使用htpasswd.pl脚本远程管理apache密码文件

在搭建trac/svn系统时，一般都会采用apache的.htacces 认证方法 但trac本身并不提供修改密码的功能，修改密码只能通过htpasswd/htpasswd2命令来进行，这的确是一件相当不make sense的事。
其实，利用一个免费的perl脚本可以方便的通过http方式修改apache的认证文件。
　 文件名：htpasswd.pl,获取地址http://home.xnet.com/~efflandt/pub/htpasswd.pl
该脚本可以通过web浏览器从你的htpasswd文件直接增加或者删除用户，管理者密码是经过加密的。该脚本本身并不保护一个目录，也不创建一个口令保护功能。它仅用来帮助你管理你的口令文件。这就是说在你的服务器上事先应有口令文件时，该脚本方可发挥作用。

安装&配置

step1.拷贝htpasswd.pl至cgi-bin目录
suse对应/srv/www/cgi-bin
fedora对应/var/www/cgi-bin
step2.改名
把htpasswd.pl改名为htpasswd.cgi
step3.用文本编辑器打开配置脚本(cfg.pl)
编辑如下变量：
#!/usr/local/bin/perl 修改为 #!/bin/perl
配置要修改的apache认证文件,找到以下几行
# Password file with full system path (where not accessible by URL).
$file = '/full_path_to/.htpasswd'; 修改为 $file='/etc/svn-auth-file'#假设你的验证文件是/etc/svn-auth-file
step4 chmod 755 htpasswd.cgi

不出意外的话，访问http://localhost/cgi-bin/htpasswd.cgi即可出现密码修改页面
有关密码文件创建，请参见 http://blog.csdn.net/forlinux/archive/2006/06/11/787703.aspx

-----htpasswd.pl-------

1. #!/usr/local/bin/perl-T
3. #htpasswd.cgibyDavidEfflandt([e-mail])8/97
4. #Lastupdate10/4/99
5. #
6. #Updatepasswordfilefromthewebforusewithuserauthentication.
7. #Storeseachlineintheformat:username:crypted_password
8. #
9. #Built-informisprovidedifyouGETthescript.
10. #FormisprocessedifyouPOSTtothisscript.
11. #
12. #Ifyouwantyourpasswordstobesecure,itisbesttorunthis
13. #suidasyou(chmod4705htpasswd.cgi)whichmayrequireCwrapper.
14. #Alsokeepthisscriptinadirectorythatrequiresuserauthentication
15. #unlessyouallownewuserstosettheirownpassword(see$allow_new).
16. #
17. #Ifnotrunningsuidyoushouldtouchthepasswordfilefirstand
18. #chmod606(orwhateverisreq'dtoaccessitasyouandwebserver).
19. #
20. #Toaddorremoveusersbyanadministrator,createausercalled'admin'
21. #withapassword.Enterusernameyouwanttoaddorremovewithadmin
22. #passwordas"CurrentPassword"(plusnewpasswordsfornewusers).
23. #
24. #Anyonemayremovetheirownnamefromthepasswordfileiftheysupply
25. #theircorrectpassword.
27. ###Variables
29. #Passwordfilewithfullsystempath(wherenotaccessiblebyURL).
30. $file='/full_path_to/.htpasswd';
32. #Allowanyonetoaddnewusers(1=yes,0=no)
33. $allow_new=0;
35. #Setuntaintedpathforsuidscripts
36. $ENV{PATH}='/bin:/usr/bin:/usr/local/bin';
37. $ENV{IFS}=""if$ENV{IFS}ne"";
39. ###EndofVariables
41. #CreateformandexitonGET
42. &make_formunless($ENV{'REQUEST_METHOD'}eq"POST");
44. #GetPOSTinput
45. read(STDIN,$buffer,$ENV{'CONTENT_LENGTH'});
47. #Splitthename-valuepairs
48. @pairs=split(/&/,$buffer);
50. foreach$pair(@pairs)
51. {
52. ($name,$value)=split(/=/,$pair);
54. $value=~tr/+//;
55. $value=~s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
56. $name=~tr/+//;
57. $name=~s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
59. $FORM{$name}=$value;
60. }
62. if($FORM{user}){
63. $user=$FORM{user};
64. }else{
65. &error("Error","Usernamemissingfromform.");
66. }
67. $pwd=$FORM{old};
68. $command=$FORM{command};
69. unless(($commandeq'remove')
70. ||($FORM{new}&&$FORM{new}eq$FORM{new2})){
71. &error("PasswordMismatch","Newpasswordmismatchormissing.");
72. }
74. #Getexistingpasswords
75. if(-e$file){
76. open(IN,$file)or&error("Error","Can'topenpasswordfile:$!");
77. flock(IN,2);
78. seek(IN,0,0);
79. while(<IN>){
80. chomp;
81. ($name,$value,$tail)=split(/:/,$_,3);
82. $hash{$name}=$value;
83. $tail{$name}=$tail;#maintainanyadditionalfields
84. }
85. closeIN;
86. }
88. #Saltforcrypt
89. @range=('0'..'9','a'..'z','A'..'Z','.','/');
90. srand(time()^($$+($$<<15)));
91. $salt=$range[rand(int($#range)+1)].$range[rand(int($#range)+1)];
93. #Checkforvalidpasswordorexistinguser
94. $pass=$hash{$user}if$hash{$user};
95. $cpwd=crypt($pwd,$pass);
96. $admin=$hash{admin}&&crypt($pwd,$hash{admin})eq$hash{admin};
98. if(($commandne'new')&&($admin||$pass&&$cpwdeq$pass)){
99. if($commandeq'remove'){
100. delete($hash{$user});delete($tail{$user});
101. $msg="User<B>$user</B>wasremovedfrompasswordfile.";
102. }elsif(!$pass){
103. $msg="WARNING!'ChangePassword'checkedfornon-existinguser?\n"
104. ."<P>Assigningpasswordfornewuser<B>$user</B>anyway.\n"
105. ."<P>Ifthiswasanerror,gobackand'RemoveUser'";
106. }else{
107. $msg="Passwordhasbeenupdatedfor$user.";
108. }
109. }elsif($FORM{command}eq'new'){
110. if($pass){
111. &error("Sorry","User<B>$user</B>isalreadyassigned.");
112. }elsif($allow_new||$admin){
113. $msg="Passwordhasbeenassignedfornewuser$user.";
114. }else{
115. &begin_html("Sorry,NewUser");
116. print"Contactfileownerforpasswordyoucanchangelater.";
117. &end_html;
118. exit;
119. }
120. }else{
121. &error("PasswordError",
122. "Invaliduserorpasswordorforgottocheck'NewUser'.");
123. }
125. #Assignnewpasswordtouserandwritetofile
126. $hash{$user}=crypt($FORM{new},$salt)if$commandne'remove';
127. if(open(OUT,">$file")){
128. flock(OUT,2);
129. seek(OUT,0,0);
130. foreach$name(sortkeys%hash){
131. printOUT"$name:$hash{$name}";
132. printOUT":$tail{$name}"if$tail{$name};
133. printOUT"\n";
134. }
135. }else{
136. &error("Error","Can'tupdatepasswordfile:$!");
137. }
139. #PrintReturnHTML
140. &begin_html("ThankYou");
141. print"$msg\n";
142. &end_html;
144. ###Subroutines
146. #subroutinebegin_html(title)
147. subbegin_html{
148. local($title)=@_;
149. print"Content-type:text/html\n\n";
150. print"<html><head><title>$title</title></head><body>\n";
151. print"<center><h1>$title</h1></center>\n<hr><p>\n";
152. }
154. #subroutineend_html
155. subend_html{
156. #Addfooterlinkshere
157. print"<P></body></html>\n";
158. }
160. #subroutinemake_form
161. submake_form{
162. &begin_html("ChangeorAddPassword");
164. print<<NEW_FORM;
165. Usethisformtochangeyourpasswordforaccesstorestricted
166. directorieshere.Newuserswillbeinformedifpasswordwasassignedor
167. iftheyneedtocontacttheownerofthesepages.
169. <FORMMETHOD="POST"ACTION="$ENV{SCRIPT_NAME}">
171. <DL>
172. <DT>E-mailAddress(orusernameonthissystem):
173. <DD><INPUTNAME="user">
175. <DT>CurrentPassword(requiredunlessnewuser):
176. <DD><INPUTTYPE=PASSWORDNAME="old">
178. <DT>NewPassword:
179. <DD><INPUTTYPE=PASSWORDNAME="new">
181. <DT>ConfirmNewPassword:
182. <DD><INPUTTYPE=PASSWORDNAME="new2">
184. <DT>Request:
185. <DD>
186. <INPUTTYPE="radio"NAME="command"VALUE="change"CHECKED>ChangePassword
187. <DD>
188. <INPUTTYPE="radio"NAME="command"VALUE="new">NewUser
189. <DD>
190. <INPUTTYPE="radio"NAME="command"VALUE="remove">RemoveUser
191. </DL>
193. <P><INPUTTYPE="submit"VALUE="SubmitRequest">
194. </FORM>
195. NEW_FORM
197. &end_html;
198. exit;
199. }
201. suberror{
202. local($title,$msg)=@_;
203. &begin_html($title);
204. print"<P>$msg\n";
205. print"<P>Pleasecheckyournameandre-enterpasswords.\n";
206. &end_html;
207. exit;
208. }