slappasswd: read password from stdin (ITS#2411)

[rb@debian.org]

Full_Name: Roland Bauerschmidt
Version: 2.1.16
OS: Debian GNU/Linux unstable
URL: 
Submission from: (NULL) (213.183.162.243)


The following patch adds the -S option to slappasswd so that passwords can be
passed through stdin. In comparison with -s, the password will not be exposed in
the process list this way.

--- slappasswd.c.orig   2003-03-30 22:23:20.000000000 +0200
+++ slappasswd.c        2003-03-30 22:52:57.000000000 +0200
@@ -31,6 +31,7 @@
                "Usage: %s [options]\n"
                "  -h hash\tpassword scheme\n"
                "  -s secret\tnew password\n"
+               "  -S\t\tread password from stdin\n"
                "  -c format\tcrypt(3) salt format\n"
                "  -u\t\tgenerate RFC2307 values (default)\n"
                "  -v\t\tincrease verbosity\n"
@@ -50,7 +51,7 @@
        struct berval *hash = NULL;

        while( (i = getopt( argc, argv,
-               "c:d:h:s:vu" )) != EOF )
+               "c:d:h:s:Svu" )) != EOF )
        {
                switch (i) {
                case 'c':       /* crypt salt format */
@@ -73,6 +74,24 @@

                        } break;

+               case 'S':       /* read password from stdin */
+                       {
+                               char* p;
+                               size_t pos;
+
+                               newpw = malloc(256);
+                               if( newpw == NULL ) {
+                                       fprintf( stderr, "Memory allocation
failed.\n" );
+                                       return EXIT_FAILURE;
+                               }
+                               newpw = fgets( newpw, 256, stdin );
+
+                               /* chop newline */
+                               pos = strlen( newpw ) - 1;
+                               if( newpw[pos] == '\n' )
+                                       newpw[pos] = '\0';
+                       } break;
+
                case 'u':       /* RFC2307 userPassword */
                        break;