deepblue/GoogleDriveManagement
1
0
Fork 0
mirror of https://github.com/GAM-team/GAM.git synced 2026-07-03 12:21:35 +00:00
Code Issues Actions 17 Packages Projects Releases Wiki Activity

Support base64-sha1 and base64-md5 user passwords

Browse Source 
This allows pulling md5 and sha-1 passwords stored in OpenLDAP format into G Suite. This example commands set user password to "helloworld".

gam update user user@example.com password "{SHA}at+xg6SiyUovktq1redipHiJpaE=" base64-sha1
This commit is contained in:
Jay Lee
2020-06-04 15:59:06 -04:00
parent 560cfe225f
commit 4ccd51269a
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/gam/__init__.py
View File

@@ -6637,6 +6637,7 @@ def getUserAttributes(i, cd, updateCmd):
i += 1 i += 1
need_password = True need_password = True
need_to_hash_password = True need_to_hash_password = True
need_to_b64_decrypt_password = False
while i < len(sys.argv): while i < len(sys.argv):
myarg = sys.argv[i].lower() myarg = sys.argv[i].lower()
if myarg in ['firstname', 'givenname']: if myarg in ['firstname', 'givenname']:
@@ -6677,13 +6678,17 @@ def getUserAttributes(i, cd, updateCmd):
body['includeInGlobalAddressList'] = getBoolean( body['includeInGlobalAddressList'] = getBoolean(
sys.argv[i + 1], myarg) sys.argv[i + 1], myarg)
i += 2 i += 2
elif myarg in ['sha', 'sha1', 'sha-1']: elif myarg in ['sha', 'sha1', 'sha-1', 'base64-sha1']:
body['hashFunction'] = 'SHA-1' body['hashFunction'] = 'SHA-1'
need_to_hash_password = False need_to_hash_password = False
if myarg == 'base64-sha1':
need_to_b64_decrypt_password = True
i += 1 i += 1
elif myarg == 'md5': elif myarg in ['md5', 'base64-md5']:
body['hashFunction'] = 'MD5' body['hashFunction'] = 'MD5'
need_to_hash_password = False need_to_hash_password = False
if myarg == 'base64-md5':
need_to_b64_decrypt_password = True
i += 1 i += 1
elif myarg == 'crypt': elif myarg == 'crypt':
body['hashFunction'] = 'crypt' body['hashFunction'] = 'crypt'
@@ -7157,6 +7162,10 @@ def getUserAttributes(i, cd, updateCmd):
if 'password' in body and need_to_hash_password: if 'password' in body and need_to_hash_password:
body['password'] = gen_sha512_hash(body['password']) body['password'] = gen_sha512_hash(body['password'])
body['hashFunction'] = 'crypt' body['hashFunction'] = 'crypt'
elif 'password' in body and need_to_b64_decrypt_password:
if body['password'].lower()[:5] in ['{md5}', '{sha}']:
body['password'] = body['password'][5:]
body['password'] = base64.b64decode(body['password']).hex()
return body return body