#!/usr/bin/perl
# 
#  Grab the user's old password from /etc/shadow and compare to sent
#       old password from web page - send back error if not the same
#
#       HOG 04/25/02 Another wonderful product from the warped mind of me
# ====================================================================
# Set up variables ------------
$user = "$ARGV[0]";
$oldpass = "$ARGV[1]";
$datenow = "`date '+%h %d %T'`";
#
$userinfo = `/usr/bin/grep $user /etc/shadow`;
($user1, $passwd1, $passextra) = split(/:/, $userinfo, 3);
$salt = substr($passwd1,0,2);
#
# Put testing junk here (print variables)
#
    if (crypt($oldpass, $salt) ne $passwd1) {
        # =========== FAILED - write to messages file - return error =========
        system("/usr/bin/echo \"$datenow progserver chgpwd: ERROR changing $user
 password on check\" >> /var/adm/messages");
        die "";
    }