Add randomize-passwords.pl script to main tree

scripts/perl/randomize-passwords.pl

+#!/usr/bin/perl
+#
+# randomize-passwords.pl
+#
+# Randomizes the auth passwords for any file in the file spec given by the user
+# Randomizes the vm passwords for the same files
+# Creates a backup copy of each file altered; optionally will remove backups
+# 
+# This program uses only pure Perl modules so it should be portable.
+#
+# Michael S. Collins
+# 2009-11-11
+# 
+# Freely contributed to the FreeSWITCH project for use as the developers and community see fit
+
+use strict;
+use warnings;
+use Getopt::Long;
+use File::Basename;
+use File::Copy;
+
+$|++;
+
+## 'CHARACTERS' contains punctuation marks
+use constant CHARACTERS => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890-=+?></.,!@#$%^&*();:';
+my $numchars = length(CHARACTERS);
+
+## 'ALPHACHARS' contains upper and lower case letters and digits but no punctuation
+use constant ALPHACHARS => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890';
+my $numalphas = length(ALPHACHARS);
+
+my $vmlen = 4;         # Length of VM password
+my $authlen = 10;      # Length of auth password
+my $filespec;          # File specification 
+my $delbak;            # Flag - delete backups (default = keep backups)
+my $nopunct;           # Flag - set to true to disable punction marks (i.e. alphanumerics only) in auth passwords
+
+my $opts_ok = GetOptions ("h"         => \&usage,
+                          "help"      => \&usage,
+                          "vmlen=i"   => \$vmlen,
+                          "authlen=i" => \$authlen,
+                          "files=s"   => \$filespec,
+                          "D"         => \$delbak,
+			  "nopunct"   => \$nopunct,
+			  );
+
+## Confirm that a file spec was provided
+if ( ! $filespec ) {
+    warn "\nPlease provide a file specification.\n";
+    die "Example: --files=/usr/local/freeswitch/conf/directory/default/1*.xml\n\n";
+}
+
+## Collect the files
+my @FILELIST = glob($filespec);
+if ( ! @FILELIST ) {
+    print "\nNo files found matching this spec:\n$filespec\n";
+    exit(0);
+} else {
+    print "\nFound " . @FILELIST . " file(s).\n\n";
+}
+
+## Iterate through the list, process each file
+foreach my $file ( @FILELIST ) {
+    print "Processing file: $file\n";
+    my $bakfile = $file . '.bak';
+
+    if ( move($file,$bakfile) ) {
+	print "  $file ===> $bakfile\n";
+    } else {
+	print "  Unable to backup $file to $bakfile. Skipping...\n";
+        next;
+    }
+
+    ## FILEIN is the backup file, FILEOUT is the updated file
+    open(FILEIN ,'<',$bakfile) or die "Could not open $bakfile - aborting operation.\n";
+    open(FILEOUT,'>',$file   ) or die "Could not open $file - aborting operation.\n";
+
+    ## Retrieve new passwords from random generators
+    my $newauth =  &get_random_chars($authlen);
+    my $newvm   =  &get_random_digits($vmlen);
+    
+    ## Loop through "bak" file, replace passwords, write out to original file
+    while(<FILEIN>) {
+	## Check for passwords; if found swap
+	if ( m/param name="password"/ ) {
+	    # Found auth password, swap it
+	    s/value="(.*?)"/value="$newauth"/;
+            print "    Old/new auth pass: $1 ==> $newauth\n";
+	}
+
+	if ( m/param name="vm-password"/ ) {
+	    # Found vm password, swap it
+	    s/value="(.*?)"/value="$newvm"/;
+            print "      Old/new vm pass: $1 ==> $newvm\n";
+	}
+
+        print FILEOUT $_;
+
+    } ## while(<FILEIN>)
+
+    close(FILEIN);
+    close(FILEOUT);
+
+    ## Clear out the backup file if user asked for it
+    if ( $delbak ) {
+        print "    Removing $bakfile...\n";
+	unlink $bakfile;
+    }
+    print "    Finished with $file.\n\n";
+
+} ## foreach my $file ( @FILELIST )
+
+exit(0);
+
+## Return random chars for auth password
+sub get_random_chars () {
+    my $length = shift;
+    if ( ! $length ) { $length = $authlen; }
+    my $chars;
+
+    if ( $nopunct ) {
+	foreach my $i (1 .. $length) {
+	    my $nextchar = substr( ALPHACHARS,int(rand $numalphas),1 );
+	    $chars .= $nextchar;
+	}
+
+    } else {
+	foreach my $i (1 .. $length) {
+	    my $nextchar = substr( CHARACTERS,int(rand $numchars),1 );
+	    $chars .= $nextchar;
+	}
+    }
+    return $chars;
+}
+
+## Return only digits for vm password
+sub get_random_digits () {
+    my $length = shift;
+    if ( ! $length ) { $length = $vmlen; }
+    my $digits;
+    foreach my $i (1 .. $length) {
+	my $nextdigit = int(rand 10);
+        $digits .= $nextdigit;
+    }
+    return $digits;
+
+}
+
+sub usage () {
+print <<END_USAGE
+
+Randomize passwords for FreeSWITCH directory entries.
+
+Usage:  ./randomize-passwords.pl --files=<file spec> [-D] [--vmlen=<vm pass length>] [--authlen=<auth pass length>]
+
+Options:
+  
+  -h, --help       Display this help page
+
+  -D               Delete backups (default is to save backups)
+
+  --files          Specify files to process. Use typical file globs. On a standard Linux install it would look like:
+                   --files=/usr/local/freeswitch/conf/directory/default/1*.xml
+
+  --vmlen          Set length of voice mail password. (Default is 4 digits)
+
+  --authlen        Set length of auth password. (Default is 10 characters)
+
+  --nopunct        Disable punction marks in auth passwords, i.e. alphanumerics only
+
+Example:
+  To randomize all the passwords for a default Linux install, with 6 digit VM passwords, use this command:
+
+  ./randomize-passwords.pl --files=/usr/local/freeswitch/conf/directory/default/1*.xml -D --vmlen=6
+
+END_USAGE
+;
+exit(0);
+}