| [1] | 1 | #!/usr/bin/perl |
|---|
| 2 | use strict; |
|---|
| 3 | |
|---|
| 4 | # signup-scripts-backend |
|---|
| 5 | # Copyright (C) 2006 Jeff Arnold <jbarnold@mit.edu> |
|---|
| 6 | # |
|---|
| 7 | # This program is free software; you can redistribute it and/or |
|---|
| 8 | # modify it under the terms of the GNU General Public License |
|---|
| 9 | # as published by the Free Software Foundation; either version 2 |
|---|
| 10 | # of the License, or (at your option) any later version. |
|---|
| 11 | # |
|---|
| 12 | # This program is distributed in the hope that it will be useful, |
|---|
| 13 | # but WITHOUT ANY WARRANTY; without even the implied warranty of |
|---|
| 14 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|---|
| 15 | # GNU General Public License for more details. |
|---|
| 16 | # |
|---|
| 17 | # You should have received a copy of the GNU General Public License |
|---|
| 18 | # along with this program; if not, write to the Free Software |
|---|
| 19 | # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA |
|---|
| 20 | # |
|---|
| 21 | # See /COPYRIGHT in this repository for more information. |
|---|
| 22 | |
|---|
| 23 | $ENV{PATH} = ''; |
|---|
| 24 | |
|---|
| 25 | my $username = $ARGV[0]; |
|---|
| 26 | |
|---|
| 27 | # Complain unless submitted username contains only valid characters |
|---|
| 28 | complain("bad username") unless($username =~ /^[\w._-]+$/); |
|---|
| 29 | |
|---|
| 30 | complain("banned username") if(`@grep_path@ '$username' /afs/athena.mit.edu/contrib/scripts/admin/users.banned` != ""); |
|---|
| 31 | |
|---|
| 32 | my $homedir; |
|---|
| 33 | my $filsys = `@hesinfo_path@ $username filsys`; |
|---|
| 34 | # AFS /afs/athena.mit.edu/user/j/b/jbarnold w /mit/jbarnold |
|---|
| 35 | if($filsys =~ /^AFS\s(\/afs\/[\w\._\/-]+)\s.*\s\/mit\/$username$/) { |
|---|
| 36 | $homedir = $1; |
|---|
| 37 | } |
|---|
| 38 | else { |
|---|
| 39 | complain("athena user not found"); |
|---|
| 40 | } |
|---|
| 41 | |
|---|
| 42 | # Run ls to confirm user's homedir and obtain user's homedir uid |
|---|
| 43 | my $ls_regexp = '^\S*\s+\S*\s+(\S*)\s+(\S*)\s+\S*\s+\S*\s+\S*\s+\S*\s+(\S*).*$'; |
|---|
| 44 | my ($uid1, $gid1, $name1) = (`@ls_path@ -dln '$homedir'` =~ $ls_regexp); |
|---|
| 45 | |
|---|
| 46 | # Complain if user's homedir does not exist |
|---|
| 47 | complain("athena homedir not found") unless($name1 eq $homedir); |
|---|
| 48 | |
|---|
| 49 | # Complain if user's uid is too low or too high |
|---|
| 50 | complain("bad uid") unless($uid1 > @min_user_uid@ and $uid1 < (1 << 31)); |
|---|
| 51 | |
|---|
| 52 | # Run ls to confirm user's .scripts-signup file |
|---|
| 53 | my ($uid2, $gid2, $name2) = (`@ls_path@ -dln '$homedir/.scripts-signup'` =~ $ls_regexp); |
|---|
| 54 | |
|---|
| 55 | # Complain if user's .scripts-signup file does not exist |
|---|
| 56 | #complain("scripts-signup file not found") unless($name2 eq "$homedir/.scripts-signup"); |
|---|
| 57 | |
|---|
| 58 | # Complain if the user's username is already taken |
|---|
| 59 | complain("username already taken") if(getpwnam $username); |
|---|
| 60 | |
|---|
| 61 | # Complain if user's uid is already taken |
|---|
| 62 | complain("uid already taken") if(getpwuid $uid1); |
|---|
| 63 | |
|---|
| 64 | if($homedir !~ /\/afs\/athena\.mit\.edu\/user\//) { |
|---|
| 65 | $gid1 = $uid1; |
|---|
| 66 | } |
|---|
| 67 | |
|---|
| 68 | # Complain if user's gid is already taken |
|---|
| 69 | complain("gid already taken") if(getgrgid $gid1); |
|---|
| 70 | |
|---|
| 71 | # Add user to /etc/passwd |
|---|
| 72 | `@sudo_path@ -u root @groupadd_path@ -g '$gid1' '$username'`; |
|---|
| 73 | `@sudo_path@ -u root @useradd_path@ -d '$homedir' -s '/usr/local/bin/bash' -u '$uid1' -g '$gid1' -G users '$username'`; |
|---|
| 74 | # Add disk quota for user |
|---|
| 75 | `@sudo_path@ -u root @setquota_path@ '$username' 0 25000 0 10000`; |
|---|
| 76 | |
|---|
| 77 | printexit("done", 0); |
|---|
| 78 | |
|---|
| 79 | sub complain { |
|---|
| 80 | my ($complaint) = @_; |
|---|
| 81 | printexit($complaint, 1); |
|---|
| 82 | } |
|---|
| 83 | |
|---|
| 84 | sub printexit { |
|---|
| 85 | my ($msg, $status) = @_; |
|---|
| 86 | print $msg; |
|---|
| 87 | exit($status); |
|---|
| 88 | } |
|---|