path: root/adduser.local

#!/bin/sh
#
# Copyright © 2001-2006, 2010, Jonas Smedegaard <dr@jones.dk>
# Description: Adduser extensions for Redpill <http://www.redpill.dk>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2, or (at your option)
# any later version.
#
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
# TODO: Allow local overriding of using /etc/mailname
# TODO: Only ask additional questions if real user
# TODO: handle samba passwords in /var/lib/samba/passdb.tdb
# TODO: Invent a way to flag for INTERACTIVE without abusing VERBOSE
#

set -e

NEWUSERNAME=$1
NEWUID=$2
NEWGID=$3
NEWHOMEDIR=$4

fullname()  { getent passwd $NEWUSERNAME | awk -F: '{print $5}' | awk -F, '{print $1}'; }
maildomain()    { if [ -r /etc/mailname ]; then head -n 1 /etc/mailname; fi; }

listlists() { if [ -x /usr/sbin/list_lists ]; then /usr/sbin/list_lists -ab -V "$1"; fi; }
add2list()  { /bin/echo "$1" | /usr/sbin/add_members -w y -a y -r - "$2"; }

. /etc/adduser.conf

# Ignore non-human accounts silently
[ "$NEWUID" -ge "$FIRST_UID" -a "$NEWUID" -le "$LAST_UID" ] || exit 0

[ -f /etc/local/users.conf ] && . /etc/local/users.conf

# resolve account profiles
case "$NEWUSERNAME" in
  *-*)
    profile_aux=1
    ;;
  *)
    ;;
esac

# Samba password
#FIXME: Check if enabled in samba.conf (or included files!)
if [ -z "$profile_aux" ] && [ -n "$VERBOSE" ] && [ "$VERBOSE" -gt 0 ] && ([ -x /usr/bin/pdbedit ] || [ -x /usr/bin/smbpasswd ]); then
    echo -n "Add samba access to the account (y/N)? "
    read sambaaccount
    case $sambaaccount in
        y|Y)
        if [ -x /usr/bin/pdbedit ]; then
            /usr/bin/pdbedit -a -u "$NEWUSERNAME"
        elif [ -x /usr/bin/smbpasswd ] && [ -f /etc/samba/smbpasswd ]; then
            /usr/bin/smbpasswd -a $NEWUSERNAME
        fi
        ;;
    esac
fi

# Mail forwarding
if [ -z "$profile_aux" ] && [ -n "$VERBOSE" ] && [ "$VERBOSE" -gt 0 ] && [ -x /usr/local/sbin/userforward ]; then
    echo -n "Forward mail to an external account (y/N)? "
    read mailforward
    case $mailforward in
        y|Y)
        echo -n "Enter external email address: "
        read mail_address
        case $mail_address in
            ?*@?*.*)
            /usr/local/sbin/userforward $NEWUSERNAME $mail_address
            ;;
            ?*)
            echo "That wasn't a proper email address - skipping..."
            ;;
        esac
        ;;
    esac
fi

# Mailing lists
maildomain="`maildomain`"
if [ -z "$profile_aux" ] && [ -n "$VERBOSE" ] && [ "$VERBOSE" -gt 0 ] && [ -n "$maildomain" ]; then
    echo -n "Subscribe $NEWUSERNAME@$maildomain to mailinglists (y/N)? "
    read subscribe
    case $subscribe in
        y|Y)
        if [ -n "$fullname" ]; then
            subscriber="`fullname` <$NEWUSERNAME@$maildomain>"
        else
            subscriber="$NEWUSERNAME@$maildomain"
        fi
        lists="`listlists "$maildomain"`"
        if [ -z "$lists" ]; then
            echo "No mailinglists found."
        fi
        for list in $lists; do
            echo -n "Subscribe to mailinglist $list (y/N)? "
            read subscribe
            case $subscribe in
                y|Y)
                add2list "$subscriber" "$list";;
            esac
        done
    esac
fi

if [ -z "$profile_aux" ] && [ -f /etc/local/users.conf ]; then
    . /etc/local/users.conf

    if [ -n "$USERS_GROUPNAME" ]; then
        addgroup $NEWUSERNAME $USERS_GROUPNAME
    fi

    if [ -n "$VERBOSE" ] && [ "$VERBOSE" -gt 0 ] && [ -n "$REALUSERS_GROUPNAME" ]; then
        echo "This system has both dummy and real users:"
        echo "    Dummy users have read access to specific files."
        echo "    Real users have read/write access to personal files."
        echo -n "Is this a dummy user (Y/n)? "
        read realuser
        case $realuser in
            y|Y|"")
            ;;
            *)
            addgroup $NEWUSERNAME $REALUSERS_GROUPNAME
            ;;
        esac
    fi
fi

#if [ -n "$VERBOSE" ] && [ "$VERBOSE" -gt 0 ] && [ -n "$REALUSERS_GROUPNAME" ]; then
#   cat <<+
#Is this a remote or local user (with need for physical
#access to devices like CD-ROM, soundcard and modem needed)?
#
#+
if [ -z "$profile_aux" ] && [ -n "$VERBOSE" ] && [ "$VERBOSE" -gt 0 ]; then
    echo -n "Grant this user access to local utilities (y/N)?"
    read localuser
    case $localuser in
        y|Y)
        for group in floppy dialout cdrom audio video games; do
            addgroup $NEWUSERNAME $group
        done
        ;;
        *)
        ;;
    esac
fi

if [ -z "$profile_aux" ] && [ -x /usr/local/sbin/user-init ]; then
    /usr/local/sbin/user-init $NEWUSERNAME
fi