Home | History | Annotate | Line # | Download | only in user
user.c revision 1.13
      1  1.13    jlam /* $NetBSD: user.c,v 1.13 2000/03/12 19:57:24 jlam Exp $ */
      2   1.1     agc 
      3   1.1     agc /*
      4   1.4   lukem  * Copyright (c) 1999 Alistair G. Crooks.  All rights reserved.
      5   1.1     agc  *
      6   1.1     agc  * Redistribution and use in source and binary forms, with or without
      7   1.1     agc  * modification, are permitted provided that the following conditions
      8   1.1     agc  * are met:
      9   1.1     agc  * 1. Redistributions of source code must retain the above copyright
     10   1.1     agc  *    notice, this list of conditions and the following disclaimer.
     11   1.1     agc  * 2. Redistributions in binary form must reproduce the above copyright
     12   1.1     agc  *    notice, this list of conditions and the following disclaimer in the
     13   1.1     agc  *    documentation and/or other materials provided with the distribution.
     14   1.1     agc  * 3. All advertising materials mentioning features or use of this software
     15   1.1     agc  *    must display the following acknowledgement:
     16   1.1     agc  *	This product includes software developed by Alistair G. Crooks.
     17   1.1     agc  * 4. The name of the author may not be used to endorse or promote
     18   1.1     agc  *    products derived from this software without specific prior written
     19   1.1     agc  *    permission.
     20   1.1     agc  *
     21   1.1     agc  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS
     22   1.1     agc  * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
     23   1.1     agc  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     24   1.1     agc  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
     25   1.1     agc  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     26   1.1     agc  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
     27   1.1     agc  * GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     28   1.1     agc  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
     29   1.1     agc  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
     30   1.1     agc  * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
     31   1.1     agc  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     32   1.1     agc  */
     33  1.11     agc #include <sys/cdefs.h>
     34  1.11     agc 
     35  1.11     agc #ifndef lint
     36  1.11     agc __COPYRIGHT(
     37  1.11     agc 	"@(#) Copyright (c) 1999 \
     38  1.11     agc 	        The NetBSD Foundation, Inc.  All rights reserved.");
     39  1.13    jlam __RCSID("$NetBSD: user.c,v 1.13 2000/03/12 19:57:24 jlam Exp $");
     40  1.11     agc #endif
     41  1.11     agc 
     42   1.1     agc #include <sys/types.h>
     43   1.1     agc #include <sys/param.h>
     44   1.1     agc #include <sys/stat.h>
     45   1.1     agc 
     46   1.5   lukem #include <ctype.h>
     47   1.5   lukem #include <dirent.h>
     48   1.5   lukem #include <err.h>
     49   1.5   lukem #include <fcntl.h>
     50   1.5   lukem #include <grp.h>
     51   1.5   lukem #include <pwd.h>
     52   1.5   lukem #include <stdarg.h>
     53   1.1     agc #include <stdio.h>
     54   1.1     agc #include <stdlib.h>
     55   1.1     agc #include <string.h>
     56   1.1     agc #include <time.h>
     57   1.5   lukem #include <unistd.h>
     58   1.1     agc #include <util.h>
     59   1.1     agc 
     60   1.1     agc #include "defs.h"
     61   1.1     agc #include "usermgmt.h"
     62   1.1     agc 
     63   1.9     agc /* this struct describes a uid range */
     64   1.9     agc typedef struct range_t {
     65   1.9     agc 	int	r_from;		/* low uid */
     66   1.9     agc 	int	r_to;		/* high uid */
     67   1.9     agc } range_t;
     68   1.9     agc 
     69   1.9     agc /* this struct encapsulates the user information */
     70   1.9     agc typedef struct user_t {
     71   1.9     agc 	int		u_uid;			/* uid of user */
     72   1.9     agc 	char		*u_password;		/* encrypted password */
     73   1.9     agc 	char		*u_comment;		/* comment field */
     74   1.9     agc 	int		u_homeset;		/* home dir has been set */
     75   1.9     agc 	char		*u_home;		/* home directory */
     76   1.9     agc 	char		*u_primgrp;		/* primary group */
     77   1.9     agc 	int		u_groupc;		/* # of secondary groups */
     78   1.9     agc 	char		*u_groupv[NGROUPS_MAX];	/* secondary groups */
     79   1.9     agc 	char		*u_shell;		/* user's shell */
     80   1.9     agc 	char		*u_basedir;		/* base directory for home */
     81   1.9     agc 	char		*u_expire;		/* when password will expire */
     82   1.9     agc 	int		u_inactive;		/* inactive */
     83   1.9     agc 	int		u_mkdir;		/* make the home directory */
     84   1.9     agc 	int		u_dupuid;		/* duplicate uids are allowed */
     85   1.9     agc 	char		*u_skeldir;		/* directory for startup files */
     86   1.9     agc 	unsigned	u_rsize;		/* size of range array */
     87   1.9     agc 	unsigned	u_rc;			/* # of ranges */
     88   1.9     agc 	range_t		*u_rv;			/* the ranges */
     89   1.9     agc 	unsigned	u_defrc;		/* # of ranges in defaults */
     90   1.9     agc 	int		u_preserve;		/* preserve uids on deletion */
     91   1.9     agc } user_t;
     92   1.9     agc 
     93   1.9     agc #define CONFFILE	"/etc/usermgmt.conf"
     94   1.9     agc 
     95   1.9     agc #ifndef DEF_GROUP
     96   1.9     agc #define DEF_GROUP	"users"
     97   1.9     agc #endif
     98   1.9     agc 
     99   1.9     agc #ifndef DEF_BASEDIR
    100   1.9     agc #define DEF_BASEDIR	"/home"
    101   1.9     agc #endif
    102   1.9     agc 
    103   1.9     agc #ifndef DEF_SKELDIR
    104   1.9     agc #define DEF_SKELDIR	"/etc/skel"
    105   1.9     agc #endif
    106   1.9     agc 
    107   1.9     agc #ifndef DEF_SHELL
    108   1.9     agc #define DEF_SHELL	"/bin/csh"
    109   1.9     agc #endif
    110   1.9     agc 
    111   1.9     agc #ifndef DEF_COMMENT
    112   1.9     agc #define DEF_COMMENT	""
    113   1.9     agc #endif
    114   1.9     agc 
    115   1.9     agc #ifndef DEF_LOWUID
    116   1.9     agc #define DEF_LOWUID	1000
    117   1.9     agc #endif
    118   1.9     agc 
    119   1.9     agc #ifndef DEF_HIGHUID
    120   1.9     agc #define DEF_HIGHUID	60000
    121   1.9     agc #endif
    122   1.9     agc 
    123   1.9     agc #ifndef DEF_INACTIVE
    124   1.9     agc #define DEF_INACTIVE	0
    125   1.9     agc #endif
    126   1.9     agc 
    127   1.9     agc #ifndef DEF_EXPIRE
    128   1.9     agc #define DEF_EXPIRE	(char *) NULL
    129   1.9     agc #endif
    130   1.9     agc 
    131   1.9     agc #ifndef MASTER
    132   1.9     agc #define MASTER		"/etc/master.passwd"
    133   1.9     agc #endif
    134   1.9     agc 
    135   1.9     agc #ifndef ETCGROUP
    136   1.9     agc #define ETCGROUP	"/etc/group"
    137   1.9     agc #endif
    138   1.9     agc 
    139   1.9     agc #ifndef WAITSECS
    140   1.9     agc #define WAITSECS	10
    141   1.9     agc #endif
    142   1.9     agc 
    143   1.9     agc #ifndef NOBODY_UID
    144   1.9     agc #define NOBODY_UID	32767
    145   1.9     agc #endif
    146   1.9     agc 
    147   1.9     agc /* some useful constants */
    148   1.9     agc enum {
    149   1.9     agc 	MaxShellNameLen = 256,
    150   1.9     agc 	MaxFileNameLen = MAXPATHLEN,
    151   1.9     agc 	MaxUserNameLen = 32,
    152   1.9     agc 	MaxFieldNameLen = 32,
    153   1.9     agc 	MaxCommandLen = 2048,
    154   1.9     agc 	MaxEntryLen = 2048,
    155   1.9     agc 	PasswordLength = 13,
    156   1.9     agc 
    157   1.9     agc 	LowGid = DEF_LOWUID,
    158   1.9     agc 	HighGid = DEF_HIGHUID
    159   1.9     agc };
    160   1.9     agc 
    161   1.9     agc /* Full paths of programs used here */
    162   1.9     agc #define CHOWN		"/usr/sbin/chown"
    163   1.9     agc #define MKDIR		"/bin/mkdir"
    164   1.9     agc #define MV		"/bin/mv"
    165  1.10     agc #define NOLOGIN		"/sbin/nologin"
    166  1.10     agc #define PAX		"/bin/pax"
    167   1.9     agc #define RM		"/bin/rm"
    168   1.9     agc 
    169   1.9     agc #define UNSET_EXPIRY	"Null (unset)"
    170   1.9     agc 
    171   1.1     agc static int	verbose;
    172   1.1     agc 
    173   1.1     agc /* if *cpp is non-null, free it, then assign `n' chars of `s' to it */
    174   1.1     agc static void
    175   1.1     agc memsave(char **cpp, char *s, size_t n)
    176   1.1     agc {
    177   1.1     agc 	if (*cpp != (char *) NULL) {
    178   1.1     agc 		FREE(*cpp);
    179   1.1     agc 	}
    180   1.1     agc 	NEWARRAY(char, *cpp, n + 1, exit(1));
    181   1.1     agc 	(void) memcpy(*cpp, s, n);
    182   1.1     agc 	(*cpp)[n] = 0;
    183   1.1     agc }
    184   1.1     agc 
    185   1.1     agc /* a replacement for system(3) */
    186   1.1     agc static int
    187   1.1     agc asystem(char *fmt, ...)
    188   1.1     agc {
    189   1.1     agc 	va_list	vp;
    190   1.1     agc 	char	buf[MaxCommandLen];
    191   1.1     agc 	int	ret;
    192   1.1     agc 
    193   1.1     agc 	va_start(vp, fmt);
    194   1.1     agc 	(void) vsnprintf(buf, sizeof(buf), fmt, vp);
    195   1.1     agc 	va_end(vp);
    196   1.1     agc 	if (verbose) {
    197   1.1     agc 		(void) printf("Command: %s\n", buf);
    198   1.1     agc 	}
    199   1.1     agc 	if ((ret = system(buf)) != 0) {
    200   1.1     agc 		warnx("[Warning] can't system `%s'", buf);
    201   1.1     agc 	}
    202   1.1     agc 	return ret;
    203   1.1     agc }
    204   1.1     agc 
    205   1.9     agc #define NetBSD_1_4_K	104110000
    206   1.9     agc 
    207   1.9     agc #if defined(__NetBSD_Version__) && (__NetBSD_Version__ < NetBSD_1_4_K)
    208   1.9     agc /* bounds checking strncpy */
    209   1.9     agc static int
    210   1.9     agc strlcpy(char *to, char *from, size_t tosize)
    211   1.9     agc {
    212   1.9     agc 	size_t	n;
    213   1.9     agc 	int	fromsize;
    214   1.9     agc 
    215   1.9     agc 	fromsize = strlen(from);
    216   1.9     agc 	n = MIN(tosize - 1, fromsize);
    217   1.9     agc 	(void) memcpy(to, from, n);
    218   1.9     agc 	to[n] = 0;
    219   1.9     agc 	return fromsize;
    220   1.9     agc }
    221   1.9     agc #endif
    222   1.9     agc 
    223   1.9     agc #ifdef EXTENSIONS
    224   1.9     agc /* return 1 if all of `s' is numeric */
    225   1.9     agc static int
    226   1.9     agc is_number(char *s)
    227   1.9     agc {
    228   1.9     agc 	for ( ; *s ; s++) {
    229   1.9     agc 		if (!isdigit(*s)) {
    230   1.9     agc 			return 0;
    231   1.9     agc 		}
    232   1.9     agc 	}
    233   1.9     agc 	return 1;
    234   1.9     agc }
    235   1.9     agc #endif
    236   1.9     agc 
    237   1.9     agc /*
    238   1.9     agc  * check that the effective uid is 0 - called from funcs which will
    239   1.9     agc  * modify data and config files.
    240   1.9     agc  */
    241   1.9     agc static void
    242   1.9     agc checkeuid(void)
    243   1.9     agc {
    244   1.9     agc 	if (geteuid() != 0) {
    245   1.9     agc 		errx(EXIT_FAILURE, "Program must be run as root");
    246   1.9     agc 	}
    247   1.9     agc }
    248   1.9     agc 
    249   1.1     agc /* copy any dot files into the user's home directory */
    250   1.1     agc static int
    251   1.1     agc copydotfiles(char *skeldir, int uid, int gid, char *dir)
    252   1.1     agc {
    253   1.1     agc 	struct dirent	*dp;
    254   1.1     agc 	DIR		*dirp;
    255   1.1     agc 	int		n;
    256   1.1     agc 
    257   1.1     agc 	if ((dirp = opendir(skeldir)) == (DIR *) NULL) {
    258   1.1     agc 		warn("can't open source . files dir `%s'", skeldir);
    259   1.1     agc 		return 0;
    260   1.1     agc 	}
    261   1.1     agc 	for (n = 0; (dp = readdir(dirp)) != (struct dirent *) NULL && n == 0 ; ) {
    262   1.1     agc 		if (strcmp(dp->d_name, ".") == 0 ||
    263   1.1     agc 		    strcmp(dp->d_name, "..") == 0) {
    264   1.1     agc 			continue;
    265   1.1     agc 		}
    266  1.10     agc 		n = 1;
    267   1.1     agc 	}
    268   1.1     agc 	(void) closedir(dirp);
    269   1.1     agc 	if (n == 0) {
    270   1.1     agc 		warnx("No \"dot\" initialisation files found");
    271   1.1     agc 	} else {
    272  1.10     agc 		(void) asystem("cd %s; %s -rw -pe %s . %s",
    273  1.10     agc 				skeldir, PAX, (verbose) ? "-v" : "", dir);
    274   1.1     agc 	}
    275  1.10     agc 	(void) asystem("%s -R -h %d:%d %s", CHOWN, uid, gid, dir);
    276   1.1     agc 	return n;
    277   1.1     agc }
    278   1.1     agc 
    279   1.1     agc /* create a group entry with gid `gid' */
    280   1.1     agc static int
    281   1.1     agc creategid(char *group, int gid, char *name)
    282   1.1     agc {
    283   1.1     agc 	struct stat	st;
    284   1.1     agc 	FILE		*from;
    285   1.1     agc 	FILE		*to;
    286   1.1     agc 	char		buf[MaxEntryLen];
    287   1.1     agc 	char		f[MaxFileNameLen];
    288   1.1     agc 	int		fd;
    289   1.1     agc 	int		cc;
    290   1.1     agc 
    291  1.12     agc 	if (getgrnam(group) != (struct group *) NULL) {
    292  1.12     agc 		warnx("group `%s' already exists", group);
    293  1.12     agc 		return 0;
    294  1.12     agc 	}
    295   1.1     agc 	if ((from = fopen(ETCGROUP, "r")) == (FILE *) NULL) {
    296   1.1     agc 		warn("can't create gid for %s: can't open %s", name, ETCGROUP);
    297   1.1     agc 		return 0;
    298   1.1     agc 	}
    299   1.1     agc 	if (flock(fileno(from), LOCK_EX | LOCK_NB) < 0) {
    300   1.1     agc 		warn("can't lock `%s'", ETCGROUP);
    301   1.1     agc 	}
    302   1.1     agc 	(void) fstat(fileno(from), &st);
    303   1.1     agc 	(void) snprintf(f, sizeof(f), "%s.XXXXXX", ETCGROUP);
    304   1.1     agc 	if ((fd = mkstemp(f)) < 0) {
    305   1.1     agc 		(void) fclose(from);
    306   1.1     agc 		warn("can't create gid: mkstemp failed");
    307   1.1     agc 		return 0;
    308   1.1     agc 	}
    309   1.1     agc 	if ((to = fdopen(fd, "w")) == (FILE *) NULL) {
    310   1.1     agc 		(void) fclose(from);
    311   1.1     agc 		(void) close(fd);
    312   1.1     agc 		(void) unlink(f);
    313   1.1     agc 		warn("can't create gid: fdopen `%s' failed", f);
    314   1.1     agc 		return 0;
    315   1.1     agc 	}
    316   1.1     agc 	while ((cc = fread(buf, sizeof(char), sizeof(buf), from)) > 0) {
    317   1.1     agc 		if (fwrite(buf, sizeof(char), (unsigned) cc, to) != cc) {
    318   1.1     agc 			(void) fclose(from);
    319   1.1     agc 			(void) close(fd);
    320   1.1     agc 			(void) unlink(f);
    321   1.1     agc 			warn("can't create gid: short write to `%s'", f);
    322   1.1     agc 			return 0;
    323   1.1     agc 		}
    324   1.1     agc 	}
    325   1.1     agc 	(void) fprintf(to, "%s:*:%d:%s\n", group, gid, name);
    326   1.1     agc 	(void) fclose(from);
    327   1.1     agc 	(void) fclose(to);
    328   1.1     agc 	if (rename(f, ETCGROUP) < 0) {
    329   1.1     agc 		warn("can't create gid: can't rename `%s' to `%s'", f, ETCGROUP);
    330   1.1     agc 		return 0;
    331   1.1     agc 	}
    332   1.1     agc 	(void) chmod(ETCGROUP, st.st_mode & 07777);
    333   1.1     agc 	return 1;
    334   1.1     agc }
    335   1.1     agc 
    336   1.1     agc /* modify the group entry with name `group' to be newent */
    337   1.1     agc static int
    338   1.1     agc modify_gid(char *group, char *newent)
    339   1.1     agc {
    340   1.1     agc 	struct stat	st;
    341   1.1     agc 	FILE		*from;
    342   1.1     agc 	FILE		*to;
    343   1.1     agc 	char		buf[MaxEntryLen];
    344   1.1     agc 	char		f[MaxFileNameLen];
    345   1.1     agc 	char		*colon;
    346   1.1     agc 	int		groupc;
    347   1.1     agc 	int		entc;
    348   1.1     agc 	int		fd;
    349   1.1     agc 	int		cc;
    350   1.1     agc 
    351   1.1     agc 	if ((from = fopen(ETCGROUP, "r")) == (FILE *) NULL) {
    352   1.1     agc 		warn("can't create gid for %s: can't open %s", group, ETCGROUP);
    353   1.1     agc 		return 0;
    354   1.1     agc 	}
    355   1.1     agc 	if (flock(fileno(from), LOCK_EX | LOCK_NB) < 0) {
    356   1.1     agc 		warn("can't lock `%s'", ETCGROUP);
    357   1.1     agc 	}
    358   1.1     agc 	(void) fstat(fileno(from), &st);
    359   1.1     agc 	(void) snprintf(f, sizeof(f), "%s.XXXXXX", ETCGROUP);
    360   1.1     agc 	if ((fd = mkstemp(f)) < 0) {
    361   1.1     agc 		(void) fclose(from);
    362   1.1     agc 		warn("can't create gid: mkstemp failed");
    363   1.1     agc 		return 0;
    364   1.1     agc 	}
    365   1.1     agc 	if ((to = fdopen(fd, "w")) == (FILE *) NULL) {
    366   1.1     agc 		(void) fclose(from);
    367   1.1     agc 		(void) close(fd);
    368   1.1     agc 		(void) unlink(f);
    369   1.1     agc 		warn("can't create gid: fdopen `%s' failed", f);
    370   1.1     agc 		return 0;
    371   1.1     agc 	}
    372   1.1     agc 	groupc = strlen(group);
    373  1.12     agc 	while (fgets(buf, sizeof(buf), from) != (char *) NULL) {
    374  1.12     agc 		cc = strlen(buf);
    375   1.1     agc 		if ((colon = strchr(buf, ':')) == (char *) NULL) {
    376   1.1     agc 			warn("badly formed entry `%s'", buf);
    377   1.1     agc 			continue;
    378   1.1     agc 		}
    379   1.1     agc 		entc = (int)(colon - buf);
    380   1.1     agc 		if (entc == groupc && strncmp(group, buf, (unsigned) entc) == 0) {
    381   1.1     agc 			if (newent == (char *) NULL) {
    382   1.1     agc 				continue;
    383   1.1     agc 			} else {
    384   1.1     agc 				cc = strlen(newent);
    385   1.5   lukem 				(void) strlcpy(buf, newent, sizeof(buf));
    386   1.1     agc 			}
    387   1.1     agc 		}
    388   1.1     agc 		if (fwrite(buf, sizeof(char), (unsigned) cc, to) != cc) {
    389   1.1     agc 			(void) fclose(from);
    390   1.1     agc 			(void) close(fd);
    391   1.1     agc 			(void) unlink(f);
    392   1.1     agc 			warn("can't create gid: short write to `%s'", f);
    393   1.1     agc 			return 0;
    394   1.1     agc 		}
    395   1.1     agc 	}
    396   1.1     agc 	(void) fclose(from);
    397   1.1     agc 	(void) fclose(to);
    398   1.1     agc 	if (rename(f, ETCGROUP) < 0) {
    399   1.1     agc 		warn("can't create gid: can't rename `%s' to `%s'", f, ETCGROUP);
    400   1.1     agc 		return 0;
    401   1.1     agc 	}
    402   1.1     agc 	(void) chmod(ETCGROUP, st.st_mode & 07777);
    403   1.1     agc 	return 1;
    404   1.1     agc }
    405   1.1     agc 
    406   1.1     agc /* return 1 if `login' is a valid login name */
    407   1.1     agc static int
    408   1.1     agc valid_login(char *login)
    409   1.1     agc {
    410   1.1     agc 	char	*cp;
    411   1.1     agc 
    412   1.1     agc 	for (cp = login ; *cp ; cp++) {
    413   1.1     agc 		if (!isalnum(*cp) && *cp != '.' && *cp != '_' && *cp != '-') {
    414   1.1     agc 			return 0;
    415   1.1     agc 		}
    416   1.1     agc 	}
    417   1.1     agc 	return 1;
    418   1.1     agc }
    419   1.1     agc 
    420   1.1     agc /* return 1 if `group' is a valid group name */
    421   1.1     agc static int
    422   1.1     agc valid_group(char *group)
    423   1.1     agc {
    424   1.1     agc 	char	*cp;
    425   1.1     agc 
    426   1.1     agc 	for (cp = group ; *cp ; cp++) {
    427   1.1     agc 		if (!isalnum(*cp)) {
    428   1.1     agc 			return 0;
    429   1.1     agc 		}
    430   1.1     agc 	}
    431   1.1     agc 	return 1;
    432   1.1     agc }
    433   1.1     agc 
    434   1.1     agc /* find the next gid in the range lo .. hi */
    435   1.1     agc static int
    436   1.1     agc getnextgid(int *gidp, int lo, int hi)
    437   1.1     agc {
    438   1.1     agc 	for (*gidp = lo ; *gidp < hi ; *gidp += 1) {
    439   1.1     agc 		if (getgrgid((gid_t)*gidp) == (struct group *) NULL) {
    440   1.1     agc 			return 1;
    441   1.1     agc 		}
    442   1.1     agc 	}
    443   1.1     agc 	return 0;
    444   1.1     agc }
    445   1.1     agc 
    446   1.1     agc #ifdef EXTENSIONS
    447   1.1     agc /* save a range of uids */
    448   1.1     agc static int
    449   1.1     agc save_range(user_t *up, char *cp)
    450   1.1     agc {
    451   1.1     agc 	int	from;
    452   1.1     agc 	int	to;
    453   1.1     agc 	int	i;
    454   1.1     agc 
    455   1.1     agc 	if (up->u_rsize == 0) {
    456   1.1     agc 		up->u_rsize = 32;
    457   1.1     agc 		NEWARRAY(range_t, up->u_rv, up->u_rsize, return(0));
    458   1.1     agc 	} else if (up->u_rc == up->u_rsize) {
    459   1.1     agc 		up->u_rsize *= 2;
    460   1.1     agc 		RENEW(range_t, up->u_rv, up->u_rsize, return(0));
    461   1.1     agc 	}
    462   1.1     agc 	if (up->u_rv && sscanf(cp, "%d..%d", &from, &to) == 2) {
    463   1.1     agc 		for (i = 0 ; i < up->u_rc ; i++) {
    464   1.1     agc 			if (up->u_rv[i].r_from == from && up->u_rv[i].r_to == to) {
    465   1.1     agc 				break;
    466   1.1     agc 			}
    467   1.1     agc 		}
    468   1.1     agc 		if (i == up->u_rc) {
    469   1.1     agc 			up->u_rv[up->u_rc].r_from = from;
    470   1.1     agc 			up->u_rv[up->u_rc].r_to = to;
    471   1.1     agc 			up->u_rc += 1;
    472   1.1     agc 		}
    473   1.1     agc 	} else {
    474   1.1     agc 		warnx("Bad range `%s'", cp);
    475   1.1     agc 		return 0;
    476   1.1     agc 	}
    477   1.1     agc 	return 1;
    478   1.1     agc }
    479   1.1     agc #endif
    480   1.1     agc 
    481   1.1     agc /* set the defaults in the defaults file */
    482   1.1     agc static int
    483   1.1     agc setdefaults(user_t *up)
    484   1.1     agc {
    485   1.1     agc 	char	template[MaxFileNameLen];
    486   1.1     agc 	FILE	*fp;
    487   1.1     agc 	int	ret;
    488   1.1     agc 	int	fd;
    489   1.1     agc 	int	i;
    490   1.1     agc 
    491   1.1     agc 	(void) snprintf(template, sizeof(template), "%s.XXXXXX", CONFFILE);
    492   1.1     agc 	if ((fd = mkstemp(template)) < 0) {
    493   1.1     agc 		warnx("can't mkstemp `%s' for writing", CONFFILE);
    494   1.1     agc 		return 0;
    495   1.1     agc 	}
    496   1.1     agc 	if ((fp = fdopen(fd, "w")) == (FILE *) NULL) {
    497   1.1     agc 		warn("can't fdopen `%s' for writing", CONFFILE);
    498   1.1     agc 		return 0;
    499   1.1     agc 	}
    500   1.1     agc 	ret = 1;
    501   1.1     agc 	if (fprintf(fp, "group\t\t%s\n", up->u_primgrp) <= 0 ||
    502   1.1     agc 	    fprintf(fp, "base_dir\t%s\n", up->u_basedir) <= 0 ||
    503   1.1     agc 	    fprintf(fp, "skel_dir\t%s\n", up->u_skeldir) <= 0 ||
    504   1.1     agc 	    fprintf(fp, "shell\t\t%s\n", up->u_shell) <= 0 ||
    505   1.1     agc 	    fprintf(fp, "inactive\t%d\n", up->u_inactive) <= 0 ||
    506   1.1     agc 	    fprintf(fp, "expire\t\t%s\n", (up->u_expire == (char *) NULL) ? UNSET_EXPIRY : up->u_expire) <= 0) {
    507   1.1     agc 		warn("can't write to `%s'", CONFFILE);
    508   1.1     agc 		ret = 0;
    509   1.1     agc 	}
    510   1.1     agc #ifdef EXTENSIONS
    511   1.9     agc 	for (i = (up->u_defrc != up->u_rc) ? up->u_defrc : 0 ; i < up->u_rc ; i++) {
    512   1.1     agc 		if (fprintf(fp, "range\t\t%d..%d\n", up->u_rv[i].r_from, up->u_rv[i].r_to) <= 0) {
    513   1.1     agc 			warn("can't write to `%s'", CONFFILE);
    514   1.1     agc 			ret = 0;
    515   1.1     agc 		}
    516   1.1     agc 	}
    517   1.1     agc #endif
    518   1.1     agc 	(void) fclose(fp);
    519   1.1     agc 	if (ret) {
    520   1.1     agc 		ret = ((rename(template, CONFFILE) == 0) && (chmod(CONFFILE, 0644) == 0));
    521   1.1     agc 	}
    522   1.1     agc 	return ret;
    523   1.1     agc }
    524   1.1     agc 
    525   1.1     agc /* read the defaults file */
    526   1.1     agc static void
    527   1.1     agc read_defaults(user_t *up)
    528   1.1     agc {
    529   1.1     agc 	struct stat	st;
    530   1.1     agc 	size_t		lineno;
    531   1.1     agc 	size_t		len;
    532   1.1     agc 	FILE		*fp;
    533   1.1     agc 	char		*cp;
    534   1.1     agc 	char		*s;
    535   1.1     agc 
    536   1.1     agc 	memsave(&up->u_primgrp, DEF_GROUP, strlen(DEF_GROUP));
    537   1.1     agc 	memsave(&up->u_basedir, DEF_BASEDIR, strlen(DEF_BASEDIR));
    538   1.1     agc 	memsave(&up->u_skeldir, DEF_SKELDIR, strlen(DEF_SKELDIR));
    539   1.1     agc 	memsave(&up->u_shell, DEF_SHELL, strlen(DEF_SHELL));
    540   1.1     agc 	memsave(&up->u_comment, DEF_COMMENT, strlen(DEF_COMMENT));
    541   1.1     agc 	up->u_rsize = 16;
    542   1.1     agc 	NEWARRAY(range_t, up->u_rv, up->u_rsize, exit(1));
    543   1.9     agc 	up->u_inactive = DEF_INACTIVE;
    544   1.1     agc 	up->u_expire = DEF_EXPIRE;
    545   1.1     agc 	if ((fp = fopen(CONFFILE, "r")) == (FILE *) NULL) {
    546   1.1     agc 		if (stat(CONFFILE, &st) < 0 && !setdefaults(up)) {
    547   1.1     agc 			warn("can't create `%s' defaults file", CONFFILE);
    548   1.1     agc 		}
    549   1.1     agc 		fp = fopen(CONFFILE, "r");
    550   1.1     agc 	}
    551   1.1     agc 	if (fp != (FILE *) NULL) {
    552   1.1     agc 		while ((s = fparseln(fp, &len, &lineno, NULL, 0)) != (char *) NULL) {
    553   1.1     agc 			if (strncmp(s, "group", 5) == 0) {
    554   1.1     agc 				for (cp = s + 5 ; *cp && isspace(*cp) ; cp++) {
    555   1.1     agc 				}
    556   1.1     agc 				memsave(&up->u_primgrp, cp, strlen(cp));
    557   1.1     agc 			} else if (strncmp(s, "base_dir", 8) == 0) {
    558   1.1     agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    559   1.1     agc 				}
    560   1.1     agc 				memsave(&up->u_basedir, cp, strlen(cp));
    561   1.1     agc 			} else if (strncmp(s, "skel_dir", 8) == 0) {
    562   1.1     agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    563   1.1     agc 				}
    564   1.1     agc 				memsave(&up->u_skeldir, cp, strlen(cp));
    565   1.1     agc 			} else if (strncmp(s, "shell", 5) == 0) {
    566   1.1     agc 				for (cp = s + 5 ; *cp && isspace(*cp) ; cp++) {
    567   1.1     agc 				}
    568   1.1     agc 				memsave(&up->u_shell, cp, strlen(cp));
    569   1.1     agc 			} else if (strncmp(s, "inactive", 8) == 0) {
    570   1.1     agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    571   1.1     agc 				}
    572   1.1     agc 				up->u_inactive = atoi(cp);
    573   1.1     agc #ifdef EXTENSIONS
    574   1.1     agc 			} else if (strncmp(s, "range", 5) == 0) {
    575   1.1     agc 				for (cp = s + 5 ; *cp && isspace(*cp) ; cp++) {
    576   1.1     agc 				}
    577   1.1     agc 				(void) save_range(up, cp);
    578   1.1     agc #endif
    579   1.1     agc #ifdef EXTENSIONS
    580   1.1     agc 			} else if (strncmp(s, "preserve", 8) == 0) {
    581   1.1     agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    582   1.1     agc 				}
    583   1.1     agc 				up->u_preserve = (strncmp(cp, "true", 4) == 0) ? 1 :
    584   1.1     agc 						  (strncmp(cp, "yes", 3) == 0) ? 1 :
    585   1.1     agc 						   atoi(cp);
    586   1.1     agc #endif
    587   1.1     agc 			} else if (strncmp(s, "expire", 6) == 0) {
    588   1.1     agc 				for (cp = s + 6 ; *cp && isspace(*cp) ; cp++) {
    589   1.1     agc 				}
    590   1.1     agc 				if (strcmp(cp, UNSET_EXPIRY) == 0) {
    591   1.1     agc 					if (up->u_expire) {
    592   1.1     agc 						FREE(up->u_expire);
    593   1.1     agc 					}
    594   1.1     agc 					up->u_expire = (char *) NULL;
    595   1.1     agc 				} else {
    596   1.1     agc 					memsave(&up->u_expire, cp, strlen(cp));
    597   1.1     agc 				}
    598   1.1     agc 			}
    599   1.1     agc 			(void) free(s);
    600   1.1     agc 		}
    601   1.1     agc 		(void) fclose(fp);
    602   1.1     agc 	}
    603   1.9     agc 	if (up->u_rc == 0) {
    604   1.9     agc 		up->u_rv[up->u_rc].r_from = DEF_LOWUID;
    605   1.9     agc 		up->u_rv[up->u_rc].r_to = DEF_HIGHUID;
    606   1.9     agc 		up->u_rc += 1;
    607   1.9     agc 	}
    608   1.9     agc 	up->u_defrc = up->u_rc;
    609   1.1     agc }
    610   1.1     agc 
    611   1.1     agc /* return the next valid unused uid */
    612   1.1     agc static int
    613   1.1     agc getnextuid(int sync_uid_gid, int *uid, int low_uid, int high_uid)
    614   1.1     agc {
    615   1.1     agc 	for (*uid = low_uid ; *uid <= high_uid ; (*uid)++) {
    616   1.1     agc 		if (getpwuid((uid_t)(*uid)) == (struct passwd *) NULL && *uid != NOBODY_UID) {
    617   1.1     agc 			if (sync_uid_gid) {
    618   1.1     agc 				if (getgrgid((gid_t)(*uid)) == (struct group *) NULL) {
    619   1.1     agc 					return 1;
    620   1.1     agc 				}
    621   1.1     agc 			} else {
    622   1.1     agc 				return 1;
    623   1.1     agc 			}
    624   1.1     agc 		}
    625   1.1     agc 	}
    626   1.1     agc 	return 0;
    627   1.1     agc }
    628   1.1     agc 
    629   1.1     agc /* add a user */
    630   1.1     agc static int
    631   1.1     agc adduser(char *login, user_t *up)
    632   1.1     agc {
    633   1.1     agc 	struct group	*grp;
    634   1.1     agc 	struct stat	st;
    635   1.1     agc 	struct tm	tm;
    636   1.1     agc 	time_t		expire;
    637   1.1     agc 	char		password[PasswordLength + 1];
    638   1.1     agc 	char		home[MaxFileNameLen];
    639   1.1     agc 	char		buf[MaxFileNameLen];
    640   1.1     agc 	int		sync_uid_gid;
    641   1.1     agc 	int		masterfd;
    642   1.1     agc 	int		ptmpfd;
    643   1.1     agc 	int		gid;
    644   1.1     agc 	int		cc;
    645   1.1     agc 	int		i;
    646   1.1     agc 
    647   1.1     agc 	if (!valid_login(login)) {
    648   1.1     agc 		errx(EXIT_FAILURE, "`%s' is not a valid login name", login);
    649   1.1     agc 	}
    650   1.1     agc 	if ((masterfd = open(MASTER, O_RDONLY)) < 0) {
    651   1.1     agc 		err(EXIT_FAILURE, "can't open `%s'", MASTER);
    652   1.1     agc 	}
    653   1.1     agc 	if (flock(masterfd, LOCK_EX | LOCK_NB) < 0) {
    654   1.1     agc 		err(EXIT_FAILURE, "can't lock `%s'", MASTER);
    655   1.1     agc 	}
    656   1.1     agc 	pw_init();
    657   1.1     agc 	if ((ptmpfd = pw_lock(WAITSECS)) < 0) {
    658   1.1     agc 		(void) close(masterfd);
    659   1.1     agc 		err(EXIT_FAILURE, "can't obtain pw_lock");
    660   1.1     agc 	}
    661   1.1     agc 	while ((cc = read(masterfd, buf, sizeof(buf))) > 0) {
    662   1.1     agc 		if (write(ptmpfd, buf, (size_t)(cc)) != cc) {
    663   1.1     agc 			(void) close(masterfd);
    664   1.1     agc 			(void) close(ptmpfd);
    665   1.1     agc 			(void) pw_abort();
    666   1.1     agc 			err(EXIT_FAILURE, "short write to /etc/ptmp (not %d chars)", cc);
    667   1.1     agc 		}
    668   1.1     agc 	}
    669   1.1     agc 	/* if no uid was specified, get next one in [low_uid..high_uid] range */
    670   1.1     agc 	sync_uid_gid = (strcmp(up->u_primgrp, "=uid") == 0);
    671   1.1     agc 	if (up->u_uid == -1) {
    672   1.1     agc 		for (i = 0 ; i < up->u_rc ; i++) {
    673   1.1     agc 			if (getnextuid(sync_uid_gid, &up->u_uid, up->u_rv[i].r_from, up->u_rv[i].r_to)) {
    674   1.1     agc 				break;
    675   1.1     agc 			}
    676   1.1     agc 		}
    677   1.1     agc 		if (i == up->u_rc) {
    678   1.1     agc 			(void) close(ptmpfd);
    679   1.1     agc 			(void) pw_abort();
    680   1.1     agc 			errx(EXIT_FAILURE, "can't get next uid for %d", up->u_uid);
    681   1.1     agc 		}
    682   1.1     agc 	}
    683   1.1     agc 	/* check uid isn't already allocated */
    684   1.1     agc 	if (!up->u_dupuid && getpwuid((uid_t)(up->u_uid)) != (struct passwd *) NULL) {
    685   1.1     agc 		(void) close(ptmpfd);
    686   1.1     agc 		(void) pw_abort();
    687   1.1     agc 		errx(EXIT_FAILURE, "uid %d is already in use", up->u_uid);
    688   1.1     agc 	}
    689   1.1     agc 	/* if -g=uid was specified, check gid is unused */
    690   1.1     agc 	if (sync_uid_gid) {
    691   1.1     agc 		if (getgrgid((gid_t)(up->u_uid)) != (struct group *) NULL) {
    692   1.1     agc 			(void) close(ptmpfd);
    693   1.1     agc 			(void) pw_abort();
    694   1.1     agc 			errx(EXIT_FAILURE, "gid %d is already in use", up->u_uid);
    695   1.1     agc 		}
    696   1.1     agc 		gid = up->u_uid;
    697   1.1     agc 	} else if ((grp = getgrnam(up->u_primgrp)) != (struct group *) NULL) {
    698   1.1     agc 		gid = grp->gr_gid;
    699   1.9     agc 	} else if (is_number(up->u_primgrp) &&
    700   1.9     agc 		   (grp = getgrgid((gid_t)atoi(up->u_primgrp))) != (struct group *) NULL) {
    701   1.1     agc 		gid = grp->gr_gid;
    702   1.1     agc 	} else {
    703   1.1     agc 		(void) close(ptmpfd);
    704   1.1     agc 		(void) pw_abort();
    705   1.1     agc 		errx(EXIT_FAILURE, "group %s not found", up->u_primgrp);
    706   1.1     agc 	}
    707   1.1     agc 	/* check name isn't already in use */
    708   1.1     agc 	if (!up->u_dupuid && getpwnam(login) != (struct passwd *) NULL) {
    709   1.1     agc 		(void) close(ptmpfd);
    710   1.1     agc 		(void) pw_abort();
    711   1.1     agc 		errx(EXIT_FAILURE, "already a `%s' user", login);
    712   1.1     agc 	}
    713  1.13    jlam 	if (up->u_homeset) {
    714  1.13    jlam 		(void) strlcpy(home, up->u_home, sizeof(home));
    715  1.13    jlam 	} else {
    716  1.13    jlam 		/* if home directory hasn't been given, make it up */
    717   1.1     agc 		(void) snprintf(home, sizeof(home), "%s/%s", up->u_basedir, login);
    718   1.1     agc 	}
    719   1.1     agc 	expire = 0;
    720   1.1     agc 	if (up->u_expire != (char *) NULL) {
    721   1.1     agc 		(void) memset(&tm, 0, sizeof(tm));
    722   1.1     agc 		if (strptime(up->u_expire, "%c", &tm) == (char *) NULL) {
    723   1.1     agc 			warnx("invalid time format `%s'", optarg);
    724   1.1     agc 		} else {
    725   1.1     agc 			expire = mktime(&tm);
    726   1.1     agc 		}
    727   1.1     agc 	}
    728   1.1     agc 	password[PasswordLength] = 0;
    729   1.1     agc 	if (up->u_password != (char *) NULL &&
    730   1.1     agc 	    strlen(up->u_password) == PasswordLength) {
    731   1.1     agc 		(void) memcpy(password, up->u_password, PasswordLength);
    732   1.1     agc 	} else {
    733   1.1     agc 		(void) memset(password, '*', PasswordLength);
    734   1.1     agc 		if (up->u_password != (char *) NULL) {
    735   1.2  simonb 			warnx("Password `%s' is invalid: setting it to `%s'",
    736   1.9     agc 				up->u_password, password);
    737   1.1     agc 		}
    738   1.1     agc 	}
    739   1.2  simonb 	cc = snprintf(buf, sizeof(buf), "%s:%s:%d:%d::%d:%ld:%s:%s:%s\n",
    740   1.1     agc 			login,
    741   1.1     agc 			password,
    742   1.1     agc 			up->u_uid,
    743   1.1     agc 			gid,
    744   1.1     agc 			up->u_inactive,
    745   1.9     agc 			(long) expire,
    746   1.1     agc 			up->u_comment,
    747   1.1     agc 			home,
    748   1.1     agc 			up->u_shell);
    749   1.1     agc 	if (write(ptmpfd, buf, (size_t) cc) != cc) {
    750   1.1     agc 		(void) close(ptmpfd);
    751   1.1     agc 		(void) pw_abort();
    752   1.1     agc 		err(EXIT_FAILURE, "can't add `%s'", buf);
    753   1.1     agc 	}
    754   1.1     agc 	if (up->u_mkdir) {
    755   1.1     agc 		if (lstat(home, &st) < 0 && asystem("%s -p %s", MKDIR, home) != 0) {
    756   1.1     agc 			(void) close(ptmpfd);
    757   1.1     agc 			(void) pw_abort();
    758   1.1     agc 			err(EXIT_FAILURE, "can't mkdir `%s'", home);
    759   1.1     agc 		}
    760   1.1     agc 		(void) copydotfiles(up->u_skeldir, up->u_uid, gid, home);
    761   1.1     agc 	}
    762   1.1     agc 	if (strcmp(up->u_primgrp, "=uid") == 0 &&
    763   1.1     agc 	    getgrnam(login) == (struct group *) NULL &&
    764   1.1     agc 	    !creategid(login, gid, login)) {
    765   1.1     agc 		(void) close(ptmpfd);
    766   1.1     agc 		(void) pw_abort();
    767   1.1     agc 		err(EXIT_FAILURE, "can't create gid %d for login name %s", gid, login);
    768   1.1     agc 	}
    769   1.1     agc 	(void) close(ptmpfd);
    770   1.1     agc 	if (pw_mkdb() < 0) {
    771   1.1     agc 		err(EXIT_FAILURE, "pw_mkdb failed");
    772   1.1     agc 	}
    773   1.1     agc 	return 1;
    774   1.1     agc }
    775   1.1     agc 
    776   1.1     agc /* modify a user */
    777   1.1     agc static int
    778   1.1     agc moduser(char *login, char *newlogin, user_t *up)
    779   1.1     agc {
    780   1.1     agc 	struct passwd	*pwp;
    781   1.1     agc 	struct group	*grp;
    782   1.1     agc 	struct tm	tm;
    783   1.1     agc 	time_t		expire;
    784   1.1     agc 	size_t		loginc;
    785   1.1     agc 	size_t		colonc;
    786   1.1     agc 	FILE		*master;
    787   1.1     agc 	char		password[PasswordLength + 1];
    788   1.1     agc 	char		oldhome[MaxFileNameLen];
    789   1.1     agc 	char		home[MaxFileNameLen];
    790   1.1     agc 	char		buf[MaxFileNameLen];
    791   1.1     agc 	char		*colon;
    792   1.1     agc 	int		masterfd;
    793   1.1     agc 	int		ptmpfd;
    794   1.1     agc 	int		gid;
    795   1.1     agc 	int		cc;
    796   1.1     agc 
    797   1.1     agc 	if (!valid_login(newlogin)) {
    798   1.1     agc 		errx(EXIT_FAILURE, "`%s' is not a valid login name", login);
    799   1.1     agc 	}
    800   1.1     agc 	if ((pwp = getpwnam(login)) == (struct passwd *) NULL) {
    801  1.10     agc 		errx(EXIT_FAILURE, "No such user `%s'", login);
    802   1.1     agc 	}
    803   1.1     agc 	if ((masterfd = open(MASTER, O_RDONLY)) < 0) {
    804   1.1     agc 		err(EXIT_FAILURE, "can't open `%s'", MASTER);
    805   1.1     agc 	}
    806   1.1     agc 	if (flock(masterfd, LOCK_EX | LOCK_NB) < 0) {
    807   1.1     agc 		err(EXIT_FAILURE, "can't lock `%s'", MASTER);
    808   1.1     agc 	}
    809   1.1     agc 	pw_init();
    810   1.1     agc 	if ((ptmpfd = pw_lock(WAITSECS)) < 0) {
    811   1.1     agc 		(void) close(masterfd);
    812   1.1     agc 		err(EXIT_FAILURE, "can't obtain pw_lock");
    813   1.1     agc 	}
    814   1.1     agc 	if ((master = fdopen(masterfd, "r")) == (FILE *) NULL) {
    815   1.1     agc 		(void) close(masterfd);
    816   1.1     agc 		(void) close(ptmpfd);
    817   1.1     agc 		(void) pw_abort();
    818   1.1     agc 		err(EXIT_FAILURE, "can't fdopen fd for %s", MASTER);
    819   1.1     agc 	}
    820   1.1     agc 	if (up != (user_t *) NULL) {
    821   1.1     agc 		if (up->u_mkdir) {
    822   1.1     agc 			(void) strcpy(oldhome, pwp->pw_dir);
    823   1.1     agc 		}
    824   1.1     agc 		if (up->u_uid == -1) {
    825   1.1     agc 			up->u_uid = pwp->pw_uid;
    826   1.1     agc 		}
    827   1.1     agc 		/* if -g=uid was specified, check gid is unused */
    828   1.1     agc 		if (strcmp(up->u_primgrp, "=uid") == 0) {
    829   1.1     agc 			if (getgrgid((gid_t)(up->u_uid)) != (struct group *) NULL) {
    830   1.1     agc 				(void) close(ptmpfd);
    831   1.1     agc 				(void) pw_abort();
    832   1.1     agc 				errx(EXIT_FAILURE, "gid %d is already in use", up->u_uid);
    833   1.1     agc 			}
    834   1.1     agc 			gid = up->u_uid;
    835   1.1     agc 		} else if ((grp = getgrnam(up->u_primgrp)) != (struct group *) NULL) {
    836   1.1     agc 			gid = grp->gr_gid;
    837   1.9     agc 		} else if (is_number(up->u_primgrp) &&
    838   1.9     agc 			   (grp = getgrgid((gid_t)atoi(up->u_primgrp))) != (struct group *) NULL) {
    839   1.1     agc 			gid = grp->gr_gid;
    840   1.1     agc 		} else {
    841   1.1     agc 			(void) close(ptmpfd);
    842   1.1     agc 			(void) pw_abort();
    843   1.1     agc 			errx(EXIT_FAILURE, "group %s not found", up->u_primgrp);
    844   1.1     agc 		}
    845   1.1     agc 		/* if changing name, check new name isn't already in use */
    846   1.1     agc 		if (strcmp(login, newlogin) != 0 && getpwnam(newlogin) != (struct passwd *) NULL) {
    847   1.1     agc 			(void) close(ptmpfd);
    848   1.1     agc 			(void) pw_abort();
    849   1.1     agc 			errx(EXIT_FAILURE, "already a `%s' user", newlogin);
    850   1.1     agc 		}
    851   1.1     agc 		/* if home directory hasn't been given, use the old one */
    852   1.1     agc 		if (!up->u_homeset) {
    853   1.1     agc 			(void) strcpy(home, pwp->pw_dir);
    854   1.1     agc 		}
    855   1.1     agc 		expire = 0;
    856   1.1     agc 		if (up->u_expire != (char *) NULL) {
    857   1.1     agc 			(void) memset(&tm, 0, sizeof(tm));
    858   1.1     agc 			if (strptime(up->u_expire, "%c", &tm) == (char *) NULL) {
    859   1.1     agc 				warnx("invalid time format `%s'", optarg);
    860   1.1     agc 			} else {
    861   1.1     agc 				expire = mktime(&tm);
    862   1.1     agc 			}
    863   1.1     agc 		}
    864   1.1     agc 		password[PasswordLength] = 0;
    865   1.1     agc 		if (up->u_password != (char *) NULL &&
    866   1.1     agc 		    strlen(up->u_password) == PasswordLength) {
    867   1.1     agc 			(void) memcpy(password, up->u_password, PasswordLength);
    868   1.1     agc 		} else {
    869   1.1     agc 			(void) memcpy(password, pwp->pw_passwd, PasswordLength);
    870   1.1     agc 		}
    871   1.1     agc 		if (strcmp(up->u_comment, DEF_COMMENT) == 0) {
    872   1.1     agc 			memsave(&up->u_comment, pwp->pw_gecos, strlen(pwp->pw_gecos));
    873   1.1     agc 		}
    874   1.1     agc 		if (strcmp(up->u_shell, DEF_SHELL) == 0 && strcmp(pwp->pw_shell, DEF_SHELL) != 0) {
    875   1.1     agc 			memsave(&up->u_comment, pwp->pw_shell, strlen(pwp->pw_shell));
    876   1.1     agc 		}
    877   1.1     agc 	}
    878   1.1     agc 	loginc = strlen(login);
    879   1.1     agc 	while (fgets(buf, sizeof(buf), master) != (char *) NULL) {
    880   1.1     agc 		cc = strlen(buf);
    881   1.1     agc 		if ((colon = strchr(buf, ':')) == (char *) NULL) {
    882   1.1     agc 			warnx("Malformed entry `%s'. Skipping", buf);
    883   1.1     agc 			continue;
    884   1.1     agc 		}
    885   1.1     agc 		colonc = (size_t)(colon - buf);
    886   1.1     agc 		if (strncmp(login, buf, loginc) == 0 && loginc == colonc) {
    887   1.1     agc 			if (up != (user_t *) NULL) {
    888   1.2  simonb 				cc = snprintf(buf, sizeof(buf), "%s:%s:%d:%d::%d:%ld:%s:%s:%s\n",
    889   1.1     agc 					newlogin,
    890   1.1     agc 					password,
    891   1.1     agc 					up->u_uid,
    892   1.1     agc 					gid,
    893   1.1     agc 					up->u_inactive,
    894   1.9     agc 					(long) expire,
    895   1.1     agc 					up->u_comment,
    896   1.1     agc 					home,
    897   1.1     agc 					up->u_shell);
    898   1.1     agc 				if (write(ptmpfd, buf, (size_t) cc) != cc) {
    899   1.1     agc 					(void) close(ptmpfd);
    900   1.1     agc 					(void) pw_abort();
    901   1.1     agc 					err(EXIT_FAILURE, "can't add `%s'", buf);
    902   1.1     agc 				}
    903   1.1     agc 			}
    904   1.1     agc 		} else if (write(ptmpfd, buf, (size_t)(cc)) != cc) {
    905   1.1     agc 			(void) close(masterfd);
    906   1.1     agc 			(void) close(ptmpfd);
    907   1.1     agc 			(void) pw_abort();
    908   1.1     agc 			err(EXIT_FAILURE, "short write to /etc/ptmp (not %d chars)", cc);
    909   1.1     agc 		}
    910   1.1     agc 	}
    911   1.1     agc 	if (up != (user_t *) NULL &&
    912   1.1     agc 	    up->u_mkdir &&
    913   1.1     agc 	    asystem("%s %s %s", MV, oldhome, home) != 0) {
    914   1.1     agc 		(void) close(ptmpfd);
    915   1.1     agc 		(void) pw_abort();
    916   1.1     agc 		err(EXIT_FAILURE, "can't move `%s' to `%s'", oldhome, home);
    917   1.1     agc 	}
    918   1.1     agc 	(void) close(ptmpfd);
    919   1.1     agc 	if (pw_mkdb() < 0) {
    920   1.1     agc 		err(EXIT_FAILURE, "pw_mkdb failed");
    921   1.1     agc 	}
    922   1.1     agc 	return 1;
    923   1.1     agc }
    924   1.1     agc 
    925   1.9     agc 
    926   1.9     agc #ifdef EXTENSIONS
    927   1.9     agc /* see if we can find out the user struct */
    928   1.9     agc static struct passwd *
    929   1.9     agc find_user_info(char *name)
    930   1.9     agc {
    931   1.9     agc 	struct passwd	*pwp;
    932   1.9     agc 
    933   1.9     agc 	if ((pwp = getpwnam(name)) != (struct passwd *) NULL) {
    934   1.9     agc 		return pwp;
    935   1.9     agc 	}
    936   1.9     agc 	if (is_number(name) && (pwp = getpwuid((uid_t)atoi(name))) != (struct passwd *) NULL) {
    937   1.9     agc 		return pwp;
    938   1.9     agc 	}
    939   1.9     agc 	return (struct passwd *) NULL;
    940   1.9     agc }
    941   1.9     agc #endif
    942   1.9     agc 
    943   1.9     agc #ifdef EXTENSIONS
    944   1.9     agc /* see if we can find out the group struct */
    945   1.9     agc static struct group *
    946   1.9     agc find_group_info(char *name)
    947   1.9     agc {
    948   1.9     agc 	struct group	*grp;
    949   1.9     agc 
    950   1.9     agc 	if ((grp = getgrnam(name)) != (struct group *) NULL) {
    951   1.9     agc 		return grp;
    952   1.9     agc 	}
    953   1.9     agc 	if (is_number(name) && (grp = getgrgid((gid_t)atoi(name))) != (struct group *) NULL) {
    954   1.9     agc 		return grp;
    955   1.9     agc 	}
    956   1.9     agc 	return (struct group *) NULL;
    957   1.9     agc }
    958   1.9     agc #endif
    959   1.9     agc 
    960   1.1     agc /* print out usage message, and then exit */
    961   1.9     agc void
    962   1.9     agc usermgmt_usage(char *prog)
    963   1.1     agc {
    964   1.1     agc 	if (strcmp(prog, "useradd") == 0) {
    965  1.10     agc 		(void) fprintf(stderr, "Usage: %s -D [-b basedir] [-e expiry] [-f inactive] [-g group] [-r lowuid..highuid] [-s shell]\n", prog);
    966  1.10     agc 		(void) fprintf(stderr, "Usage: %s [-G group] [-b basedir] [-c comment] [-d homedir] [-e expiry] [-f inactive]\n\t[-g group] [-k skeletondir] [-m] [-o] [-p password] [-r lowuid..highuid] [-s shell]\n\t[-u uid] [-v] user\n", prog);
    967   1.9     agc 	} else if (strcmp(prog, "usermod") == 0) {
    968   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-G group] [-c comment] [-d homedir] [-e expire] [-f inactive] [-g group] [-l newname] [-m] [-o] [-p password] [-s shell] [-u uid] [-v] user\n", prog);
    969   1.7   lukem 	} else if (strcmp(prog, "userdel") == 0) {
    970   1.9     agc 		(void) fprintf(stderr, "Usage: %s -D [-p preserve]\n", prog);
    971   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-p preserve] [-r] [-v] user\n", prog);
    972   1.9     agc #ifdef EXTENSIONS
    973   1.9     agc 	} else if (strcmp(prog, "userinfo") == 0) {
    974   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-e] [-v] user\n", prog);
    975   1.9     agc #endif
    976   1.1     agc 	} else if (strcmp(prog, "groupadd") == 0) {
    977   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-g gid] [-o] [-v] group\n", prog);
    978   1.1     agc 	} else if (strcmp(prog, "groupdel") == 0) {
    979   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-v] group\n", prog);
    980   1.1     agc 	} else if (strcmp(prog, "groupmod") == 0) {
    981   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-g gid] [-o] [-n newname] [-v] group\n", prog);
    982   1.9     agc 	} else if (strcmp(prog, "user") == 0 || strcmp(prog, "group") == 0) {
    983   1.9     agc 		(void) fprintf(stderr, "Usage: %s ( add | del | mod ) ...\n", prog);
    984   1.9     agc #ifdef EXTENSIONS
    985   1.9     agc 	} else if (strcmp(prog, "groupinfo") == 0) {
    986   1.9     agc 		(void) fprintf(stderr, "Usage: %s [-e] [-v] group\n", prog);
    987   1.9     agc #endif
    988   1.1     agc 	}
    989   1.1     agc 	exit(EXIT_FAILURE);
    990   1.1     agc 	/* NOTREACHED */
    991   1.1     agc }
    992   1.1     agc 
    993   1.1     agc extern int	optind;
    994   1.1     agc extern char	*optarg;
    995   1.1     agc 
    996   1.1     agc #ifdef EXTENSIONS
    997   1.1     agc #define ADD_OPT_EXTENSIONS	"p:r:v"
    998   1.1     agc #else
    999   1.1     agc #define ADD_OPT_EXTENSIONS
   1000   1.1     agc #endif
   1001   1.1     agc 
   1002   1.9     agc int
   1003   1.1     agc useradd(int argc, char **argv)
   1004   1.1     agc {
   1005   1.1     agc 	user_t	u;
   1006   1.1     agc 	int	defaultfield;
   1007   1.1     agc 	int	bigD;
   1008   1.1     agc 	int	c;
   1009   1.1     agc 	int	i;
   1010   1.1     agc 
   1011   1.1     agc 	(void) memset(&u, 0, sizeof(u));
   1012   1.1     agc 	read_defaults(&u);
   1013   1.1     agc 	u.u_uid = -1;
   1014   1.1     agc 	defaultfield = bigD = 0;
   1015   1.1     agc 	while ((c = getopt(argc, argv, "DG:b:c:d:e:f:g:k:mou:s:" ADD_OPT_EXTENSIONS)) != -1) {
   1016   1.1     agc 		switch(c) {
   1017   1.1     agc 		case 'D':
   1018   1.1     agc 			bigD = 1;
   1019   1.1     agc 			break;
   1020   1.1     agc 		case 'G':
   1021   1.1     agc 			memsave(&u.u_groupv[u.u_groupc++], optarg, strlen(optarg));
   1022   1.1     agc 			break;
   1023   1.1     agc 		case 'b':
   1024   1.1     agc 			defaultfield = 1;
   1025   1.1     agc 			memsave(&u.u_basedir, optarg, strlen(optarg));
   1026   1.1     agc 			break;
   1027   1.1     agc 		case 'c':
   1028   1.1     agc 			memsave(&u.u_comment, optarg, strlen(optarg));
   1029   1.1     agc 			break;
   1030   1.1     agc 		case 'd':
   1031   1.1     agc 			u.u_homeset = 1;
   1032   1.1     agc 			memsave(&u.u_home, optarg, strlen(optarg));
   1033   1.1     agc 			break;
   1034   1.1     agc 		case 'e':
   1035   1.1     agc 			defaultfield = 1;
   1036   1.1     agc 			memsave(&u.u_expire, optarg, strlen(optarg));
   1037   1.1     agc 			break;
   1038   1.1     agc 		case 'f':
   1039   1.1     agc 			defaultfield = 1;
   1040   1.1     agc 			u.u_inactive = atoi(optarg);
   1041   1.1     agc 			break;
   1042   1.1     agc 		case 'g':
   1043   1.1     agc 			defaultfield = 1;
   1044   1.1     agc 			memsave(&u.u_primgrp, optarg, strlen(optarg));
   1045   1.1     agc 			break;
   1046   1.1     agc 		case 'k':
   1047   1.1     agc 			memsave(&u.u_skeldir, optarg, strlen(optarg));
   1048   1.1     agc 			break;
   1049   1.1     agc 		case 'm':
   1050   1.1     agc 			u.u_mkdir = 1;
   1051   1.1     agc 			break;
   1052   1.1     agc 		case 'o':
   1053   1.1     agc 			u.u_dupuid = 1;
   1054   1.1     agc 			break;
   1055   1.1     agc #ifdef EXTENSIONS
   1056   1.1     agc 		case 'p':
   1057   1.1     agc 			memsave(&u.u_password, optarg, strlen(optarg));
   1058   1.1     agc 			break;
   1059   1.1     agc #endif
   1060   1.1     agc #ifdef EXTENSIONS
   1061   1.1     agc 		case 'r':
   1062   1.1     agc 			defaultfield = 1;
   1063   1.1     agc 			(void) save_range(&u, optarg);
   1064   1.1     agc 			break;
   1065   1.1     agc #endif
   1066   1.1     agc 		case 's':
   1067   1.1     agc 			defaultfield = 1;
   1068   1.1     agc 			memsave(&u.u_shell, optarg, strlen(optarg));
   1069   1.1     agc 			break;
   1070   1.1     agc 		case 'u':
   1071   1.9     agc 			if (!is_number(optarg)) {
   1072   1.9     agc 				errx(EXIT_FAILURE, "When using [-u uid], the uid must be numeric");
   1073   1.9     agc 			}
   1074   1.1     agc 			u.u_uid = atoi(optarg);
   1075   1.1     agc 			break;
   1076   1.1     agc #ifdef EXTENSIONS
   1077   1.1     agc 		case 'v':
   1078   1.1     agc 			verbose = 1;
   1079   1.1     agc 			break;
   1080   1.1     agc #endif
   1081   1.1     agc 		}
   1082   1.1     agc 	}
   1083   1.1     agc 	if (bigD) {
   1084   1.1     agc 		if (defaultfield) {
   1085   1.9     agc 			checkeuid();
   1086   1.1     agc 			return setdefaults(&u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1087   1.1     agc 		}
   1088   1.1     agc 		(void) printf("group\t\t%s\n", u.u_primgrp);
   1089   1.1     agc 		(void) printf("base_dir\t%s\n", u.u_basedir);
   1090   1.1     agc 		(void) printf("skel_dir\t%s\n", u.u_skeldir);
   1091   1.1     agc 		(void) printf("shell\t\t%s\n", u.u_shell);
   1092   1.1     agc 		(void) printf("inactive\t%d\n", u.u_inactive);
   1093   1.1     agc 		(void) printf("expire\t\t%s\n", (u.u_expire == (char *) NULL) ? UNSET_EXPIRY : u.u_expire);
   1094   1.1     agc #ifdef EXTENSIONS
   1095   1.1     agc 		for (i = 0 ; i < u.u_rc ; i++) {
   1096   1.1     agc 			(void) printf("range\t\t%d..%d\n", u.u_rv[i].r_from, u.u_rv[i].r_to);
   1097   1.1     agc 		}
   1098   1.1     agc #endif
   1099   1.1     agc 		return EXIT_SUCCESS;
   1100   1.1     agc 	}
   1101   1.1     agc 	if (argc == optind) {
   1102   1.9     agc 		usermgmt_usage("useradd");
   1103   1.1     agc 	}
   1104   1.9     agc 	checkeuid();
   1105   1.1     agc 	return adduser(argv[optind], &u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1106   1.1     agc }
   1107   1.1     agc 
   1108   1.1     agc #ifdef EXTENSIONS
   1109   1.1     agc #define MOD_OPT_EXTENSIONS	"p:v"
   1110   1.1     agc #else
   1111   1.1     agc #define MOD_OPT_EXTENSIONS
   1112   1.1     agc #endif
   1113   1.1     agc 
   1114   1.9     agc int
   1115   1.1     agc usermod(int argc, char **argv)
   1116   1.1     agc {
   1117   1.1     agc 	user_t	u;
   1118   1.1     agc 	char	newuser[MaxUserNameLen + 1];
   1119   1.1     agc 	int	have_new_user;
   1120   1.1     agc 	int	c;
   1121   1.1     agc 
   1122   1.9     agc 	checkeuid();
   1123   1.1     agc 	(void) memset(&u, 0, sizeof(u));
   1124   1.1     agc 	(void) memset(newuser, 0, sizeof(newuser));
   1125   1.1     agc 	read_defaults(&u);
   1126   1.1     agc 	u.u_uid = -1;
   1127   1.1     agc 	have_new_user = 0;
   1128   1.1     agc 	while ((c = getopt(argc, argv, "G:c:d:e:f:g:l:mos:u:" MOD_OPT_EXTENSIONS)) != -1) {
   1129   1.1     agc 		switch(c) {
   1130   1.1     agc 		case 'G':
   1131   1.1     agc 			memsave(&u.u_groupv[u.u_groupc++], optarg, strlen(optarg));
   1132   1.1     agc 			break;
   1133   1.1     agc 		case 'c':
   1134   1.1     agc 			memsave(&u.u_comment, optarg, strlen(optarg));
   1135   1.1     agc 			break;
   1136   1.1     agc 		case 'd':
   1137   1.1     agc 			u.u_homeset = 1;
   1138   1.1     agc 			memsave(&u.u_home, optarg, strlen(optarg));
   1139   1.1     agc 			break;
   1140   1.1     agc 		case 'e':
   1141   1.1     agc 			memsave(&u.u_expire, optarg, strlen(optarg));
   1142   1.1     agc 			break;
   1143   1.1     agc 		case 'f':
   1144   1.1     agc 			u.u_inactive = atoi(optarg);
   1145   1.1     agc 			break;
   1146   1.1     agc 		case 'g':
   1147   1.1     agc 			memsave(&u.u_primgrp, optarg, strlen(optarg));
   1148   1.1     agc 			break;
   1149   1.1     agc 		case 'l':
   1150   1.1     agc 			have_new_user = 1;
   1151   1.5   lukem 			(void) strlcpy(newuser, optarg, sizeof(newuser));
   1152   1.1     agc 			break;
   1153   1.1     agc 		case 'm':
   1154   1.1     agc 			u.u_mkdir = 1;
   1155   1.1     agc 			break;
   1156   1.1     agc 		case 'o':
   1157   1.1     agc 			u.u_dupuid = 1;
   1158   1.1     agc 			break;
   1159   1.1     agc #ifdef EXTENSIONS
   1160   1.1     agc 		case 'p':
   1161   1.1     agc 			memsave(&u.u_password, optarg, strlen(optarg));
   1162   1.1     agc 			break;
   1163   1.1     agc #endif
   1164   1.1     agc 		case 's':
   1165   1.1     agc 			memsave(&u.u_shell, optarg, strlen(optarg));
   1166   1.1     agc 			break;
   1167   1.1     agc 		case 'u':
   1168   1.9     agc 			if (!is_number(optarg)) {
   1169   1.9     agc 				errx(EXIT_FAILURE, "When using [-u uid], the uid must be numeric");
   1170   1.9     agc 			}
   1171   1.1     agc 			u.u_uid = atoi(optarg);
   1172   1.1     agc 			break;
   1173   1.1     agc #ifdef EXTENSIONS
   1174   1.1     agc 		case 'v':
   1175   1.1     agc 			verbose = 1;
   1176   1.1     agc 			break;
   1177   1.1     agc #endif
   1178   1.1     agc 		}
   1179   1.1     agc 	}
   1180   1.1     agc 	if (argc == optind) {
   1181   1.9     agc 		usermgmt_usage("usermod");
   1182   1.1     agc 	}
   1183   1.1     agc 	return moduser(argv[optind], (have_new_user) ? newuser : argv[optind], &u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1184   1.1     agc }
   1185   1.1     agc 
   1186   1.1     agc #ifdef EXTENSIONS
   1187   1.1     agc #define DEL_OPT_EXTENSIONS	"Dp:v"
   1188   1.1     agc #else
   1189   1.1     agc #define DEL_OPT_EXTENSIONS
   1190   1.1     agc #endif
   1191   1.1     agc 
   1192   1.9     agc int
   1193   1.1     agc userdel(int argc, char **argv)
   1194   1.1     agc {
   1195   1.1     agc 	struct passwd	*pwp;
   1196   1.1     agc 	struct stat	st;
   1197   1.1     agc 	user_t		u;
   1198   1.1     agc 	char		password[PasswordLength + 1];
   1199   1.1     agc 	int		defaultfield;
   1200   1.1     agc 	int		rmhome;
   1201   1.1     agc 	int		bigD;
   1202   1.1     agc 	int		c;
   1203   1.1     agc 
   1204   1.9     agc 	if (geteuid() != 0) {
   1205   1.9     agc 		errx(EXIT_FAILURE, "Program must be run as root");
   1206   1.9     agc 	}
   1207   1.1     agc 	(void) memset(&u, 0, sizeof(u));
   1208   1.1     agc 	read_defaults(&u);
   1209   1.1     agc 	defaultfield = bigD = rmhome = 0;
   1210   1.1     agc 	while ((c = getopt(argc, argv, "r" DEL_OPT_EXTENSIONS)) != -1) {
   1211   1.1     agc 		switch(c) {
   1212   1.1     agc #ifdef EXTENSIONS
   1213   1.1     agc 		case 'D':
   1214   1.1     agc 			bigD = 1;
   1215   1.1     agc 			break;
   1216   1.1     agc #endif
   1217   1.1     agc #ifdef EXTENSIONS
   1218   1.1     agc 		case 'p':
   1219   1.1     agc 			defaultfield = 1;
   1220   1.1     agc 			u.u_preserve = (strcmp(optarg, "true") == 0) ? 1 :
   1221   1.1     agc 					(strcmp(optarg, "yes") == 0) ? 1 :
   1222   1.1     agc 					 atoi(optarg);
   1223   1.1     agc 			break;
   1224   1.1     agc #endif
   1225   1.1     agc 		case 'r':
   1226   1.1     agc 			rmhome = 1;
   1227   1.1     agc 			break;
   1228   1.1     agc #ifdef EXTENSIONS
   1229   1.1     agc 		case 'v':
   1230   1.1     agc 			verbose = 1;
   1231   1.1     agc 			break;
   1232   1.1     agc #endif
   1233   1.1     agc 		}
   1234   1.1     agc 	}
   1235   1.1     agc #ifdef EXTENSIONS
   1236   1.1     agc 	if (bigD) {
   1237   1.1     agc 		if (defaultfield) {
   1238   1.9     agc 			checkeuid();
   1239   1.1     agc 			return setdefaults(&u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1240   1.1     agc 		}
   1241   1.1     agc 		(void) printf("preserve\t%s\n", (u.u_preserve) ? "true" : "false");
   1242   1.1     agc 		return EXIT_SUCCESS;
   1243   1.1     agc 	}
   1244   1.1     agc #endif
   1245   1.1     agc 	if (argc == optind) {
   1246   1.9     agc 		usermgmt_usage("userdel");
   1247   1.1     agc 	}
   1248   1.9     agc 	checkeuid();
   1249   1.1     agc 	if ((pwp = getpwnam(argv[optind])) == (struct passwd *) NULL) {
   1250  1.10     agc 		warnx("No such user `%s'", argv[optind]);
   1251   1.1     agc 		return EXIT_FAILURE;
   1252   1.1     agc 	}
   1253   1.1     agc 	if (rmhome) {
   1254   1.1     agc 		if (stat(pwp->pw_dir, &st) < 0) {
   1255   1.1     agc 			warn("Home directory `%s' does not exist", pwp->pw_dir);
   1256   1.1     agc 			return EXIT_FAILURE;
   1257   1.1     agc 		}
   1258   1.1     agc 		(void) asystem("%s -rf %s", RM, pwp->pw_dir);
   1259   1.1     agc 	}
   1260   1.1     agc 	if (u.u_preserve) {
   1261  1.10     agc 		memsave(&u.u_shell, NOLOGIN, strlen(NOLOGIN));
   1262   1.1     agc 		(void) memset(password, '*', PasswordLength);
   1263   1.1     agc 		password[PasswordLength] = 0;
   1264   1.1     agc 		memsave(&u.u_password, password, PasswordLength);
   1265   1.1     agc 		return moduser(argv[optind], argv[optind], &u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1266   1.1     agc 	}
   1267   1.1     agc 	return moduser(argv[optind], argv[optind], (user_t *) NULL) ? EXIT_SUCCESS : EXIT_FAILURE;
   1268   1.1     agc }
   1269   1.1     agc 
   1270   1.1     agc #ifdef EXTENSIONS
   1271   1.1     agc #define GROUP_ADD_OPT_EXTENSIONS	"v"
   1272   1.1     agc #else
   1273   1.1     agc #define GROUP_ADD_OPT_EXTENSIONS
   1274   1.1     agc #endif
   1275   1.1     agc 
   1276   1.1     agc /* add a group */
   1277   1.1     agc int
   1278   1.1     agc groupadd(int argc, char **argv)
   1279   1.1     agc {
   1280   1.1     agc 	int	dupgid;
   1281   1.1     agc 	int	gid;
   1282   1.1     agc 	int	c;
   1283   1.1     agc 
   1284   1.9     agc 	checkeuid();
   1285   1.1     agc 	gid = -1;
   1286   1.1     agc 	dupgid = 0;
   1287   1.1     agc 	while ((c = getopt(argc, argv, "g:o" GROUP_ADD_OPT_EXTENSIONS)) != -1) {
   1288   1.1     agc 		switch(c) {
   1289   1.1     agc 		case 'g':
   1290   1.9     agc 			if (!is_number(optarg)) {
   1291   1.9     agc 				errx(EXIT_FAILURE, "When using [-g gid], the gid must be numeric");
   1292   1.9     agc 			}
   1293   1.1     agc 			gid = atoi(optarg);
   1294   1.1     agc 			break;
   1295   1.1     agc 		case 'o':
   1296   1.1     agc 			dupgid = 1;
   1297   1.1     agc 			break;
   1298   1.1     agc #ifdef EXTENSIONS
   1299   1.1     agc 		case 'v':
   1300   1.1     agc 			verbose = 1;
   1301   1.1     agc 			break;
   1302   1.1     agc #endif
   1303   1.1     agc 		}
   1304   1.1     agc 	}
   1305   1.1     agc 	if (argc == optind) {
   1306   1.9     agc 		usermgmt_usage("groupadd");
   1307   1.1     agc 	}
   1308   1.1     agc 	if (gid < 0 && !getnextgid(&gid, LowGid, HighGid)) {
   1309   1.1     agc 		err(EXIT_FAILURE, "can't add group: can't get next gid");
   1310   1.1     agc 	}
   1311   1.1     agc 	if (!dupgid && getgrgid((gid_t) gid) != (struct group *) NULL) {
   1312   1.9     agc 		errx(EXIT_FAILURE, "can't add group: gid %d is a duplicate", gid);
   1313   1.1     agc 	}
   1314   1.1     agc 	if (!valid_group(argv[optind])) {
   1315   1.9     agc 		warnx("warning - invalid group name `%s'", argv[optind]);
   1316   1.1     agc 	}
   1317   1.1     agc 	if (!creategid(argv[optind], gid, "")) {
   1318   1.1     agc 		err(EXIT_FAILURE, "can't add group: problems with %s file", ETCGROUP);
   1319   1.1     agc 	}
   1320   1.1     agc 	return EXIT_SUCCESS;
   1321   1.1     agc }
   1322   1.1     agc 
   1323   1.1     agc #ifdef EXTENSIONS
   1324   1.1     agc #define GROUP_DEL_OPT_EXTENSIONS	"v"
   1325   1.1     agc #else
   1326   1.1     agc #define GROUP_DEL_OPT_EXTENSIONS
   1327   1.1     agc #endif
   1328   1.1     agc 
   1329   1.1     agc /* remove a group */
   1330   1.1     agc int
   1331   1.1     agc groupdel(int argc, char **argv)
   1332   1.1     agc {
   1333   1.1     agc 	int	c;
   1334   1.1     agc 
   1335   1.9     agc 	checkeuid();
   1336   1.1     agc 	while ((c = getopt(argc, argv, "" GROUP_DEL_OPT_EXTENSIONS)) != -1) {
   1337   1.1     agc 		switch(c) {
   1338   1.1     agc #ifdef EXTENSIONS
   1339   1.1     agc 		case 'v':
   1340   1.1     agc 			verbose = 1;
   1341   1.1     agc 			break;
   1342   1.1     agc #endif
   1343   1.1     agc 		}
   1344   1.1     agc 	}
   1345   1.1     agc 	if (argc == optind) {
   1346   1.9     agc 		usermgmt_usage("groupdel");
   1347   1.1     agc 	}
   1348   1.1     agc 	if (!modify_gid(argv[optind], (char *) NULL)) {
   1349   1.1     agc 		err(EXIT_FAILURE, "can't change %s file", ETCGROUP);
   1350   1.1     agc 	}
   1351   1.1     agc 	return EXIT_SUCCESS;
   1352   1.1     agc }
   1353   1.1     agc 
   1354   1.1     agc #ifdef EXTENSIONS
   1355   1.1     agc #define GROUP_MOD_OPT_EXTENSIONS	"v"
   1356   1.1     agc #else
   1357   1.1     agc #define GROUP_MOD_OPT_EXTENSIONS
   1358   1.1     agc #endif
   1359   1.1     agc 
   1360   1.1     agc /* modify a group */
   1361   1.1     agc int
   1362   1.1     agc groupmod(int argc, char **argv)
   1363   1.1     agc {
   1364   1.1     agc 	struct group	*grp;
   1365   1.1     agc 	char		buf[MaxEntryLen];
   1366   1.1     agc 	char		*newname;
   1367   1.1     agc 	char		**cpp;
   1368   1.1     agc 	int		dupgid;
   1369   1.1     agc 	int		gid;
   1370   1.1     agc 	int		cc;
   1371   1.1     agc 	int		c;
   1372   1.1     agc 
   1373   1.9     agc 	checkeuid();
   1374   1.1     agc 	gid = -1;
   1375   1.1     agc 	dupgid = 0;
   1376   1.1     agc 	newname = (char *) NULL;
   1377   1.1     agc 	while ((c = getopt(argc, argv, "g:on:" GROUP_MOD_OPT_EXTENSIONS)) != -1) {
   1378   1.1     agc 		switch(c) {
   1379   1.1     agc 		case 'g':
   1380   1.9     agc 			if (!is_number(optarg)) {
   1381   1.9     agc 				errx(EXIT_FAILURE, "When using [-g gid], the gid must be numeric");
   1382   1.9     agc 			}
   1383   1.1     agc 			gid = atoi(optarg);
   1384   1.1     agc 			break;
   1385   1.1     agc 		case 'o':
   1386   1.1     agc 			dupgid = 1;
   1387   1.1     agc 			break;
   1388   1.1     agc 		case 'n':
   1389   1.1     agc 			memsave(&newname, optarg, strlen(optarg));
   1390   1.1     agc 			break;
   1391   1.1     agc #ifdef EXTENSIONS
   1392   1.1     agc 		case 'v':
   1393   1.1     agc 			verbose = 1;
   1394   1.1     agc 			break;
   1395   1.1     agc #endif
   1396   1.1     agc 		}
   1397   1.1     agc 	}
   1398   1.1     agc 	if (argc == optind) {
   1399   1.9     agc 		usermgmt_usage("groupmod");
   1400   1.1     agc 	}
   1401   1.1     agc 	if (gid < 0 && newname == (char *) NULL) {
   1402   1.1     agc 		err(EXIT_FAILURE, "Nothing to change");
   1403   1.1     agc 	}
   1404   1.1     agc 	if (dupgid && gid < 0) {
   1405   1.1     agc 		err(EXIT_FAILURE, "Duplicate which gid?");
   1406   1.1     agc 	}
   1407   1.1     agc 	if ((grp = getgrnam(argv[optind])) == (struct group *) NULL) {
   1408   1.1     agc 		err(EXIT_FAILURE, "can't find group `%s' to modify", argv[optind]);
   1409   1.1     agc 	}
   1410   1.1     agc 	if (newname != (char *) NULL && !valid_group(newname)) {
   1411   1.1     agc 		warn("warning - invalid group name `%s'", newname);
   1412   1.1     agc 	}
   1413   1.1     agc 	cc = snprintf(buf, sizeof(buf), "%s:%s:%d:",
   1414   1.1     agc 			(newname) ? newname : grp->gr_name,
   1415   1.1     agc 			grp->gr_passwd,
   1416   1.1     agc 			(gid < 0) ? grp->gr_gid : gid);
   1417   1.1     agc 	for (cpp = grp->gr_mem ; *cpp && cc < sizeof(buf) ; cpp++) {
   1418   1.1     agc 		cc += snprintf(&buf[cc], sizeof(buf) - cc, "%s%s", *cpp,
   1419   1.1     agc 			(cpp[1] == (char *) NULL) ? "" : ",");
   1420   1.1     agc 	}
   1421   1.1     agc 	if (!modify_gid(argv[optind], buf)) {
   1422   1.1     agc 		err(EXIT_FAILURE, "can't change %s file", ETCGROUP);
   1423   1.1     agc 	}
   1424   1.1     agc 	return EXIT_SUCCESS;
   1425   1.1     agc }
   1426   1.1     agc 
   1427   1.9     agc #ifdef EXTENSIONS
   1428   1.9     agc /* display user information */
   1429   1.9     agc int
   1430   1.9     agc userinfo(int argc, char **argv)
   1431   1.9     agc {
   1432   1.9     agc 	struct passwd	*pwp;
   1433   1.9     agc 	struct group	*grp;
   1434   1.9     agc 	char		buf[MaxEntryLen];
   1435   1.9     agc 	char		**cpp;
   1436   1.9     agc 	int		exists;
   1437   1.9     agc 	int		cc;
   1438   1.9     agc 	int		i;
   1439   1.1     agc 
   1440   1.9     agc 	exists = 0;
   1441   1.9     agc 	while ((i = getopt(argc, argv, "ev")) != -1) {
   1442   1.9     agc 		switch(i) {
   1443   1.9     agc 		case 'e':
   1444   1.9     agc 			exists = 1;
   1445   1.9     agc 			break;
   1446   1.9     agc 		case 'v':
   1447   1.9     agc 			verbose = 1;
   1448   1.9     agc 			break;
   1449   1.9     agc 		}
   1450   1.9     agc 	}
   1451   1.9     agc 	if (argc == optind) {
   1452   1.9     agc 		usermgmt_usage("userinfo");
   1453   1.9     agc 	}
   1454   1.9     agc 	pwp = find_user_info(argv[optind]);
   1455   1.9     agc 	if (exists) {
   1456   1.9     agc 		exit((pwp) ? EXIT_SUCCESS : EXIT_FAILURE);
   1457   1.9     agc 	}
   1458   1.9     agc 	if (pwp == (struct passwd *) NULL) {
   1459   1.9     agc 		errx(EXIT_FAILURE, "can't find user `%s'", argv[optind]);
   1460   1.9     agc 	}
   1461   1.9     agc 	(void) printf("login\t%s\n", pwp->pw_name);
   1462   1.9     agc 	(void) printf("passwd\t%s\n", pwp->pw_passwd);
   1463   1.9     agc 	(void) printf("uid\t%d\n", pwp->pw_uid);
   1464   1.9     agc 	for (cc = 0 ; (grp = getgrent()) != (struct group *) NULL ; ) {
   1465   1.9     agc 		for (cpp = grp->gr_mem ; *cpp ; cpp++) {
   1466   1.9     agc 			if (strcmp(*cpp, argv[optind]) == 0 && grp->gr_gid != pwp->pw_gid) {
   1467   1.9     agc 				cc += snprintf(&buf[cc], sizeof(buf) - cc, "%s ", grp->gr_name);
   1468   1.9     agc 			}
   1469   1.9     agc 		}
   1470   1.9     agc 	}
   1471   1.9     agc 	if ((grp = getgrgid(pwp->pw_gid)) == (struct group *) NULL) {
   1472   1.9     agc 		(void) printf("groups\t%d %s\n", pwp->pw_gid, buf);
   1473   1.9     agc 	} else {
   1474   1.9     agc 		(void) printf("groups\t%s %s\n", grp->gr_name, buf);
   1475   1.9     agc 	}
   1476   1.9     agc 	(void) printf("change\t%s", ctime(&pwp->pw_change));
   1477   1.9     agc 	(void) printf("class\t%s\n", pwp->pw_class);
   1478   1.9     agc 	(void) printf("gecos\t%s\n", pwp->pw_gecos);
   1479   1.9     agc 	(void) printf("dir\t%s\n", pwp->pw_dir);
   1480   1.9     agc 	(void) printf("shell\t%s\n", pwp->pw_shell);
   1481   1.9     agc 	(void) printf("expire\t%s", ctime(&pwp->pw_expire));
   1482   1.9     agc 	return EXIT_SUCCESS;
   1483   1.9     agc }
   1484   1.9     agc #endif
   1485   1.1     agc 
   1486   1.9     agc #ifdef EXTENSIONS
   1487   1.9     agc /* display user information */
   1488   1.1     agc int
   1489   1.9     agc groupinfo(int argc, char **argv)
   1490   1.1     agc {
   1491   1.9     agc 	struct group	*grp;
   1492   1.9     agc 	char		**cpp;
   1493   1.9     agc 	int		exists;
   1494   1.9     agc 	int		i;
   1495   1.1     agc 
   1496   1.9     agc 	exists = 0;
   1497   1.9     agc 	while ((i = getopt(argc, argv, "ev")) != -1) {
   1498   1.9     agc 		switch(i) {
   1499   1.9     agc 		case 'e':
   1500   1.9     agc 			exists = 1;
   1501   1.9     agc 			break;
   1502   1.9     agc 		case 'v':
   1503   1.9     agc 			verbose = 1;
   1504   1.9     agc 			break;
   1505   1.9     agc 		}
   1506   1.9     agc 	}
   1507   1.9     agc 	if (argc == optind) {
   1508   1.9     agc 		usermgmt_usage("groupinfo");
   1509   1.9     agc 	}
   1510   1.9     agc 	grp = find_group_info(argv[optind]);
   1511   1.9     agc 	if (exists) {
   1512   1.9     agc 		exit((grp) ? EXIT_SUCCESS : EXIT_FAILURE);
   1513   1.9     agc 	}
   1514   1.9     agc 	if (grp == (struct group *) NULL) {
   1515   1.9     agc 		errx(EXIT_FAILURE, "can't find group `%s'", argv[optind]);
   1516   1.9     agc 	}
   1517   1.9     agc 	(void) printf("name\t%s\n", grp->gr_name);
   1518   1.9     agc 	(void) printf("passwd\t%s\n", grp->gr_passwd);
   1519   1.9     agc 	(void) printf("gid\t%d\n", grp->gr_gid);
   1520   1.9     agc 	(void) printf("members\t");
   1521   1.9     agc 	for (cpp = grp->gr_mem ; *cpp ; cpp++) {
   1522   1.9     agc 		(void) printf("%s ", *cpp);
   1523   1.9     agc 	}
   1524   1.9     agc 	(void) fputc('\n', stdout);
   1525   1.9     agc 	return EXIT_SUCCESS;
   1526   1.1     agc }
   1527   1.9     agc #endif
   1528