# Check if the task should be prevented from running.
check_if_excluded
+linux_shadow="/etc/shadow"
+freebsd_shadow="/etc/master.passwd"
+
+linux_change_shadow_entry() {
+ local line encrypted
+ line="$1"
+ encrypted="$2"
+
+ IFS=":" read -a entry <<< "$line"
+
+ echo "${entry[0]}:$encrypted:15103:0:99999:7:::"
+}
+
+freebsd_change_shadow_entry() {
+ local line encrypted
+ line="$1"
+ encrypted="$2"
+
+ IFS=":" read -a entry <<< "$line"
+
+ echo "${entry[0]}:$encrypted:${entry[2]}:${entry[3]}:${entry[4]}:${entry[5]}:0:${entry[7]}:${entry[8]}:${entry[9]}"
+}
+
windows_password() {
- local target="$1"
- local password="$2"
+ local target password
+ target="$1"
+ password="$2"
echo "@echo off" > "$target/Windows/SnfScripts/ChangeAdminPassword.cmd"
if [ -z "$SNF_IMAGE_PROPERTY_USERS" ]; then
+ warn "Image property \`USERS' is missing or empty. " \
+ "Changing the password for default user: \`Administrator'."
+
SNF_IMAGE_PROPERTY_USERS="Administrator"
fi
done
}
-linux_password() {
- local target="$1"
- local password="$2"
+unix_password() {
+ local flavor target password hash users tmp_shadow
+ flavor="$1"
+ target="$2"
+ password="$3"
- local hash=$("@scriptsdir@/snf-passtohash.py" "$password")
- if [ ! -e "$target/etc/shadow" ]; then
- log_error "No /etc/shadow found!"
+ shadow="${flavor}_shadow"
+ if [ ! -e "$target${!shadow}" ]; then
+ log_error "No ${!shadow} found!"
fi
+
+ hash=$("@scriptsdir@/snf-passtohash.py" "$password")
- declare -a users
+ users=()
if [ -n "$SNF_IMAGE_PROPERTY_USERS" ]; then
for usr in $SNF_IMAGE_PROPERTY_USERS; do
users+=("$usr")
done
else
+ warn "Image property \`USERS' is missing or empty. " \
+ "Changing the password for default user: \`root'."
users+=("root")
fi
for i in $(seq 0 1 $((${#users[@]}-1))); do
- local tmp_shadow="$(mktemp)"
+ tmp_shadow="$(mktemp)"
add_cleanup rm "$tmp_shadow"
echo -n "Setting ${users[$i]} password..."
-
- echo "${users[$i]}:$hash:15103:0:99999:7:::" > "$tmp_shadow"
- grep -v "${users[$i]}" "$target/etc/shadow" >> "$tmp_shadow"
- cat "$tmp_shadow" > "$target/etc/shadow"
+ entry=$(grep "^${users[$i]}:" "$target${!shadow}")
+ if [ -z "$entry" ]; then
+ log_error "User: \`${users[$i]}' does not exist."
+ fi
+
+ new_entry="$(${flavor}_change_shadow_entry "$entry" "$hash")"
+ grep -v "${users[$i]}" "$target${!shadow}" > "$tmp_shadow"
+ echo "$new_entry" >> "$tmp_shadow"
+ cat "$tmp_shadow" > "$target${!shadow}"
echo "done"
done
}
+freebsd_password() {
+ local target password hash
+ target="$1"
+ password="$2"
+
+ if [ ! -e "$target/etc/master.passwd" ]; then
+ log_error "No /etc/master.passwd found!"
+ fi
+
+ hash=$("@scriptsdir@/snf-passtohash.py" "$password")
+ for i in $(seq 0 1 $((${#users[@]}-1))); do
+ tmp_master="$(mktemp)"
+ done
+}
+
if [ ! -d "$SNF_IMAGE_TARGET" ]; then
log_error "Target dir: \`$SNF_IMAGE_TARGET' is missing"
fi
if [ "$SNF_IMAGE_PROPERTY_OSFAMILY" = "windows" ]; then
windows_password "$SNF_IMAGE_TARGET" "$SNF_IMAGE_PASSWORD"
elif [ "$SNF_IMAGE_PROPERTY_OSFAMILY" = "linux" ]; then
- linux_password "$SNF_IMAGE_TARGET" "$SNF_IMAGE_PASSWORD"
+ unix_password linux "$SNF_IMAGE_TARGET" "$SNF_IMAGE_PASSWORD"
+elif [ "$SNF_IMAGE_PROPERTY_OSFAMILY" = "freebsd" ]; then
+ unix_password freebsd "$SNF_IMAGE_TARGET" "$SNF_IMAGE_PASSWORD"
+
+ rm -f "$SNF_IMAGE_TARGET/etc/spwd.db"
+
+ # Make sure /etc/spwd.db is recreated on first boot
+ rc_local=$(cat <<EOF
+PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin
+export PATH
+
+pwd_mkdb -p /etc/master.passwd
+EOF
+)
+ if [ -e "$SNF_IMAGE_TARGET/etc/rc.local" ]; then
+ orig_local="/etc/rc.local.snf_image_$RANDOM"
+ mv "$SNF_IMAGE_TARGET/etc/rc.local" "$SNF_IMAGE_TARGET$orig_local"
+ cat > "$SNF_IMAGE_TARGET/etc/rc.local" <<EOF
+$rc_local
+mv $orig_local /etc/rc.local
+. /etc/rc.local
+EOF
+ else
+ cat > "$SNF_IMAGE_TARGET/etc/rc.local" <<EOF
+$rc_local
+rm -f /etc/rc.local
+exit 0
+EOF
+ fi
fi
exit 0