Home | History | Annotate | Line # | Download | only in user
user.c revision 1.10
      1  1.10     agc /* $NetBSD: user.c,v 1.10 1999/12/31 21:58:14 agc Exp $ */
      2   1.1     agc 
      3   1.1     agc /*
      4   1.4   lukem  * Copyright (c) 1999 Alistair G. Crooks.  All rights reserved.
      5   1.1     agc  *
      6   1.1     agc  * Redistribution and use in source and binary forms, with or without
      7   1.1     agc  * modification, are permitted provided that the following conditions
      8   1.1     agc  * are met:
      9   1.1     agc  * 1. Redistributions of source code must retain the above copyright
     10   1.1     agc  *    notice, this list of conditions and the following disclaimer.
     11   1.1     agc  * 2. Redistributions in binary form must reproduce the above copyright
     12   1.1     agc  *    notice, this list of conditions and the following disclaimer in the
     13   1.1     agc  *    documentation and/or other materials provided with the distribution.
     14   1.1     agc  * 3. All advertising materials mentioning features or use of this software
     15   1.1     agc  *    must display the following acknowledgement:
     16   1.1     agc  *	This product includes software developed by Alistair G. Crooks.
     17   1.1     agc  * 4. The name of the author may not be used to endorse or promote
     18   1.1     agc  *    products derived from this software without specific prior written
     19   1.1     agc  *    permission.
     20   1.1     agc  *
     21   1.1     agc  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS
     22   1.1     agc  * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
     23   1.1     agc  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     24   1.1     agc  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
     25   1.1     agc  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     26   1.1     agc  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
     27   1.1     agc  * GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     28   1.1     agc  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
     29   1.1     agc  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
     30   1.1     agc  * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
     31   1.1     agc  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     32   1.1     agc  */
     33   1.1     agc #include <sys/types.h>
     34   1.1     agc #include <sys/param.h>
     35   1.1     agc #include <sys/stat.h>
     36   1.1     agc 
     37   1.5   lukem #include <ctype.h>
     38   1.5   lukem #include <dirent.h>
     39   1.5   lukem #include <err.h>
     40   1.5   lukem #include <fcntl.h>
     41   1.5   lukem #include <grp.h>
     42   1.5   lukem #include <pwd.h>
     43   1.5   lukem #include <stdarg.h>
     44   1.1     agc #include <stdio.h>
     45   1.1     agc #include <stdlib.h>
     46   1.1     agc #include <string.h>
     47   1.1     agc #include <time.h>
     48   1.5   lukem #include <unistd.h>
     49   1.1     agc #include <util.h>
     50   1.1     agc 
     51   1.1     agc #include "defs.h"
     52   1.1     agc #include "usermgmt.h"
     53   1.1     agc 
     54   1.9     agc /* this struct describes a uid range */
     55   1.9     agc typedef struct range_t {
     56   1.9     agc 	int	r_from;		/* low uid */
     57   1.9     agc 	int	r_to;		/* high uid */
     58   1.9     agc } range_t;
     59   1.9     agc 
     60   1.9     agc /* this struct encapsulates the user information */
     61   1.9     agc typedef struct user_t {
     62   1.9     agc 	int		u_uid;			/* uid of user */
     63   1.9     agc 	char		*u_password;		/* encrypted password */
     64   1.9     agc 	char		*u_comment;		/* comment field */
     65   1.9     agc 	int		u_homeset;		/* home dir has been set */
     66   1.9     agc 	char		*u_home;		/* home directory */
     67   1.9     agc 	char		*u_primgrp;		/* primary group */
     68   1.9     agc 	int		u_groupc;		/* # of secondary groups */
     69   1.9     agc 	char		*u_groupv[NGROUPS_MAX];	/* secondary groups */
     70   1.9     agc 	char		*u_shell;		/* user's shell */
     71   1.9     agc 	char		*u_basedir;		/* base directory for home */
     72   1.9     agc 	char		*u_expire;		/* when password will expire */
     73   1.9     agc 	int		u_inactive;		/* inactive */
     74   1.9     agc 	int		u_mkdir;		/* make the home directory */
     75   1.9     agc 	int		u_dupuid;		/* duplicate uids are allowed */
     76   1.9     agc 	char		*u_skeldir;		/* directory for startup files */
     77   1.9     agc 	unsigned	u_rsize;		/* size of range array */
     78   1.9     agc 	unsigned	u_rc;			/* # of ranges */
     79   1.9     agc 	range_t		*u_rv;			/* the ranges */
     80   1.9     agc 	unsigned	u_defrc;		/* # of ranges in defaults */
     81   1.9     agc 	int		u_preserve;		/* preserve uids on deletion */
     82   1.9     agc } user_t;
     83   1.9     agc 
     84   1.9     agc #define CONFFILE	"/etc/usermgmt.conf"
     85   1.9     agc 
     86   1.9     agc #ifndef DEF_GROUP
     87   1.9     agc #define DEF_GROUP	"users"
     88   1.9     agc #endif
     89   1.9     agc 
     90   1.9     agc #ifndef DEF_BASEDIR
     91   1.9     agc #define DEF_BASEDIR	"/home"
     92   1.9     agc #endif
     93   1.9     agc 
     94   1.9     agc #ifndef DEF_SKELDIR
     95   1.9     agc #define DEF_SKELDIR	"/etc/skel"
     96   1.9     agc #endif
     97   1.9     agc 
     98   1.9     agc #ifndef DEF_SHELL
     99   1.9     agc #define DEF_SHELL	"/bin/csh"
    100   1.9     agc #endif
    101   1.9     agc 
    102   1.9     agc #ifndef DEF_COMMENT
    103   1.9     agc #define DEF_COMMENT	""
    104   1.9     agc #endif
    105   1.9     agc 
    106   1.9     agc #ifndef DEF_LOWUID
    107   1.9     agc #define DEF_LOWUID	1000
    108   1.9     agc #endif
    109   1.9     agc 
    110   1.9     agc #ifndef DEF_HIGHUID
    111   1.9     agc #define DEF_HIGHUID	60000
    112   1.9     agc #endif
    113   1.9     agc 
    114   1.9     agc #ifndef DEF_INACTIVE
    115   1.9     agc #define DEF_INACTIVE	0
    116   1.9     agc #endif
    117   1.9     agc 
    118   1.9     agc #ifndef DEF_EXPIRE
    119   1.9     agc #define DEF_EXPIRE	(char *) NULL
    120   1.9     agc #endif
    121   1.9     agc 
    122   1.9     agc #ifndef MASTER
    123   1.9     agc #define MASTER		"/etc/master.passwd"
    124   1.9     agc #endif
    125   1.9     agc 
    126   1.9     agc #ifndef ETCGROUP
    127   1.9     agc #define ETCGROUP	"/etc/group"
    128   1.9     agc #endif
    129   1.9     agc 
    130   1.9     agc #ifndef WAITSECS
    131   1.9     agc #define WAITSECS	10
    132   1.9     agc #endif
    133   1.9     agc 
    134   1.9     agc #ifndef NOBODY_UID
    135   1.9     agc #define NOBODY_UID	32767
    136   1.9     agc #endif
    137   1.9     agc 
    138   1.9     agc /* some useful constants */
    139   1.9     agc enum {
    140   1.9     agc 	MaxShellNameLen = 256,
    141   1.9     agc 	MaxFileNameLen = MAXPATHLEN,
    142   1.9     agc 	MaxUserNameLen = 32,
    143   1.9     agc 	MaxFieldNameLen = 32,
    144   1.9     agc 	MaxCommandLen = 2048,
    145   1.9     agc 	MaxEntryLen = 2048,
    146   1.9     agc 	PasswordLength = 13,
    147   1.9     agc 
    148   1.9     agc 	LowGid = DEF_LOWUID,
    149   1.9     agc 	HighGid = DEF_HIGHUID
    150   1.9     agc };
    151   1.9     agc 
    152   1.9     agc /* Full paths of programs used here */
    153   1.9     agc #define CHOWN		"/usr/sbin/chown"
    154   1.9     agc #define MKDIR		"/bin/mkdir"
    155   1.9     agc #define MV		"/bin/mv"
    156  1.10     agc #define NOLOGIN		"/sbin/nologin"
    157  1.10     agc #define PAX		"/bin/pax"
    158   1.9     agc #define RM		"/bin/rm"
    159   1.9     agc 
    160   1.9     agc #define UNSET_EXPIRY	"Null (unset)"
    161   1.9     agc 
    162   1.1     agc static int	verbose;
    163   1.1     agc 
    164   1.1     agc /* if *cpp is non-null, free it, then assign `n' chars of `s' to it */
    165   1.1     agc static void
    166   1.1     agc memsave(char **cpp, char *s, size_t n)
    167   1.1     agc {
    168   1.1     agc 	if (*cpp != (char *) NULL) {
    169   1.1     agc 		FREE(*cpp);
    170   1.1     agc 	}
    171   1.1     agc 	NEWARRAY(char, *cpp, n + 1, exit(1));
    172   1.1     agc 	(void) memcpy(*cpp, s, n);
    173   1.1     agc 	(*cpp)[n] = 0;
    174   1.1     agc }
    175   1.1     agc 
    176   1.1     agc /* a replacement for system(3) */
    177   1.1     agc static int
    178   1.1     agc asystem(char *fmt, ...)
    179   1.1     agc {
    180   1.1     agc 	va_list	vp;
    181   1.1     agc 	char	buf[MaxCommandLen];
    182   1.1     agc 	int	ret;
    183   1.1     agc 
    184   1.1     agc 	va_start(vp, fmt);
    185   1.1     agc 	(void) vsnprintf(buf, sizeof(buf), fmt, vp);
    186   1.1     agc 	va_end(vp);
    187   1.1     agc 	if (verbose) {
    188   1.1     agc 		(void) printf("Command: %s\n", buf);
    189   1.1     agc 	}
    190   1.1     agc 	if ((ret = system(buf)) != 0) {
    191   1.1     agc 		warnx("[Warning] can't system `%s'", buf);
    192   1.1     agc 	}
    193   1.1     agc 	return ret;
    194   1.1     agc }
    195   1.1     agc 
    196   1.9     agc #define NetBSD_1_4_K	104110000
    197   1.9     agc 
    198   1.9     agc #if defined(__NetBSD_Version__) && (__NetBSD_Version__ < NetBSD_1_4_K)
    199   1.9     agc /* bounds checking strncpy */
    200   1.9     agc static int
    201   1.9     agc strlcpy(char *to, char *from, size_t tosize)
    202   1.9     agc {
    203   1.9     agc 	size_t	n;
    204   1.9     agc 	int	fromsize;
    205   1.9     agc 
    206   1.9     agc 	fromsize = strlen(from);
    207   1.9     agc 	n = MIN(tosize - 1, fromsize);
    208   1.9     agc 	(void) memcpy(to, from, n);
    209   1.9     agc 	to[n] = 0;
    210   1.9     agc 	return fromsize;
    211   1.9     agc }
    212   1.9     agc #endif
    213   1.9     agc 
    214   1.9     agc #ifdef EXTENSIONS
    215   1.9     agc /* return 1 if all of `s' is numeric */
    216   1.9     agc static int
    217   1.9     agc is_number(char *s)
    218   1.9     agc {
    219   1.9     agc 	for ( ; *s ; s++) {
    220   1.9     agc 		if (!isdigit(*s)) {
    221   1.9     agc 			return 0;
    222   1.9     agc 		}
    223   1.9     agc 	}
    224   1.9     agc 	return 1;
    225   1.9     agc }
    226   1.9     agc #endif
    227   1.9     agc 
    228   1.9     agc /*
    229   1.9     agc  * check that the effective uid is 0 - called from funcs which will
    230   1.9     agc  * modify data and config files.
    231   1.9     agc  */
    232   1.9     agc static void
    233   1.9     agc checkeuid(void)
    234   1.9     agc {
    235   1.9     agc 	if (geteuid() != 0) {
    236   1.9     agc 		errx(EXIT_FAILURE, "Program must be run as root");
    237   1.9     agc 	}
    238   1.9     agc }
    239   1.9     agc 
    240   1.1     agc /* copy any dot files into the user's home directory */
    241   1.1     agc static int
    242   1.1     agc copydotfiles(char *skeldir, int uid, int gid, char *dir)
    243   1.1     agc {
    244   1.1     agc 	struct dirent	*dp;
    245   1.1     agc 	DIR		*dirp;
    246   1.1     agc 	int		n;
    247   1.1     agc 
    248   1.1     agc 	if ((dirp = opendir(skeldir)) == (DIR *) NULL) {
    249   1.1     agc 		warn("can't open source . files dir `%s'", skeldir);
    250   1.1     agc 		return 0;
    251   1.1     agc 	}
    252   1.1     agc 	for (n = 0; (dp = readdir(dirp)) != (struct dirent *) NULL && n == 0 ; ) {
    253   1.1     agc 		if (strcmp(dp->d_name, ".") == 0 ||
    254   1.1     agc 		    strcmp(dp->d_name, "..") == 0) {
    255   1.1     agc 			continue;
    256   1.1     agc 		}
    257  1.10     agc 		n = 1;
    258   1.1     agc 	}
    259   1.1     agc 	(void) closedir(dirp);
    260   1.1     agc 	if (n == 0) {
    261   1.1     agc 		warnx("No \"dot\" initialisation files found");
    262   1.1     agc 	} else {
    263  1.10     agc 		(void) asystem("cd %s; %s -rw -pe %s . %s",
    264  1.10     agc 				skeldir, PAX, (verbose) ? "-v" : "", dir);
    265   1.1     agc 	}
    266  1.10     agc 	(void) asystem("%s -R -h %d:%d %s", CHOWN, uid, gid, dir);
    267   1.1     agc 	return n;
    268   1.1     agc }
    269   1.1     agc 
    270   1.1     agc /* create a group entry with gid `gid' */
    271   1.1     agc static int
    272   1.1     agc creategid(char *group, int gid, char *name)
    273   1.1     agc {
    274   1.1     agc 	struct stat	st;
    275   1.1     agc 	FILE		*from;
    276   1.1     agc 	FILE		*to;
    277   1.1     agc 	char		buf[MaxEntryLen];
    278   1.1     agc 	char		f[MaxFileNameLen];
    279   1.1     agc 	int		fd;
    280   1.1     agc 	int		cc;
    281   1.1     agc 
    282   1.1     agc 	if ((from = fopen(ETCGROUP, "r")) == (FILE *) NULL) {
    283   1.1     agc 		warn("can't create gid for %s: can't open %s", name, ETCGROUP);
    284   1.1     agc 		return 0;
    285   1.1     agc 	}
    286   1.1     agc 	if (flock(fileno(from), LOCK_EX | LOCK_NB) < 0) {
    287   1.1     agc 		warn("can't lock `%s'", ETCGROUP);
    288   1.1     agc 	}
    289   1.1     agc 	(void) fstat(fileno(from), &st);
    290   1.1     agc 	(void) snprintf(f, sizeof(f), "%s.XXXXXX", ETCGROUP);
    291   1.1     agc 	if ((fd = mkstemp(f)) < 0) {
    292   1.1     agc 		(void) fclose(from);
    293   1.1     agc 		warn("can't create gid: mkstemp failed");
    294   1.1     agc 		return 0;
    295   1.1     agc 	}
    296   1.1     agc 	if ((to = fdopen(fd, "w")) == (FILE *) NULL) {
    297   1.1     agc 		(void) fclose(from);
    298   1.1     agc 		(void) close(fd);
    299   1.1     agc 		(void) unlink(f);
    300   1.1     agc 		warn("can't create gid: fdopen `%s' failed", f);
    301   1.1     agc 		return 0;
    302   1.1     agc 	}
    303   1.1     agc 	while ((cc = fread(buf, sizeof(char), sizeof(buf), from)) > 0) {
    304   1.1     agc 		if (fwrite(buf, sizeof(char), (unsigned) cc, to) != cc) {
    305   1.1     agc 			(void) fclose(from);
    306   1.1     agc 			(void) close(fd);
    307   1.1     agc 			(void) unlink(f);
    308   1.1     agc 			warn("can't create gid: short write to `%s'", f);
    309   1.1     agc 			return 0;
    310   1.1     agc 		}
    311   1.1     agc 	}
    312   1.1     agc 	(void) fprintf(to, "%s:*:%d:%s\n", group, gid, name);
    313   1.1     agc 	(void) fclose(from);
    314   1.1     agc 	(void) fclose(to);
    315   1.1     agc 	if (rename(f, ETCGROUP) < 0) {
    316   1.1     agc 		warn("can't create gid: can't rename `%s' to `%s'", f, ETCGROUP);
    317   1.1     agc 		return 0;
    318   1.1     agc 	}
    319   1.1     agc 	(void) chmod(ETCGROUP, st.st_mode & 07777);
    320   1.1     agc 	return 1;
    321   1.1     agc }
    322   1.1     agc 
    323   1.1     agc /* modify the group entry with name `group' to be newent */
    324   1.1     agc static int
    325   1.1     agc modify_gid(char *group, char *newent)
    326   1.1     agc {
    327   1.1     agc 	struct stat	st;
    328   1.1     agc 	FILE		*from;
    329   1.1     agc 	FILE		*to;
    330   1.1     agc 	char		buf[MaxEntryLen];
    331   1.1     agc 	char		f[MaxFileNameLen];
    332   1.1     agc 	char		*colon;
    333   1.1     agc 	int		groupc;
    334   1.1     agc 	int		entc;
    335   1.1     agc 	int		fd;
    336   1.1     agc 	int		cc;
    337   1.1     agc 
    338   1.1     agc 	if ((from = fopen(ETCGROUP, "r")) == (FILE *) NULL) {
    339   1.1     agc 		warn("can't create gid for %s: can't open %s", group, ETCGROUP);
    340   1.1     agc 		return 0;
    341   1.1     agc 	}
    342   1.1     agc 	if (flock(fileno(from), LOCK_EX | LOCK_NB) < 0) {
    343   1.1     agc 		warn("can't lock `%s'", ETCGROUP);
    344   1.1     agc 	}
    345   1.1     agc 	(void) fstat(fileno(from), &st);
    346   1.1     agc 	(void) snprintf(f, sizeof(f), "%s.XXXXXX", ETCGROUP);
    347   1.1     agc 	if ((fd = mkstemp(f)) < 0) {
    348   1.1     agc 		(void) fclose(from);
    349   1.1     agc 		warn("can't create gid: mkstemp failed");
    350   1.1     agc 		return 0;
    351   1.1     agc 	}
    352   1.1     agc 	if ((to = fdopen(fd, "w")) == (FILE *) NULL) {
    353   1.1     agc 		(void) fclose(from);
    354   1.1     agc 		(void) close(fd);
    355   1.1     agc 		(void) unlink(f);
    356   1.1     agc 		warn("can't create gid: fdopen `%s' failed", f);
    357   1.1     agc 		return 0;
    358   1.1     agc 	}
    359   1.1     agc 	groupc = strlen(group);
    360   1.1     agc 	while ((cc = fread(buf, sizeof(char), sizeof(buf), from)) > 0) {
    361   1.1     agc 		if ((colon = strchr(buf, ':')) == (char *) NULL) {
    362   1.1     agc 			warn("badly formed entry `%s'", buf);
    363   1.1     agc 			continue;
    364   1.1     agc 		}
    365   1.1     agc 		entc = (int)(colon - buf);
    366   1.1     agc 		if (entc == groupc && strncmp(group, buf, (unsigned) entc) == 0) {
    367   1.1     agc 			if (newent == (char *) NULL) {
    368   1.1     agc 				continue;
    369   1.1     agc 			} else {
    370   1.1     agc 				cc = strlen(newent);
    371   1.5   lukem 				(void) strlcpy(buf, newent, sizeof(buf));
    372   1.1     agc 			}
    373   1.1     agc 		}
    374   1.1     agc 		if (fwrite(buf, sizeof(char), (unsigned) cc, to) != cc) {
    375   1.1     agc 			(void) fclose(from);
    376   1.1     agc 			(void) close(fd);
    377   1.1     agc 			(void) unlink(f);
    378   1.1     agc 			warn("can't create gid: short write to `%s'", f);
    379   1.1     agc 			return 0;
    380   1.1     agc 		}
    381   1.1     agc 	}
    382   1.1     agc 	(void) fclose(from);
    383   1.1     agc 	(void) fclose(to);
    384   1.1     agc 	if (rename(f, ETCGROUP) < 0) {
    385   1.1     agc 		warn("can't create gid: can't rename `%s' to `%s'", f, ETCGROUP);
    386   1.1     agc 		return 0;
    387   1.1     agc 	}
    388   1.1     agc 	(void) chmod(ETCGROUP, st.st_mode & 07777);
    389   1.1     agc 	return 1;
    390   1.1     agc }
    391   1.1     agc 
    392   1.1     agc /* return 1 if `login' is a valid login name */
    393   1.1     agc static int
    394   1.1     agc valid_login(char *login)
    395   1.1     agc {
    396   1.1     agc 	char	*cp;
    397   1.1     agc 
    398   1.1     agc 	for (cp = login ; *cp ; cp++) {
    399   1.1     agc 		if (!isalnum(*cp) && *cp != '.' && *cp != '_' && *cp != '-') {
    400   1.1     agc 			return 0;
    401   1.1     agc 		}
    402   1.1     agc 	}
    403   1.1     agc 	return 1;
    404   1.1     agc }
    405   1.1     agc 
    406   1.1     agc /* return 1 if `group' is a valid group name */
    407   1.1     agc static int
    408   1.1     agc valid_group(char *group)
    409   1.1     agc {
    410   1.1     agc 	char	*cp;
    411   1.1     agc 
    412   1.1     agc 	for (cp = group ; *cp ; cp++) {
    413   1.1     agc 		if (!isalnum(*cp)) {
    414   1.1     agc 			return 0;
    415   1.1     agc 		}
    416   1.1     agc 	}
    417   1.1     agc 	return 1;
    418   1.1     agc }
    419   1.1     agc 
    420   1.1     agc /* find the next gid in the range lo .. hi */
    421   1.1     agc static int
    422   1.1     agc getnextgid(int *gidp, int lo, int hi)
    423   1.1     agc {
    424   1.1     agc 	for (*gidp = lo ; *gidp < hi ; *gidp += 1) {
    425   1.1     agc 		if (getgrgid((gid_t)*gidp) == (struct group *) NULL) {
    426   1.1     agc 			return 1;
    427   1.1     agc 		}
    428   1.1     agc 	}
    429   1.1     agc 	return 0;
    430   1.1     agc }
    431   1.1     agc 
    432   1.1     agc #ifdef EXTENSIONS
    433   1.1     agc /* save a range of uids */
    434   1.1     agc static int
    435   1.1     agc save_range(user_t *up, char *cp)
    436   1.1     agc {
    437   1.1     agc 	int	from;
    438   1.1     agc 	int	to;
    439   1.1     agc 	int	i;
    440   1.1     agc 
    441   1.1     agc 	if (up->u_rsize == 0) {
    442   1.1     agc 		up->u_rsize = 32;
    443   1.1     agc 		NEWARRAY(range_t, up->u_rv, up->u_rsize, return(0));
    444   1.1     agc 	} else if (up->u_rc == up->u_rsize) {
    445   1.1     agc 		up->u_rsize *= 2;
    446   1.1     agc 		RENEW(range_t, up->u_rv, up->u_rsize, return(0));
    447   1.1     agc 	}
    448   1.1     agc 	if (up->u_rv && sscanf(cp, "%d..%d", &from, &to) == 2) {
    449   1.1     agc 		for (i = 0 ; i < up->u_rc ; i++) {
    450   1.1     agc 			if (up->u_rv[i].r_from == from && up->u_rv[i].r_to == to) {
    451   1.1     agc 				break;
    452   1.1     agc 			}
    453   1.1     agc 		}
    454   1.1     agc 		if (i == up->u_rc) {
    455   1.1     agc 			up->u_rv[up->u_rc].r_from = from;
    456   1.1     agc 			up->u_rv[up->u_rc].r_to = to;
    457   1.1     agc 			up->u_rc += 1;
    458   1.1     agc 		}
    459   1.1     agc 	} else {
    460   1.1     agc 		warnx("Bad range `%s'", cp);
    461   1.1     agc 		return 0;
    462   1.1     agc 	}
    463   1.1     agc 	return 1;
    464   1.1     agc }
    465   1.1     agc #endif
    466   1.1     agc 
    467   1.1     agc /* set the defaults in the defaults file */
    468   1.1     agc static int
    469   1.1     agc setdefaults(user_t *up)
    470   1.1     agc {
    471   1.1     agc 	char	template[MaxFileNameLen];
    472   1.1     agc 	FILE	*fp;
    473   1.1     agc 	int	ret;
    474   1.1     agc 	int	fd;
    475   1.1     agc 	int	i;
    476   1.1     agc 
    477   1.1     agc 	(void) snprintf(template, sizeof(template), "%s.XXXXXX", CONFFILE);
    478   1.1     agc 	if ((fd = mkstemp(template)) < 0) {
    479   1.1     agc 		warnx("can't mkstemp `%s' for writing", CONFFILE);
    480   1.1     agc 		return 0;
    481   1.1     agc 	}
    482   1.1     agc 	if ((fp = fdopen(fd, "w")) == (FILE *) NULL) {
    483   1.1     agc 		warn("can't fdopen `%s' for writing", CONFFILE);
    484   1.1     agc 		return 0;
    485   1.1     agc 	}
    486   1.1     agc 	ret = 1;
    487   1.1     agc 	if (fprintf(fp, "group\t\t%s\n", up->u_primgrp) <= 0 ||
    488   1.1     agc 	    fprintf(fp, "base_dir\t%s\n", up->u_basedir) <= 0 ||
    489   1.1     agc 	    fprintf(fp, "skel_dir\t%s\n", up->u_skeldir) <= 0 ||
    490   1.1     agc 	    fprintf(fp, "shell\t\t%s\n", up->u_shell) <= 0 ||
    491   1.1     agc 	    fprintf(fp, "inactive\t%d\n", up->u_inactive) <= 0 ||
    492   1.1     agc 	    fprintf(fp, "expire\t\t%s\n", (up->u_expire == (char *) NULL) ? UNSET_EXPIRY : up->u_expire) <= 0) {
    493   1.1     agc 		warn("can't write to `%s'", CONFFILE);
    494   1.1     agc 		ret = 0;
    495   1.1     agc 	}
    496   1.1     agc #ifdef EXTENSIONS
    497   1.9     agc 	for (i = (up->u_defrc != up->u_rc) ? up->u_defrc : 0 ; i < up->u_rc ; i++) {
    498   1.1     agc 		if (fprintf(fp, "range\t\t%d..%d\n", up->u_rv[i].r_from, up->u_rv[i].r_to) <= 0) {
    499   1.1     agc 			warn("can't write to `%s'", CONFFILE);
    500   1.1     agc 			ret = 0;
    501   1.1     agc 		}
    502   1.1     agc 	}
    503   1.1     agc #endif
    504   1.1     agc 	(void) fclose(fp);
    505   1.1     agc 	if (ret) {
    506   1.1     agc 		ret = ((rename(template, CONFFILE) == 0) && (chmod(CONFFILE, 0644) == 0));
    507   1.1     agc 	}
    508   1.1     agc 	return ret;
    509   1.1     agc }
    510   1.1     agc 
    511   1.1     agc /* read the defaults file */
    512   1.1     agc static void
    513   1.1     agc read_defaults(user_t *up)
    514   1.1     agc {
    515   1.1     agc 	struct stat	st;
    516   1.1     agc 	size_t		lineno;
    517   1.1     agc 	size_t		len;
    518   1.1     agc 	FILE		*fp;
    519   1.1     agc 	char		*cp;
    520   1.1     agc 	char		*s;
    521   1.1     agc 
    522   1.1     agc 	memsave(&up->u_primgrp, DEF_GROUP, strlen(DEF_GROUP));
    523   1.1     agc 	memsave(&up->u_basedir, DEF_BASEDIR, strlen(DEF_BASEDIR));
    524   1.1     agc 	memsave(&up->u_skeldir, DEF_SKELDIR, strlen(DEF_SKELDIR));
    525   1.1     agc 	memsave(&up->u_shell, DEF_SHELL, strlen(DEF_SHELL));
    526   1.1     agc 	memsave(&up->u_comment, DEF_COMMENT, strlen(DEF_COMMENT));
    527   1.1     agc 	up->u_rsize = 16;
    528   1.1     agc 	NEWARRAY(range_t, up->u_rv, up->u_rsize, exit(1));
    529   1.9     agc 	up->u_inactive = DEF_INACTIVE;
    530   1.1     agc 	up->u_expire = DEF_EXPIRE;
    531   1.1     agc 	if ((fp = fopen(CONFFILE, "r")) == (FILE *) NULL) {
    532   1.1     agc 		if (stat(CONFFILE, &st) < 0 && !setdefaults(up)) {
    533   1.1     agc 			warn("can't create `%s' defaults file", CONFFILE);
    534   1.1     agc 		}
    535   1.1     agc 		fp = fopen(CONFFILE, "r");
    536   1.1     agc 	}
    537   1.1     agc 	if (fp != (FILE *) NULL) {
    538   1.1     agc 		while ((s = fparseln(fp, &len, &lineno, NULL, 0)) != (char *) NULL) {
    539   1.1     agc 			if (strncmp(s, "group", 5) == 0) {
    540   1.1     agc 				for (cp = s + 5 ; *cp && isspace(*cp) ; cp++) {
    541   1.1     agc 				}
    542   1.1     agc 				memsave(&up->u_primgrp, cp, strlen(cp));
    543   1.1     agc 			} else if (strncmp(s, "base_dir", 8) == 0) {
    544   1.1     agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    545   1.1     agc 				}
    546   1.1     agc 				memsave(&up->u_basedir, cp, strlen(cp));
    547   1.1     agc 			} else if (strncmp(s, "skel_dir", 8) == 0) {
    548   1.1     agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    549   1.1     agc 				}
    550   1.1     agc 				memsave(&up->u_skeldir, cp, strlen(cp));
    551   1.1     agc 			} else if (strncmp(s, "shell", 5) == 0) {
    552   1.1     agc 				for (cp = s + 5 ; *cp && isspace(*cp) ; cp++) {
    553   1.1     agc 				}
    554   1.1     agc 				memsave(&up->u_shell, cp, strlen(cp));
    555   1.1     agc 			} else if (strncmp(s, "inactive", 8) == 0) {
    556   1.1     agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    557   1.1     agc 				}
    558   1.1     agc 				up->u_inactive = atoi(cp);
    559   1.1     agc #ifdef EXTENSIONS
    560   1.1     agc 			} else if (strncmp(s, "range", 5) == 0) {
    561   1.1     agc 				for (cp = s + 5 ; *cp && isspace(*cp) ; cp++) {
    562   1.1     agc 				}
    563   1.1     agc 				(void) save_range(up, cp);
    564   1.1     agc #endif
    565   1.1     agc #ifdef EXTENSIONS
    566   1.1     agc 			} else if (strncmp(s, "preserve", 8) == 0) {
    567   1.1     agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    568   1.1     agc 				}
    569   1.1     agc 				up->u_preserve = (strncmp(cp, "true", 4) == 0) ? 1 :
    570   1.1     agc 						  (strncmp(cp, "yes", 3) == 0) ? 1 :
    571   1.1     agc 						   atoi(cp);
    572   1.1     agc #endif
    573   1.1     agc 			} else if (strncmp(s, "expire", 6) == 0) {
    574   1.1     agc 				for (cp = s + 6 ; *cp && isspace(*cp) ; cp++) {
    575   1.1     agc 				}
    576   1.1     agc 				if (strcmp(cp, UNSET_EXPIRY) == 0) {
    577   1.1     agc 					if (up->u_expire) {
    578   1.1     agc 						FREE(up->u_expire);
    579   1.1     agc 					}
    580   1.1     agc 					up->u_expire = (char *) NULL;
    581   1.1     agc 				} else {
    582   1.1     agc 					memsave(&up->u_expire, cp, strlen(cp));
    583   1.1     agc 				}
    584   1.1     agc 			}
    585   1.1     agc 			(void) free(s);
    586   1.1     agc 		}
    587   1.1     agc 		(void) fclose(fp);
    588   1.1     agc 	}
    589   1.9     agc 	if (up->u_rc == 0) {
    590   1.9     agc 		up->u_rv[up->u_rc].r_from = DEF_LOWUID;
    591   1.9     agc 		up->u_rv[up->u_rc].r_to = DEF_HIGHUID;
    592   1.9     agc 		up->u_rc += 1;
    593   1.9     agc 	}
    594   1.9     agc 	up->u_defrc = up->u_rc;
    595   1.1     agc }
    596   1.1     agc 
    597   1.1     agc /* return the next valid unused uid */
    598   1.1     agc static int
    599   1.1     agc getnextuid(int sync_uid_gid, int *uid, int low_uid, int high_uid)
    600   1.1     agc {
    601   1.1     agc 	for (*uid = low_uid ; *uid <= high_uid ; (*uid)++) {
    602   1.1     agc 		if (getpwuid((uid_t)(*uid)) == (struct passwd *) NULL && *uid != NOBODY_UID) {
    603   1.1     agc 			if (sync_uid_gid) {
    604   1.1     agc 				if (getgrgid((gid_t)(*uid)) == (struct group *) NULL) {
    605   1.1     agc 					return 1;
    606   1.1     agc 				}
    607   1.1     agc 			} else {
    608   1.1     agc 				return 1;
    609   1.1     agc 			}
    610   1.1     agc 		}
    611   1.1     agc 	}
    612   1.1     agc 	return 0;
    613   1.1     agc }
    614   1.1     agc 
    615   1.1     agc /* add a user */
    616   1.1     agc static int
    617   1.1     agc adduser(char *login, user_t *up)
    618   1.1     agc {
    619   1.1     agc 	struct group	*grp;
    620   1.1     agc 	struct stat	st;
    621   1.1     agc 	struct tm	tm;
    622   1.1     agc 	time_t		expire;
    623   1.1     agc 	char		password[PasswordLength + 1];
    624   1.1     agc 	char		home[MaxFileNameLen];
    625   1.1     agc 	char		buf[MaxFileNameLen];
    626   1.1     agc 	int		sync_uid_gid;
    627   1.1     agc 	int		masterfd;
    628   1.1     agc 	int		ptmpfd;
    629   1.1     agc 	int		gid;
    630   1.1     agc 	int		cc;
    631   1.1     agc 	int		i;
    632   1.1     agc 
    633   1.1     agc 	if (!valid_login(login)) {
    634   1.1     agc 		errx(EXIT_FAILURE, "`%s' is not a valid login name", login);
    635   1.1     agc 	}
    636   1.1     agc 	if ((masterfd = open(MASTER, O_RDONLY)) < 0) {
    637   1.1     agc 		err(EXIT_FAILURE, "can't open `%s'", MASTER);
    638   1.1     agc 	}
    639   1.1     agc 	if (flock(masterfd, LOCK_EX | LOCK_NB) < 0) {
    640   1.1     agc 		err(EXIT_FAILURE, "can't lock `%s'", MASTER);
    641   1.1     agc 	}
    642   1.1     agc 	pw_init();
    643   1.1     agc 	if ((ptmpfd = pw_lock(WAITSECS)) < 0) {
    644   1.1     agc 		(void) close(masterfd);
    645   1.1     agc 		err(EXIT_FAILURE, "can't obtain pw_lock");
    646   1.1     agc 	}
    647   1.1     agc 	while ((cc = read(masterfd, buf, sizeof(buf))) > 0) {
    648   1.1     agc 		if (write(ptmpfd, buf, (size_t)(cc)) != cc) {
    649   1.1     agc 			(void) close(masterfd);
    650   1.1     agc 			(void) close(ptmpfd);
    651   1.1     agc 			(void) pw_abort();
    652   1.1     agc 			err(EXIT_FAILURE, "short write to /etc/ptmp (not %d chars)", cc);
    653   1.1     agc 		}
    654   1.1     agc 	}
    655   1.1     agc 	/* if no uid was specified, get next one in [low_uid..high_uid] range */
    656   1.1     agc 	sync_uid_gid = (strcmp(up->u_primgrp, "=uid") == 0);
    657   1.1     agc 	if (up->u_uid == -1) {
    658   1.1     agc 		for (i = 0 ; i < up->u_rc ; i++) {
    659   1.1     agc 			if (getnextuid(sync_uid_gid, &up->u_uid, up->u_rv[i].r_from, up->u_rv[i].r_to)) {
    660   1.1     agc 				break;
    661   1.1     agc 			}
    662   1.1     agc 		}
    663   1.1     agc 		if (i == up->u_rc) {
    664   1.1     agc 			(void) close(ptmpfd);
    665   1.1     agc 			(void) pw_abort();
    666   1.1     agc 			errx(EXIT_FAILURE, "can't get next uid for %d", up->u_uid);
    667   1.1     agc 		}
    668   1.1     agc 	}
    669   1.1     agc 	/* check uid isn't already allocated */
    670   1.1     agc 	if (!up->u_dupuid && getpwuid((uid_t)(up->u_uid)) != (struct passwd *) NULL) {
    671   1.1     agc 		(void) close(ptmpfd);
    672   1.1     agc 		(void) pw_abort();
    673   1.1     agc 		errx(EXIT_FAILURE, "uid %d is already in use", up->u_uid);
    674   1.1     agc 	}
    675   1.1     agc 	/* if -g=uid was specified, check gid is unused */
    676   1.1     agc 	if (sync_uid_gid) {
    677   1.1     agc 		if (getgrgid((gid_t)(up->u_uid)) != (struct group *) NULL) {
    678   1.1     agc 			(void) close(ptmpfd);
    679   1.1     agc 			(void) pw_abort();
    680   1.1     agc 			errx(EXIT_FAILURE, "gid %d is already in use", up->u_uid);
    681   1.1     agc 		}
    682   1.1     agc 		gid = up->u_uid;
    683   1.1     agc 	} else if ((grp = getgrnam(up->u_primgrp)) != (struct group *) NULL) {
    684   1.1     agc 		gid = grp->gr_gid;
    685   1.9     agc 	} else if (is_number(up->u_primgrp) &&
    686   1.9     agc 		   (grp = getgrgid((gid_t)atoi(up->u_primgrp))) != (struct group *) NULL) {
    687   1.1     agc 		gid = grp->gr_gid;
    688   1.1     agc 	} else {
    689   1.1     agc 		(void) close(ptmpfd);
    690   1.1     agc 		(void) pw_abort();
    691   1.1     agc 		errx(EXIT_FAILURE, "group %s not found", up->u_primgrp);
    692   1.1     agc 	}
    693   1.1     agc 	/* check name isn't already in use */
    694   1.1     agc 	if (!up->u_dupuid && getpwnam(login) != (struct passwd *) NULL) {
    695   1.1     agc 		(void) close(ptmpfd);
    696   1.1     agc 		(void) pw_abort();
    697   1.1     agc 		errx(EXIT_FAILURE, "already a `%s' user", login);
    698   1.1     agc 	}
    699   1.1     agc 	/* if home directory hasn't been given, make it up */
    700   1.1     agc 	if (!up->u_homeset) {
    701   1.1     agc 		(void) snprintf(home, sizeof(home), "%s/%s", up->u_basedir, login);
    702   1.1     agc 	}
    703   1.1     agc 	expire = 0;
    704   1.1     agc 	if (up->u_expire != (char *) NULL) {
    705   1.1     agc 		(void) memset(&tm, 0, sizeof(tm));
    706   1.1     agc 		if (strptime(up->u_expire, "%c", &tm) == (char *) NULL) {
    707   1.1     agc 			warnx("invalid time format `%s'", optarg);
    708   1.1     agc 		} else {
    709   1.1     agc 			expire = mktime(&tm);
    710   1.1     agc 		}
    711   1.1     agc 	}
    712   1.1     agc 	password[PasswordLength] = 0;
    713   1.1     agc 	if (up->u_password != (char *) NULL &&
    714   1.1     agc 	    strlen(up->u_password) == PasswordLength) {
    715   1.1     agc 		(void) memcpy(password, up->u_password, PasswordLength);
    716   1.1     agc 	} else {
    717   1.1     agc 		(void) memset(password, '*', PasswordLength);
    718   1.1     agc 		if (up->u_password != (char *) NULL) {
    719   1.2  simonb 			warnx("Password `%s' is invalid: setting it to `%s'",
    720   1.9     agc 				up->u_password, password);
    721   1.1     agc 		}
    722   1.1     agc 	}
    723   1.2  simonb 	cc = snprintf(buf, sizeof(buf), "%s:%s:%d:%d::%d:%ld:%s:%s:%s\n",
    724   1.1     agc 			login,
    725   1.1     agc 			password,
    726   1.1     agc 			up->u_uid,
    727   1.1     agc 			gid,
    728   1.1     agc 			up->u_inactive,
    729   1.9     agc 			(long) expire,
    730   1.1     agc 			up->u_comment,
    731   1.1     agc 			home,
    732   1.1     agc 			up->u_shell);
    733   1.1     agc 	if (write(ptmpfd, buf, (size_t) cc) != cc) {
    734   1.1     agc 		(void) close(ptmpfd);
    735   1.1     agc 		(void) pw_abort();
    736   1.1     agc 		err(EXIT_FAILURE, "can't add `%s'", buf);
    737   1.1     agc 	}
    738   1.1     agc 	if (up->u_mkdir) {
    739   1.1     agc 		if (lstat(home, &st) < 0 && asystem("%s -p %s", MKDIR, home) != 0) {
    740   1.1     agc 			(void) close(ptmpfd);
    741   1.1     agc 			(void) pw_abort();
    742   1.1     agc 			err(EXIT_FAILURE, "can't mkdir `%s'", home);
    743   1.1     agc 		}
    744   1.1     agc 		(void) copydotfiles(up->u_skeldir, up->u_uid, gid, home);
    745   1.1     agc 	}
    746   1.1     agc 	if (strcmp(up->u_primgrp, "=uid") == 0 &&
    747   1.1     agc 	    getgrnam(login) == (struct group *) NULL &&
    748   1.1     agc 	    !creategid(login, gid, login)) {
    749   1.1     agc 		(void) close(ptmpfd);
    750   1.1     agc 		(void) pw_abort();
    751   1.1     agc 		err(EXIT_FAILURE, "can't create gid %d for login name %s", gid, login);
    752   1.1     agc 	}
    753   1.1     agc 	(void) close(ptmpfd);
    754   1.1     agc 	if (pw_mkdb() < 0) {
    755   1.1     agc 		err(EXIT_FAILURE, "pw_mkdb failed");
    756   1.1     agc 	}
    757   1.1     agc 	return 1;
    758   1.1     agc }
    759   1.1     agc 
    760   1.1     agc /* modify a user */
    761   1.1     agc static int
    762   1.1     agc moduser(char *login, char *newlogin, user_t *up)
    763   1.1     agc {
    764   1.1     agc 	struct passwd	*pwp;
    765   1.1     agc 	struct group	*grp;
    766   1.1     agc 	struct tm	tm;
    767   1.1     agc 	time_t		expire;
    768   1.1     agc 	size_t		loginc;
    769   1.1     agc 	size_t		colonc;
    770   1.1     agc 	FILE		*master;
    771   1.1     agc 	char		password[PasswordLength + 1];
    772   1.1     agc 	char		oldhome[MaxFileNameLen];
    773   1.1     agc 	char		home[MaxFileNameLen];
    774   1.1     agc 	char		buf[MaxFileNameLen];
    775   1.1     agc 	char		*colon;
    776   1.1     agc 	int		masterfd;
    777   1.1     agc 	int		ptmpfd;
    778   1.1     agc 	int		gid;
    779   1.1     agc 	int		cc;
    780   1.1     agc 
    781   1.1     agc 	if (!valid_login(newlogin)) {
    782   1.1     agc 		errx(EXIT_FAILURE, "`%s' is not a valid login name", login);
    783   1.1     agc 	}
    784   1.1     agc 	if ((pwp = getpwnam(login)) == (struct passwd *) NULL) {
    785  1.10     agc 		errx(EXIT_FAILURE, "No such user `%s'", login);
    786   1.1     agc 	}
    787   1.1     agc 	if ((masterfd = open(MASTER, O_RDONLY)) < 0) {
    788   1.1     agc 		err(EXIT_FAILURE, "can't open `%s'", MASTER);
    789   1.1     agc 	}
    790   1.1     agc 	if (flock(masterfd, LOCK_EX | LOCK_NB) < 0) {
    791   1.1     agc 		err(EXIT_FAILURE, "can't lock `%s'", MASTER);
    792   1.1     agc 	}
    793   1.1     agc 	pw_init();
    794   1.1     agc 	if ((ptmpfd = pw_lock(WAITSECS)) < 0) {
    795   1.1     agc 		(void) close(masterfd);
    796   1.1     agc 		err(EXIT_FAILURE, "can't obtain pw_lock");
    797   1.1     agc 	}
    798   1.1     agc 	if ((master = fdopen(masterfd, "r")) == (FILE *) NULL) {
    799   1.1     agc 		(void) close(masterfd);
    800   1.1     agc 		(void) close(ptmpfd);
    801   1.1     agc 		(void) pw_abort();
    802   1.1     agc 		err(EXIT_FAILURE, "can't fdopen fd for %s", MASTER);
    803   1.1     agc 	}
    804   1.1     agc 	if (up != (user_t *) NULL) {
    805   1.1     agc 		if (up->u_mkdir) {
    806   1.1     agc 			(void) strcpy(oldhome, pwp->pw_dir);
    807   1.1     agc 		}
    808   1.1     agc 		if (up->u_uid == -1) {
    809   1.1     agc 			up->u_uid = pwp->pw_uid;
    810   1.1     agc 		}
    811   1.1     agc 		/* if -g=uid was specified, check gid is unused */
    812   1.1     agc 		if (strcmp(up->u_primgrp, "=uid") == 0) {
    813   1.1     agc 			if (getgrgid((gid_t)(up->u_uid)) != (struct group *) NULL) {
    814   1.1     agc 				(void) close(ptmpfd);
    815   1.1     agc 				(void) pw_abort();
    816   1.1     agc 				errx(EXIT_FAILURE, "gid %d is already in use", up->u_uid);
    817   1.1     agc 			}
    818   1.1     agc 			gid = up->u_uid;
    819   1.1     agc 		} else if ((grp = getgrnam(up->u_primgrp)) != (struct group *) NULL) {
    820   1.1     agc 			gid = grp->gr_gid;
    821   1.9     agc 		} else if (is_number(up->u_primgrp) &&
    822   1.9     agc 			   (grp = getgrgid((gid_t)atoi(up->u_primgrp))) != (struct group *) NULL) {
    823   1.1     agc 			gid = grp->gr_gid;
    824   1.1     agc 		} else {
    825   1.1     agc 			(void) close(ptmpfd);
    826   1.1     agc 			(void) pw_abort();
    827   1.1     agc 			errx(EXIT_FAILURE, "group %s not found", up->u_primgrp);
    828   1.1     agc 		}
    829   1.1     agc 		/* if changing name, check new name isn't already in use */
    830   1.1     agc 		if (strcmp(login, newlogin) != 0 && getpwnam(newlogin) != (struct passwd *) NULL) {
    831   1.1     agc 			(void) close(ptmpfd);
    832   1.1     agc 			(void) pw_abort();
    833   1.1     agc 			errx(EXIT_FAILURE, "already a `%s' user", newlogin);
    834   1.1     agc 		}
    835   1.1     agc 		/* if home directory hasn't been given, use the old one */
    836   1.1     agc 		if (!up->u_homeset) {
    837   1.1     agc 			(void) strcpy(home, pwp->pw_dir);
    838   1.1     agc 		}
    839   1.1     agc 		expire = 0;
    840   1.1     agc 		if (up->u_expire != (char *) NULL) {
    841   1.1     agc 			(void) memset(&tm, 0, sizeof(tm));
    842   1.1     agc 			if (strptime(up->u_expire, "%c", &tm) == (char *) NULL) {
    843   1.1     agc 				warnx("invalid time format `%s'", optarg);
    844   1.1     agc 			} else {
    845   1.1     agc 				expire = mktime(&tm);
    846   1.1     agc 			}
    847   1.1     agc 		}
    848   1.1     agc 		password[PasswordLength] = 0;
    849   1.1     agc 		if (up->u_password != (char *) NULL &&
    850   1.1     agc 		    strlen(up->u_password) == PasswordLength) {
    851   1.1     agc 			(void) memcpy(password, up->u_password, PasswordLength);
    852   1.1     agc 		} else {
    853   1.1     agc 			(void) memcpy(password, pwp->pw_passwd, PasswordLength);
    854   1.1     agc 		}
    855   1.1     agc 		if (strcmp(up->u_comment, DEF_COMMENT) == 0) {
    856   1.1     agc 			memsave(&up->u_comment, pwp->pw_gecos, strlen(pwp->pw_gecos));
    857   1.1     agc 		}
    858   1.1     agc 		if (strcmp(up->u_shell, DEF_SHELL) == 0 && strcmp(pwp->pw_shell, DEF_SHELL) != 0) {
    859   1.1     agc 			memsave(&up->u_comment, pwp->pw_shell, strlen(pwp->pw_shell));
    860   1.1     agc 		}
    861   1.1     agc 	}
    862   1.1     agc 	loginc = strlen(login);
    863   1.1     agc 	while (fgets(buf, sizeof(buf), master) != (char *) NULL) {
    864   1.1     agc 		cc = strlen(buf);
    865   1.1     agc 		if ((colon = strchr(buf, ':')) == (char *) NULL) {
    866   1.1     agc 			warnx("Malformed entry `%s'. Skipping", buf);
    867   1.1     agc 			continue;
    868   1.1     agc 		}
    869   1.1     agc 		colonc = (size_t)(colon - buf);
    870   1.1     agc 		if (strncmp(login, buf, loginc) == 0 && loginc == colonc) {
    871   1.1     agc 			if (up != (user_t *) NULL) {
    872   1.2  simonb 				cc = snprintf(buf, sizeof(buf), "%s:%s:%d:%d::%d:%ld:%s:%s:%s\n",
    873   1.1     agc 					newlogin,
    874   1.1     agc 					password,
    875   1.1     agc 					up->u_uid,
    876   1.1     agc 					gid,
    877   1.1     agc 					up->u_inactive,
    878   1.9     agc 					(long) expire,
    879   1.1     agc 					up->u_comment,
    880   1.1     agc 					home,
    881   1.1     agc 					up->u_shell);
    882   1.1     agc 				if (write(ptmpfd, buf, (size_t) cc) != cc) {
    883   1.1     agc 					(void) close(ptmpfd);
    884   1.1     agc 					(void) pw_abort();
    885   1.1     agc 					err(EXIT_FAILURE, "can't add `%s'", buf);
    886   1.1     agc 				}
    887   1.1     agc 			}
    888   1.1     agc 		} else if (write(ptmpfd, buf, (size_t)(cc)) != cc) {
    889   1.1     agc 			(void) close(masterfd);
    890   1.1     agc 			(void) close(ptmpfd);
    891   1.1     agc 			(void) pw_abort();
    892   1.1     agc 			err(EXIT_FAILURE, "short write to /etc/ptmp (not %d chars)", cc);
    893   1.1     agc 		}
    894   1.1     agc 	}
    895   1.1     agc 	if (up != (user_t *) NULL &&
    896   1.1     agc 	    up->u_mkdir &&
    897   1.1     agc 	    asystem("%s %s %s", MV, oldhome, home) != 0) {
    898   1.1     agc 		(void) close(ptmpfd);
    899   1.1     agc 		(void) pw_abort();
    900   1.1     agc 		err(EXIT_FAILURE, "can't move `%s' to `%s'", oldhome, home);
    901   1.1     agc 	}
    902   1.1     agc 	(void) close(ptmpfd);
    903   1.1     agc 	if (pw_mkdb() < 0) {
    904   1.1     agc 		err(EXIT_FAILURE, "pw_mkdb failed");
    905   1.1     agc 	}
    906   1.1     agc 	return 1;
    907   1.1     agc }
    908   1.1     agc 
    909   1.9     agc 
    910   1.9     agc #ifdef EXTENSIONS
    911   1.9     agc /* see if we can find out the user struct */
    912   1.9     agc static struct passwd *
    913   1.9     agc find_user_info(char *name)
    914   1.9     agc {
    915   1.9     agc 	struct passwd	*pwp;
    916   1.9     agc 
    917   1.9     agc 	if ((pwp = getpwnam(name)) != (struct passwd *) NULL) {
    918   1.9     agc 		return pwp;
    919   1.9     agc 	}
    920   1.9     agc 	if (is_number(name) && (pwp = getpwuid((uid_t)atoi(name))) != (struct passwd *) NULL) {
    921   1.9     agc 		return pwp;
    922   1.9     agc 	}
    923   1.9     agc 	return (struct passwd *) NULL;
    924   1.9     agc }
    925   1.9     agc #endif
    926   1.9     agc 
    927   1.9     agc #ifdef EXTENSIONS
    928   1.9     agc /* see if we can find out the group struct */
    929   1.9     agc static struct group *
    930   1.9     agc find_group_info(char *name)
    931   1.9     agc {
    932   1.9     agc 	struct group	*grp;
    933   1.9     agc 
    934   1.9     agc 	if ((grp = getgrnam(name)) != (struct group *) NULL) {
    935   1.9     agc 		return grp;
    936   1.9     agc 	}
    937   1.9     agc 	if (is_number(name) && (grp = getgrgid((gid_t)atoi(name))) != (struct group *) NULL) {
    938   1.9     agc 		return grp;
    939   1.9     agc 	}
    940   1.9     agc 	return (struct group *) NULL;
    941   1.9     agc }
    942   1.9     agc #endif
    943   1.9     agc 
    944   1.1     agc /* print out usage message, and then exit */
    945   1.9     agc void
    946   1.9     agc usermgmt_usage(char *prog)
    947   1.1     agc {
    948   1.1     agc 	if (strcmp(prog, "useradd") == 0) {
    949  1.10     agc 		(void) fprintf(stderr, "Usage: %s -D [-b basedir] [-e expiry] [-f inactive] [-g group] [-r lowuid..highuid] [-s shell]\n", prog);
    950  1.10     agc 		(void) fprintf(stderr, "Usage: %s [-G group] [-b basedir] [-c comment] [-d homedir] [-e expiry] [-f inactive]\n\t[-g group] [-k skeletondir] [-m] [-o] [-p password] [-r lowuid..highuid] [-s shell]\n\t[-u uid] [-v] user\n", prog);
    951   1.9     agc 	} else if (strcmp(prog, "usermod") == 0) {
    952   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-G group] [-c comment] [-d homedir] [-e expire] [-f inactive] [-g group] [-l newname] [-m] [-o] [-p password] [-s shell] [-u uid] [-v] user\n", prog);
    953   1.7   lukem 	} else if (strcmp(prog, "userdel") == 0) {
    954   1.9     agc 		(void) fprintf(stderr, "Usage: %s -D [-p preserve]\n", prog);
    955   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-p preserve] [-r] [-v] user\n", prog);
    956   1.9     agc #ifdef EXTENSIONS
    957   1.9     agc 	} else if (strcmp(prog, "userinfo") == 0) {
    958   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-e] [-v] user\n", prog);
    959   1.9     agc #endif
    960   1.1     agc 	} else if (strcmp(prog, "groupadd") == 0) {
    961   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-g gid] [-o] [-v] group\n", prog);
    962   1.1     agc 	} else if (strcmp(prog, "groupdel") == 0) {
    963   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-v] group\n", prog);
    964   1.1     agc 	} else if (strcmp(prog, "groupmod") == 0) {
    965   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-g gid] [-o] [-n newname] [-v] group\n", prog);
    966   1.9     agc 	} else if (strcmp(prog, "user") == 0 || strcmp(prog, "group") == 0) {
    967   1.9     agc 		(void) fprintf(stderr, "Usage: %s ( add | del | mod ) ...\n", prog);
    968   1.9     agc #ifdef EXTENSIONS
    969   1.9     agc 	} else if (strcmp(prog, "groupinfo") == 0) {
    970   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-e] [-v] group\n", prog);
    971   1.9     agc #endif
    972   1.1     agc 	}
    973   1.1     agc 	exit(EXIT_FAILURE);
    974   1.1     agc 	/* NOTREACHED */
    975   1.1     agc }
    976   1.1     agc 
    977   1.1     agc extern int	optind;
    978   1.1     agc extern char	*optarg;
    979   1.1     agc 
    980   1.1     agc #ifdef EXTENSIONS
    981   1.1     agc #define ADD_OPT_EXTENSIONS	"p:r:v"
    982   1.1     agc #else
    983   1.1     agc #define ADD_OPT_EXTENSIONS
    984   1.1     agc #endif
    985   1.1     agc 
    986   1.9     agc int
    987   1.1     agc useradd(int argc, char **argv)
    988   1.1     agc {
    989   1.1     agc 	user_t	u;
    990   1.1     agc 	int	defaultfield;
    991   1.1     agc 	int	bigD;
    992   1.1     agc 	int	c;
    993   1.1     agc 	int	i;
    994   1.1     agc 
    995   1.1     agc 	(void) memset(&u, 0, sizeof(u));
    996   1.1     agc 	read_defaults(&u);
    997   1.1     agc 	u.u_uid = -1;
    998   1.1     agc 	defaultfield = bigD = 0;
    999   1.1     agc 	while ((c = getopt(argc, argv, "DG:b:c:d:e:f:g:k:mou:s:" ADD_OPT_EXTENSIONS)) != -1) {
   1000   1.1     agc 		switch(c) {
   1001   1.1     agc 		case 'D':
   1002   1.1     agc 			bigD = 1;
   1003   1.1     agc 			break;
   1004   1.1     agc 		case 'G':
   1005   1.1     agc 			memsave(&u.u_groupv[u.u_groupc++], optarg, strlen(optarg));
   1006   1.1     agc 			break;
   1007   1.1     agc 		case 'b':
   1008   1.1     agc 			defaultfield = 1;
   1009   1.1     agc 			memsave(&u.u_basedir, optarg, strlen(optarg));
   1010   1.1     agc 			break;
   1011   1.1     agc 		case 'c':
   1012   1.1     agc 			memsave(&u.u_comment, optarg, strlen(optarg));
   1013   1.1     agc 			break;
   1014   1.1     agc 		case 'd':
   1015   1.1     agc 			u.u_homeset = 1;
   1016   1.1     agc 			memsave(&u.u_home, optarg, strlen(optarg));
   1017   1.1     agc 			break;
   1018   1.1     agc 		case 'e':
   1019   1.1     agc 			defaultfield = 1;
   1020   1.1     agc 			memsave(&u.u_expire, optarg, strlen(optarg));
   1021   1.1     agc 			break;
   1022   1.1     agc 		case 'f':
   1023   1.1     agc 			defaultfield = 1;
   1024   1.1     agc 			u.u_inactive = atoi(optarg);
   1025   1.1     agc 			break;
   1026   1.1     agc 		case 'g':
   1027   1.1     agc 			defaultfield = 1;
   1028   1.1     agc 			memsave(&u.u_primgrp, optarg, strlen(optarg));
   1029   1.1     agc 			break;
   1030   1.1     agc 		case 'k':
   1031   1.1     agc 			memsave(&u.u_skeldir, optarg, strlen(optarg));
   1032   1.1     agc 			break;
   1033   1.1     agc 		case 'm':
   1034   1.1     agc 			u.u_mkdir = 1;
   1035   1.1     agc 			break;
   1036   1.1     agc 		case 'o':
   1037   1.1     agc 			u.u_dupuid = 1;
   1038   1.1     agc 			break;
   1039   1.1     agc #ifdef EXTENSIONS
   1040   1.1     agc 		case 'p':
   1041   1.1     agc 			memsave(&u.u_password, optarg, strlen(optarg));
   1042   1.1     agc 			break;
   1043   1.1     agc #endif
   1044   1.1     agc #ifdef EXTENSIONS
   1045   1.1     agc 		case 'r':
   1046   1.1     agc 			defaultfield = 1;
   1047   1.1     agc 			(void) save_range(&u, optarg);
   1048   1.1     agc 			break;
   1049   1.1     agc #endif
   1050   1.1     agc 		case 's':
   1051   1.1     agc 			defaultfield = 1;
   1052   1.1     agc 			memsave(&u.u_shell, optarg, strlen(optarg));
   1053   1.1     agc 			break;
   1054   1.1     agc 		case 'u':
   1055   1.9     agc 			if (!is_number(optarg)) {
   1056   1.9     agc 				errx(EXIT_FAILURE, "When using [-u uid], the uid must be numeric");
   1057   1.9     agc 			}
   1058   1.1     agc 			u.u_uid = atoi(optarg);
   1059   1.1     agc 			break;
   1060   1.1     agc #ifdef EXTENSIONS
   1061   1.1     agc 		case 'v':
   1062   1.1     agc 			verbose = 1;
   1063   1.1     agc 			break;
   1064   1.1     agc #endif
   1065   1.1     agc 		}
   1066   1.1     agc 	}
   1067   1.1     agc 	if (bigD) {
   1068   1.1     agc 		if (defaultfield) {
   1069   1.9     agc 			checkeuid();
   1070   1.1     agc 			return setdefaults(&u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1071   1.1     agc 		}
   1072   1.1     agc 		(void) printf("group\t\t%s\n", u.u_primgrp);
   1073   1.1     agc 		(void) printf("base_dir\t%s\n", u.u_basedir);
   1074   1.1     agc 		(void) printf("skel_dir\t%s\n", u.u_skeldir);
   1075   1.1     agc 		(void) printf("shell\t\t%s\n", u.u_shell);
   1076   1.1     agc 		(void) printf("inactive\t%d\n", u.u_inactive);
   1077   1.1     agc 		(void) printf("expire\t\t%s\n", (u.u_expire == (char *) NULL) ? UNSET_EXPIRY : u.u_expire);
   1078   1.1     agc #ifdef EXTENSIONS
   1079   1.1     agc 		for (i = 0 ; i < u.u_rc ; i++) {
   1080   1.1     agc 			(void) printf("range\t\t%d..%d\n", u.u_rv[i].r_from, u.u_rv[i].r_to);
   1081   1.1     agc 		}
   1082   1.1     agc #endif
   1083   1.1     agc 		return EXIT_SUCCESS;
   1084   1.1     agc 	}
   1085   1.1     agc 	if (argc == optind) {
   1086   1.9     agc 		usermgmt_usage("useradd");
   1087   1.1     agc 	}
   1088   1.9     agc 	checkeuid();
   1089   1.1     agc 	return adduser(argv[optind], &u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1090   1.1     agc }
   1091   1.1     agc 
   1092   1.1     agc #ifdef EXTENSIONS
   1093   1.1     agc #define MOD_OPT_EXTENSIONS	"p:v"
   1094   1.1     agc #else
   1095   1.1     agc #define MOD_OPT_EXTENSIONS
   1096   1.1     agc #endif
   1097   1.1     agc 
   1098   1.9     agc int
   1099   1.1     agc usermod(int argc, char **argv)
   1100   1.1     agc {
   1101   1.1     agc 	user_t	u;
   1102   1.1     agc 	char	newuser[MaxUserNameLen + 1];
   1103   1.1     agc 	int	have_new_user;
   1104   1.1     agc 	int	c;
   1105   1.1     agc 
   1106   1.9     agc 	checkeuid();
   1107   1.1     agc 	(void) memset(&u, 0, sizeof(u));
   1108   1.1     agc 	(void) memset(newuser, 0, sizeof(newuser));
   1109   1.1     agc 	read_defaults(&u);
   1110   1.1     agc 	u.u_uid = -1;
   1111   1.1     agc 	have_new_user = 0;
   1112   1.1     agc 	while ((c = getopt(argc, argv, "G:c:d:e:f:g:l:mos:u:" MOD_OPT_EXTENSIONS)) != -1) {
   1113   1.1     agc 		switch(c) {
   1114   1.1     agc 		case 'G':
   1115   1.1     agc 			memsave(&u.u_groupv[u.u_groupc++], optarg, strlen(optarg));
   1116   1.1     agc 			break;
   1117   1.1     agc 		case 'c':
   1118   1.1     agc 			memsave(&u.u_comment, optarg, strlen(optarg));
   1119   1.1     agc 			break;
   1120   1.1     agc 		case 'd':
   1121   1.1     agc 			u.u_homeset = 1;
   1122   1.1     agc 			memsave(&u.u_home, optarg, strlen(optarg));
   1123   1.1     agc 			break;
   1124   1.1     agc 		case 'e':
   1125   1.1     agc 			memsave(&u.u_expire, optarg, strlen(optarg));
   1126   1.1     agc 			break;
   1127   1.1     agc 		case 'f':
   1128   1.1     agc 			u.u_inactive = atoi(optarg);
   1129   1.1     agc 			break;
   1130   1.1     agc 		case 'g':
   1131   1.1     agc 			memsave(&u.u_primgrp, optarg, strlen(optarg));
   1132   1.1     agc 			break;
   1133   1.1     agc 		case 'l':
   1134   1.1     agc 			have_new_user = 1;
   1135   1.5   lukem 			(void) strlcpy(newuser, optarg, sizeof(newuser));
   1136   1.1     agc 			break;
   1137   1.1     agc 		case 'm':
   1138   1.1     agc 			u.u_mkdir = 1;
   1139   1.1     agc 			break;
   1140   1.1     agc 		case 'o':
   1141   1.1     agc 			u.u_dupuid = 1;
   1142   1.1     agc 			break;
   1143   1.1     agc #ifdef EXTENSIONS
   1144   1.1     agc 		case 'p':
   1145   1.1     agc 			memsave(&u.u_password, optarg, strlen(optarg));
   1146   1.1     agc 			break;
   1147   1.1     agc #endif
   1148   1.1     agc 		case 's':
   1149   1.1     agc 			memsave(&u.u_shell, optarg, strlen(optarg));
   1150   1.1     agc 			break;
   1151   1.1     agc 		case 'u':
   1152   1.9     agc 			if (!is_number(optarg)) {
   1153   1.9     agc 				errx(EXIT_FAILURE, "When using [-u uid], the uid must be numeric");
   1154   1.9     agc 			}
   1155   1.1     agc 			u.u_uid = atoi(optarg);
   1156   1.1     agc 			break;
   1157   1.1     agc #ifdef EXTENSIONS
   1158   1.1     agc 		case 'v':
   1159   1.1     agc 			verbose = 1;
   1160   1.1     agc 			break;
   1161   1.1     agc #endif
   1162   1.1     agc 		}
   1163   1.1     agc 	}
   1164   1.1     agc 	if (argc == optind) {
   1165   1.9     agc 		usermgmt_usage("usermod");
   1166   1.1     agc 	}
   1167   1.1     agc 	return moduser(argv[optind], (have_new_user) ? newuser : argv[optind], &u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1168   1.1     agc }
   1169   1.1     agc 
   1170   1.1     agc #ifdef EXTENSIONS
   1171   1.1     agc #define DEL_OPT_EXTENSIONS	"Dp:v"
   1172   1.1     agc #else
   1173   1.1     agc #define DEL_OPT_EXTENSIONS
   1174   1.1     agc #endif
   1175   1.1     agc 
   1176   1.9     agc int
   1177   1.1     agc userdel(int argc, char **argv)
   1178   1.1     agc {
   1179   1.1     agc 	struct passwd	*pwp;
   1180   1.1     agc 	struct stat	st;
   1181   1.1     agc 	user_t		u;
   1182   1.1     agc 	char		password[PasswordLength + 1];
   1183   1.1     agc 	int		defaultfield;
   1184   1.1     agc 	int		rmhome;
   1185   1.1     agc 	int		bigD;
   1186   1.1     agc 	int		c;
   1187   1.1     agc 
   1188   1.9     agc 	if (geteuid() != 0) {
   1189   1.9     agc 		errx(EXIT_FAILURE, "Program must be run as root");
   1190   1.9     agc 	}
   1191   1.1     agc 	(void) memset(&u, 0, sizeof(u));
   1192   1.1     agc 	read_defaults(&u);
   1193   1.1     agc 	defaultfield = bigD = rmhome = 0;
   1194   1.1     agc 	while ((c = getopt(argc, argv, "r" DEL_OPT_EXTENSIONS)) != -1) {
   1195   1.1     agc 		switch(c) {
   1196   1.1     agc #ifdef EXTENSIONS
   1197   1.1     agc 		case 'D':
   1198   1.1     agc 			bigD = 1;
   1199   1.1     agc 			break;
   1200   1.1     agc #endif
   1201   1.1     agc #ifdef EXTENSIONS
   1202   1.1     agc 		case 'p':
   1203   1.1     agc 			defaultfield = 1;
   1204   1.1     agc 			u.u_preserve = (strcmp(optarg, "true") == 0) ? 1 :
   1205   1.1     agc 					(strcmp(optarg, "yes") == 0) ? 1 :
   1206   1.1     agc 					 atoi(optarg);
   1207   1.1     agc 			break;
   1208   1.1     agc #endif
   1209   1.1     agc 		case 'r':
   1210   1.1     agc 			rmhome = 1;
   1211   1.1     agc 			break;
   1212   1.1     agc #ifdef EXTENSIONS
   1213   1.1     agc 		case 'v':
   1214   1.1     agc 			verbose = 1;
   1215   1.1     agc 			break;
   1216   1.1     agc #endif
   1217   1.1     agc 		}
   1218   1.1     agc 	}
   1219   1.1     agc #ifdef EXTENSIONS
   1220   1.1     agc 	if (bigD) {
   1221   1.1     agc 		if (defaultfield) {
   1222   1.9     agc 			checkeuid();
   1223   1.1     agc 			return setdefaults(&u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1224   1.1     agc 		}
   1225   1.1     agc 		(void) printf("preserve\t%s\n", (u.u_preserve) ? "true" : "false");
   1226   1.1     agc 		return EXIT_SUCCESS;
   1227   1.1     agc 	}
   1228   1.1     agc #endif
   1229   1.1     agc 	if (argc == optind) {
   1230   1.9     agc 		usermgmt_usage("userdel");
   1231   1.1     agc 	}
   1232   1.9     agc 	checkeuid();
   1233   1.1     agc 	if ((pwp = getpwnam(argv[optind])) == (struct passwd *) NULL) {
   1234  1.10     agc 		warnx("No such user `%s'", argv[optind]);
   1235   1.1     agc 		return EXIT_FAILURE;
   1236   1.1     agc 	}
   1237   1.1     agc 	if (rmhome) {
   1238   1.1     agc 		if (stat(pwp->pw_dir, &st) < 0) {
   1239   1.1     agc 			warn("Home directory `%s' does not exist", pwp->pw_dir);
   1240   1.1     agc 			return EXIT_FAILURE;
   1241   1.1     agc 		}
   1242   1.1     agc 		(void) asystem("%s -rf %s", RM, pwp->pw_dir);
   1243   1.1     agc 	}
   1244   1.1     agc 	if (u.u_preserve) {
   1245  1.10     agc 		memsave(&u.u_shell, NOLOGIN, strlen(NOLOGIN));
   1246   1.1     agc 		(void) memset(password, '*', PasswordLength);
   1247   1.1     agc 		password[PasswordLength] = 0;
   1248   1.1     agc 		memsave(&u.u_password, password, PasswordLength);
   1249   1.1     agc 		return moduser(argv[optind], argv[optind], &u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1250   1.1     agc 	}
   1251   1.1     agc 	return moduser(argv[optind], argv[optind], (user_t *) NULL) ? EXIT_SUCCESS : EXIT_FAILURE;
   1252   1.1     agc }
   1253   1.1     agc 
   1254   1.1     agc #ifdef EXTENSIONS
   1255   1.1     agc #define GROUP_ADD_OPT_EXTENSIONS	"v"
   1256   1.1     agc #else
   1257   1.1     agc #define GROUP_ADD_OPT_EXTENSIONS
   1258   1.1     agc #endif
   1259   1.1     agc 
   1260   1.1     agc /* add a group */
   1261   1.1     agc int
   1262   1.1     agc groupadd(int argc, char **argv)
   1263   1.1     agc {
   1264   1.1     agc 	int	dupgid;
   1265   1.1     agc 	int	gid;
   1266   1.1     agc 	int	c;
   1267   1.1     agc 
   1268   1.9     agc 	checkeuid();
   1269   1.1     agc 	gid = -1;
   1270   1.1     agc 	dupgid = 0;
   1271   1.1     agc 	while ((c = getopt(argc, argv, "g:o" GROUP_ADD_OPT_EXTENSIONS)) != -1) {
   1272   1.1     agc 		switch(c) {
   1273   1.1     agc 		case 'g':
   1274   1.9     agc 			if (!is_number(optarg)) {
   1275   1.9     agc 				errx(EXIT_FAILURE, "When using [-g gid], the gid must be numeric");
   1276   1.9     agc 			}
   1277   1.1     agc 			gid = atoi(optarg);
   1278   1.1     agc 			break;
   1279   1.1     agc 		case 'o':
   1280   1.1     agc 			dupgid = 1;
   1281   1.1     agc 			break;
   1282   1.1     agc #ifdef EXTENSIONS
   1283   1.1     agc 		case 'v':
   1284   1.1     agc 			verbose = 1;
   1285   1.1     agc 			break;
   1286   1.1     agc #endif
   1287   1.1     agc 		}
   1288   1.1     agc 	}
   1289   1.1     agc 	if (argc == optind) {
   1290   1.9     agc 		usermgmt_usage("groupadd");
   1291   1.1     agc 	}
   1292   1.1     agc 	if (gid < 0 && !getnextgid(&gid, LowGid, HighGid)) {
   1293   1.1     agc 		err(EXIT_FAILURE, "can't add group: can't get next gid");
   1294   1.1     agc 	}
   1295   1.1     agc 	if (!dupgid && getgrgid((gid_t) gid) != (struct group *) NULL) {
   1296   1.9     agc 		errx(EXIT_FAILURE, "can't add group: gid %d is a duplicate", gid);
   1297   1.1     agc 	}
   1298   1.1     agc 	if (!valid_group(argv[optind])) {
   1299   1.9     agc 		warnx("warning - invalid group name `%s'", argv[optind]);
   1300   1.1     agc 	}
   1301   1.1     agc 	if (!creategid(argv[optind], gid, "")) {
   1302   1.1     agc 		err(EXIT_FAILURE, "can't add group: problems with %s file", ETCGROUP);
   1303   1.1     agc 	}
   1304   1.1     agc 	return EXIT_SUCCESS;
   1305   1.1     agc }
   1306   1.1     agc 
   1307   1.1     agc #ifdef EXTENSIONS
   1308   1.1     agc #define GROUP_DEL_OPT_EXTENSIONS	"v"
   1309   1.1     agc #else
   1310   1.1     agc #define GROUP_DEL_OPT_EXTENSIONS
   1311   1.1     agc #endif
   1312   1.1     agc 
   1313   1.1     agc /* remove a group */
   1314   1.1     agc int
   1315   1.1     agc groupdel(int argc, char **argv)
   1316   1.1     agc {
   1317   1.1     agc 	int	c;
   1318   1.1     agc 
   1319   1.9     agc 	checkeuid();
   1320   1.1     agc 	while ((c = getopt(argc, argv, "" GROUP_DEL_OPT_EXTENSIONS)) != -1) {
   1321   1.1     agc 		switch(c) {
   1322   1.1     agc #ifdef EXTENSIONS
   1323   1.1     agc 		case 'v':
   1324   1.1     agc 			verbose = 1;
   1325   1.1     agc 			break;
   1326   1.1     agc #endif
   1327   1.1     agc 		}
   1328   1.1     agc 	}
   1329   1.1     agc 	if (argc == optind) {
   1330   1.9     agc 		usermgmt_usage("groupdel");
   1331   1.1     agc 	}
   1332   1.1     agc 	if (!modify_gid(argv[optind], (char *) NULL)) {
   1333   1.1     agc 		err(EXIT_FAILURE, "can't change %s file", ETCGROUP);
   1334   1.1     agc 	}
   1335   1.1     agc 	return EXIT_SUCCESS;
   1336   1.1     agc }
   1337   1.1     agc 
   1338   1.1     agc #ifdef EXTENSIONS
   1339   1.1     agc #define GROUP_MOD_OPT_EXTENSIONS	"v"
   1340   1.1     agc #else
   1341   1.1     agc #define GROUP_MOD_OPT_EXTENSIONS
   1342   1.1     agc #endif
   1343   1.1     agc 
   1344   1.1     agc /* modify a group */
   1345   1.1     agc int
   1346   1.1     agc groupmod(int argc, char **argv)
   1347   1.1     agc {
   1348   1.1     agc 	struct group	*grp;
   1349   1.1     agc 	char		buf[MaxEntryLen];
   1350   1.1     agc 	char		*newname;
   1351   1.1     agc 	char		**cpp;
   1352   1.1     agc 	int		dupgid;
   1353   1.1     agc 	int		gid;
   1354   1.1     agc 	int		cc;
   1355   1.1     agc 	int		c;
   1356   1.1     agc 
   1357   1.9     agc 	checkeuid();
   1358   1.1     agc 	gid = -1;
   1359   1.1     agc 	dupgid = 0;
   1360   1.1     agc 	newname = (char *) NULL;
   1361   1.1     agc 	while ((c = getopt(argc, argv, "g:on:" GROUP_MOD_OPT_EXTENSIONS)) != -1) {
   1362   1.1     agc 		switch(c) {
   1363   1.1     agc 		case 'g':
   1364   1.9     agc 			if (!is_number(optarg)) {
   1365   1.9     agc 				errx(EXIT_FAILURE, "When using [-g gid], the gid must be numeric");
   1366   1.9     agc 			}
   1367   1.1     agc 			gid = atoi(optarg);
   1368   1.1     agc 			break;
   1369   1.1     agc 		case 'o':
   1370   1.1     agc 			dupgid = 1;
   1371   1.1     agc 			break;
   1372   1.1     agc 		case 'n':
   1373   1.1     agc 			memsave(&newname, optarg, strlen(optarg));
   1374   1.1     agc 			break;
   1375   1.1     agc #ifdef EXTENSIONS
   1376   1.1     agc 		case 'v':
   1377   1.1     agc 			verbose = 1;
   1378   1.1     agc 			break;
   1379   1.1     agc #endif
   1380   1.1     agc 		}
   1381   1.1     agc 	}
   1382   1.1     agc 	if (argc == optind) {
   1383   1.9     agc 		usermgmt_usage("groupmod");
   1384   1.1     agc 	}
   1385   1.1     agc 	if (gid < 0 && newname == (char *) NULL) {
   1386   1.1     agc 		err(EXIT_FAILURE, "Nothing to change");
   1387   1.1     agc 	}
   1388   1.1     agc 	if (dupgid && gid < 0) {
   1389   1.1     agc 		err(EXIT_FAILURE, "Duplicate which gid?");
   1390   1.1     agc 	}
   1391   1.1     agc 	if ((grp = getgrnam(argv[optind])) == (struct group *) NULL) {
   1392   1.1     agc 		err(EXIT_FAILURE, "can't find group `%s' to modify", argv[optind]);
   1393   1.1     agc 	}
   1394   1.1     agc 	if (newname != (char *) NULL && !valid_group(newname)) {
   1395   1.1     agc 		warn("warning - invalid group name `%s'", newname);
   1396   1.1     agc 	}
   1397   1.1     agc 	cc = snprintf(buf, sizeof(buf), "%s:%s:%d:",
   1398   1.1     agc 			(newname) ? newname : grp->gr_name,
   1399   1.1     agc 			grp->gr_passwd,
   1400   1.1     agc 			(gid < 0) ? grp->gr_gid : gid);
   1401   1.1     agc 	for (cpp = grp->gr_mem ; *cpp && cc < sizeof(buf) ; cpp++) {
   1402   1.1     agc 		cc += snprintf(&buf[cc], sizeof(buf) - cc, "%s%s", *cpp,
   1403   1.1     agc 			(cpp[1] == (char *) NULL) ? "" : ",");
   1404   1.1     agc 	}
   1405   1.1     agc 	if (!modify_gid(argv[optind], buf)) {
   1406   1.1     agc 		err(EXIT_FAILURE, "can't change %s file", ETCGROUP);
   1407   1.1     agc 	}
   1408   1.1     agc 	return EXIT_SUCCESS;
   1409   1.1     agc }
   1410   1.1     agc 
   1411   1.9     agc #ifdef EXTENSIONS
   1412   1.9     agc /* display user information */
   1413   1.9     agc int
   1414   1.9     agc userinfo(int argc, char **argv)
   1415   1.9     agc {
   1416   1.9     agc 	struct passwd	*pwp;
   1417   1.9     agc 	struct group	*grp;
   1418   1.9     agc 	char		buf[MaxEntryLen];
   1419   1.9     agc 	char		**cpp;
   1420   1.9     agc 	int		exists;
   1421   1.9     agc 	int		cc;
   1422   1.9     agc 	int		i;
   1423   1.1     agc 
   1424   1.9     agc 	exists = 0;
   1425   1.9     agc 	while ((i = getopt(argc, argv, "ev")) != -1) {
   1426   1.9     agc 		switch(i) {
   1427   1.9     agc 		case 'e':
   1428   1.9     agc 			exists = 1;
   1429   1.9     agc 			break;
   1430   1.9     agc 		case 'v':
   1431   1.9     agc 			verbose = 1;
   1432   1.9     agc 			break;
   1433   1.9     agc 		}
   1434   1.9     agc 	}
   1435   1.9     agc 	if (argc == optind) {
   1436   1.9     agc 		usermgmt_usage("userinfo");
   1437   1.9     agc 	}
   1438   1.9     agc 	pwp = find_user_info(argv[optind]);
   1439   1.9     agc 	if (exists) {
   1440   1.9     agc 		exit((pwp) ? EXIT_SUCCESS : EXIT_FAILURE);
   1441   1.9     agc 	}
   1442   1.9     agc 	if (pwp == (struct passwd *) NULL) {
   1443   1.9     agc 		errx(EXIT_FAILURE, "can't find user `%s'", argv[optind]);
   1444   1.9     agc 	}
   1445   1.9     agc 	(void) printf("login\t%s\n", pwp->pw_name);
   1446   1.9     agc 	(void) printf("passwd\t%s\n", pwp->pw_passwd);
   1447   1.9     agc 	(void) printf("uid\t%d\n", pwp->pw_uid);
   1448   1.9     agc 	for (cc = 0 ; (grp = getgrent()) != (struct group *) NULL ; ) {
   1449   1.9     agc 		for (cpp = grp->gr_mem ; *cpp ; cpp++) {
   1450   1.9     agc 			if (strcmp(*cpp, argv[optind]) == 0 && grp->gr_gid != pwp->pw_gid) {
   1451   1.9     agc 				cc += snprintf(&buf[cc], sizeof(buf) - cc, "%s ", grp->gr_name);
   1452   1.9     agc 			}
   1453   1.9     agc 		}
   1454   1.9     agc 	}
   1455   1.9     agc 	if ((grp = getgrgid(pwp->pw_gid)) == (struct group *) NULL) {
   1456   1.9     agc 		(void) printf("groups\t%d %s\n", pwp->pw_gid, buf);
   1457   1.9     agc 	} else {
   1458   1.9     agc 		(void) printf("groups\t%s %s\n", grp->gr_name, buf);
   1459   1.9     agc 	}
   1460   1.9     agc 	(void) printf("change\t%s", ctime(&pwp->pw_change));
   1461   1.9     agc 	(void) printf("class\t%s\n", pwp->pw_class);
   1462   1.9     agc 	(void) printf("gecos\t%s\n", pwp->pw_gecos);
   1463   1.9     agc 	(void) printf("dir\t%s\n", pwp->pw_dir);
   1464   1.9     agc 	(void) printf("shell\t%s\n", pwp->pw_shell);
   1465   1.9     agc 	(void) printf("expire\t%s", ctime(&pwp->pw_expire));
   1466   1.9     agc 	return EXIT_SUCCESS;
   1467   1.9     agc }
   1468   1.9     agc #endif
   1469   1.1     agc 
   1470   1.9     agc #ifdef EXTENSIONS
   1471   1.9     agc /* display user information */
   1472   1.1     agc int
   1473   1.9     agc groupinfo(int argc, char **argv)
   1474   1.1     agc {
   1475   1.9     agc 	struct group	*grp;
   1476   1.9     agc 	char		**cpp;
   1477   1.9     agc 	int		exists;
   1478   1.9     agc 	int		i;
   1479   1.1     agc 
   1480   1.9     agc 	exists = 0;
   1481   1.9     agc 	while ((i = getopt(argc, argv, "ev")) != -1) {
   1482   1.9     agc 		switch(i) {
   1483   1.9     agc 		case 'e':
   1484   1.9     agc 			exists = 1;
   1485   1.9     agc 			break;
   1486   1.9     agc 		case 'v':
   1487   1.9     agc 			verbose = 1;
   1488   1.9     agc 			break;
   1489   1.9     agc 		}
   1490   1.9     agc 	}
   1491   1.9     agc 	if (argc == optind) {
   1492   1.9     agc 		usermgmt_usage("groupinfo");
   1493   1.9     agc 	}
   1494   1.9     agc 	grp = find_group_info(argv[optind]);
   1495   1.9     agc 	if (exists) {
   1496   1.9     agc 		exit((grp) ? EXIT_SUCCESS : EXIT_FAILURE);
   1497   1.9     agc 	}
   1498   1.9     agc 	if (grp == (struct group *) NULL) {
   1499   1.9     agc 		errx(EXIT_FAILURE, "can't find group `%s'", argv[optind]);
   1500   1.9     agc 	}
   1501   1.9     agc 	(void) printf("name\t%s\n", grp->gr_name);
   1502   1.9     agc 	(void) printf("passwd\t%s\n", grp->gr_passwd);
   1503   1.9     agc 	(void) printf("gid\t%d\n", grp->gr_gid);
   1504   1.9     agc 	(void) printf("members\t");
   1505   1.9     agc 	for (cpp = grp->gr_mem ; *cpp ; cpp++) {
   1506   1.9     agc 		(void) printf("%s ", *cpp);
   1507   1.9     agc 	}
   1508   1.9     agc 	(void) fputc('\n', stdout);
   1509   1.9     agc 	return EXIT_SUCCESS;
   1510   1.1     agc }
   1511   1.9     agc #endif
   1512