#!/bin/sh
#
# /usr/local/bin/localadduser
# Copyright 2003-2006 Jonas Smedegaard <dr@jones.dk>
#
# $Id: localadduser,v 1.5 2006-08-31 22:51:54 jonas Exp $
#
# Execute adduser noninteractively through sudo
#
# TODO: Check for bad arguments
# TODO: Use getopts to offer help
# TODO: Support overriding options in /etc/local file
#

set -e

verbose=1
#simulate=true
interactive=0

# echo something, but only if in verbose mode
vecho() {
	test -n "$verbose" && echo "$@" >&2
}

exit1() {
	response="${1:+Error: }${1:-Internal error!}"
	echo "$response"
	exit 1
}

u=$1
shift

for chunk in $@; do
	case $chunk in
	    @*)
		groupchunks="${groupchunks:+$groupchunks }$chunk"
		;;
	    %*)
		officechunks="${officechunks:+$officechunks }$chunk"
		;;
	    *@*)
		other="${other:+$other }$chunk"
		;;
	    +*)
		phone_area="$chunk"
		;;
	    0*|1*|2*|3*|4*|5*|6*|7*|8*|9*)
		if [ -z "$phone_area" ]; then
			exit1 "Phone number provided without leading area code!"
		fi
		if [ -n "$home_phone" ]; then
			exit1 "More than 2 phone numbers provided!"
		elif [ -n "$office_phone" ]; then
			office_phone="$phone_area $chunk"
		else
			home_phone="$phone_area $chunk"
		fi
		phone_area=""
		;;
	    *)
		fullname="${fullname:+$fullname }$chunk"
		;;
	esac
done

if [ -n "$phone_area" ]; then
	exit1 "Area code provided without trailing phonenumber!"
fi

for groupchunk in $groupchunks; do
	group="$(echo "$groupchunk" | perl -pe 's/^@//;')"
	if echo "$group" | perl -ne '/^[a-z][a-z0-9_-]*$/ and exit 1;'; then
		exit1 "Group \"$group\" contains illegal characters!"
	fi
	if ! members="$(getent group "$group")"; then
		exit1 "Group \"$group\" does not exist!"
	fi
	if echo "$members" | perl -pe 's/.*://; s/,/\n/g' | grep -Fxq "$u"; then
		exit1 "Group \"$group\" already contains user \"$u\"!"
	fi
	groups="${groups:+$groups }$group"
done

for officechunk in $officechunks; do
	office="${office:+$office }$(echo "$officechunk" | perl -pe 's/^%//;')"
done

if [ ! "$interactive" -gt 0 ]; then
	quiet="--quiet"
fi
if [ -n "$fullname$office$office_phone$home_phone$other" ]; then
	eval $simulate sudo "/usr/sbin/adduser $quiet --disabled-login --gecos \"$fullname,$office,$office_phone,$home_phone,$other\" \"$u\""
else
	if [ ! "$interactive" -gt 0 ]; then
		exit1 "Not enough info provided to create account for \"$u\"!"
	fi
	eval $simulate sudo "/usr/sbin/adduser --disabled-login \"$u\""
fi

for group in $groups; do
	eval $simulate sudo "/usr/sbin/adduser $quiet \"$u\" \"$group\""
done

eval $simulate localresetpasswd "$u"

#vecho "Account \"$u\" created succesfully! Password is $pass"