path: root/user-init

#!/bin/sh

set -e

# reset flags
apache_reload_needed=""
runmode="normal"
mac=".mac"
pc=".pc"
xchange=".xchange"

if [ -e /etc/adduser.conf ]; then
    . /etc/adduser.conf
else
    echo "/etc/adduser.conf missing. Exiting..."
    exit 1
fi

[ -f /etc/local/users.conf ] && . /etc/local/users.conf

if [ -e /etc/local/volumes ]; then
    . /etc/local/volumes
else
    # exit silently if this system lacks required hints
    exit 0
fi

XDIRREAL="$XDIR/users/root"

if [ $XCHANGE ]; then
    if [ ! -d "$XDIR" ]; then
        echo "XDIR doesn't exist. Ignoring XCHANGE!"
        XCHANGE=""
    fi
fi

if [ $# -gt 0 ]; then
    USERS=$*
else
    USERS=`getent passwd | awk -F: '{print $1}'`
fi

[ $NETATALK_HOME ] && mac=$NETATALK_HOME
[ $SAMBA_HOME ] && pc=$SAMBA_HOME
[ $XCHANGE_HOME ] && xchange=$XCHANGE_HOME

echo "Setting up additional folders and permissions..."
for user in $USERS; do
    uid=`getent passwd $user | awk -F: '{print $3}' | head -1`
    HOME=`getent passwd $user | awk -F: '{print $6}' | head -1`
    if [ -z "$HOME" ]; then
        echo "User $user doesn't exist. Ignoring..."
        continue
    fi

    # Ignore non-human accounts silently
    [ "$uid" -ge "$FIRST_UID" -a "$uid" -le "$LAST_UID" ] || continue

    [ -d $HOME ] || continue
#   [ -L $HOME ] && continue

    echo -n $user

#   if [ -x /etc/local/quota.sh ]; then
#       /etc/local/quota.sh $user
#       fi
    [ $QUOTASOFT ] || QUOTASOFT="0"
    [ $QUOTAHARD ] || QUOTAHARD="0"
    for QUOTAHOME in $QUOTAHOMES; do
        if [ $NEW_QUOTA ]; then
            setquota $user $QUOTASOFT $QUOTAHARD 0 0 $QUOTAHOME
        else
            setquota $user $QUOTAHOME $QUOTASOFT $QUOTAHARD 0 0
        fi
    done

    mkdir -p $HOME/mail
    if [ "$USE_MBOX" ]; then
        touch $HOME/mail/mbox
    elif [ -f $HOME/mail/mbox -a ! -s $HOME/mail/mbox ]; then
        rm -f $HOME/mail/mbox
    fi

    if [ $NETATALK ]; then
        mkdir -p $HOME/$mac
    fi
    if [ $SAMBA ]; then
        mkdir -p $HOME/$pc
    fi

    if [ $XCHANGE ]; then
        mkdir -p $XDIRREAL/$user
    fi

    if [ $PUBLIC ]; then
        mkdir -p $HOME/public_html
    fi

    chown $user: $HOME
    chmod u=rwX,go=rX $HOME

    # Mail handling
    chown -R $user: $HOME/mail
    chmod -R u=rw,go=,u+X $HOME/mail
    if [ -f $HOME/.mailboxlist ]; then
        chown $user: $HOME/.mailboxlist
        chmod 0640 $HOME/.mailboxlist
    fi
    if [ -f $HOME/.forward ]; then
        chown $user: $HOME/.forward
        chmod 0640 $HOME/.forward
    fi
    if [ -f /var/mail/$user ]; then
        chown $user:mail /var/mail/$user
        chmod ug=rw,o= /var/mail/$user
    elif [ -f /var/spool/mail/$user ]; then
        chown $user:mail /var/spool/mail/$user
        chmod ug=rw,o= /var/spool/mail/$user
    fi

    # Mac dir permissions
    if [ -d $HOME/$mac ]; then
        chown -R $user: $HOME/$mac
        chmod -R u=rw,g=r,o=,ug+X $HOME/$mac
        rm -rf $HOME/$mac/Network\ Trash\ Folder
        mkdir $HOME/$mac/Network\ Trash\ Folder
        chown nobody: $HOME/$mac/Network\ Trash\ Folder
        chmod a= $HOME/$mac/Network\ Trash\ Folder
    fi

    # PC dir permissions
    if [ -d $HOME/$pc ]; then
        chown -R $user: $HOME/$pc
        chmod -R u=rw,g=r,o=,ug+X $HOME/$pc
    fi
    
    # Exchange dir permissions
    if [ -d $XDIRREAL/$user ]; then
        chown -R $user:users $XDIRREAL/$user
        chmod -R g=r,g+X $XDIRREAL/$user
        if [ -e "x$HOME/$xchange" ]; then
            if [ -L "x$HOME/$xchange" ]; then
                ln -sf $XDIRREAL/$user $HOME/$xchange
            else
                echo "ERROR: $HOME/$xchange exists already. Leaving it as is..."
            fi
        else
            ln -s $XDIRREAL/$user $HOME/$xchange
        fi
    fi

    # Public dir permissions
    if [ -d $HOME/public_html ]; then
        chown -R $user: $HOME/public_html
        chmod -R u+rX,go=r,go+X $HOME/public_html
        if [ $NETATALK ]; then
            rm -rf $HOME/public_html/Network\ Trash\ Folder
            mkdir $HOME/public_html/Network\ Trash\ Folder
            chown nobody: $HOME/public_html/Network\ Trash\ Folder
            chmod a= $HOME/public_html/Network\ Trash\ Folder
        fi
    fi

    # Share permissions
    for dir in `find $HOME -mindepth 1 -maxdepth 1 -type d | egrep "^$HOME/shares_win"`; do
        chgrp -R $user $dir
        chmod -R u=rw,g=rw,o=,ug+X,g+s $dir
    done
    for dir in `find $HOME -mindepth 1 -maxdepth 1 -type d | egrep "^$HOME/shares_mac"`; do
        chgrp -R $user $dir
        chmod -R u=rw,g=rw,o=,ug+X,g+s $dir
        rm -rf $dir/Network\ Trash\ Folder
        mkdir $dir/Network\ Trash\ Folder
        chown nobody: $dir/Network\ Trash\ Folder
        chmod a= $dir/Network\ Trash\ Folder
    done

    # Ftp shares permissions
    for dir in `find $HOME -mindepth 1 -maxdepth 1 -type d | egrep "^$HOME/ftp_$USER$"`; do
        chgrp -R $user $dir
        chmod -R ug=rw,o=r,a+X,g+s $dir
        rm -rf $dir/Network\ Trash\ Folder
        mkdir $dir/Network\ Trash\ Folder
        chown nobody: $dir/Network\ Trash\ Folder
        chmod a= $dir/Network\ Trash\ Folder
    done
    for dir in `find $HOME -mindepth 1 -maxdepth 1 -type d | egrep "^$HOME/ftp_${USER}_ro$"`; do
        chown -R $user: $dir
        chmod -R u=rw,go=r,a+X $dir
        rm -rf $dir/Network\ Trash\ Folder
        mkdir $dir/Network\ Trash\ Folder
        chown nobody: $dir/Network\ Trash\ Folder
        chmod a= $dir/Network\ Trash\ Folder
    done

    # Web shares permissions
    for dir in `find $HOME -mindepth 1 -maxdepth 1 -type d | egrep "^$HOME/web_"`; do
        chown -R $user: $dir
#       chmod -R u=rw,go=r,a+X $webdir
#TODO: Only cgi scripts (.cgi and .pl) should be executable
        chmod -R u+rw,go+r,a+X $dir
        # leftover from ancient times with another policy
        if [ $NETATALK ]; then
            rm -rf $dir/Network\ Trash\ Folder
        fi
    done
    
    # Web shares permissions
    for dir in `find $HOME -mindepth 1 -maxdepth 1 -type d | egrep "^$HOME/websites"`; do
        chown root: $dir
        chmod a=r,u+w,a+X $dir
    done
    for dir in `find $HOME -mindepth 2 -maxdepth 2 -type d | egrep "^$HOME/websites/"`; do
        chown -R $user: $dir
#       chmod -R u=rw,go=r,a+X $webdir
#TODO: Only cgi scripts (.cgi and .pl) should be executable
        chmod -R u+rw,go+r,a+X $dir
        # leftover from ancient times with another policy
        if [ $NETATALK ]; then
            rm -rf $dir/Network\ Trash\ Folder
        fi
    done
    for dir in `find $HOME -mindepth 1 -maxdepth 1 -type d | egrep "^$HOME/webscripts"`; do
        chown root: $dir
        chmod a=r,u+w,a+X $dir
    done
    for dir in `find $HOME -mindepth 2 -maxdepth 2 -type d | egrep "^$HOME/webscripts/"`; do
        chown -R $user: $dir
#       chmod -R u=rw,go=r,a+X $webdir
#TODO: Only cgi scripts (.cgi and .pl) should be executable
        chmod -R u+rw,go+r,a+X $dir
    done
    for dir in `find $HOME -mindepth 1 -maxdepth 1 -type d | egrep "^$HOME/webdata"`; do
        chown root: $dir
        chmod a=r,u+w,a+X $dir
    done
    for dir in `find $HOME -mindepth 2 -maxdepth 2 -type d | egrep "^$HOME/webdata/"`; do
        chown -R $user: $dir
        chmod -R u=rw,go=,u+X $dir
    done
    for dir in `find $HOME -mindepth 1 -maxdepth 1 -type d | egrep "^$HOME/webphpsites"`; do
        chown root: $dir
        chmod u=rw,go=r,a+X $dir
    done
    for dir in `find $HOME -mindepth 2 -maxdepth 2 -type d | egrep "^$HOME/webphpsites/"`; do
        chown -R $user:www-data $dir
#       chmod -R ug=rw,o=r,a+X $dir
        chmod -R ug=rw,o=,ug+X $dir
    done
    for dir in `find $HOME -mindepth 1 -maxdepth 1 -type d | egrep "^$HOME/webphpdata"`; do
        chown root: $dir
        chmod a=r,u+w,a+X $dir
    done
    for dir in `find $HOME -mindepth 2 -maxdepth 2 -type d | egrep "^$HOME/webphpdata/"`; do
        chown -R $user:www-data $dir
        chmod -R ug=rw,o=,ug+X $dir
    done
    
    # Dummy user restrictions
    if [ -n "$DUMMYSHAREDIR" -a -n "$DUMMYSHAREOWNER" -a -n "$DUMMYSHARENAME" ]; then
        [ -e $DUMMYSHAREDIR/$user ] \
            || mkdir $DUMMYSHAREDIR/$user
        chown $DUMMYSHAREOWNER: $DUMMYSHAREDIR/$user
        chmod u=rw,go=r,a+X $DUMMYSHAREDIR/$user
        if [ -e $HOME/$DUMMYSHARENAME ]; then
            if [ -L $HOME/$DUMMYSHARENAME ]; then
                ln -sf $DUMMYSHAREDIR/$user $HOME/$DUMMYSHARENAME
                chown $user: $HOME/$DUMMYSHARENAME
            else
                echo "ERROR: $HOME/$DUMMYSHAREDIR exists already. Leaving it as is..."
            fi
        else
            ln -s $DUMMYSHAREDIR/$user $HOME/$DUMMYSHARENAME
            chown $user: $HOME/$DUMMYSHARENAME
        fi
        if [ -n "$DUMMYAPACHECFG" -a -n "$DUMMYAPACHESHAREDIR" ]; then
            if [ -f /etc/apache/include.d/$DUMMYAPACHECFG -a -x /etc/init.d/apache ]; then
                if [ -e /etc/apache/include.d/$DUMMYAPACHECFG-$user ]; then
                    echo "/etc/apache/include.d/$DUMMYAPACHECFG-$user exists already. Ignoring..."
                else
                    echo "# Created automatically by adduser.local
<Location /$DUMMYAPACHESHAREDIR/$user>
    <Limit GET POST>
        require user $user
    </Limit>
</Location>" \
                        > /etc/apache/include.d/$DUMMYAPACHECFG-$user
                    apache_reload_needed="1"
                fi
            fi
        fi
    fi

    echo "."
done

if [ $XCHANGE ]; then
    for USER in $(ls $XDIRREAL); do
        id $user >/dev/null 2>&1 || rm -rf $XDIRREAL/$user
    done
fi

if [ "$apache_reload_needed" ]; then
    apache_do_reload=""
    case runmode in
        interactive)
        echo -n "Apache config changed. Reload Apache now (Y/n)? "
        read apache_reload
        case $apache_reload in
            y|Y|"")
            apache_do_reload="1"
            ;;
        esac
        ;;
        force)
        apache_do_reload="1"
        ;;
        *)
        echo "Apache config has changed. Remember to reload Apache...!"
        ;;
    esac
    if "$apache_do_reload" ]; then
        /etc/init.d/apache force-reload
    fi
fi