Changeset 860 for vendor/current/source3/web/cgi.c
- Timestamp:
- May 12, 2014, 8:58:38 PM (11 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
vendor/current/source3/web/cgi.c
r740 r860 49 49 static char *C_user; 50 50 static char *C_pass; 51 static char *C_nonce; 51 52 static bool inetd_server; 52 53 static bool got_request; … … 330 331 331 332 if (!setuid(0)) { 332 C_pass = secrets_fetch_generic("root", "SWAT"); 333 if (C_pass == NULL) { 334 char *tmp_pass = NULL; 335 tmp_pass = generate_random_password(talloc_tos(), 336 16, 16); 337 if (tmp_pass == NULL) { 338 printf("%sFailed to create random nonce for " 339 "SWAT session\n<br>%s\n", head, tail); 340 exit(0); 341 } 342 secrets_store_generic("root", "SWAT", tmp_pass); 343 C_pass = SMB_STRDUP(tmp_pass); 344 TALLOC_FREE(tmp_pass); 345 } 333 C_pass = SMB_STRDUP(cgi_nonce()); 346 334 } 347 335 setuid(pwd->pw_uid); … … 457 445 { 458 446 return(C_pass); 447 } 448 449 /*************************************************************************** 450 return a ptr to the nonce 451 ***************************************************************************/ 452 char *cgi_nonce(void) 453 { 454 const char *head = "Content-Type: text/html\r\n\r\n<HTML><BODY><H1>SWAT installation Error</H1>\n"; 455 const char *tail = "</BODY></HTML>\r\n"; 456 C_nonce = secrets_fetch_generic("root", "SWAT"); 457 if (C_nonce == NULL) { 458 char *tmp_pass = NULL; 459 tmp_pass = generate_random_password(talloc_tos(), 460 16, 16); 461 if (tmp_pass == NULL) { 462 printf("%sFailed to create random nonce for " 463 "SWAT session\n<br>%s\n", head, tail); 464 exit(0); 465 } 466 secrets_store_generic("root", "SWAT", tmp_pass); 467 C_nonce = SMB_STRDUP(tmp_pass); 468 TALLOC_FREE(tmp_pass); 469 } 470 return(C_nonce); 459 471 } 460 472
Note:
See TracChangeset
for help on using the changeset viewer.