openid もoauthもsamlも認証したいだけなのにうざいのチョコっと作成シェル
6月 3rd, 2020 | 
Author: /etc/password-auth の先頭に一行入れた。
auth sufficient pam_exec.so expose_authtok /usr/local/bin/web-login.js
web-login.jsの中身
#!/bin/sh
read password
account=$PAM_USER
if [ "$account" = "root" ]; then
exit 1
fi
str=$(id -u $account 2>&1 | grep 'no such user')
if [ -n "$str" ] ; then
exit 1
fi
num=$(id -u $account)
sen=1000
if [ $num -lt $sen ] ; then
exit 1
fi
url="https://認証用のサーバー/UserAdLogin.do"
ret=$(curl $url --data-urlencode "account=$account" --data-urlencode "password=$password")
date=`date +"%Y/%m/%d %T"`
echo "$date account=$account return=$ret" >> /var/log/web-login.log
if [ "$ret" = "ok" ] ; then
echo error
exit 0
fi
exit 1
Posted in bash