Linux密码体系+非交互式修改系统密码 + Luci框架

可以直接在添加用户的时候把-s指定为/usr/bin/passwd,这样让用户想修改密码只需要用自己的原密码登陆,登陆后只能修改密码.

可以满足你既需要原密码验证，又可以改密码的要求，还不用什么加密操作。 

这个是在sudo系统上做的一些操作：

#校验OS用户密码
check_os_user()
{
    su - $LOGNAME -c 2>/dev/null
    if [ $? == 0 ]
    then
      echo "密码正确，程序继续进行"
    else
      echo "密码错误，不能进行批处理操作"
      exit 0
    fi

openwrt 中设置密码为空 -d 参数

Usage: passwd [OPTIONS] [USER]

Change USER's password (default: current user)

-a ALG Encryption method

-d Set password to ''

-l Lock (disable) account

-u Unlock (enable) account

passwd root -d  无论后面任何参数都是去掉用户的密码，完全删除掉密码，这样会导致远程无法访问

shadow中的加密算法问题

root:$1$X8wbbOne$4P9pf6gH9CQk8FzO0TEhb1:15957:0:99999:7:::

现在只看加密的密码部分：$1$X8wbbOne$4P9pf6gH9CQk8FzO0TEhb1:15957

$ID $salt $encrypted password

ID  | Method

1   | MD5

2a | Blowfish (not in mainline glibc; added in some | Linux distributions)

5   | SHA-256 (since glibc 2.7)

6   | SHA-512 (since glibc 2.7)

MD5        | 22 characters

SHA-256 | 43 characters

SHA-512 | 86 characters

function action_passwd()

        local p1 = luci.http.formvalue("pwd1")

        local p2 = luci.http.formvalue("pwd2")

        local stat = nil

        if p1 or p2 then

                if p1 == p2 then

                        stat = luci.sys.user.setpasswd("root", p1)

                else

                        stat = 10

                end

        end

        luci.template.render("admin_system/passwd", {stat=stat})

end

"(echo '" .. password .. "'; sleep 1; echo '" .. password .. "') | " ..     "passwd '" .. username .. "' >/dev/null 2>&1"  

太有才了，这样的确可以修改密码

(echo '900424'; sleep 1;echo '900424';) | passwd root > /dev/null 2>&1

cat /etc/shadow | awk -F ':' '/root/{print $2}'

--- Retrieve the current user password hash.

-- @param username      String containing the username to retrieve the password for

-- @return                      String containing the hash or nil if no password is set.

-- @return                      Password database entry

function user.getpasswd(username)

        local pwe = nixio.getsp and nixio.getsp(username) or nixio.getpw(username)

        local pwh = pwe and (pwe.pwdp or pwe.passwd)

        if not pwh or #pwh < 1 or pwh == "!" or pwh == "x" then

                return nil, pwe

        else

                return pwh, pwe

        end

end

--- Test whether given string matches the password of a given system user.

-- @param username      String containing the Unix user name

-- @param pass          String containing the password to compare

-- @return                      Boolean indicating wheather the passwords are equal

function user.checkpasswd(username, pass)

        local pwh, pwe = user.getpasswd(username)

        if pwe then

                return (pwh == nil or nixio.crypt(pass, pwh) == pwh)

        end

        return false

end

使用luci修改检验密码的操作如下

getuser (uid)	Retrieve user informations for given uid.
checkpasswd (username, pass)	Test whether given string matches the password of a given system user.
getpasswd (username)	Retrieve the current user password hash.
setpasswd (username, password)	Change the password of given user.

#!/usr/bin/lua
require "luci.cacheloader"
require "luci.sgi.cgi"
--luci.dispatcher.indexcache = "/tmp/luci-indexcache"
--luci.sgi.cgi.run()


local user = luci.sys.user;

rs = user.getpasswd('root');
print(rs)

rs = user.checkpasswd('root','123456');

if (rs == true) then
        print 'right'
else
        print 'wrong'
end

passwd = '123456'
rs = user.setpasswd('root',passwd)