colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

sftpgo: grant access to v.

Browse Source
This commit is contained in:
Colin
2024-09-25 00:04:29 +00:00
parent 17d96a8ca1
commit a46e42a79b
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/by-name/servo/services/export/sftpgo/external_auth_hook
View File

@@ -69,7 +69,8 @@ TRUSTED_CREDS = [
# /etc/shadow style creds. # /etc/shadow style creds.
# mkpasswd -m sha-512 # mkpasswd -m sha-512
# $<method>$<salt>$<hash> # $<method>$<salt>$<hash>
"$6$Zq3c2u4ghUH4S6EP$pOuRt13sEKfX31OqPbbd1LuhS21C9MICMc94iRdTAgdAcJ9h95gQH/6Jf6Ie4Obb0oxQtojRJ1Pd/9QHOlFMW." #< m. rocket boy "$6$Zq3c2u4ghUH4S6EP$pOuRt13sEKfX31OqPbbd1LuhS21C9MICMc94iRdTAgdAcJ9h95gQH/6Jf6Ie4Obb0oxQtojRJ1Pd/9QHOlFMW.", #< m. rocket boy
"$6$B0NLGNdCL51PNse1$46G.aA1ATWIv5v.jUsKf4F3NS7emV2jB2gkZ3MytZtMvw2pjniHmRl0fywRjKW9TuXTeK9T50v.H0f2BaQ4PT1", #< v. telephony
] ]
TRUSTED_VIEWING_OR_PLAYGROUND_CREDS = [ TRUSTED_VIEWING_OR_PLAYGROUND_CREDS = [
"$6$iikDajz5b.YH1.on$tfSzzBEtX8IeDiJJXCasOTxRTd7cFDKXU6dhlWYVhK6xDeJhV2fh6bmm1WIHItjIth9Eh9zNgUB8xibMIWCm/." "$6$iikDajz5b.YH1.on$tfSzzBEtX8IeDiJJXCasOTxRTd7cFDKXU6dhlWYVhK6xDeJhV2fh6bmm1WIHItjIth9Eh9zNgUB8xibMIWCm/."
@@ -133,6 +134,7 @@ def getAuthResponse(ip: str, username: str, password: str) -> dict:
"/": PERM_RW, "/": PERM_RW,
"/playground": PERM_RW, "/playground": PERM_RW,
"/.public_for_test": PERM_RO, "/.public_for_test": PERM_RO,
"/media/Music": PERM_RO, #< i am too picky about Music organization
}) })
if isTrustedCred(password, TRUSTED_VIEWING_OR_PLAYGROUND_CREDS) and username != "colin": if isTrustedCred(password, TRUSTED_VIEWING_OR_PLAYGROUND_CREDS) and username != "colin":
return mkAuthOk(username, permissions = { return mkAuthOk(username, permissions = {