root/trunk/scripts/ldap/generate-ldap-password.plx

#!/usr/bin/perl
#  Copyright 2006, Software Freedom Law Center, Inc.
#
# This software gives you freedom; it is licensed to you under version 3
# of the GNU General Public License.
#
# This software is distributed WITHOUT ANY WARRANTY, without even the
# implied warranties of MERCHANTABILITY and FITNESS FOR A PARTICULAR
# PURPOSE.  See the GNU General Public License for further details.
#
# You should have received a copy of the GNU General Public License,
# version 3.  If not, see <http://www.gnu.org/licenses/>
#
# License: GPLv3-only

use strict;
use warnings;

use Term::ReadKey;
use Digest::SHA1;
use MIME::Base64;
use File::Temp qw(:mktemp);

sub GenerateLDAPPassword ($) {
  my($clearTextPW) = @_;

  my $ctx = Digest::SHA1->new;
  $ctx->add($clearTextPW);

  open(RANDOM, "/dev/urandom") || die "You have no /dev/urandom!";
  my $ii;
  while (read(RANDOM, $ii, 64) != 64) {  }
  my $salt = unpack("a*", $ii);

  $ctx->add($salt);
  my $hashedPasswd = '{SSHA}' . encode_base64($ctx->digest . $salt ,'');
  return $hashedPasswd;

}
print "New password: ";
ReadMode 'noecho';
my $password = ReadLine(0);
chomp $password;
print "\n";
ReadMode 'normal';
print "Re-enter new password: ";
ReadMode 'noecho';
my $second = ReadLine(0);
chomp $second;
ReadMode 'normal';
print "\n";
if ($password ne $second) {
  print "\nPasswords do not match.  Aborting.\n";
  exit 1;
}
print GenerateLDAPPassword($password), "\n";