mirror of
https://github.com/iiab/iiab.git
synced 2025-02-15 04:32:11 +00:00
f319afa432
* change apache_data to apache_user in all * no libapach2 in centos. just php. no php-magick in centos * remove redundant vars entries * do not create apache user * missed one pound sign * soft code all references to apache_user * centos requires older setuptools * revert ansible_lsb.id in xsce.yml * try getting recent pip * move pip download to 2prep so that kalite success is not dependent on iiab coming first * still need to replace setuptools in kalite * add curl -- needed in debian * massivly substitue iiab for xsce, and rename files * completed runansible * centos fixes,install pip * appliance means no iptables rules * change to earlier version of setuptools for centos * delete file duplicate, hopefully unnecessary. generate the offline docs * wiki docs errors * create the admin group -- deleted earlier * use the --yes option with pip uninstall * base of repo moved from schoolserver to iiab, unleashkids.org->iiab.io * network detection broken due to tupo
20 lines
890 B
Bash
Executable file
20 lines
890 B
Bash
Executable file
#!/bin/bash
|
|
# credit to the folks at raspberry pi foundatioon
|
|
check_hash ()
|
|
{
|
|
if ! id -u iiab-admin > /dev/null 2>&1 ; then return 0 ; fi
|
|
if grep -q "^PasswordAuthentication\s*no" /etc/ssh/sshd_config ; then return 0 ; fi
|
|
SHADOW="$(sudo -n grep -E '^iiab-admin:' /etc/shadow 2>/dev/null)"
|
|
test -n "${SHADOW}" || return 0
|
|
if echo $SHADOW | grep -q "iiab-admin:!" ; then return 0 ; fi
|
|
SHADOW_PW=$(echo $SHADOW | cut -d: -f2)
|
|
if [ "$SHADOW_PW" != "\$6\$iiab51\$D.IrrEeLBYIuJkGDmi27pZUGOwPFp98qpl3hxMwWV4hXigFGmdSvy3s/j7tn6OnyTTLmlV7SsN0lCUAFzxSop." ]; then return 0 ; fi
|
|
|
|
echo
|
|
echo "SSH is enabled and the default password for the 'iiab-admin' user is unchanged."
|
|
echo "This is a security risk - please login as the 'iiab-admin' user and type 'passwd' to change password."
|
|
echo
|
|
}
|
|
|
|
systemctl is-active {{ sshd_service }} > /dev/null && check_hash
|
|
unset check_hash
|