Python PAM 非交互式认证

Question

我修改了示例 python 脚本:

service = 'passwd'

if len(sys.argv) == 3:
    user = sys.argv[1]
    password = sys.argv[2]
else:
    print 'error'

auth = PAM.pam()
auth.start(service)
if user != None:
    auth.set_item(PAM.PAM_USER, user)
auth.set_item(PAM.PAM_CONV, pam_conv)
try:
    auth.authenticate()
    auth.acct_mgmt()
except PAM.error, resp:
    print 'Go away! (%s)' % resp
except:
    print 'Internal error'
else:
    print 'Good to go!'

这有效，但要求我输入密码。相反，我想验证作为参数传递的密码 (sys.argv[2])。没有文档，怎么办？

Answer 1

缺少示例的第一行。提供的“pam_conv”函数向用户询问密码。您必须定义自己的函数返回一个常量密码:

def pam_conv(auth, query_list, userData):
    return [(the_password,0)]