gitlab-ruby-shadow

Shadow Password module

Copyright (C) 1998-1999 Takaaki Tateishi [e-mail] Modified at: <1999/8/19 06:47:14 by ttate> License: See LICENSE

1. What's this

This module provides tools to read, and, on Linux, append, information related to password files.

Recent versions work on both Linux, Solaris, OS X, FreeBSD and OpenBSD. The functions found are translated to their equivalents in libshadow.

Note

1. install

ruby extconf.rb make # use gmake on FreeBSD (make install)

• Note: Version 2 was developed to compile on Ruby 1.9. 1.8 compatibility should be still present, but no promises about earlier versions of Ruby.

1. Shadow::Passwd module's methods

---

Method | Linux | Solaris | OS X | *BSD

---

getspent | * | * | * | * getspnam(name) | * | * | * | * from_user_name(name) (alias of above) | * | * | * | * setspent | * | * | * | * endspent | * | * | * | * fgetspent(file) | * | * | N | N sgetspent(str) | * | N | N | N putspent(entry,file) | * | * | N | N add_password_entry (alias of above ) | * | * | N | N lckpwdf,lock | * | * | N | N ulckpwdf,unlock | * | * | N | N lock? | * | * | N | N

Check the implementation in use via Shadow::IMPLEMENTATION.

1. Structure

Shadow::Passwd::Entry (Struct::PasswdEntry) sp_namp - pointer to null-terminated user name. sp_pwdp - pointer to null-terminated password. sp_lstchg - days since Jan 1, 1970 password was last changed. sp_min - days before which password may not be changed. sp_max - days after which password must be changed. sp_warn - days before password is to expire that user is warned of pending password expiration. sp_inact - days after password expires that account is considered inactive and disabled. sp_expire - days since Jan 1, 1970 when account will be disabled sp_loginclass - pointer to null-terminated user login class.

1. Description

getspent, getspname, fgetspent and sgetspent each return a structure Shadow::Passwd::Entry. getspent returns the next entry from the file, and fgetspent returns the next entry from the given stream. sgetspent returns a structure Shadow::Passwd::Entry using the provided string as input. getspnam searches from the current position in the file for an entry matching name. if you get EOF from each operation, you will get nil.

setspent and endspent may be used to begin and end, respe- ctively, access to the shadow password file.

lckpwdf(lock) and ulckpwdf(unlock) methods should be used to insure exclusive access to the /etc/shadow file. when either method fail, Exception Shadow::FileLock is raised. if you use lock as the iterator, unlock is automatically called when you exit the iterator block.

1. Reference

• man shadow
• /usr/include/shadow.h
• Code at https://github.com/apalmblad/ruby-shadow

Original Author: Takaaki Tateishi [e-mail]

This GitHub repository is maintained by Adam Palmblad [e-mail]. I'll do my best to keep the repository reasonably up-to-date if you care to send pull requests.