From 40dbe63336ed5c140a32393a6acf2183dcd0579f Mon Sep 17 00:00:00 2001
From: Jarrod Johnson <jjohnson2@lenovo.com>
Date: Fri, 5 Apr 2019 16:53:32 -0400
Subject: [PATCH] Script to disable password expiry after expired on SMM

---
 misc/fixsmmexpiry.py | 54 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 54 insertions(+)
 create mode 100644 misc/fixsmmexpiry.py

diff --git a/misc/fixsmmexpiry.py b/misc/fixsmmexpiry.py
new file mode 100644
index 00000000..6b4f8314
--- /dev/null
+++ b/misc/fixsmmexpiry.py
@@ -0,0 +1,54 @@
+#!/usr/bin/env python
+import pyghmi.util.webclient as webclient
+from xml.etree.ElementTree import fromstring
+import os
+import sys
+
+tmppassword = 'to3BdS91ABrd'
+missingargs = False
+if 'SMMUSER' not in os.environ:
+    print('Must set SMMUSER environment variable')
+    missingargs = True
+if 'SMMPASS' not in os.environ:
+    print('Must set SMMPASS environment variable')
+    missingargs = True
+if missingargs:
+    sys.exit(1)
+
+w = webclient.SecureHTTPConnection(sys.argv[1], 443, verifycallback=lambda x: True)
+w.connect()
+adata = 'user={0}&password={1}'.format(os.environ['SMMUSER'], os.environ['SMMPASS'])
+bdata = 'user={0}&password={1}'.format(os.environ['SMMUSER'], tmppassword)
+headers = {'Connection': 'keep-alive', 'Content-Type': 'application/x-www-form-urlencoded'}
+w.request('POST', '/data/login', adata, headers)
+rsp = w.getresponse()
+rspdata = rsp.read()
+restorepwd = False
+if 'authResult>1' in rspdata:
+     restorepwd = True
+     w.request('POST', '/data/login', bdata, headers)
+     rsp = w.getresponse()
+     rspdata = rsp.read()
+if 'renew_account' in rspdata:
+     restorepwd = True
+     tokens = fromstring(rspdata)
+     st2 = tokens.findall('st2')[0].text
+     w.set_header('ST2', st2)
+     w.request('POST', '/data/changepwd', 'oripwd={0}&newpwd={1}'.format(os.environ['SMMPASS'], tmppassword))
+     rsp = w.getresponse()
+     rspdata = rsp.read()
+     w.request('POST', '/data/login', bdata, headers)
+     rsp = w.getresponse()
+     rspdata = rsp.read()
+if 'authResult>0' in rspdata:
+     tokens = fromstring(rspdata)
+     st2 = tokens.findall('st2')[0].text
+     w.set_header('ST2', st2)
+     rules = 'set=passwordDurationDays:0,passwordExpireWarningDays:0,passwordChangeInterval:0'
+     w.request('POST', '/data', rules)
+     rsp = w.getresponse()
+     print(repr(rsp.read()))
+     if restorepwd:
+         w.request('POST', '/data/changepwd', 'oripwd={1}&newpwd={0}'.format(os.environ['SMMPASS'], tmppassword))
+         rsp = w.getresponse()
+         print(repr(rsp.read()))