diff options
| author | Scott Long <scottl@FreeBSD.org> | 2002-12-03 05:41:09 +0000 |
|---|---|---|
| committer | Scott Long <scottl@FreeBSD.org> | 2002-12-03 05:41:09 +0000 |
| commit | 947f8d29cb95cc2cca135ba261063df1806da2ec (patch) | |
| tree | d185d7304940d3fca49a6c38fb14c8a9f3d68a01 /adduser/adduser.perl | |
| parent | 59f4e321f857f45239599e1339b19422c7f97514 (diff) | |
| download | pw-darwin-947f8d29cb95cc2cca135ba261063df1806da2ec.tar.gz pw-darwin-947f8d29cb95cc2cca135ba261063df1806da2ec.zip | |
Replace the perl versions of adduser and rmuser with shell script versions.
Submitted by: Mike Makonnen <mtm@identd.net>
Approved by: re
Diffstat (limited to 'adduser/adduser.perl')
| -rw-r--r-- | adduser/adduser.perl | 1558 |
1 files changed, 0 insertions, 1558 deletions
diff --git a/adduser/adduser.perl b/adduser/adduser.perl deleted file mode 100644 index fb60253..0000000 --- a/adduser/adduser.perl +++ /dev/null @@ -1,1558 +0,0 @@ -#!/usr/bin/perl -# -# Copyright (c) 1995-1996 Wolfram Schneider <wosch@FreeBSD.org>. Berlin. -# All rights reserved. -# -# Redistribution and use in source and binary forms, with or without -# modification, are permitted provided that the following conditions -# are met: -# 1. Redistributions of source code must retain the above copyright -# notice, this list of conditions and the following disclaimer. -# 2. Redistributions in binary form must reproduce the above copyright -# notice, this list of conditions and the following disclaimer in the -# documentation and/or other materials provided with the distribution. -# -# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -# SUCH DAMAGE. -# -# $FreeBSD$ - - -# read variables -sub variables { - $verbose = 1; # verbose = [0-2] - $usernameregexp = "^[a-z0-9_][a-z0-9_-]*\$"; # configurable - $defaultusernameregexp = $usernameregexp; # remains constant - $defaultusepassword = "yes"; # use password authentication for new users - $defaultenableaccount = "yes"; # enable the account by default - $defaultemptypassword = "no"; # don't create an empty password - $dotdir = "/usr/share/skel"; # copy dotfiles from this dir - $dotdir_bak = $dotdir; - $send_message = "/etc/adduser.message"; # send message to new user - $send_message_bak = '/etc/adduser.message'; - $config = "/etc/adduser.conf"; # config file for adduser - $config_read = 1; # read config file - $logfile = "/var/log/adduser"; # logfile - $home = "/home"; # default HOME - $etc_shells = "/etc/shells"; - $etc_passwd = "/etc/master.passwd"; - $group = "/etc/group"; - @pwd_mkdb = qw(pwd_mkdb -p); # program for building passwd database - - - # List of directories where shells located - @path = ('/bin', '/usr/bin', '/usr/local/bin'); - # common shells, first element has higher priority - @shellpref = ('csh', 'sh', 'bash', 'tcsh', 'ksh'); - - $defaultshell = 'sh'; # defaultshell if not empty - $group_uniq = 'USER'; - $defaultgroup = $group_uniq;# login groupname, $group_uniq means username - $defaultclass = ''; - - $uid_start = 1000; # new users get this uid - $uid_end = 32000; # max. uid - - # global variables - # passwd - $username = ''; # $username{username} = uid - $uid = ''; # $uid{uid} = username - $pwgid = ''; # $pwgid{pwgid} = username; gid from passwd db - - $password = ''; # password for new users - $usepassword = ''; # use password-based auth - $useemptypassword = ''; # use an empty password - $enableaccount = ''; # enable or disable account password at creation - - # group - $groupname =''; # $groupname{groupname} = gid - $groupmembers = ''; # $groupmembers{gid} = members of group/kommalist - $gid = ''; # $gid{gid} = groupname; gid form group db - @group_comments; # Comments in the group file - - # shell - $shell = ''; # $shell{`basename sh`} = sh - - umask 022; # don't give login group write access - - $ENV{'PATH'} = "/sbin:/bin:/usr/sbin:/usr/bin"; - @passwd_backup = ''; - @group_backup = ''; - @message_buffer = ''; - @user_variable_list = ''; # user variables in /etc/adduser.conf - $do_not_delete = '## DO NOT DELETE THIS LINE!'; -} - -# read shell database, see also: shells(5) -sub shells_read { - local($sh); - local($err) = 0; - - print "Check $etc_shells\n" if $verbose; - open(S, $etc_shells) || die "$etc_shells:$!\n"; - - while(<S>) { - if (/^\s*\//) { - s/^\s*//; s/\s+.*//; # chop - $sh = $_; - if (-x $sh) { - $shell{&basename($sh)} = $sh; - } else { - warn "Shell: $sh not executable!\n"; - $err++; - } - } - } - - # Allow /nonexistent and /bin/date as a valid shell for system utils - push(@list, "/nonexistent"); - push(@shellpref, "no") if !grep(/^no$/, @shellpref); - $shell{"no"} = "/nonexistent"; - - push(@list, "/bin/date"); - push(@shellpref, "date") if !grep(/^date$/, @shellpref); - $shell{"date"} = "/bin/date"; - - return $err; -} - -# add new shells if possible -sub shells_add { - local($sh,$dir,@list); - - return 1 unless $verbose; - - foreach $sh (@shellpref) { - # all known shells - if (!$shell{$sh}) { - # shell $sh is not defined as login shell - foreach $dir (@path) { - if (-x "$dir/$sh") { - # found shell - if (&confirm_yn("Found shell: $dir/$sh. Add to $etc_shells?", "yes")) { - push(@list, "$dir/$sh"); - push(@shellpref, "$sh"); - $shell{&basename("$dir/$sh")} = "$dir/$sh"; - $changes++; - } - } - } - } - } - &append_file($etc_shells, @list) if $#list >= 0; -} - -# choose your favourite shell and return the shell -sub shell_default { - local($e,$i,$new_shell); - local($sh); - - $sh = &shell_default_valid($defaultshell); - return $sh unless $verbose; - - $new_shell = &confirm_list("Enter your default shell:", 0, - $sh, sort(keys %shell)); - print "Your default shell is: $new_shell -> $shell{$new_shell}\n"; - $changes++ if $new_shell ne $sh; - return $new_shell; -} - -sub shell_default_valid { - local($sh) = @_; - local($s,$e); - - return $sh if $shell{$sh}; - - foreach $e (@shellpref) { - $s = $e; - last if defined($shell{$s}); - } - $s = "sh" unless $s; - warn "Shell ``$sh'' is undefined, use ``$s''\n"; - return $s; -} - -# return default home partition (e.g. "/home") -# create base directory if nesseccary -sub home_partition { - local($home) = @_; - $home = &stripdir($home); - local($h) = $home; - - return $h if !$verbose && $h eq &home_partition_valid($h); - - while(1) { - $h = &confirm_list("Enter your default HOME partition:", 1, $home, ""); - $h = &stripdir($h); - last if $h eq &home_partition_valid($h); - } - - $changes++ if $h ne $home; - return $h; -} - -sub home_partition_valid { - local($h) = @_; - - $h = &stripdir($h); - # all right (I hope) - return $h if $h =~ "^/" && -e $h && -w $h && (-d $h || -l $h); - - # Errors or todo - if ($h !~ "^/") { - warn "Please use absolute path for home: ``$h''.\a\n"; - return 0; - } - - if (-e $h) { - warn "$h exists, but is not a directory or symlink!\n" - unless -d $h || -l $h; - warn "$h is not writable!\n" - unless -w $h; - return 0; - } else { - # create home partition - return $h if &mkdir_home($h); - } - return 0; -} - -# check for valid passwddb -sub passwd_check { - system(@pwd_mkdb, '-C', $etc_passwd); - die "\nInvalid $etc_passwd - cannot add any users!\n" if $?; -} - -# read /etc/passwd -sub passwd_read { - local($p_username, $pw, $p_uid, $p_gid, $sh, %shlist); - - print "Check $etc_passwd\n" if $verbose; - open(P, "$etc_passwd") || die "$etc_passwd: $!\n"; - - while(<P>) { - chop; - push(@passwd_backup, $_); - # ignore comments - next if /^\s*$/; - next if /^\s*#/; - - ($p_username, $pw, $p_uid, $p_gid, $sh) = (split(/:/, $_))[0..3,9]; - - print "$p_username already exists with uid: $username{$p_username}!\n" - if $username{$p_username} && $verbose; - $username{$p_username} = $p_uid; - print "User $p_username: uid $p_uid exists twice: $uid{$p_uid}\n" - if $uid{$p_uid} && $verbose && $p_uid; # don't warn for uid 0 - print "User $p_username: illegal shell: ``$sh''\n" - if ($verbose && $sh && - !$shell{&basename($sh)} && - $p_username !~ /^(news|xten|bin|nobody|uucp)$/ && - $sh !~ /\/(pppd|sliplogin|nologin|nonexistent)$/); - $uid{$p_uid} = $p_username; - $pwgid{$p_gid} = $p_username; - } - close P; -} - -# read /etc/group -sub group_read { - local($g_groupname,$pw,$g_gid, $memb); - - print "Check $group\n" if $verbose; - open(G, "$group") || die "$group: $!\n"; - while(<G>) { - chop; - push(@group_backup, $_); - # Ignore empty lines - next if /^\s*$/; - # Save comments to restore later - if (/^\s*\#/) { - push(@group_comments, $_); - next; - } - - ($g_groupname, $pw, $g_gid, $memb) = (split(/:/, $_))[0..3]; - - $groupmembers{$g_gid} = $memb; - warn "Groupname exists twice: $g_groupname:$g_gid -> $g_groupname:$groupname{$g_groupname}\n" - if $groupname{$g_groupname} && $verbose; - $groupname{$g_groupname} = $g_gid; - warn "Groupid exists twice: $g_groupname:$g_gid -> $gid{$g_gid}:$g_gid\n" - if $gid{$g_gid} && $verbose; - $gid{$g_gid} = $g_groupname; - } - close G; -} - -# check gids /etc/passwd <-> /etc/group -sub group_check { - local($c_gid, $c_username, @list); - - foreach $c_gid (keys %pwgid) { - if (!$gid{$c_gid}) { - $c_username = $pwgid{$c_gid}; - warn "User ``$c_username'' has gid $c_gid but a group with this " . - "gid does not exist.\n" if $verbose; - } - } -} - -# -# main loop for creating new users -# - -# return username -sub new_users_name { - local($name); - - while(1) { - $name = &confirm_list("Enter username", 1, $usernameregexp, ""); - last if (&new_users_name_valid($name)); - } - return $name; -} - -sub new_users_name_valid { - local($name) = @_; - - if ($name eq $usernameregexp) { # user/admin just pressed <Return> - warn "Please enter a username\a\n"; - return 0; - } elsif (length($name) > 16) { - warn "Username is longer than 16 characters.\a\n"; - return 0; - } elsif ($name =~ /[:\n]/) { - warn "Username cannot contain colon or newline characters.\a\n"; - return 0; - } elsif ($name !~ /$usernameregexp/) { - if ($usernameregexp eq $defaultusernameregexp) { - warn "Illegal username.\n" . - "Please use only lowercase Roman, decimal, underscore, " . - "or hyphen characters.\n" . - "Additionally, a username should not start with a hyphen.\a\n"; - } else { - warn "Username doesn't match the regexp /$usernameregexp/\a\n"; - } - return 0; - } elsif (defined($username{$name})) { - warn "Username ``$name'' already exists!\a\n"; return 0; - } - return 1; -} - -# return full name -sub new_users_fullname { - local($name) = @_; - local($fullname); - - while(1) { - $fullname = &confirm_list("Enter full name", 1, "", ""); - last if $fullname eq &new_users_fullname_valid($fullname); - } - $fullname = $name unless $fullname; - return $fullname; -} - -sub new_users_fullname_valid { - local($fullname) = @_; - - return $fullname if $fullname !~ /:/; - - warn "``:'' is not allowed!\a\n"; - return 0; -} - -# return shell (full path) for user -sub new_users_shell { - local($sh); - - $sh = &confirm_list("Enter shell", 0, $defaultshell, keys %shell); - return $shell{$sh}; -} - -# return home (full path) for user -# Note that the home path defaults to $home/$name for batch -sub new_users_home { - local($name) = @_; - local($userhome); - - while(1) { - $userhome = &confirm_list("Enter home directory (full path)", 1, "$home/$name", ""); - last if $userhome =~ /^\//; - warn qq{Home directory "$userhome" is not a full path\a\n}; - } - return $userhome; -} - -# return free uid and gid -sub new_users_id { - local($name) = @_; - local($u_id, $g_id) = &next_id($name); - local($u_id_tmp, $e); - - while(1) { - $u_id_tmp = &confirm_list("Uid", 1, $u_id, ""); - last if $u_id_tmp =~ /^[0-9]+$/ && $u_id_tmp <= $uid_end && - ! $uid{$u_id_tmp}; - if ($uid{$u_id_tmp}) { - warn "Uid ``$u_id_tmp'' in use!\a\n"; - $uid_start = $u_id_tmp; - ($u_id, $g_id) = &next_id($name); - next; - } else { - warn "Wrong uid.\a\n"; - } - } - # use calculated uid - # return ($u_id_tmp, $g_id) if $u_id_tmp eq $u_id; - # recalculate gid - $uid_start = $u_id_tmp; - return &next_id($name); -} - -# return login class for user -sub new_users_class { - local($def) = @_; - local($class); - - $class = &confirm_list("Enter login class:", 1, $def, ($def, "default")); - $class = "" if $class eq "default"; - return $class; -} - -# add user to group -sub add_group { - local($gid, $name) = @_; - - return 0 if - $groupmembers{$gid} =~ /^(.+,)?$name(,.+)?$/; - - $groupmembers_bak{$gid} = $groupmembers{$gid}; - $groupmembers{$gid} .= "," if $groupmembers{$gid}; - $groupmembers{$gid} .= "$name"; - - return $name; -} - - -# return login group -sub new_users_grplogin { - local($name, $defaultgroup, $new_users_ok) = @_; - local($group_login, $group); - - $group = $name; - $group = $defaultgroup if $defaultgroup ne $group_uniq; - - if ($new_users_ok) { - # clean up backup - foreach $e (keys %groupmembers_bak) { delete $groupmembers_bak{$e}; } - } else { - # restore old groupmembers, user was not accept - foreach $e (keys %groupmembers_bak) { - $groupmembers{$e} = $groupmembers_bak{$e}; - } - } - - while(1) { - $group_login = &confirm_list("Login group", 1, $group, - ($name, $group)); - last if $group_login eq $group; - last if $group_login eq $name; - last if defined $groupname{$group_login}; - if ($group_login eq $group_uniq) { - $group_login = $name; last; - } - - if (defined $gid{$group_login}) { - # convert numeric groupname (gid) to groupname - $group_login = $gid{$group_login}; - last; - } - warn "Group does not exist!\a\n"; - } - - #if (defined($groupname{$group_login})) { - # &add_group($groupname{$group_login}, $name); - #} - - return ($group_login, $group_uniq) if $group_login eq $name; - return ($group_login, $group_login); -} - -# return other groups (string) -sub new_users_groups { - local($name, $other_groups) = @_; - local($string) = - "Login group is ``$group_login''. Invite $name into other groups:"; - local($e, $flag); - local($new_groups,$groups); - - $other_groups = "no" unless $other_groups; - - while(1) { - $groups = &confirm_list($string, 1, $other_groups, - ("no", $other_groups, "guest")); - # no other groups - return "" if $groups eq "no"; - - ($flag, $new_groups) = &new_users_groups_valid($groups); - last unless $flag; - } - $new_groups =~ s/\s*$//; - return $new_groups; -} - -sub new_users_groups_valid { - local($groups) = @_; - local($e, $new_groups); - local($flag) = 0; - - foreach $e (split(/[,\s]+/, $groups)) { - # convert numbers to groupname - if ($e =~ /^[0-9]+$/ && $gid{$e}) { - $e = $gid{$e}; - } - if (defined($groupname{$e})) { - if ($e eq $group_login) { - # do not add user to a group if this group - # is also the login group. - } elsif (&add_group($groupname{$e}, $name)) { - $new_groups .= "$e "; - } else { - warn "$name is already member of group ``$e''\n"; - } - } else { - warn "Group ``$e'' does not exist\a\n"; $flag++; - } - } - return ($flag, $new_groups); -} - -# your last change -sub new_users_ok { - local ($newpasswd); - # Note that we either show "password disabled" or - # "****" .. we don't show "empty password" since - # the whole point of starring out the password in - # the first place is to stop people looking over your - # shoulder and seeing the password.. -- adrian - if ($usepassword eq "no") { - $newpasswd = "Password disabled"; - } elsif ($enableaccount eq "no") { - $newpasswd = "Password disabled"; - } else { - $newpasswd = "****"; - } - - print <<EOF; - -Name: $name -Password: $newpasswd -Fullname: $fullname -Uid: $u_id -Gid: $g_id ($group_login) -Class: $class -Groups: $group_login $new_groups -HOME: $userhome -Shell: $sh -EOF - - return &confirm_yn("OK?", "yes"); -} - -# make password database -sub new_users_pwdmkdb { - local($last) = shift; - local($name) = shift; - - system(@pwd_mkdb, '-u', $name, $etc_passwd); - if ($?) { - warn "$last\n"; - warn "``@pwd_mkdb'' failed\n"; - exit($? >> 8); - } -} - -# update group database -sub new_users_group_update { - local($e, @a); - - # Add *new* group - if (!defined($groupname{$group_login}) && - !defined($gid{$groupname{$group_login}})) { - push(@group_backup, "$group_login:*:$g_id:"); - $groupname{$group_login} = $g_id; - $gid{$g_id} = $group_login; - # $groupmembers{$g_id} = $group_login; - } - - if ($new_groups || defined($groupname{$group_login}) || - defined($gid{$groupname{$group_login}}) && - $gid{$groupname{$group_login}} ne "+") { - # new user is member of some groups - # new login group is already in name space - rename($group, "$group.bak"); - #warn "$group_login $groupname{$group_login} $groupmembers{$groupname{$group_login}}\n"; - - # Restore comments from the top of the group file - @a = @group_comments; - foreach $e (sort {$a <=> $b} (keys %gid)) { - push(@a, "$gid{$e}:*:$e:$groupmembers{$e}"); - } - &append_file($group, @a); - } else { - &append_file($group, "$group_login:*:$g_id:"); - } - -} - -sub new_users_passwd_update { - # update passwd/group variables - push(@passwd_backup, $new_entry); - $username{$name} = $u_id; - $uid{$u_id} = $name; - $pwgid{$g_id} = $name; -} - -# send message to new user -sub new_users_sendmessage { - return 1 if $send_message eq "no"; - - local($cc) = - &confirm_list("Send message to ``$name'' and:", - 1, "no", ("root", "second_mail_address", "no")); - local($e); - $cc = "" if $cc eq "no"; - - foreach $e (@message_buffer) { - print eval "\"$e\""; - } - print "\n"; - - local(@message_buffer_append) = (); - if (!&confirm_yn("Add anything to default message", "no")) { - print "Use ``.'' or ^D alone on a line to finish your message.\n"; - push(@message_buffer_append, "\n"); - while($read = <STDIN>) { - last if $read eq "\.\n"; - push(@message_buffer_append, $read); - } - } - - &sendmessage("$name $cc", (@message_buffer, @message_buffer_append)) - if (&confirm_yn("Send message", "yes")); -} - -sub sendmessage { - local($to, @message) = @_; - local($e); - - if (!open(M, "| mail -s Welcome $to")) { - warn "Cannot send mail to: $to!\n"; - return 0; - } else { - foreach $e (@message) { - print M eval "\"$e\""; - } - close M; - } -} - - -sub new_users_password { - - local($password); - - while(1) { - system("stty -echo"); - $password = &confirm_list("Enter password", 1, "", ""); - system("stty echo"); - print "\n"; - if ($password ne "") { - system("stty -echo"); - $newpass = &confirm_list("Enter password again", 1, "", ""); - system("stty echo"); - print "\n"; - last if $password eq $newpass; - print "They didn't match, please try again\n"; - } - elsif (&confirm_yn("Use an empty password?", "yes")) { - last; - } - } - - return $password; -} - -sub new_users_use_password { - local ($p) = $defaultusepassword; - $p = &confirm_yn("Use password-based authentication", $defaultusepassword); - return "yes" if (($defaultusepassword eq "yes" && $p) || - ($defaultusepassword eq "no" && !$p)); - return "no"; # otherwise -} - -sub new_users_enable_account { - local ($p) = $defaultenableaccount; - $p = &confirm_yn("Enable account password at creation", $defaultenableaccount); - return "yes" if (($defaultenableaccount eq "yes" && $p) || - ($defaultenableaccount eq "no" && !$p)); - return "no"; # otherwise -} - -sub new_users_empty_password { - local ($p) = $defaultemptypassword; - $p = &confirm_yn("Use an empty password", $defaultemptypassword); - return "yes" if (($defaultemptypassword eq "yes" && $p) || - ($defaultemptypassword eq "no" && !$p)); - return "no"; # otherwise -} - -sub new_users { - - print "\n" if $verbose; - print "Ok, let's go.\n" . - "Don't worry about mistakes. I will give you the chance later to " . - "correct any input.\n" if $verbose; - - # name: Username - # fullname: Full name - # sh: shell - # userhome: home path for user - # u_id: user id - # g_id: group id - # class: login class - # group_login: groupname of g_id - # new_groups: some other groups - local($name, $group_login, $fullname, $sh, $u_id, $g_id, $class, $new_groups); - local($userhome); - local($groupmembers_bak, $cryptpwd); - local($new_users_ok) = 1; - - - $new_groups = "no"; - $new_groups = "no" unless $groupname{$new_groups}; - - while(1) { - $name = &new_users_name; - $fullname = &new_users_fullname($name); - $sh = &new_users_shell; - $userhome = &new_users_home($name); - ($u_id, $g_id) = &new_users_id($name); - $class = &new_users_class($defaultclass); - ($group_login, $defaultgroup) = - &new_users_grplogin($name, $defaultgroup, $new_users_ok); - # do not use uniq username and login group - $g_id = $groupname{$group_login} if (defined($groupname{$group_login})); - - - # The tricky logic: - # If $usepasswd is 0, we use a * as a password - # If $usepasswd is 1, then - # if $enableaccount is 0, we prepend * as a password - # else if $enableaccount is 1 we don't prepend anything - # if $useemptypassword is 0 we ask for a password, - # else we use a blank one - # - # The logic is tasty, I'll give you that, but its flexible and - # it'll stop people shooting themselves in the foot. - - $new_groups = &new_users_groups($name, $new_groups); - - $usepassword = &new_users_use_password; - if ($usepassword eq "no") { - # note that the assignments to enableaccount and - # useemptypassword functionally do the same as - # usepasswd == "no". Just for consistency. - $password = ""; # no password! - $enableaccount = "no"; # doesn't matter here - $useemptypassword = "yes"; # doesn't matter here - } else { - $useemptypassword = &new_users_empty_password; - if ($useemptypassword eq "no") { - $password = &new_users_password; - } - $enableaccount = &new_users_enable_account; - } - - if (&new_users_ok) { - $new_users_ok = 1; - - $cryptpwd = ""; - $cryptpwd = crypt($password, &salt) if $password ne ""; - - if ($usepassword eq "no") { - $cryptpwd = "*"; - } else { - # cryptpwd is valid before this if mess, so if - # blankpasswd is no we don't blank the cryptpwd - if ($useemptypassword eq "yes") { - $cryptpwd = ""; - } - if ($enableaccount eq "no") { - $cryptpwd = "*" . $cryptpwd; - } - } - # obscure perl bug - $new_entry = "$name\:" . "$cryptpwd" . - "\:$u_id\:$g_id\:$class\:0:0:$fullname:$userhome:$sh"; - &append_file($etc_passwd, "$new_entry"); - &new_users_pwdmkdb("$new_entry", $name); - &new_users_group_update; - &new_users_passwd_update; print "Added user ``$name''\n"; - &new_users_sendmessage; - &adduser_log("$name:*:$u_id:$g_id($group_login):$fullname"); - &home_create($userhome, $name, $group_login); - } else { - $new_users_ok = 0; - } - if (!&confirm_yn("Add another user?", "yes")) { - print "Goodbye!\n" if $verbose; - last; - } - print "\n" if !$verbose; - } -} - -# ask for password usage -sub password_default { - local($p) = $defaultusepassword; - if ($verbose) { - $p = &confirm_yn("Use password-based authentication", $defaultusepassword); - $changes++ unless $p; - } - return "yes" if (($defaultusepassword eq "yes" && $p) || - ($defaultusepassword eq "no" && !$p)); - return "no"; # otherwise -} - -# ask for account enable usage -sub enable_account_default { - local ($p) = $defaultenableaccount; - if ($verbose) { - $p = &confirm_yn("Enable account password at creation", $defaultenableaccount); - $changes++ unless $p; - } - return "yes" if (($defaultenableaccount eq "yes" && $p) || - ($defaultenableaccount eq "no" && !$p)); - return "no"; # otherwise -} - -# ask for empty password -sub enable_empty_password { - local ($p) = $defaultemptypassword; - if ($verbose) { - $p = &confirm_yn("Use an empty password", $defaultemptypassword); - $changes++ unless $p; - } - return "yes" if (($defaultemptypassword eq "yes" && $p) || - ($defaultemptypassword eq "no" && !$p)); - return "no"; # otherwise -} - -# misc -sub check_root { - die "You are not root!\n" if $< && !$test; -} - -sub usage { - warn <<USAGE; -usage: adduser - [-check_only] - [-class login_class] - [-config_create] - [-dotdir dotdir] - [-group login_group] - [-h|-help] - [-home home] - [-message message_file] - [-noconfig] - [-shell shell] - [-s|-silent|-q|-quiet] - [-uid uid_start] - [-v|-verbose] - -home=$home shell=$defaultshell dotdir=$dotdir login_group=$defaultgroup -login_class=$defaultclass message_file=$send_message uid_start=$uid_start -USAGE - exit 1; -} - -# uniq(1) -sub uniq { - local(@list) = @_; - local($e, $last, @array); - - foreach $e (sort @list) { - push(@array, $e) unless $e eq $last; - $last = $e; - } - return @array; -} - -# see /usr/src/usr.bin/passwd/local_passwd.c or librcypt, crypt(3) -sub salt { - local($salt); # initialization - local($i, $rand); - local(@itoa64) = ( '0' .. '9', 'a' .. 'z', 'A' .. 'Z' ); # 0 .. 63 - - warn "calculate salt\n" if $verbose > 1; - # to64 - for ($i = 0; $i < 27; $i++) { - srand(time + $rand + $$); - $rand = rand(25*29*17 + $rand); - $salt .= $itoa64[$rand & $#itoa64]; - } - warn "Salt is: $salt\n" if $verbose > 1; - - return $salt; -} - - -# print banner -sub copyright { - return; -} - -# hints -sub hints { - if ($verbose) { - print "Use option ``-silent'' if you don't want to see " . - "all warnings and questions.\n\n"; - } else { - print "Use option ``-verbose'' if you want to see more warnings and " . - "questions \nor try to repair bugs.\n\n"; - } -} - -# -sub parse_arguments { - local(@argv) = @_; - - while ($_ = $argv[0], /^-/) { - shift @argv; - last if /^--$/; - if (/^--?(v|verbose)$/) { $verbose = 1 } - elsif (/^--?(s|silent|q|quiet)$/) { $verbose = 0 } - elsif (/^--?(debug)$/) { $verbose = 2 } - elsif (/^--?(h|help|\?)$/) { &usage } - elsif (/^--?(home)$/) { $home = $argv[0]; shift @argv } - elsif (/^--?(shell)$/) { $defaultshell = $argv[0]; shift @argv } - elsif (/^--?(dotdir)$/) { $dotdir = $argv[0]; shift @argv } - elsif (/^--?(uid)$/) { $uid_start = $argv[0]; shift @argv } - elsif (/^--?(class)$/) { $defaultclass = $argv[0]; shift @argv } - elsif (/^--?(group)$/) { $defaultgroup = $argv[0]; shift @argv } - elsif (/^--?(check_only)$/) { $check_only = 1 } - elsif (/^--?(message)$/) { $send_message = $argv[0]; shift @argv; - $sendmessage = 1; } - elsif (/^--?(batch)$/) { - warn "The -batch option is not supported anymore.\n", - "Please use the pw(8) command line tool!\n"; - exit(0); - } - # see &config_read - elsif (/^--?(config_create)$/) { &create_conf; } - elsif (/^--?(noconfig)$/) { $config_read = 0; } - else { &usage } - } - #&usage if $#argv < 0; -} - -sub basename { - local($name) = @_; - $name =~ s|/+$||; - $name =~ s|.*/+||; - return $name; -} - -sub dirname { - local($name) = @_; - $name = &stripdir($name); - $name =~ s|/+[^/]+$||; - $name = "/" unless $name; # dirname of / is / - return $name; -} - -# return 1 if $file is a readable file or link -sub filetest { - local($file, $verb) = @_; - - if (-e $file) { - if (-f $file || -l $file) { - return 1 if -r _; - warn "$file unreadable\n" if $verbose; - } else { - warn "$file is not a plain file or link\n" if $verbose; - } - } - return 0; -} - -# create configuration files and exit -sub create_conf { - $create_conf = 1; - if ($send_message ne 'no') { - &message_create($send_message); - } else { - &message_create($send_message_bak); - } - &config_write(1); - exit(0); -} - -# log for new user in /var/log/adduser -sub adduser_log { - local($string) = @_; - local($e); - - return 1 if $logfile eq "no"; - - local($sec, $min, $hour, $mday, $mon, $year) = localtime; - $year += 1900; - $mon++; - - foreach $e ('sec', 'min', 'hour', 'mday', 'mon', 'year') { - # '7' -> '07' - eval "\$$e = 0 . \$$e" if (eval "\$$e" < 10); - } - - &append_file($logfile, "$year/$mon/$mday $hour:$min:$sec $string"); -} - -# create HOME directory, copy dotfiles from $dotdir to $HOME -sub home_create { - local($homedir, $name, $group) = @_; - local($rootdir); - - if (-e "$homedir") { - warn "HOME directory ``$homedir'' already exists.\a\n"; - return 0; - } - - # if the home directory prefix doesn't exist, create it - # First, split the directory into a list; then remove the user's dir - @dir = split('/', $homedir); pop(@dir); - # Put back together & strip to get directory prefix - $rootdir = &stripdir(join('/', @dir)); - - if (!&mkdirhier("$rootdir")) { - # warn already displayed - return 0; - } - - if ($dotdir eq 'no') { - if (!mkdir("$homedir", 0755)) { - warn "$dir: $!\n"; return 0; - } - system 'chown', "$name:$group", $homedir; - return !$?; - } - - # copy files from $dotdir to $homedir - # rename 'dot.foo' files to '.foo' - print "Copy files from $dotdir to $homedir\n" if $verbose; - system('cp', '-R', $dotdir, $homedir); - system('chmod', '-R', 'u+wrX,go-w', $homedir); - system('chown', '-Rh', "$name:$group", $homedir); - - # security - opendir(D, $homedir); - foreach $file (readdir(D)) { - if ($file =~ /^dot\./ && -f "$homedir/$file") { - $file =~ s/^dot\././; - rename("$homedir/dot$file", "$homedir/$file"); - } - chmod(0600, "$homedir/$file") - if ($file =~ /^\.(rhosts|Xauthority|kermrc|netrc)$/); - chmod(0700, "$homedir/$file") - if ($file =~ /^(Mail|prv|\.(iscreen|term))$/); - } - closedir D; - return 1; -} - -# makes a directory hierarchy -sub mkdir_home { - local($dir) = @_; - $dir = &stripdir($dir); - local($user_partition) = "/usr"; - local($dirname) = &dirname($dir); - - -e $dirname || &mkdirhier($dirname); - - if (((stat($dirname))[0]) == ((stat("/"))[0])){ - # home partition is on root partition - # create home partition on $user_partition and make - # a symlink from $dir to $user_partition/`basename $dir` - # For instance: /home -> /usr/home - - local($basename) = &basename($dir); - local($d) = "$user_partition/$basename"; - - - if (-d $d) { - warn "Oops, $d already exists.\n" if $verbose; - } else { - print "Create $d\n" if $verbose; - if (!mkdir("$d", 0755)) { - warn "$d: $!\a\n"; return 0; - } - } - - unlink($dir); # symlink to nonexist file - print "Create symlink: $dir -> $d\n" if $verbose; - if (!symlink("$d", $dir)) { - warn "Symlink $d: $!\a\n"; return 0; - } - } else { - print "Create $dir\n" if $verbose; - if (!mkdir("$dir", 0755)) { - warn "Directory ``$dir'': $!\a\n"; return 0; - } - } - return 1; -} - -sub mkdirhier { - local($dir) = @_; - local($d,$p); - - $dir = &stripdir($dir); - - foreach $d (split('/', $dir)) { - $dir = "$p/$d"; - $dir =~ s|^//|/|; - if (! -e "$dir") { - print "Create $dir\n" if $verbose; - if (!mkdir("$dir", 0755)) { - warn "$dir: $!\n"; return 0; - } - } - $p .= "/$d"; - } - return 1; -} - -# stript unused '/' -# F.i.: //usr///home// -> /usr/home -sub stripdir { - local($dir) = @_; - - $dir =~ s|/+|/|g; # delete double '/' - $dir =~ s|/$||; # delete '/' at end - return $dir if $dir ne ""; - return '/'; -} - -# Read one of the elements from @list. $confirm is default. -# If !$allow accept only elements from @list. -sub confirm_list { - local($message, $allow, $confirm, @list) = @_; - local($read, $c, $print); - - $print = "$message" if $message; - $print .= " " unless $message =~ /\n$/ || $#list == 0; - - $print .= join($", &uniq(@list)); #" - $print .= " " unless $message =~ /\n$/ && $#list == 0; - print "$print"; - print "\n" if (length($print) + length($confirm)) > 60; - print "[$confirm]: "; - - chop($read = <STDIN>); - $read =~ s/^\s*//; - $read =~ s/\s*$//; - return $confirm if $read eq ""; - return "$read" if $allow; - - foreach $c (@list) { - return $read if $c eq $read; - } - warn "$read: is not allowed!\a\n"; - return &confirm_list($message, $allow, $confirm, @list); -} - -# YES or NO question -# return 1 if &confirm("message", "yes") and answer is yes -# or if &confirm("message", "no") an answer is no -# otherwise 0 -sub confirm_yn { - local($message, $confirm) = @_; - local($yes) = '^(yes|YES|y|Y)$'; - local($no) = '^(no|NO|n|N)$'; - local($read, $c); - - if ($confirm && ($confirm =~ "$yes" || $confirm == 1)) { - $confirm = "y"; - } else { - $confirm = "n"; - } - print "$message (y/n) [$confirm]: "; - chop($read = <STDIN>); - $read =~ s/^\s*//; - $read =~ s/\s*$//; - return 1 unless $read; - - if (($confirm eq "y" && $read =~ "$yes") || - ($confirm eq "n" && $read =~ "$no")) { - return 1; - } - - if ($read !~ "$yes" && $read !~ "$no") { - warn "Wrong value. Enter again!\a\n"; - return &confirm_yn($message, $confirm); - } - return 0; -} - -# allow configuring usernameregexp -sub usernameregexp_default { - local($r) = $usernameregexp; - - while ($verbose) { - $r = &confirm_list("Usernames must match regular expression:", 1, - $r, ""); - eval "'foo' =~ /$r/"; - last unless $@; - warn "Invalid regular expression\a\n"; - } - $changes++ if $r ne $usernameregexp; - return $r; -} - -# test if $dotdir exist -# return "no" if $dotdir not exist or dotfiles should not copied -sub dotdir_default { - local($dir) = $dotdir; - - return &dotdir_default_valid($dir) unless $verbose; - while($verbose) { - $dir = &confirm_list("Copy dotfiles from:", 1, - $dir, ("no", $dotdir_bak, $dir)); - last if $dir eq &dotdir_default_valid($dir); - } - warn "Do not copy dotfiles.\n" if $verbose && $dir eq "no"; - - $changes++ if $dir ne $dotdir; - return $dir; -} - -sub dotdir_default_valid { - local($dir) = @_; - - return $dir if (-e $dir && -r _ && (-d _ || -l $dir) && $dir =~ "^/"); - return $dir if $dir eq "no"; - warn "Dotdir ``$dir'' is not a directory\a\n"; - return "no"; -} - -# ask for messages to new users -sub message_default { - local($file) = $send_message; - local(@d) = ($file, $send_message_bak, "no"); - - while($verbose) { - $file = &confirm_list("Send message from file:", 1, $file, @d); - last if $file eq "no"; - last if &filetest($file, 1); - - # maybe create message file - &message_create($file) if &confirm_yn("Create ``$file''?", "yes"); - last if &filetest($file, 0); - last if !&confirm_yn("File ``$file'' does not exist, try again?", - "yes"); - } - - if ($file eq "no" || !&filetest($file, 0)) { - warn "Do not send message\n" if $verbose; - $file = "no"; - } else { - &message_read($file); - } - - $changes++ if $file ne $send_message && $verbose; - return $file; -} - -# create message file -sub message_create { - local($file) = @_; - - rename($file, "$file.bak"); - if (!open(M, "> $file")) { - warn "Messagefile ``$file'': $!\n"; return 0; - } - print M <<EOF; -# -# Message file for adduser(8) -# comment: ``#'' -# default variables: \$name, \$fullname, \$password -# other variables: see /etc/adduser.conf after -# line ``$do_not_delete'' -# - -\$fullname, - -your account ``\$name'' was created. -Have fun! - -See also chpass(1), finger(1), passwd(1) -EOF - close M; - return 1; -} - -# read message file into buffer -sub message_read { - local($file) = @_; - @message_buffer = ''; - - if (!open(R, "$file")) { - warn "File ``$file'':$!\n"; return 0; - } - while(<R>) { - push(@message_buffer, $_) unless /^\s*#/; - } - close R; -} - -# write @list to $file with file-locking -sub append_file { - local($file,@list) = @_; - local($e); - local($LOCK_EX) = 2; - local($LOCK_NB) = 4; - local($LOCK_UN) = 8; - - open(F, ">> $file") || die "$file: $!\n"; - print "Lock $file.\n" if $verbose > 1; - while(!flock(F, $LOCK_EX | $LOCK_NB)) { - warn "Cannot lock file: $file\a\n"; - die "Sorry, give up\n" - unless &confirm_yn("Try again?", "yes"); - } - print F join("\n", @list) . "\n"; - close F; - print "Unlock $file.\n" if $verbose > 1; - flock(F, $LOCK_UN); -} - -# return free uid+gid -# uid == gid if possible -sub next_id { - local($group) = @_; - - $uid_start = 1000 if ($uid_start <= 0 || $uid_start >= $uid_end); - # looking for next free uid - while($uid{$uid_start}) { - $uid_start++; - $uid_start = 1000 if $uid_start >= $uid_end; - print "$uid_start\n" if $verbose > 1; - } - - local($gid_start) = $uid_start; - # group for user (username==groupname) already exist - if ($groupname{$group}) { - $gid_start = $groupname{$group}; - } - # gid is in use, looking for another gid. - # Note: uid an gid are not equal - elsif ($gid{$uid_start}) { - while($gid{$gid_start} || $uid{$gid_start}) { - $gid_start--; - $gid_start = $uid_end if $gid_start < 100; - } - } - return ($uid_start, $gid_start); -} - -# read config file -sub config_read { - local($opt) = @_; - local($user_flag) = 0; - - # don't read config file - return 1 if $opt =~ /-(noconfig|config_create)/ || !$config_read; - - if(!open(C, "$config")) { - warn "$config: $!\n"; return 0; - } - - while(<C>) { - # user defined variables - /^$do_not_delete/ && $user_flag++; - # found @array or $variable - if (s/^(\w+\s*=\s*\()/\@$1/ || s/^(\w+\s*=)/\$$1/) { - eval $_; - #warn "$_"; - } - # lines with '^##' are not saved - push(@user_variable_list, $_) - if $user_flag && !/^##/ && (s/^[\$\@]// || /^[#\s]/); - } - #warn "X @user_variable_list X\n"; - close C; -} - - -# write config file -sub config_write { - local($silent) = @_; - - # nothing to do - return 1 unless ($changes || ! -e $config || !$config_read || $silent); - - if (!$silent) { - if (-e $config) { - return 1 if &confirm_yn("\nWrite your changes to $config?", "no"); - } else { - return 1 unless - &confirm_yn("\nWrite your configuration to $config?", "yes"); - } - } - - rename($config, "$config.bak"); - open(C, "> $config") || die "$config: $!\n"; - - # prepare some variables - $send_message = "no" unless $send_message; - $defaultusepassword = "no" unless $defaultusepassword; - $defaultenableaccount = "yes" unless $defaultenableaccount; - $defaultemptypassword = "no" unless $defaultemptypassword; - local($shpref) = "'" . join("', '", @shellpref) . "'"; - local($shpath) = "'" . join("', '", @path) . "'"; - local($user_var) = join('', @user_variable_list); - - print C <<EOF; -# -# $config - automatic generated by adduser(8) -# -# Note: adduser read *and* write this file. -# You may change values, but don't add new things before the -# line ``$do_not_delete'' -# - -# verbose = [0-2] -verbose = $verbose - -# regular expression usernames are checked against (see perlre(1)) -# usernameregexp = 'regexp' -usernameregexp = '$usernameregexp' - -# use password-based authentication for new users -# defaultusepassword = "yes" | "no" -defaultusepassword = "$defaultusepassword" - -# enable account password at creation -# (the password will be prepended with a star if the account isn't enabled) -# defaultenableaccount = "yes" | "no" -defaultenableaccount = "$defaultenableaccount" - -# allow blank passwords -# defaultemptypassword = "yes" | "no" -defaultemptypassword = "$defaultemptypassword" - -# copy dotfiles from this dir ("/usr/share/skel" or "no") -dotdir = "$dotdir" - -# send this file to new user ("/etc/adduser.message" or "no") -send_message = "$send_message" - -# config file for adduser ("/etc/adduser.conf") -config = "$config" - -# logfile ("/var/log/adduser" or "no") -logfile = "$logfile" - -# default HOME directory ("/home") -home = "$home" - -# List of directories where shells located -# path = ('/bin', '/usr/bin', '/usr/local/bin') -path = ($shpath) - -# common shell list, first element has higher priority -# shellpref = ('bash', 'tcsh', 'ksh', 'csh', 'sh') -shellpref = ($shpref) - -# defaultshell if not empty ("bash") -defaultshell = "$defaultshell" - -# defaultgroup ('USER' for same as username or any other valid group) -defaultgroup = $defaultgroup - -# defaultclass if not empty -defaultclass = "$defaultclass" - -# new users get this uid (1000) -uid_start = "$uid_start" - -$do_not_delete -## your own variables, see /etc/adduser.message -$user_var - -## end -EOF - close C; -} - -################ -# main -# -$test = 0; # test mode, only for development -$check_only = 0; - -&check_root; # you must be root to run this script! -&variables; # initialize variables -&config_read(@ARGV); # read variables form config-file -&parse_arguments(@ARGV); # parse arguments - -if (!$check_only) { - ©right; &hints; -} - -# check -$changes = 0; -&passwd_check; # check for valid passwdb -&shells_read; # read /etc/shells -&passwd_read; # read /etc/master.passwd -&group_read; # read /etc/group -&group_check; # check for incon* -exit 0 if $check_only; # only check consistence and exit - - -# interactive -# some questions -$usernameregexp = &usernameregexp_default; # regexp to check usernames against -&shells_add; # maybe add some new shells -$defaultshell = &shell_default; # enter default shell -$home = &home_partition($home); # find HOME partition -$dotdir = &dotdir_default; # check $dotdir -$send_message = &message_default; # send message to new user -$defaultusepassword = &password_default; # maybe use password -if ($defaultusepassword eq "no") { - if ($verbose) { - print "Creating accounts with a locked password.\n"; - } - $defaultenableaccount = "no"; - $defaultemptypassword = "yes"; -} else { - $defaultenableaccount = &enable_account_default; # enable or disable account - $defaultemptypassword = &enable_empty_password; # use empty password or not -} -&config_write(!$verbose); # write variables in file - -# main loop for creating new users -&new_users; # add new users - -#end |
