5 module Puppet::Parser::Functions
6 newfunction(:str2saltedsha512, :type => :rvalue, :doc => <<-EOS
7 This converts a string to a salted-SHA512 password hash (which is used for
8 OS X versions >= 10.7). Given any simple string, you will get a hex version
9 of a salted-SHA512 password hash that can be inserted into your Puppet
10 manifests as a valid password attribute.
15 raise(Puppet::ParseError, "str2saltedsha512(): Wrong number of arguments " +
16 "passed (#{arguments.size} but we require 1)") if arguments.size != 1
18 password = arguments[0]
20 unless password.is_a?(String)
21 raise(Puppet::ParseError, 'str2saltedsha512(): Requires a ' +
22 "String argument, you passed: #{password.class}")
25 seedint = rand(2**31 - 1)
26 seedstring = Array(seedint).pack("L")
27 saltedpass = Digest::SHA512.digest(seedstring + password)
28 (seedstring + saltedpass).unpack('H*')[0]
32 # vim: set ts=2 sw=2 et :