Koha/debian/scripts/koha-reset-passwd
Peter Crellan Kelly 58ef8feb1b Bug 9885 Passwords generated by command line scripts are weak
This changes the scripts so that:
- in koha-create, the zebra password and mysql passwords are set to 16 character "secure" passwords, ie generated with pwgen -s 16 1
- the patron password is set to a 12 character "memorable" password.

Signed-off-by: Magnus Enger <magnus@enger.priv.no>
Looks good. I did not actually build, install and test new packages,
but i did test pwgen with the new arguments and the changes make
sense.

Signed-off-by: Robin Sheat <robin@catalyst.net.nz>
QA signoff
Signed-off-by: Jared Camins-Esakov <jcamins@cpbibliography.com>
2013-03-30 21:39:43 -04:00

57 lines
1.4 KiB
Bash
Executable file

#!/bin/sh
#
# koha-reset-passwd -- reset password for a user in a Koha instance
# Copyright 2010 Catalyst IT, Ltd
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
set -e
die() {
echo "$@" 1>&2
exit 1
}
pwdigest() {
echo -n "$1" |
perl -e 'use Digest::MD5 qw(md5_base64);
while (<>) { print md5_base64($_), "\n"; }'
}
[ $# -lt 2 ] && die "Usage: $0 instancename username..."
instance="$1"
shift
temp="$(mktemp)"
cat <<eof > "$temp"
use koha_$instance;
eof
for userid in "$@"
do
password="$(pwgen 12 1)"
digest="$(pwdigest $password)"
echo "$userid $password"
echo "UPDATE borrowers SET password = '$digest' WHERE userid = '$userid';" \
>> "$temp"
done
mysql --defaults-extra-file=/etc/mysql/koha-common.cnf < "$temp"
rm "$temp"