X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=gosa-core%2Fbin%2Fgosa-encrypt-passwords;h=7d5c69d1ba7712a11752fce1e3dc078745bbf47c;hb=c2e8f07cad56859137daa1d5351affcda02df86d;hp=0f8c5ada16888ed997033f71712d8c71ca30a136;hpb=2953aec0ed571cec2879351b19a11fda727d37fc;p=gosa.git diff --git a/gosa-core/bin/gosa-encrypt-passwords b/gosa-core/bin/gosa-encrypt-passwords index 0f8c5ada1..7d5c69d1b 100755 --- a/gosa-core/bin/gosa-encrypt-passwords +++ b/gosa-core/bin/gosa-encrypt-passwords @@ -64,12 +64,24 @@ $conf = new DOMDocument(); $conf->load("/etc/gosa/gosa.conf") or die ("Cannot read /etc/gosa/gosa.conf - aborted\n"); $conf->encoding = 'UTF-8'; $referrals= $conf->getElementsByTagName("referral"); -echo "* encrypting existent passwords with master key\n"; foreach($referrals as $referral){ - $pw= $referral->attributes->getNamedItem("password"); + $user = $referral->attributes->getNamedItem("adminDn"); + echo "* encrypting GOsa password for: ".$user->nodeValue."\n"; + $pw= $referral->attributes->getNamedItem("adminPassword"); $pw->nodeValue= cred_encrypt($pw->nodeValue, $master_key); } +# Encrypt the snapshot passwords +$locations= $conf->getElementsByTagName("location"); +foreach($locations as $location){ + $name = $location->attributes->getNamedItem("name"); + $node = $location->attributes->getNamedItem("snapshotAdminPassword"); + if($node->nodeValue){ + echo "* encrypting snapshot pasword for location: ".$name->nodeValue."\n"; + $node->nodeValue = cred_encrypt($node->nodeValue, $master_key);; + } +} + # Move original gosa.conf out of the way and make it unreadable for the web user echo "* creating backup in /etc/gosa/gosa.conf.orig\n"; rename("/etc/gosa/gosa.conf", "/etc/gosa/gosa.conf.orig"); @@ -94,7 +106,7 @@ Example: Alias /gosa /usr/share/gosa/html - + php_admin_flag engine on php_admin_value open_basedir "/etc/gosa/:/usr/share/gosa/:/var/cache/gosa/:/var/spool/gosa/" php_admin_flag register_globals off