04848dbd36
If the user has left the setup mode and starts a uhttpd instance to serve the config mode during normal runtime of the gluon node, this change is helpful. Instead of the "Save" or "Save & reboot" button, now a "Save & apply" button is presented. If this button is pressed, "gluon-reload" including a "gluon-reconfigure" is invoked internally causing the node to regenerate and reload its configuration immediately. Currently such an uhttpd instance is not running by default, but a user can start such an instance manually and access it via ssh port forwarding.
149 lines
3.7 KiB
Lua
149 lines
3.7 KiB
Lua
--[[
|
|
Copyright 2008 Steven Barth <steven@midlink.org>
|
|
Copyright 2011 Jo-Philipp Wich <xm@subsignal.org>
|
|
Copyright 2013 Nils Schneider <nils@nilsschneider.net>
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
]]--
|
|
|
|
local util = require 'gluon.util'
|
|
local site = require 'gluon.site'
|
|
|
|
local fcntl = require 'posix.fcntl'
|
|
local unistd = require 'posix.unistd'
|
|
local wait = require 'posix.sys.wait'
|
|
|
|
local f_keys = Form(translate("SSH keys"), translate("You can provide your SSH keys here (one per line):"), 'keys')
|
|
|
|
if not util.in_setup_mode() then
|
|
f_keys.submit = translate('Save & apply')
|
|
end
|
|
|
|
local s = f_keys:section(Section)
|
|
local keys = s:option(TextValue, "keys")
|
|
keys.wrap = "off"
|
|
keys.rows = 5
|
|
keys.default = util.readfile("/etc/dropbear/authorized_keys") or ""
|
|
|
|
function keys:write(value)
|
|
value = util.trim(value:gsub("\r", ""))
|
|
if value ~= "" then
|
|
local f = io.open("/etc/dropbear/authorized_keys", "w")
|
|
f:write(value, "\n")
|
|
f:close()
|
|
else
|
|
unistd.unlink("/etc/dropbear/authorized_keys")
|
|
end
|
|
|
|
if not util.in_setup_mode() then
|
|
util.reconfigure_asynchronously()
|
|
end
|
|
end
|
|
|
|
local config = site.config_mode.remote_login
|
|
if not config.show_password_form(false) then
|
|
-- password login is disabled in site.conf
|
|
return f_keys
|
|
end
|
|
|
|
local min_password_length = config.min_password_length(12)
|
|
local mintype = 'minlength(' .. min_password_length .. ')'
|
|
local length_hint
|
|
|
|
if min_password_length > 1 then
|
|
length_hint = translatef("%u characters min.", min_password_length)
|
|
end
|
|
|
|
local f_password = Form(translate("Password"), translate(
|
|
"Alternatively, you can set a password to access your node. Please choose a "
|
|
.. "secure password you don't use anywhere else.<br /><br />If you set an empty "
|
|
.. "password, login via password will be disabled. This is the default."
|
|
), 'password'
|
|
)
|
|
f_password.reset = false
|
|
|
|
if not util.in_setup_mode() then
|
|
f_password.submit = translate('Save & apply')
|
|
end
|
|
|
|
s = f_password:section(Section)
|
|
|
|
local pw1 = s:option(Value, "pw1", translate("Password"))
|
|
pw1.password = true
|
|
pw1.optional = true
|
|
pw1.datatype = mintype
|
|
function pw1.cfgvalue()
|
|
return ''
|
|
end
|
|
|
|
local pw2 = s:option(Value, "pw2", translate("Confirmation"), length_hint)
|
|
pw2.password = true
|
|
pw2.optional = true
|
|
pw2.datatype = mintype
|
|
function pw2.cfgvalue()
|
|
return ''
|
|
end
|
|
|
|
local function set_password(password)
|
|
local inr, inw = unistd.pipe()
|
|
local pid = unistd.fork()
|
|
|
|
if pid < 0 then
|
|
return false
|
|
elseif pid == 0 then
|
|
unistd.close(inw)
|
|
|
|
local null = fcntl.open('/dev/null', fcntl.O_WRONLY)
|
|
unistd.dup2(null, unistd.STDOUT_FILENO)
|
|
unistd.dup2(null, unistd.STDERR_FILENO)
|
|
if null > 2 then
|
|
unistd.close(null)
|
|
end
|
|
|
|
unistd.dup2(inr, unistd.STDIN_FILENO)
|
|
unistd.close(inr)
|
|
|
|
unistd.execp('passwd', {[0] = 'passwd'})
|
|
os.exit(127)
|
|
end
|
|
|
|
unistd.close(inr)
|
|
|
|
unistd.write(inw, string.format('%s\n%s\n', password, password))
|
|
unistd.close(inw)
|
|
|
|
local wpid, status, code = wait.wait(pid)
|
|
return wpid and status == 'exited' and code == 0
|
|
end
|
|
|
|
function f_password:write()
|
|
if pw1.data ~= pw2.data then
|
|
f_password.errmessage = translate("The password and the confirmation differ.")
|
|
return
|
|
end
|
|
|
|
local pw = pw1.data
|
|
|
|
if pw ~= nil and #pw > 0 then
|
|
if set_password(pw) then
|
|
f_password.message = translate("Password changed.")
|
|
else
|
|
f_password.errmessage = translate("Unable to change the password.")
|
|
end
|
|
else
|
|
-- We don't check the return code here as the error 'password for root is already locked' is normal...
|
|
os.execute('passwd -l root >/dev/null')
|
|
f_password.message = translate("Password removed.")
|
|
end
|
|
|
|
if not util.in_setup_mode() then
|
|
util.reconfigure_asynchronously()
|
|
end
|
|
end
|
|
|
|
return f_keys, f_password
|