PAL.C.T MINI SHELL
#!/usr/bin/perl
# edit_users.cgi
# Display user and group related SSHd options
require './sshd-lib.pl';
&ui_print_header(undef, $text{'users_title'}, "", "users");
$conf = &get_sshd_config();
print &ui_form_start("save_users.cgi", "post");
print &ui_table_start($text{'users_header'}, "width=100%", 2);
if ($version{'type'} eq 'ssh' && $version{'number'} < 2) {
# Days before account expires to warn
$expire = &find_value("AccountExpireWarningDays", $conf);
print &ui_table_row($text{'users_expire'},
&ui_opt_textbox("expire", $expire, 5,
$text{'users_expire_def'}));
}
# Notify users of new email
$mail = &find_value("CheckMail", $conf);
if ($version{'type'} eq 'ssh') {
print &ui_table_row($text{'users_mail'},
&ui_yesno_radio("mail", lc($mail) ne 'no'));
}
elsif ($version{'number'} < 3.1) {
print &ui_table_row($text{'users_mail'},
&ui_yesno_radio("mail", lc($mail) eq 'yes'));
}
if ($version{'type'} eq 'ssh' && $version{'number'} < 2) {
# Days before password expires to warn
$pexpire = &find_value("PasswordExpireWarningDays", $conf);
print &ui_table_row($text{'users_pexpire'},
&ui_opt_textbox("pexpire", $pexpire, 5,
$text{'users_pexpire_def'}));
}
if ($version{'type'} ne 'ssh' || $version{'number'} < 3) {
# Allow password authentication?
$auth = &find_value("PasswordAuthentication", $conf);
print &ui_table_row($text{'users_auth'},
&ui_yesno_radio("auth", lc($auth) ne 'no'));
}
# Allow empty passwords?
$pempty = &find_value("PermitEmptyPasswords", $conf);
if ($version{'type'} eq 'ssh') {
print &ui_table_row($text{'users_pempty'},
&ui_yesno_radio("pempty", lc($pempty) ne 'no'));
}
else {
print &ui_table_row($text{'users_pempty'},
&ui_yesno_radio("pempty", lc($pempty) eq 'yes'));
}
# Allow logins by root
$root = &find_value("PermitRootLogin", $conf);
if (!$root) {
# Default ways seems to be 'yes'
$root = "yes";
}
@opts = ( [ 'yes', $text{'yes'} ],
[ 'no', $text{'no'} ] );
if ($version{'type'} eq 'ssh') {
push(@opts, [ 'nopwd', $text{'users_nopwd'} ]);
}
else {
push(@opts, [ 'without-password', $text{'users_nopwd'} ]);
if ($version{'number'} >= 2) {
push(@opts, [ 'forced-commands-only', $text{'users_fcmd'} ]);
}
}
print "</select></td>\n";
print &ui_table_row($text{'users_root'},
&ui_select("root", lc($root), \@opts));
# SSH 1 RSA authentication
if (($version{'type'} eq 'ssh' && $version{'number'} < 3) ||
($version{'type'} eq 'openssh' && $version{'number'} < 7.3)) {
$rsa = &find_value("RSAAuthentication", $conf);
print &ui_table_row($text{'users_rsa'},
&ui_yesno_radio('rsa', lc($rsa) ne 'no'));
}
# SSH 2 DSA authentication
if ($version{'type'} eq 'openssh' && $version{'number'} >= 3) {
$dsa = &find_value("PubkeyAuthentication", $conf);
print &ui_table_row($text{'users_dsa'},
&ui_yesno_radio('dsa', lc($dsa) ne 'no'));
}
# Strictly check permissions
$strict = &find_value("StrictModes", $conf);
print &ui_table_row($text{'users_strict'},
&ui_yesno_radio('strict', lc($strict) ne 'no'));
# Show message of the day
$motd = &find_value("PrintMotd", $conf);
print &ui_table_row($text{'users_motd'},
&ui_yesno_radio('motd', lc($motd) ne 'no'));
if ($version{'type'} eq 'openssh') {
# Ignore known_hosts files
$known = &find_value("IgnoreUserKnownHosts", $conf);
print &ui_table_row($text{'users_known'},
&ui_yesno_radio("known", lc($known) eq 'yes'));
if ($version{'number'} > 2.3) {
# Show login banner from file
$banner = &find_value("Banner", $conf);
print &ui_table_row($text{'users_banner'},
&ui_opt_textbox("banner", $banner, 50,
$text{'users_banner_def'})." ".
&file_chooser_button("banner"));
}
}
elsif ($version{'type'} eq 'ssh' && $version{'number'} >= 2) {
# Show login banner from file
$banner = &find_value("BannerMessageFile", $conf);
print &ui_table_row($text{'users_banner'},
&ui_opt_textbox("banner", $banner, 50,
$text{'users_banner_def'})." ".
&file_chooser_button("banner"));
}
if ($version{'type'} eq 'openssh' && $version{'number'} >= 3) {
# Authorized keys file (under home)
$authkeys = &find_value("AuthorizedKeysFile", $conf);
print &ui_table_row($text{'users_authkeys'},
&ui_opt_textbox("authkeys", $authkeys, 20,
$text{'users_authkeys_def'},
$text{'users_authkeys_set'}));
}
if ($version{'type'} eq 'openssh' && $version{'number'} >= 5) {
# Max login attempts
$maxauthtries = &find_value("MaxAuthTries", $conf);
print &ui_table_row($text{'users_maxauthtries'},
&ui_opt_textbox("maxauthtries", $maxauthtries, 5,
$text{'default'}." (6)"));
}
if ($version{'type'} eq 'openssh' && $version{'number'} >= 5) {
# Challenge-response support
$chal = &find_value("ChallengeResponseAuthentication", $conf);
print &ui_table_row($text{'users_chal'},
&ui_yesno_radio('chal', lc($chal) eq 'yes'));
}
if ($version{'type'} eq 'openssh' && $version{'number'} < 3.7 ||
$version{'type'} eq 'ssh' && $version{'number'} < 2) {
# Allow rhosts file authentication?
$rhostsauth = &find_value("RhostsAuthentication", $conf);
print &ui_table_row($text{'users_rhostsauth'},
&ui_yesno_radio("rhostsauth", lc($rhostsauth) eq 'yes'));
# Allow RSA rhosts file authentication?
$rhostsrsa = &find_value("RhostsRSAAuthentication", $conf);
if ($version{'type'} eq 'ssh') {
print &ui_table_row($text{'users_rhostsrsa'},
&ui_yesno_radio("rhostsrsa", lc($rhostsrsa) ne 'no'));
}
else {
print &ui_table_row($text{'users_rhostsrsa'},
&ui_yesno_radio("rhostsrsa", lc($rhostsrsa) eq 'yes'));
}
}
# Ignore rhosts files?
$rhosts = &find_value("IgnoreRhosts", $conf);
if ($version{'type'} eq 'ssh') {
print &ui_table_row($text{'users_rhosts'},
&ui_yesno_radio("rhosts", lc($rhosts) eq 'yes'));
}
else {
print &ui_table_row($text{'users_rhosts'},
&ui_yesno_radio("rhosts", lc($rhosts) ne 'no'));
}
# Ignore root's rhosts file?
if ($version{'type'} eq 'ssh') {
$rrhosts = &find_value("IgnoreRootRhosts", $conf);
print &ui_table_row($text{'users_rrhosts'},
&ui_radio("rrhosts", lc($rrhosts) eq 'yes' ? 1 :
lc($rrhosts) eq 'no' ? 0 : -1,
[ [ 1, $text{'yes'} ], [ 0, $text{'no'} ],
[ -1, $text{'users_rrdef'} ] ]));
}
print &ui_table_end();
print &ui_form_end([ [ undef, $text{'save'} ] ]);
&ui_print_footer("", $text{'index_return'});
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`