X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=blobdiff_plain;f=PVE%2FAuth%2FPlugin.pm;h=d5d2c06971357b57bd15937f4a641608efbfe958;hp=3356f691c55d1b5ff8bc3e1b5c5a54e63ac57a8e;hb=af5d7da7f10abf98a83a74c2a498c24a75aeeed0;hpb=54028297ea98e9f17ffaefeb2fa22723ed0bceb0

diff --git a/PVE/Auth/Plugin.pm b/PVE/Auth/Plugin.pm
index 3356f69..d5d2c06 100755
--- a/PVE/Auth/Plugin.pm
+++ b/PVE/Auth/Plugin.pm
@@ -9,13 +9,11 @@ use PVE::SectionConfig;
 use PVE::JSONSchema qw(get_standard_option);
 use PVE::Cluster qw(cfs_register_file cfs_read_file cfs_lock_file);
 
-use Data::Dumper;
-
 use base qw(PVE::SectionConfig);
 
 my $domainconfigfile = "domains.cfg";
 
-cfs_register_file($domainconfigfile, 
+cfs_register_file($domainconfigfile,
 		  sub { __PACKAGE__->parse_config(@_); },
 		  sub { __PACKAGE__->write_config(@_); });
 
@@ -34,10 +32,10 @@ my $realm_regex = qr/[A-Za-z][A-Za-z0-9\.\-_]+/;
 PVE::JSONSchema::register_format('pve-realm', \&pve_verify_realm);
 sub pve_verify_realm {
     my ($realm, $noerr) = @_;
- 
+
     if ($realm !~ m/^${realm_regex}$/) {
 	return undef if $noerr;
-	die "value does not look like a valid realm\n"; 
+	die "value does not look like a valid realm\n";
     }
     return $realm;
 }
@@ -64,10 +62,10 @@ sub verify_username {
     }
 
     # we only allow a limited set of characters
-    # colon is not allowed, because we store usernames in 
+    # colon is not allowed, because we store usernames in
     # colon separated lists)!
     # slash is not allowed because it is used as pve API delimiter
-    # also see "man useradd" 
+    # also see "man useradd"
     if ($username =~ m!^([^\s:/]+)\@(${realm_regex})$!) {
 	return wantarray ? ($username, $1, $2) : $username;
     }
@@ -122,7 +120,7 @@ sub parse_tfa_config {
 	    $res->{step} = $1;
 	} else {
 	    return undef;
-	}	    
+	}
     }
 
     return undef if !$res->{type};
@@ -130,20 +128,6 @@ sub parse_tfa_config {
     return $res;
 }
 
-my $salt_starter = time();
-
-sub encrypt_pw {
-    my ($pw) = @_;
-
-    $salt_starter++;
-    my $salt = substr(Digest::SHA::sha1_base64(time() + $salt_starter + $$), 0, 8);
-
-    # crypt does not want '+' in salt (see 'man crypt')
-    $salt =~ s/\+/X/g;
-
-    return crypt(encode("utf8", $pw), "\$5\$$salt\$");
-}
-
 my $defaultData = {
     propertyList => {
 	type => { description => "Realm type." },
@@ -215,7 +199,7 @@ sub write_config {
 	    $data->{comment} = PVE::Tools::encode_text($data->{comment});
 	}
     }
-    
+
     $class->SUPER::write_config($filename, $cfg);
 }