| 1 | #!/usr/bin/perl | 
|---|
| 2 | use strict; | 
|---|
| 3 |  | 
|---|
| 4 | # signup-scripts-backend | 
|---|
| 5 | # Copyright (C) 2006  Jeff Arnold <jbarnold@mit.edu> | 
|---|
| 6 | # | 
|---|
| 7 | # This program is free software; you can redistribute it and/or | 
|---|
| 8 | # modify it under the terms of the GNU General Public License | 
|---|
| 9 | # as published by the Free Software Foundation; either version 2 | 
|---|
| 10 | # of the License, or (at your option) any later version. | 
|---|
| 11 | # | 
|---|
| 12 | # This program is distributed in the hope that it will be useful, | 
|---|
| 13 | # but WITHOUT ANY WARRANTY; without even the implied warranty of | 
|---|
| 14 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the | 
|---|
| 15 | # GNU General Public License for more details. | 
|---|
| 16 | # | 
|---|
| 17 | # You should have received a copy of the GNU General Public License | 
|---|
| 18 | # along with this program; if not, write to the Free Software | 
|---|
| 19 | # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA | 
|---|
| 20 | # | 
|---|
| 21 | # See /COPYRIGHT in this repository for more information. | 
|---|
| 22 |  | 
|---|
| 23 | $ENV{PATH} = ''; | 
|---|
| 24 |  | 
|---|
| 25 | my $username = $ARGV[0]; | 
|---|
| 26 |  | 
|---|
| 27 | # Complain unless submitted username contains only valid characters | 
|---|
| 28 | complain("bad username") unless($username =~ /^[\w._-]+$/); | 
|---|
| 29 |  | 
|---|
| 30 | complain("banned username") if(`@grep_path@ '$username' /afs/athena.mit.edu/contrib/scripts/admin/users.banned` != ""); | 
|---|
| 31 |  | 
|---|
| 32 | my $homedir; | 
|---|
| 33 | my $filsys = `@hesinfo_path@ $username filsys`; | 
|---|
| 34 | # AFS /afs/athena.mit.edu/user/j/b/jbarnold w /mit/jbarnold | 
|---|
| 35 | if($filsys =~ /^AFS\s(\/afs\/[\w\._\/-]+)\s.*\s\/mit\/$username$/) { | 
|---|
| 36 | $homedir = $1; | 
|---|
| 37 | } | 
|---|
| 38 | else { | 
|---|
| 39 | complain("athena user not found"); | 
|---|
| 40 | } | 
|---|
| 41 |  | 
|---|
| 42 | # Run ls to confirm user's homedir and obtain user's homedir uid | 
|---|
| 43 | my $ls_regexp = '^\S*\s+\S*\s+(\S*)\s+(\S*)\s+\S*\s+\S*\s+\S*\s+\S*\s+(\S*).*$'; | 
|---|
| 44 | my ($uid1, $gid1, $name1) = (`@ls_path@ -dln '$homedir'` =~ $ls_regexp); | 
|---|
| 45 |  | 
|---|
| 46 | # Complain if user's homedir does not exist | 
|---|
| 47 | complain("athena homedir not found") unless($name1 eq $homedir); | 
|---|
| 48 |  | 
|---|
| 49 | # Complain if user's uid is too low or too high | 
|---|
| 50 | complain("bad uid") unless($uid1 > 110 and $uid1 < (1 << 31)); | 
|---|
| 51 |  | 
|---|
| 52 | # Run ls to confirm user's .scripts-signup file | 
|---|
| 53 | my ($uid2, $gid2, $name2) = (`@ls_path@ -dln '$homedir/.scripts-signup'` =~ $ls_regexp); | 
|---|
| 54 |  | 
|---|
| 55 | # Complain if user's .scripts-signup file does not exist | 
|---|
| 56 | #complain("scripts-signup file not found") unless($name2 eq "$homedir/.scripts-signup"); | 
|---|
| 57 |  | 
|---|
| 58 | # Complain if the user's username is already taken | 
|---|
| 59 | complain("username already taken") if(getpwnam $username); | 
|---|
| 60 |  | 
|---|
| 61 | # Complain if user's uid is already taken | 
|---|
| 62 | complain("uid already taken") if(getpwuid $uid1); | 
|---|
| 63 |  | 
|---|
| 64 | if($homedir !~ /\/afs\/athena\.mit\.edu\/user\//) { | 
|---|
| 65 | $gid1 = $uid1; | 
|---|
| 66 | } | 
|---|
| 67 |  | 
|---|
| 68 | # Complain if user's gid is already taken | 
|---|
| 69 | complain("gid already taken") if(getgrgid $gid1); | 
|---|
| 70 |  | 
|---|
| 71 | # Add user to /etc/passwd | 
|---|
| 72 | `@sudo_path@ -u root @groupadd_path@ -g '$gid1' '$username'`; | 
|---|
| 73 | `@sudo_path@ -u root @useradd_path@ -d '$homedir' -s '/usr/local/bin/modbash' -u '$uid1' -g '$gid1' -G users '$username'`; | 
|---|
| 74 | # Add disk quota for user | 
|---|
| 75 | `@sudo_path@ -u root @setquota_path@ '$username' 0 25000 0 10000 -a`; | 
|---|
| 76 |  | 
|---|
| 77 | printexit("done", 0); | 
|---|
| 78 |  | 
|---|
| 79 | sub complain { | 
|---|
| 80 | my ($complaint) = @_; | 
|---|
| 81 | printexit($complaint, 1); | 
|---|
| 82 | } | 
|---|
| 83 |  | 
|---|
| 84 | sub printexit { | 
|---|
| 85 | my ($msg, $status) = @_; | 
|---|
| 86 | print $msg; | 
|---|
| 87 | exit($status); | 
|---|
| 88 | } | 
|---|