summaryrefslogtreecommitdiffstats
path: root/adduser/adduser.perl
diff options
context:
space:
mode:
authorScott Long <scottl@FreeBSD.org>2002-12-03 05:41:09 +0000
committerScott Long <scottl@FreeBSD.org>2002-12-03 05:41:09 +0000
commit947f8d29cb95cc2cca135ba261063df1806da2ec (patch)
treed185d7304940d3fca49a6c38fb14c8a9f3d68a01 /adduser/adduser.perl
parent59f4e321f857f45239599e1339b19422c7f97514 (diff)
downloadpw-darwin-947f8d29cb95cc2cca135ba261063df1806da2ec.tar.gz
pw-darwin-947f8d29cb95cc2cca135ba261063df1806da2ec.zip
Replace the perl versions of adduser and rmuser with shell script versions.
Submitted by: Mike Makonnen <mtm@identd.net> Approved by: re
Diffstat (limited to 'adduser/adduser.perl')
-rw-r--r--adduser/adduser.perl1558
1 files changed, 0 insertions, 1558 deletions
diff --git a/adduser/adduser.perl b/adduser/adduser.perl
deleted file mode 100644
index fb60253..0000000
--- a/adduser/adduser.perl
+++ /dev/null
@@ -1,1558 +0,0 @@
-#!/usr/bin/perl
-#
-# Copyright (c) 1995-1996 Wolfram Schneider <wosch@FreeBSD.org>. Berlin.
-# All rights reserved.
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-# notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-# notice, this list of conditions and the following disclaimer in the
-# documentation and/or other materials provided with the distribution.
-#
-# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
-# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
-# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
-# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
-# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
-# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
-# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
-# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
-# SUCH DAMAGE.
-#
-# $FreeBSD$
-
-
-# read variables
-sub variables {
- $verbose = 1; # verbose = [0-2]
- $usernameregexp = "^[a-z0-9_][a-z0-9_-]*\$"; # configurable
- $defaultusernameregexp = $usernameregexp; # remains constant
- $defaultusepassword = "yes"; # use password authentication for new users
- $defaultenableaccount = "yes"; # enable the account by default
- $defaultemptypassword = "no"; # don't create an empty password
- $dotdir = "/usr/share/skel"; # copy dotfiles from this dir
- $dotdir_bak = $dotdir;
- $send_message = "/etc/adduser.message"; # send message to new user
- $send_message_bak = '/etc/adduser.message';
- $config = "/etc/adduser.conf"; # config file for adduser
- $config_read = 1; # read config file
- $logfile = "/var/log/adduser"; # logfile
- $home = "/home"; # default HOME
- $etc_shells = "/etc/shells";
- $etc_passwd = "/etc/master.passwd";
- $group = "/etc/group";
- @pwd_mkdb = qw(pwd_mkdb -p); # program for building passwd database
-
-
- # List of directories where shells located
- @path = ('/bin', '/usr/bin', '/usr/local/bin');
- # common shells, first element has higher priority
- @shellpref = ('csh', 'sh', 'bash', 'tcsh', 'ksh');
-
- $defaultshell = 'sh'; # defaultshell if not empty
- $group_uniq = 'USER';
- $defaultgroup = $group_uniq;# login groupname, $group_uniq means username
- $defaultclass = '';
-
- $uid_start = 1000; # new users get this uid
- $uid_end = 32000; # max. uid
-
- # global variables
- # passwd
- $username = ''; # $username{username} = uid
- $uid = ''; # $uid{uid} = username
- $pwgid = ''; # $pwgid{pwgid} = username; gid from passwd db
-
- $password = ''; # password for new users
- $usepassword = ''; # use password-based auth
- $useemptypassword = ''; # use an empty password
- $enableaccount = ''; # enable or disable account password at creation
-
- # group
- $groupname =''; # $groupname{groupname} = gid
- $groupmembers = ''; # $groupmembers{gid} = members of group/kommalist
- $gid = ''; # $gid{gid} = groupname; gid form group db
- @group_comments; # Comments in the group file
-
- # shell
- $shell = ''; # $shell{`basename sh`} = sh
-
- umask 022; # don't give login group write access
-
- $ENV{'PATH'} = "/sbin:/bin:/usr/sbin:/usr/bin";
- @passwd_backup = '';
- @group_backup = '';
- @message_buffer = '';
- @user_variable_list = ''; # user variables in /etc/adduser.conf
- $do_not_delete = '## DO NOT DELETE THIS LINE!';
-}
-
-# read shell database, see also: shells(5)
-sub shells_read {
- local($sh);
- local($err) = 0;
-
- print "Check $etc_shells\n" if $verbose;
- open(S, $etc_shells) || die "$etc_shells:$!\n";
-
- while(<S>) {
- if (/^\s*\//) {
- s/^\s*//; s/\s+.*//; # chop
- $sh = $_;
- if (-x $sh) {
- $shell{&basename($sh)} = $sh;
- } else {
- warn "Shell: $sh not executable!\n";
- $err++;
- }
- }
- }
-
- # Allow /nonexistent and /bin/date as a valid shell for system utils
- push(@list, "/nonexistent");
- push(@shellpref, "no") if !grep(/^no$/, @shellpref);
- $shell{"no"} = "/nonexistent";
-
- push(@list, "/bin/date");
- push(@shellpref, "date") if !grep(/^date$/, @shellpref);
- $shell{"date"} = "/bin/date";
-
- return $err;
-}
-
-# add new shells if possible
-sub shells_add {
- local($sh,$dir,@list);
-
- return 1 unless $verbose;
-
- foreach $sh (@shellpref) {
- # all known shells
- if (!$shell{$sh}) {
- # shell $sh is not defined as login shell
- foreach $dir (@path) {
- if (-x "$dir/$sh") {
- # found shell
- if (&confirm_yn("Found shell: $dir/$sh. Add to $etc_shells?", "yes")) {
- push(@list, "$dir/$sh");
- push(@shellpref, "$sh");
- $shell{&basename("$dir/$sh")} = "$dir/$sh";
- $changes++;
- }
- }
- }
- }
- }
- &append_file($etc_shells, @list) if $#list >= 0;
-}
-
-# choose your favourite shell and return the shell
-sub shell_default {
- local($e,$i,$new_shell);
- local($sh);
-
- $sh = &shell_default_valid($defaultshell);
- return $sh unless $verbose;
-
- $new_shell = &confirm_list("Enter your default shell:", 0,
- $sh, sort(keys %shell));
- print "Your default shell is: $new_shell -> $shell{$new_shell}\n";
- $changes++ if $new_shell ne $sh;
- return $new_shell;
-}
-
-sub shell_default_valid {
- local($sh) = @_;
- local($s,$e);
-
- return $sh if $shell{$sh};
-
- foreach $e (@shellpref) {
- $s = $e;
- last if defined($shell{$s});
- }
- $s = "sh" unless $s;
- warn "Shell ``$sh'' is undefined, use ``$s''\n";
- return $s;
-}
-
-# return default home partition (e.g. "/home")
-# create base directory if nesseccary
-sub home_partition {
- local($home) = @_;
- $home = &stripdir($home);
- local($h) = $home;
-
- return $h if !$verbose && $h eq &home_partition_valid($h);
-
- while(1) {
- $h = &confirm_list("Enter your default HOME partition:", 1, $home, "");
- $h = &stripdir($h);
- last if $h eq &home_partition_valid($h);
- }
-
- $changes++ if $h ne $home;
- return $h;
-}
-
-sub home_partition_valid {
- local($h) = @_;
-
- $h = &stripdir($h);
- # all right (I hope)
- return $h if $h =~ "^/" && -e $h && -w $h && (-d $h || -l $h);
-
- # Errors or todo
- if ($h !~ "^/") {
- warn "Please use absolute path for home: ``$h''.\a\n";
- return 0;
- }
-
- if (-e $h) {
- warn "$h exists, but is not a directory or symlink!\n"
- unless -d $h || -l $h;
- warn "$h is not writable!\n"
- unless -w $h;
- return 0;
- } else {
- # create home partition
- return $h if &mkdir_home($h);
- }
- return 0;
-}
-
-# check for valid passwddb
-sub passwd_check {
- system(@pwd_mkdb, '-C', $etc_passwd);
- die "\nInvalid $etc_passwd - cannot add any users!\n" if $?;
-}
-
-# read /etc/passwd
-sub passwd_read {
- local($p_username, $pw, $p_uid, $p_gid, $sh, %shlist);
-
- print "Check $etc_passwd\n" if $verbose;
- open(P, "$etc_passwd") || die "$etc_passwd: $!\n";
-
- while(<P>) {
- chop;
- push(@passwd_backup, $_);
- # ignore comments
- next if /^\s*$/;
- next if /^\s*#/;
-
- ($p_username, $pw, $p_uid, $p_gid, $sh) = (split(/:/, $_))[0..3,9];
-
- print "$p_username already exists with uid: $username{$p_username}!\n"
- if $username{$p_username} && $verbose;
- $username{$p_username} = $p_uid;
- print "User $p_username: uid $p_uid exists twice: $uid{$p_uid}\n"
- if $uid{$p_uid} && $verbose && $p_uid; # don't warn for uid 0
- print "User $p_username: illegal shell: ``$sh''\n"
- if ($verbose && $sh &&
- !$shell{&basename($sh)} &&
- $p_username !~ /^(news|xten|bin|nobody|uucp)$/ &&
- $sh !~ /\/(pppd|sliplogin|nologin|nonexistent)$/);
- $uid{$p_uid} = $p_username;
- $pwgid{$p_gid} = $p_username;
- }
- close P;
-}
-
-# read /etc/group
-sub group_read {
- local($g_groupname,$pw,$g_gid, $memb);
-
- print "Check $group\n" if $verbose;
- open(G, "$group") || die "$group: $!\n";
- while(<G>) {
- chop;
- push(@group_backup, $_);
- # Ignore empty lines
- next if /^\s*$/;
- # Save comments to restore later
- if (/^\s*\#/) {
- push(@group_comments, $_);
- next;
- }
-
- ($g_groupname, $pw, $g_gid, $memb) = (split(/:/, $_))[0..3];
-
- $groupmembers{$g_gid} = $memb;
- warn "Groupname exists twice: $g_groupname:$g_gid -> $g_groupname:$groupname{$g_groupname}\n"
- if $groupname{$g_groupname} && $verbose;
- $groupname{$g_groupname} = $g_gid;
- warn "Groupid exists twice: $g_groupname:$g_gid -> $gid{$g_gid}:$g_gid\n"
- if $gid{$g_gid} && $verbose;
- $gid{$g_gid} = $g_groupname;
- }
- close G;
-}
-
-# check gids /etc/passwd <-> /etc/group
-sub group_check {
- local($c_gid, $c_username, @list);
-
- foreach $c_gid (keys %pwgid) {
- if (!$gid{$c_gid}) {
- $c_username = $pwgid{$c_gid};
- warn "User ``$c_username'' has gid $c_gid but a group with this " .
- "gid does not exist.\n" if $verbose;
- }
- }
-}
-
-#
-# main loop for creating new users
-#
-
-# return username
-sub new_users_name {
- local($name);
-
- while(1) {
- $name = &confirm_list("Enter username", 1, $usernameregexp, "");
- last if (&new_users_name_valid($name));
- }
- return $name;
-}
-
-sub new_users_name_valid {
- local($name) = @_;
-
- if ($name eq $usernameregexp) { # user/admin just pressed <Return>
- warn "Please enter a username\a\n";
- return 0;
- } elsif (length($name) > 16) {
- warn "Username is longer than 16 characters.\a\n";
- return 0;
- } elsif ($name =~ /[:\n]/) {
- warn "Username cannot contain colon or newline characters.\a\n";
- return 0;
- } elsif ($name !~ /$usernameregexp/) {
- if ($usernameregexp eq $defaultusernameregexp) {
- warn "Illegal username.\n" .
- "Please use only lowercase Roman, decimal, underscore, " .
- "or hyphen characters.\n" .
- "Additionally, a username should not start with a hyphen.\a\n";
- } else {
- warn "Username doesn't match the regexp /$usernameregexp/\a\n";
- }
- return 0;
- } elsif (defined($username{$name})) {
- warn "Username ``$name'' already exists!\a\n"; return 0;
- }
- return 1;
-}
-
-# return full name
-sub new_users_fullname {
- local($name) = @_;
- local($fullname);
-
- while(1) {
- $fullname = &confirm_list("Enter full name", 1, "", "");
- last if $fullname eq &new_users_fullname_valid($fullname);
- }
- $fullname = $name unless $fullname;
- return $fullname;
-}
-
-sub new_users_fullname_valid {
- local($fullname) = @_;
-
- return $fullname if $fullname !~ /:/;
-
- warn "``:'' is not allowed!\a\n";
- return 0;
-}
-
-# return shell (full path) for user
-sub new_users_shell {
- local($sh);
-
- $sh = &confirm_list("Enter shell", 0, $defaultshell, keys %shell);
- return $shell{$sh};
-}
-
-# return home (full path) for user
-# Note that the home path defaults to $home/$name for batch
-sub new_users_home {
- local($name) = @_;
- local($userhome);
-
- while(1) {
- $userhome = &confirm_list("Enter home directory (full path)", 1, "$home/$name", "");
- last if $userhome =~ /^\//;
- warn qq{Home directory "$userhome" is not a full path\a\n};
- }
- return $userhome;
-}
-
-# return free uid and gid
-sub new_users_id {
- local($name) = @_;
- local($u_id, $g_id) = &next_id($name);
- local($u_id_tmp, $e);
-
- while(1) {
- $u_id_tmp = &confirm_list("Uid", 1, $u_id, "");
- last if $u_id_tmp =~ /^[0-9]+$/ && $u_id_tmp <= $uid_end &&
- ! $uid{$u_id_tmp};
- if ($uid{$u_id_tmp}) {
- warn "Uid ``$u_id_tmp'' in use!\a\n";
- $uid_start = $u_id_tmp;
- ($u_id, $g_id) = &next_id($name);
- next;
- } else {
- warn "Wrong uid.\a\n";
- }
- }
- # use calculated uid
- # return ($u_id_tmp, $g_id) if $u_id_tmp eq $u_id;
- # recalculate gid
- $uid_start = $u_id_tmp;
- return &next_id($name);
-}
-
-# return login class for user
-sub new_users_class {
- local($def) = @_;
- local($class);
-
- $class = &confirm_list("Enter login class:", 1, $def, ($def, "default"));
- $class = "" if $class eq "default";
- return $class;
-}
-
-# add user to group
-sub add_group {
- local($gid, $name) = @_;
-
- return 0 if
- $groupmembers{$gid} =~ /^(.+,)?$name(,.+)?$/;
-
- $groupmembers_bak{$gid} = $groupmembers{$gid};
- $groupmembers{$gid} .= "," if $groupmembers{$gid};
- $groupmembers{$gid} .= "$name";
-
- return $name;
-}
-
-
-# return login group
-sub new_users_grplogin {
- local($name, $defaultgroup, $new_users_ok) = @_;
- local($group_login, $group);
-
- $group = $name;
- $group = $defaultgroup if $defaultgroup ne $group_uniq;
-
- if ($new_users_ok) {
- # clean up backup
- foreach $e (keys %groupmembers_bak) { delete $groupmembers_bak{$e}; }
- } else {
- # restore old groupmembers, user was not accept
- foreach $e (keys %groupmembers_bak) {
- $groupmembers{$e} = $groupmembers_bak{$e};
- }
- }
-
- while(1) {
- $group_login = &confirm_list("Login group", 1, $group,
- ($name, $group));
- last if $group_login eq $group;
- last if $group_login eq $name;
- last if defined $groupname{$group_login};
- if ($group_login eq $group_uniq) {
- $group_login = $name; last;
- }
-
- if (defined $gid{$group_login}) {
- # convert numeric groupname (gid) to groupname
- $group_login = $gid{$group_login};
- last;
- }
- warn "Group does not exist!\a\n";
- }
-
- #if (defined($groupname{$group_login})) {
- # &add_group($groupname{$group_login}, $name);
- #}
-
- return ($group_login, $group_uniq) if $group_login eq $name;
- return ($group_login, $group_login);
-}
-
-# return other groups (string)
-sub new_users_groups {
- local($name, $other_groups) = @_;
- local($string) =
- "Login group is ``$group_login''. Invite $name into other groups:";
- local($e, $flag);
- local($new_groups,$groups);
-
- $other_groups = "no" unless $other_groups;
-
- while(1) {
- $groups = &confirm_list($string, 1, $other_groups,
- ("no", $other_groups, "guest"));
- # no other groups
- return "" if $groups eq "no";
-
- ($flag, $new_groups) = &new_users_groups_valid($groups);
- last unless $flag;
- }
- $new_groups =~ s/\s*$//;
- return $new_groups;
-}
-
-sub new_users_groups_valid {
- local($groups) = @_;
- local($e, $new_groups);
- local($flag) = 0;
-
- foreach $e (split(/[,\s]+/, $groups)) {
- # convert numbers to groupname
- if ($e =~ /^[0-9]+$/ && $gid{$e}) {
- $e = $gid{$e};
- }
- if (defined($groupname{$e})) {
- if ($e eq $group_login) {
- # do not add user to a group if this group
- # is also the login group.
- } elsif (&add_group($groupname{$e}, $name)) {
- $new_groups .= "$e ";
- } else {
- warn "$name is already member of group ``$e''\n";
- }
- } else {
- warn "Group ``$e'' does not exist\a\n"; $flag++;
- }
- }
- return ($flag, $new_groups);
-}
-
-# your last change
-sub new_users_ok {
- local ($newpasswd);
- # Note that we either show "password disabled" or
- # "****" .. we don't show "empty password" since
- # the whole point of starring out the password in
- # the first place is to stop people looking over your
- # shoulder and seeing the password.. -- adrian
- if ($usepassword eq "no") {
- $newpasswd = "Password disabled";
- } elsif ($enableaccount eq "no") {
- $newpasswd = "Password disabled";
- } else {
- $newpasswd = "****";
- }
-
- print <<EOF;
-
-Name: $name
-Password: $newpasswd
-Fullname: $fullname
-Uid: $u_id
-Gid: $g_id ($group_login)
-Class: $class
-Groups: $group_login $new_groups
-HOME: $userhome
-Shell: $sh
-EOF
-
- return &confirm_yn("OK?", "yes");
-}
-
-# make password database
-sub new_users_pwdmkdb {
- local($last) = shift;
- local($name) = shift;
-
- system(@pwd_mkdb, '-u', $name, $etc_passwd);
- if ($?) {
- warn "$last\n";
- warn "``@pwd_mkdb'' failed\n";
- exit($? >> 8);
- }
-}
-
-# update group database
-sub new_users_group_update {
- local($e, @a);
-
- # Add *new* group
- if (!defined($groupname{$group_login}) &&
- !defined($gid{$groupname{$group_login}})) {
- push(@group_backup, "$group_login:*:$g_id:");
- $groupname{$group_login} = $g_id;
- $gid{$g_id} = $group_login;
- # $groupmembers{$g_id} = $group_login;
- }
-
- if ($new_groups || defined($groupname{$group_login}) ||
- defined($gid{$groupname{$group_login}}) &&
- $gid{$groupname{$group_login}} ne "+") {
- # new user is member of some groups
- # new login group is already in name space
- rename($group, "$group.bak");
- #warn "$group_login $groupname{$group_login} $groupmembers{$groupname{$group_login}}\n";
-
- # Restore comments from the top of the group file
- @a = @group_comments;
- foreach $e (sort {$a <=> $b} (keys %gid)) {
- push(@a, "$gid{$e}:*:$e:$groupmembers{$e}");
- }
- &append_file($group, @a);
- } else {
- &append_file($group, "$group_login:*:$g_id:");
- }
-
-}
-
-sub new_users_passwd_update {
- # update passwd/group variables
- push(@passwd_backup, $new_entry);
- $username{$name} = $u_id;
- $uid{$u_id} = $name;
- $pwgid{$g_id} = $name;
-}
-
-# send message to new user
-sub new_users_sendmessage {
- return 1 if $send_message eq "no";
-
- local($cc) =
- &confirm_list("Send message to ``$name'' and:",
- 1, "no", ("root", "second_mail_address", "no"));
- local($e);
- $cc = "" if $cc eq "no";
-
- foreach $e (@message_buffer) {
- print eval "\"$e\"";
- }
- print "\n";
-
- local(@message_buffer_append) = ();
- if (!&confirm_yn("Add anything to default message", "no")) {
- print "Use ``.'' or ^D alone on a line to finish your message.\n";
- push(@message_buffer_append, "\n");
- while($read = <STDIN>) {
- last if $read eq "\.\n";
- push(@message_buffer_append, $read);
- }
- }
-
- &sendmessage("$name $cc", (@message_buffer, @message_buffer_append))
- if (&confirm_yn("Send message", "yes"));
-}
-
-sub sendmessage {
- local($to, @message) = @_;
- local($e);
-
- if (!open(M, "| mail -s Welcome $to")) {
- warn "Cannot send mail to: $to!\n";
- return 0;
- } else {
- foreach $e (@message) {
- print M eval "\"$e\"";
- }
- close M;
- }
-}
-
-
-sub new_users_password {
-
- local($password);
-
- while(1) {
- system("stty -echo");
- $password = &confirm_list("Enter password", 1, "", "");
- system("stty echo");
- print "\n";
- if ($password ne "") {
- system("stty -echo");
- $newpass = &confirm_list("Enter password again", 1, "", "");
- system("stty echo");
- print "\n";
- last if $password eq $newpass;
- print "They didn't match, please try again\n";
- }
- elsif (&confirm_yn("Use an empty password?", "yes")) {
- last;
- }
- }
-
- return $password;
-}
-
-sub new_users_use_password {
- local ($p) = $defaultusepassword;
- $p = &confirm_yn("Use password-based authentication", $defaultusepassword);
- return "yes" if (($defaultusepassword eq "yes" && $p) ||
- ($defaultusepassword eq "no" && !$p));
- return "no"; # otherwise
-}
-
-sub new_users_enable_account {
- local ($p) = $defaultenableaccount;
- $p = &confirm_yn("Enable account password at creation", $defaultenableaccount);
- return "yes" if (($defaultenableaccount eq "yes" && $p) ||
- ($defaultenableaccount eq "no" && !$p));
- return "no"; # otherwise
-}
-
-sub new_users_empty_password {
- local ($p) = $defaultemptypassword;
- $p = &confirm_yn("Use an empty password", $defaultemptypassword);
- return "yes" if (($defaultemptypassword eq "yes" && $p) ||
- ($defaultemptypassword eq "no" && !$p));
- return "no"; # otherwise
-}
-
-sub new_users {
-
- print "\n" if $verbose;
- print "Ok, let's go.\n" .
- "Don't worry about mistakes. I will give you the chance later to " .
- "correct any input.\n" if $verbose;
-
- # name: Username
- # fullname: Full name
- # sh: shell
- # userhome: home path for user
- # u_id: user id
- # g_id: group id
- # class: login class
- # group_login: groupname of g_id
- # new_groups: some other groups
- local($name, $group_login, $fullname, $sh, $u_id, $g_id, $class, $new_groups);
- local($userhome);
- local($groupmembers_bak, $cryptpwd);
- local($new_users_ok) = 1;
-
-
- $new_groups = "no";
- $new_groups = "no" unless $groupname{$new_groups};
-
- while(1) {
- $name = &new_users_name;
- $fullname = &new_users_fullname($name);
- $sh = &new_users_shell;
- $userhome = &new_users_home($name);
- ($u_id, $g_id) = &new_users_id($name);
- $class = &new_users_class($defaultclass);
- ($group_login, $defaultgroup) =
- &new_users_grplogin($name, $defaultgroup, $new_users_ok);
- # do not use uniq username and login group
- $g_id = $groupname{$group_login} if (defined($groupname{$group_login}));
-
-
- # The tricky logic:
- # If $usepasswd is 0, we use a * as a password
- # If $usepasswd is 1, then
- # if $enableaccount is 0, we prepend * as a password
- # else if $enableaccount is 1 we don't prepend anything
- # if $useemptypassword is 0 we ask for a password,
- # else we use a blank one
- #
- # The logic is tasty, I'll give you that, but its flexible and
- # it'll stop people shooting themselves in the foot.
-
- $new_groups = &new_users_groups($name, $new_groups);
-
- $usepassword = &new_users_use_password;
- if ($usepassword eq "no") {
- # note that the assignments to enableaccount and
- # useemptypassword functionally do the same as
- # usepasswd == "no". Just for consistency.
- $password = ""; # no password!
- $enableaccount = "no"; # doesn't matter here
- $useemptypassword = "yes"; # doesn't matter here
- } else {
- $useemptypassword = &new_users_empty_password;
- if ($useemptypassword eq "no") {
- $password = &new_users_password;
- }
- $enableaccount = &new_users_enable_account;
- }
-
- if (&new_users_ok) {
- $new_users_ok = 1;
-
- $cryptpwd = "";
- $cryptpwd = crypt($password, &salt) if $password ne "";
-
- if ($usepassword eq "no") {
- $cryptpwd = "*";
- } else {
- # cryptpwd is valid before this if mess, so if
- # blankpasswd is no we don't blank the cryptpwd
- if ($useemptypassword eq "yes") {
- $cryptpwd = "";
- }
- if ($enableaccount eq "no") {
- $cryptpwd = "*" . $cryptpwd;
- }
- }
- # obscure perl bug
- $new_entry = "$name\:" . "$cryptpwd" .
- "\:$u_id\:$g_id\:$class\:0:0:$fullname:$userhome:$sh";
- &append_file($etc_passwd, "$new_entry");
- &new_users_pwdmkdb("$new_entry", $name);
- &new_users_group_update;
- &new_users_passwd_update; print "Added user ``$name''\n";
- &new_users_sendmessage;
- &adduser_log("$name:*:$u_id:$g_id($group_login):$fullname");
- &home_create($userhome, $name, $group_login);
- } else {
- $new_users_ok = 0;
- }
- if (!&confirm_yn("Add another user?", "yes")) {
- print "Goodbye!\n" if $verbose;
- last;
- }
- print "\n" if !$verbose;
- }
-}
-
-# ask for password usage
-sub password_default {
- local($p) = $defaultusepassword;
- if ($verbose) {
- $p = &confirm_yn("Use password-based authentication", $defaultusepassword);
- $changes++ unless $p;
- }
- return "yes" if (($defaultusepassword eq "yes" && $p) ||
- ($defaultusepassword eq "no" && !$p));
- return "no"; # otherwise
-}
-
-# ask for account enable usage
-sub enable_account_default {
- local ($p) = $defaultenableaccount;
- if ($verbose) {
- $p = &confirm_yn("Enable account password at creation", $defaultenableaccount);
- $changes++ unless $p;
- }
- return "yes" if (($defaultenableaccount eq "yes" && $p) ||
- ($defaultenableaccount eq "no" && !$p));
- return "no"; # otherwise
-}
-
-# ask for empty password
-sub enable_empty_password {
- local ($p) = $defaultemptypassword;
- if ($verbose) {
- $p = &confirm_yn("Use an empty password", $defaultemptypassword);
- $changes++ unless $p;
- }
- return "yes" if (($defaultemptypassword eq "yes" && $p) ||
- ($defaultemptypassword eq "no" && !$p));
- return "no"; # otherwise
-}
-
-# misc
-sub check_root {
- die "You are not root!\n" if $< && !$test;
-}
-
-sub usage {
- warn <<USAGE;
-usage: adduser
- [-check_only]
- [-class login_class]
- [-config_create]
- [-dotdir dotdir]
- [-group login_group]
- [-h|-help]
- [-home home]
- [-message message_file]
- [-noconfig]
- [-shell shell]
- [-s|-silent|-q|-quiet]
- [-uid uid_start]
- [-v|-verbose]
-
-home=$home shell=$defaultshell dotdir=$dotdir login_group=$defaultgroup
-login_class=$defaultclass message_file=$send_message uid_start=$uid_start
-USAGE
- exit 1;
-}
-
-# uniq(1)
-sub uniq {
- local(@list) = @_;
- local($e, $last, @array);
-
- foreach $e (sort @list) {
- push(@array, $e) unless $e eq $last;
- $last = $e;
- }
- return @array;
-}
-
-# see /usr/src/usr.bin/passwd/local_passwd.c or librcypt, crypt(3)
-sub salt {
- local($salt); # initialization
- local($i, $rand);
- local(@itoa64) = ( '0' .. '9', 'a' .. 'z', 'A' .. 'Z' ); # 0 .. 63
-
- warn "calculate salt\n" if $verbose > 1;
- # to64
- for ($i = 0; $i < 27; $i++) {
- srand(time + $rand + $$);
- $rand = rand(25*29*17 + $rand);
- $salt .= $itoa64[$rand & $#itoa64];
- }
- warn "Salt is: $salt\n" if $verbose > 1;
-
- return $salt;
-}
-
-
-# print banner
-sub copyright {
- return;
-}
-
-# hints
-sub hints {
- if ($verbose) {
- print "Use option ``-silent'' if you don't want to see " .
- "all warnings and questions.\n\n";
- } else {
- print "Use option ``-verbose'' if you want to see more warnings and " .
- "questions \nor try to repair bugs.\n\n";
- }
-}
-
-#
-sub parse_arguments {
- local(@argv) = @_;
-
- while ($_ = $argv[0], /^-/) {
- shift @argv;
- last if /^--$/;
- if (/^--?(v|verbose)$/) { $verbose = 1 }
- elsif (/^--?(s|silent|q|quiet)$/) { $verbose = 0 }
- elsif (/^--?(debug)$/) { $verbose = 2 }
- elsif (/^--?(h|help|\?)$/) { &usage }
- elsif (/^--?(home)$/) { $home = $argv[0]; shift @argv }
- elsif (/^--?(shell)$/) { $defaultshell = $argv[0]; shift @argv }
- elsif (/^--?(dotdir)$/) { $dotdir = $argv[0]; shift @argv }
- elsif (/^--?(uid)$/) { $uid_start = $argv[0]; shift @argv }
- elsif (/^--?(class)$/) { $defaultclass = $argv[0]; shift @argv }
- elsif (/^--?(group)$/) { $defaultgroup = $argv[0]; shift @argv }
- elsif (/^--?(check_only)$/) { $check_only = 1 }
- elsif (/^--?(message)$/) { $send_message = $argv[0]; shift @argv;
- $sendmessage = 1; }
- elsif (/^--?(batch)$/) {
- warn "The -batch option is not supported anymore.\n",
- "Please use the pw(8) command line tool!\n";
- exit(0);
- }
- # see &config_read
- elsif (/^--?(config_create)$/) { &create_conf; }
- elsif (/^--?(noconfig)$/) { $config_read = 0; }
- else { &usage }
- }
- #&usage if $#argv < 0;
-}
-
-sub basename {
- local($name) = @_;
- $name =~ s|/+$||;
- $name =~ s|.*/+||;
- return $name;
-}
-
-sub dirname {
- local($name) = @_;
- $name = &stripdir($name);
- $name =~ s|/+[^/]+$||;
- $name = "/" unless $name; # dirname of / is /
- return $name;
-}
-
-# return 1 if $file is a readable file or link
-sub filetest {
- local($file, $verb) = @_;
-
- if (-e $file) {
- if (-f $file || -l $file) {
- return 1 if -r _;
- warn "$file unreadable\n" if $verbose;
- } else {
- warn "$file is not a plain file or link\n" if $verbose;
- }
- }
- return 0;
-}
-
-# create configuration files and exit
-sub create_conf {
- $create_conf = 1;
- if ($send_message ne 'no') {
- &message_create($send_message);
- } else {
- &message_create($send_message_bak);
- }
- &config_write(1);
- exit(0);
-}
-
-# log for new user in /var/log/adduser
-sub adduser_log {
- local($string) = @_;
- local($e);
-
- return 1 if $logfile eq "no";
-
- local($sec, $min, $hour, $mday, $mon, $year) = localtime;
- $year += 1900;
- $mon++;
-
- foreach $e ('sec', 'min', 'hour', 'mday', 'mon', 'year') {
- # '7' -> '07'
- eval "\$$e = 0 . \$$e" if (eval "\$$e" < 10);
- }
-
- &append_file($logfile, "$year/$mon/$mday $hour:$min:$sec $string");
-}
-
-# create HOME directory, copy dotfiles from $dotdir to $HOME
-sub home_create {
- local($homedir, $name, $group) = @_;
- local($rootdir);
-
- if (-e "$homedir") {
- warn "HOME directory ``$homedir'' already exists.\a\n";
- return 0;
- }
-
- # if the home directory prefix doesn't exist, create it
- # First, split the directory into a list; then remove the user's dir
- @dir = split('/', $homedir); pop(@dir);
- # Put back together & strip to get directory prefix
- $rootdir = &stripdir(join('/', @dir));
-
- if (!&mkdirhier("$rootdir")) {
- # warn already displayed
- return 0;
- }
-
- if ($dotdir eq 'no') {
- if (!mkdir("$homedir", 0755)) {
- warn "$dir: $!\n"; return 0;
- }
- system 'chown', "$name:$group", $homedir;
- return !$?;
- }
-
- # copy files from $dotdir to $homedir
- # rename 'dot.foo' files to '.foo'
- print "Copy files from $dotdir to $homedir\n" if $verbose;
- system('cp', '-R', $dotdir, $homedir);
- system('chmod', '-R', 'u+wrX,go-w', $homedir);
- system('chown', '-Rh', "$name:$group", $homedir);
-
- # security
- opendir(D, $homedir);
- foreach $file (readdir(D)) {
- if ($file =~ /^dot\./ && -f "$homedir/$file") {
- $file =~ s/^dot\././;
- rename("$homedir/dot$file", "$homedir/$file");
- }
- chmod(0600, "$homedir/$file")
- if ($file =~ /^\.(rhosts|Xauthority|kermrc|netrc)$/);
- chmod(0700, "$homedir/$file")
- if ($file =~ /^(Mail|prv|\.(iscreen|term))$/);
- }
- closedir D;
- return 1;
-}
-
-# makes a directory hierarchy
-sub mkdir_home {
- local($dir) = @_;
- $dir = &stripdir($dir);
- local($user_partition) = "/usr";
- local($dirname) = &dirname($dir);
-
- -e $dirname || &mkdirhier($dirname);
-
- if (((stat($dirname))[0]) == ((stat("/"))[0])){
- # home partition is on root partition
- # create home partition on $user_partition and make
- # a symlink from $dir to $user_partition/`basename $dir`
- # For instance: /home -> /usr/home
-
- local($basename) = &basename($dir);
- local($d) = "$user_partition/$basename";
-
-
- if (-d $d) {
- warn "Oops, $d already exists.\n" if $verbose;
- } else {
- print "Create $d\n" if $verbose;
- if (!mkdir("$d", 0755)) {
- warn "$d: $!\a\n"; return 0;
- }
- }
-
- unlink($dir); # symlink to nonexist file
- print "Create symlink: $dir -> $d\n" if $verbose;
- if (!symlink("$d", $dir)) {
- warn "Symlink $d: $!\a\n"; return 0;
- }
- } else {
- print "Create $dir\n" if $verbose;
- if (!mkdir("$dir", 0755)) {
- warn "Directory ``$dir'': $!\a\n"; return 0;
- }
- }
- return 1;
-}
-
-sub mkdirhier {
- local($dir) = @_;
- local($d,$p);
-
- $dir = &stripdir($dir);
-
- foreach $d (split('/', $dir)) {
- $dir = "$p/$d";
- $dir =~ s|^//|/|;
- if (! -e "$dir") {
- print "Create $dir\n" if $verbose;
- if (!mkdir("$dir", 0755)) {
- warn "$dir: $!\n"; return 0;
- }
- }
- $p .= "/$d";
- }
- return 1;
-}
-
-# stript unused '/'
-# F.i.: //usr///home// -> /usr/home
-sub stripdir {
- local($dir) = @_;
-
- $dir =~ s|/+|/|g; # delete double '/'
- $dir =~ s|/$||; # delete '/' at end
- return $dir if $dir ne "";
- return '/';
-}
-
-# Read one of the elements from @list. $confirm is default.
-# If !$allow accept only elements from @list.
-sub confirm_list {
- local($message, $allow, $confirm, @list) = @_;
- local($read, $c, $print);
-
- $print = "$message" if $message;
- $print .= " " unless $message =~ /\n$/ || $#list == 0;
-
- $print .= join($", &uniq(@list)); #"
- $print .= " " unless $message =~ /\n$/ && $#list == 0;
- print "$print";
- print "\n" if (length($print) + length($confirm)) > 60;
- print "[$confirm]: ";
-
- chop($read = <STDIN>);
- $read =~ s/^\s*//;
- $read =~ s/\s*$//;
- return $confirm if $read eq "";
- return "$read" if $allow;
-
- foreach $c (@list) {
- return $read if $c eq $read;
- }
- warn "$read: is not allowed!\a\n";
- return &confirm_list($message, $allow, $confirm, @list);
-}
-
-# YES or NO question
-# return 1 if &confirm("message", "yes") and answer is yes
-# or if &confirm("message", "no") an answer is no
-# otherwise 0
-sub confirm_yn {
- local($message, $confirm) = @_;
- local($yes) = '^(yes|YES|y|Y)$';
- local($no) = '^(no|NO|n|N)$';
- local($read, $c);
-
- if ($confirm && ($confirm =~ "$yes" || $confirm == 1)) {
- $confirm = "y";
- } else {
- $confirm = "n";
- }
- print "$message (y/n) [$confirm]: ";
- chop($read = <STDIN>);
- $read =~ s/^\s*//;
- $read =~ s/\s*$//;
- return 1 unless $read;
-
- if (($confirm eq "y" && $read =~ "$yes") ||
- ($confirm eq "n" && $read =~ "$no")) {
- return 1;
- }
-
- if ($read !~ "$yes" && $read !~ "$no") {
- warn "Wrong value. Enter again!\a\n";
- return &confirm_yn($message, $confirm);
- }
- return 0;
-}
-
-# allow configuring usernameregexp
-sub usernameregexp_default {
- local($r) = $usernameregexp;
-
- while ($verbose) {
- $r = &confirm_list("Usernames must match regular expression:", 1,
- $r, "");
- eval "'foo' =~ /$r/";
- last unless $@;
- warn "Invalid regular expression\a\n";
- }
- $changes++ if $r ne $usernameregexp;
- return $r;
-}
-
-# test if $dotdir exist
-# return "no" if $dotdir not exist or dotfiles should not copied
-sub dotdir_default {
- local($dir) = $dotdir;
-
- return &dotdir_default_valid($dir) unless $verbose;
- while($verbose) {
- $dir = &confirm_list("Copy dotfiles from:", 1,
- $dir, ("no", $dotdir_bak, $dir));
- last if $dir eq &dotdir_default_valid($dir);
- }
- warn "Do not copy dotfiles.\n" if $verbose && $dir eq "no";
-
- $changes++ if $dir ne $dotdir;
- return $dir;
-}
-
-sub dotdir_default_valid {
- local($dir) = @_;
-
- return $dir if (-e $dir && -r _ && (-d _ || -l $dir) && $dir =~ "^/");
- return $dir if $dir eq "no";
- warn "Dotdir ``$dir'' is not a directory\a\n";
- return "no";
-}
-
-# ask for messages to new users
-sub message_default {
- local($file) = $send_message;
- local(@d) = ($file, $send_message_bak, "no");
-
- while($verbose) {
- $file = &confirm_list("Send message from file:", 1, $file, @d);
- last if $file eq "no";
- last if &filetest($file, 1);
-
- # maybe create message file
- &message_create($file) if &confirm_yn("Create ``$file''?", "yes");
- last if &filetest($file, 0);
- last if !&confirm_yn("File ``$file'' does not exist, try again?",
- "yes");
- }
-
- if ($file eq "no" || !&filetest($file, 0)) {
- warn "Do not send message\n" if $verbose;
- $file = "no";
- } else {
- &message_read($file);
- }
-
- $changes++ if $file ne $send_message && $verbose;
- return $file;
-}
-
-# create message file
-sub message_create {
- local($file) = @_;
-
- rename($file, "$file.bak");
- if (!open(M, "> $file")) {
- warn "Messagefile ``$file'': $!\n"; return 0;
- }
- print M <<EOF;
-#
-# Message file for adduser(8)
-# comment: ``#''
-# default variables: \$name, \$fullname, \$password
-# other variables: see /etc/adduser.conf after
-# line ``$do_not_delete''
-#
-
-\$fullname,
-
-your account ``\$name'' was created.
-Have fun!
-
-See also chpass(1), finger(1), passwd(1)
-EOF
- close M;
- return 1;
-}
-
-# read message file into buffer
-sub message_read {
- local($file) = @_;
- @message_buffer = '';
-
- if (!open(R, "$file")) {
- warn "File ``$file'':$!\n"; return 0;
- }
- while(<R>) {
- push(@message_buffer, $_) unless /^\s*#/;
- }
- close R;
-}
-
-# write @list to $file with file-locking
-sub append_file {
- local($file,@list) = @_;
- local($e);
- local($LOCK_EX) = 2;
- local($LOCK_NB) = 4;
- local($LOCK_UN) = 8;
-
- open(F, ">> $file") || die "$file: $!\n";
- print "Lock $file.\n" if $verbose > 1;
- while(!flock(F, $LOCK_EX | $LOCK_NB)) {
- warn "Cannot lock file: $file\a\n";
- die "Sorry, give up\n"
- unless &confirm_yn("Try again?", "yes");
- }
- print F join("\n", @list) . "\n";
- close F;
- print "Unlock $file.\n" if $verbose > 1;
- flock(F, $LOCK_UN);
-}
-
-# return free uid+gid
-# uid == gid if possible
-sub next_id {
- local($group) = @_;
-
- $uid_start = 1000 if ($uid_start <= 0 || $uid_start >= $uid_end);
- # looking for next free uid
- while($uid{$uid_start}) {
- $uid_start++;
- $uid_start = 1000 if $uid_start >= $uid_end;
- print "$uid_start\n" if $verbose > 1;
- }
-
- local($gid_start) = $uid_start;
- # group for user (username==groupname) already exist
- if ($groupname{$group}) {
- $gid_start = $groupname{$group};
- }
- # gid is in use, looking for another gid.
- # Note: uid an gid are not equal
- elsif ($gid{$uid_start}) {
- while($gid{$gid_start} || $uid{$gid_start}) {
- $gid_start--;
- $gid_start = $uid_end if $gid_start < 100;
- }
- }
- return ($uid_start, $gid_start);
-}
-
-# read config file
-sub config_read {
- local($opt) = @_;
- local($user_flag) = 0;
-
- # don't read config file
- return 1 if $opt =~ /-(noconfig|config_create)/ || !$config_read;
-
- if(!open(C, "$config")) {
- warn "$config: $!\n"; return 0;
- }
-
- while(<C>) {
- # user defined variables
- /^$do_not_delete/ && $user_flag++;
- # found @array or $variable
- if (s/^(\w+\s*=\s*\()/\@$1/ || s/^(\w+\s*=)/\$$1/) {
- eval $_;
- #warn "$_";
- }
- # lines with '^##' are not saved
- push(@user_variable_list, $_)
- if $user_flag && !/^##/ && (s/^[\$\@]// || /^[#\s]/);
- }
- #warn "X @user_variable_list X\n";
- close C;
-}
-
-
-# write config file
-sub config_write {
- local($silent) = @_;
-
- # nothing to do
- return 1 unless ($changes || ! -e $config || !$config_read || $silent);
-
- if (!$silent) {
- if (-e $config) {
- return 1 if &confirm_yn("\nWrite your changes to $config?", "no");
- } else {
- return 1 unless
- &confirm_yn("\nWrite your configuration to $config?", "yes");
- }
- }
-
- rename($config, "$config.bak");
- open(C, "> $config") || die "$config: $!\n";
-
- # prepare some variables
- $send_message = "no" unless $send_message;
- $defaultusepassword = "no" unless $defaultusepassword;
- $defaultenableaccount = "yes" unless $defaultenableaccount;
- $defaultemptypassword = "no" unless $defaultemptypassword;
- local($shpref) = "'" . join("', '", @shellpref) . "'";
- local($shpath) = "'" . join("', '", @path) . "'";
- local($user_var) = join('', @user_variable_list);
-
- print C <<EOF;
-#
-# $config - automatic generated by adduser(8)
-#
-# Note: adduser read *and* write this file.
-# You may change values, but don't add new things before the
-# line ``$do_not_delete''
-#
-
-# verbose = [0-2]
-verbose = $verbose
-
-# regular expression usernames are checked against (see perlre(1))
-# usernameregexp = 'regexp'
-usernameregexp = '$usernameregexp'
-
-# use password-based authentication for new users
-# defaultusepassword = "yes" | "no"
-defaultusepassword = "$defaultusepassword"
-
-# enable account password at creation
-# (the password will be prepended with a star if the account isn't enabled)
-# defaultenableaccount = "yes" | "no"
-defaultenableaccount = "$defaultenableaccount"
-
-# allow blank passwords
-# defaultemptypassword = "yes" | "no"
-defaultemptypassword = "$defaultemptypassword"
-
-# copy dotfiles from this dir ("/usr/share/skel" or "no")
-dotdir = "$dotdir"
-
-# send this file to new user ("/etc/adduser.message" or "no")
-send_message = "$send_message"
-
-# config file for adduser ("/etc/adduser.conf")
-config = "$config"
-
-# logfile ("/var/log/adduser" or "no")
-logfile = "$logfile"
-
-# default HOME directory ("/home")
-home = "$home"
-
-# List of directories where shells located
-# path = ('/bin', '/usr/bin', '/usr/local/bin')
-path = ($shpath)
-
-# common shell list, first element has higher priority
-# shellpref = ('bash', 'tcsh', 'ksh', 'csh', 'sh')
-shellpref = ($shpref)
-
-# defaultshell if not empty ("bash")
-defaultshell = "$defaultshell"
-
-# defaultgroup ('USER' for same as username or any other valid group)
-defaultgroup = $defaultgroup
-
-# defaultclass if not empty
-defaultclass = "$defaultclass"
-
-# new users get this uid (1000)
-uid_start = "$uid_start"
-
-$do_not_delete
-## your own variables, see /etc/adduser.message
-$user_var
-
-## end
-EOF
- close C;
-}
-
-################
-# main
-#
-$test = 0; # test mode, only for development
-$check_only = 0;
-
-&check_root; # you must be root to run this script!
-&variables; # initialize variables
-&config_read(@ARGV); # read variables form config-file
-&parse_arguments(@ARGV); # parse arguments
-
-if (!$check_only) {
- &copyright; &hints;
-}
-
-# check
-$changes = 0;
-&passwd_check; # check for valid passwdb
-&shells_read; # read /etc/shells
-&passwd_read; # read /etc/master.passwd
-&group_read; # read /etc/group
-&group_check; # check for incon*
-exit 0 if $check_only; # only check consistence and exit
-
-
-# interactive
-# some questions
-$usernameregexp = &usernameregexp_default; # regexp to check usernames against
-&shells_add; # maybe add some new shells
-$defaultshell = &shell_default; # enter default shell
-$home = &home_partition($home); # find HOME partition
-$dotdir = &dotdir_default; # check $dotdir
-$send_message = &message_default; # send message to new user
-$defaultusepassword = &password_default; # maybe use password
-if ($defaultusepassword eq "no") {
- if ($verbose) {
- print "Creating accounts with a locked password.\n";
- }
- $defaultenableaccount = "no";
- $defaultemptypassword = "yes";
-} else {
- $defaultenableaccount = &enable_account_default; # enable or disable account
- $defaultemptypassword = &enable_empty_password; # use empty password or not
-}
-&config_write(!$verbose); # write variables in file
-
-# main loop for creating new users
-&new_users; # add new users
-
-#end