Hi
If your running RH72 you probably also have FTP installed and running. If you do, then you can use FTP to check your passwords for you. If you don't have ftp running, you can configure it to only accept connections from localhost (for security), but for most internal stuff, this should work fine. 

#!/usr/bin/perl

$U="ronzo";
$P=q/"[test]"/;

print "P=$P  \n";
$P=~s/\\/\\\\\\\\/g;    # escape the \ for shell
$P=~s/"/\\"/g;          # escape the " for shell
$P=~s/'/\\'/g;          # escape the ' for shell
$P=~s/`/\\`/g;          # escape the ` for shell
$P=~s/!/\\!/g;          # escape the ! for shell

print "P=", $P,   " \n";

#run  ftp command with ``
my $a=`(ftp -n -v - <<EOF
open  localhost
user $U $P
bye
EOF
) 2>&1`;

# a good connect will return a 230 User X Logged In
if ($a =~ /230 /) {
     print "Password Good  \n";
} else {
     print "Password BAD  \n";
}

[download]

It's not the best, but I tested it and it works, even with the funny character passwords. Just gotta get all the shell characters escaped if you run into any bad passwords that can't verify properly. Since I grew up on shell scripting I still rely on it for solutions.

On the FTP, -n does not auto login
-v for verbose, so it returns the 230 message.
- just the minus, for using STDIN for FTP commands
At the end of the FTP is the 2>&1, this just redirects STDERR back to STDOUT, this way $a has all the output.

I've used this method in the past, and you don't have to deal with having read access to /etc/shadow or special permissions to run other programs that can read the shadow file. The Apache user can do this just fine.

ronzo

In reply to Re: Using Unix passwd/shadow to authenticate in perl by ronzomckelvey
in thread Using Unix passwd/shadow to authenticate in perl by bennomatic

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.