Source code for intranet.apps.auth.helpers

import logging
import re

import pexpect
from django.conf import settings

logger = logging.getLogger(__name__)


def change_password(form_data):
    if form_data:
        form_data["username"] = re.sub(r"\W", "", form_data["username"])
    if (
        form_data
        and form_data["username"] == "unknown"
        or form_data["old_password"] is None
        or form_data["new_password"] is None
        or form_data["new_password_confirm"] is None
    ):
        return {"unable_to_set": True}
    if form_data["new_password"] != form_data["new_password_confirm"]:
        return {"unable_to_set": True, "password_match": False}
    realm = settings.CSL_REALM
    errors = []
    try:
        kinit = pexpect.spawnu("/usr/bin/kpasswd {}@{}".format(form_data["username"], realm), timeout=settings.KINIT_TIMEOUT)
        match = kinit.expect([":", pexpect.EOF])
        if match == 1:
            return {"unable_to_set": True, "error": "User {} does not exist.".format(form_data["username"])}
        kinit.sendline(form_data["old_password"])
        kinit.expect([":", pexpect.EOF])
        if match == 1:
            return {"unable_to_set": True, "error": "Old password was incorrect."}
        kinit.sendline(form_data["new_password"])
        kinit.expect([":", pexpect.EOF])
        if match == 1:
            return {"unable_to_set": True}
        kinit.sendline(form_data["new_password_confirm"])
        kinit.expect(pexpect.EOF)
        kinit.close()
        exitstatus = kinit.exitstatus
    except pexpect.TIMEOUT:
        return {"unable_to_set": True, "errors": errors}
    if exitstatus == 0:
        logging.debug("Password changed for %s", form_data["username"])
        return {"unable_to_set": False}
    return {"unable_to_set": True}