soremote_pass() {
check_pass_match "$SOREMOTEPASS1" "$SOREMOTEPASS2" "SCMATCH"
} }
check_web_pass() { check_web_pass() {
check_pass_match "$WEBPASSWD1" "$WEBPASSWD2" "WPMATCH"
if [ $WEBPASSWD1 == $WEBPASSWD2 ]; then
WPMATCH=yes
else
whiptail_passwords_dont_match
fi
} }
checkin_at_boot() { checkin_at_boot() {