Home | History | Annotate | Line # | Download | only in user
user.c revision 1.18
      1  1.18  hubertf /* $NetBSD: user.c,v 1.18 2000/05/05 01:27:47 hubertf Exp $ */
      2   1.1      agc 
      3   1.1      agc /*
      4   1.4    lukem  * Copyright (c) 1999 Alistair G. Crooks.  All rights reserved.
      5   1.1      agc  *
      6   1.1      agc  * Redistribution and use in source and binary forms, with or without
      7   1.1      agc  * modification, are permitted provided that the following conditions
      8   1.1      agc  * are met:
      9   1.1      agc  * 1. Redistributions of source code must retain the above copyright
     10   1.1      agc  *    notice, this list of conditions and the following disclaimer.
     11   1.1      agc  * 2. Redistributions in binary form must reproduce the above copyright
     12   1.1      agc  *    notice, this list of conditions and the following disclaimer in the
     13   1.1      agc  *    documentation and/or other materials provided with the distribution.
     14   1.1      agc  * 3. All advertising materials mentioning features or use of this software
     15   1.1      agc  *    must display the following acknowledgement:
     16   1.1      agc  *	This product includes software developed by Alistair G. Crooks.
     17   1.1      agc  * 4. The name of the author may not be used to endorse or promote
     18   1.1      agc  *    products derived from this software without specific prior written
     19   1.1      agc  *    permission.
     20   1.1      agc  *
     21   1.1      agc  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS
     22   1.1      agc  * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
     23   1.1      agc  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     24   1.1      agc  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
     25   1.1      agc  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     26   1.1      agc  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
     27   1.1      agc  * GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     28   1.1      agc  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
     29   1.1      agc  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
     30   1.1      agc  * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
     31   1.1      agc  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     32   1.1      agc  */
     33  1.11      agc #include <sys/cdefs.h>
     34  1.11      agc 
     35  1.11      agc #ifndef lint
     36  1.11      agc __COPYRIGHT(
     37  1.11      agc 	"@(#) Copyright (c) 1999 \
     38  1.11      agc 	        The NetBSD Foundation, Inc.  All rights reserved.");
     39  1.18  hubertf __RCSID("$NetBSD: user.c,v 1.18 2000/05/05 01:27:47 hubertf Exp $");
     40  1.11      agc #endif
     41  1.11      agc 
     42   1.1      agc #include <sys/types.h>
     43   1.1      agc #include <sys/param.h>
     44   1.1      agc #include <sys/stat.h>
     45   1.1      agc 
     46   1.5    lukem #include <ctype.h>
     47   1.5    lukem #include <dirent.h>
     48   1.5    lukem #include <err.h>
     49   1.5    lukem #include <fcntl.h>
     50   1.5    lukem #include <grp.h>
     51   1.5    lukem #include <pwd.h>
     52   1.5    lukem #include <stdarg.h>
     53   1.1      agc #include <stdio.h>
     54   1.1      agc #include <stdlib.h>
     55   1.1      agc #include <string.h>
     56   1.1      agc #include <time.h>
     57   1.5    lukem #include <unistd.h>
     58   1.1      agc #include <util.h>
     59   1.1      agc 
     60   1.1      agc #include "defs.h"
     61   1.1      agc #include "usermgmt.h"
     62   1.1      agc 
     63   1.9      agc /* this struct describes a uid range */
     64   1.9      agc typedef struct range_t {
     65   1.9      agc 	int	r_from;		/* low uid */
     66   1.9      agc 	int	r_to;		/* high uid */
     67   1.9      agc } range_t;
     68   1.9      agc 
     69   1.9      agc /* this struct encapsulates the user information */
     70   1.9      agc typedef struct user_t {
     71   1.9      agc 	int		u_uid;			/* uid of user */
     72   1.9      agc 	char		*u_password;		/* encrypted password */
     73   1.9      agc 	char		*u_comment;		/* comment field */
     74   1.9      agc 	int		u_homeset;		/* home dir has been set */
     75   1.9      agc 	char		*u_home;		/* home directory */
     76   1.9      agc 	char		*u_primgrp;		/* primary group */
     77   1.9      agc 	int		u_groupc;		/* # of secondary groups */
     78   1.9      agc 	char		*u_groupv[NGROUPS_MAX];	/* secondary groups */
     79   1.9      agc 	char		*u_shell;		/* user's shell */
     80   1.9      agc 	char		*u_basedir;		/* base directory for home */
     81   1.9      agc 	char		*u_expire;		/* when password will expire */
     82   1.9      agc 	int		u_inactive;		/* inactive */
     83   1.9      agc 	int		u_mkdir;		/* make the home directory */
     84   1.9      agc 	int		u_dupuid;		/* duplicate uids are allowed */
     85   1.9      agc 	char		*u_skeldir;		/* directory for startup files */
     86   1.9      agc 	unsigned	u_rsize;		/* size of range array */
     87   1.9      agc 	unsigned	u_rc;			/* # of ranges */
     88   1.9      agc 	range_t		*u_rv;			/* the ranges */
     89   1.9      agc 	unsigned	u_defrc;		/* # of ranges in defaults */
     90   1.9      agc 	int		u_preserve;		/* preserve uids on deletion */
     91   1.9      agc } user_t;
     92   1.9      agc 
     93   1.9      agc #define CONFFILE	"/etc/usermgmt.conf"
     94   1.9      agc 
     95   1.9      agc #ifndef DEF_GROUP
     96   1.9      agc #define DEF_GROUP	"users"
     97   1.9      agc #endif
     98   1.9      agc 
     99   1.9      agc #ifndef DEF_BASEDIR
    100   1.9      agc #define DEF_BASEDIR	"/home"
    101   1.9      agc #endif
    102   1.9      agc 
    103   1.9      agc #ifndef DEF_SKELDIR
    104   1.9      agc #define DEF_SKELDIR	"/etc/skel"
    105   1.9      agc #endif
    106   1.9      agc 
    107   1.9      agc #ifndef DEF_SHELL
    108   1.9      agc #define DEF_SHELL	"/bin/csh"
    109   1.9      agc #endif
    110   1.9      agc 
    111   1.9      agc #ifndef DEF_COMMENT
    112   1.9      agc #define DEF_COMMENT	""
    113   1.9      agc #endif
    114   1.9      agc 
    115   1.9      agc #ifndef DEF_LOWUID
    116   1.9      agc #define DEF_LOWUID	1000
    117   1.9      agc #endif
    118   1.9      agc 
    119   1.9      agc #ifndef DEF_HIGHUID
    120   1.9      agc #define DEF_HIGHUID	60000
    121   1.9      agc #endif
    122   1.9      agc 
    123   1.9      agc #ifndef DEF_INACTIVE
    124   1.9      agc #define DEF_INACTIVE	0
    125   1.9      agc #endif
    126   1.9      agc 
    127   1.9      agc #ifndef DEF_EXPIRE
    128   1.9      agc #define DEF_EXPIRE	(char *) NULL
    129   1.9      agc #endif
    130   1.9      agc 
    131   1.9      agc #ifndef MASTER
    132   1.9      agc #define MASTER		"/etc/master.passwd"
    133   1.9      agc #endif
    134   1.9      agc 
    135   1.9      agc #ifndef ETCGROUP
    136   1.9      agc #define ETCGROUP	"/etc/group"
    137   1.9      agc #endif
    138   1.9      agc 
    139   1.9      agc #ifndef WAITSECS
    140   1.9      agc #define WAITSECS	10
    141   1.9      agc #endif
    142   1.9      agc 
    143   1.9      agc #ifndef NOBODY_UID
    144   1.9      agc #define NOBODY_UID	32767
    145   1.9      agc #endif
    146   1.9      agc 
    147   1.9      agc /* some useful constants */
    148   1.9      agc enum {
    149   1.9      agc 	MaxShellNameLen = 256,
    150   1.9      agc 	MaxFileNameLen = MAXPATHLEN,
    151   1.9      agc 	MaxUserNameLen = 32,
    152   1.9      agc 	MaxFieldNameLen = 32,
    153   1.9      agc 	MaxCommandLen = 2048,
    154   1.9      agc 	MaxEntryLen = 2048,
    155   1.9      agc 	PasswordLength = 13,
    156   1.9      agc 
    157   1.9      agc 	LowGid = DEF_LOWUID,
    158   1.9      agc 	HighGid = DEF_HIGHUID
    159   1.9      agc };
    160   1.9      agc 
    161   1.9      agc /* Full paths of programs used here */
    162   1.9      agc #define CHOWN		"/usr/sbin/chown"
    163   1.9      agc #define MKDIR		"/bin/mkdir"
    164   1.9      agc #define MV		"/bin/mv"
    165  1.10      agc #define NOLOGIN		"/sbin/nologin"
    166  1.10      agc #define PAX		"/bin/pax"
    167   1.9      agc #define RM		"/bin/rm"
    168   1.9      agc 
    169   1.9      agc #define UNSET_EXPIRY	"Null (unset)"
    170   1.9      agc 
    171   1.1      agc static int	verbose;
    172   1.1      agc 
    173   1.1      agc /* if *cpp is non-null, free it, then assign `n' chars of `s' to it */
    174   1.1      agc static void
    175   1.1      agc memsave(char **cpp, char *s, size_t n)
    176   1.1      agc {
    177   1.1      agc 	if (*cpp != (char *) NULL) {
    178   1.1      agc 		FREE(*cpp);
    179   1.1      agc 	}
    180   1.1      agc 	NEWARRAY(char, *cpp, n + 1, exit(1));
    181   1.1      agc 	(void) memcpy(*cpp, s, n);
    182  1.14    soren 	(*cpp)[n] = '\0';
    183   1.1      agc }
    184   1.1      agc 
    185   1.1      agc /* a replacement for system(3) */
    186   1.1      agc static int
    187   1.1      agc asystem(char *fmt, ...)
    188   1.1      agc {
    189   1.1      agc 	va_list	vp;
    190   1.1      agc 	char	buf[MaxCommandLen];
    191   1.1      agc 	int	ret;
    192   1.1      agc 
    193   1.1      agc 	va_start(vp, fmt);
    194   1.1      agc 	(void) vsnprintf(buf, sizeof(buf), fmt, vp);
    195   1.1      agc 	va_end(vp);
    196   1.1      agc 	if (verbose) {
    197   1.1      agc 		(void) printf("Command: %s\n", buf);
    198   1.1      agc 	}
    199   1.1      agc 	if ((ret = system(buf)) != 0) {
    200   1.1      agc 		warnx("[Warning] can't system `%s'", buf);
    201   1.1      agc 	}
    202   1.1      agc 	return ret;
    203   1.1      agc }
    204   1.9      agc 
    205   1.9      agc #ifdef EXTENSIONS
    206   1.9      agc /* return 1 if all of `s' is numeric */
    207   1.9      agc static int
    208   1.9      agc is_number(char *s)
    209   1.9      agc {
    210   1.9      agc 	for ( ; *s ; s++) {
    211   1.9      agc 		if (!isdigit(*s)) {
    212   1.9      agc 			return 0;
    213   1.9      agc 		}
    214   1.9      agc 	}
    215   1.9      agc 	return 1;
    216   1.9      agc }
    217   1.9      agc #endif
    218   1.9      agc 
    219   1.9      agc /*
    220   1.9      agc  * check that the effective uid is 0 - called from funcs which will
    221   1.9      agc  * modify data and config files.
    222   1.9      agc  */
    223   1.9      agc static void
    224   1.9      agc checkeuid(void)
    225   1.9      agc {
    226   1.9      agc 	if (geteuid() != 0) {
    227   1.9      agc 		errx(EXIT_FAILURE, "Program must be run as root");
    228   1.9      agc 	}
    229   1.9      agc }
    230   1.9      agc 
    231   1.1      agc /* copy any dot files into the user's home directory */
    232   1.1      agc static int
    233   1.1      agc copydotfiles(char *skeldir, int uid, int gid, char *dir)
    234   1.1      agc {
    235   1.1      agc 	struct dirent	*dp;
    236   1.1      agc 	DIR		*dirp;
    237   1.1      agc 	int		n;
    238   1.1      agc 
    239   1.1      agc 	if ((dirp = opendir(skeldir)) == (DIR *) NULL) {
    240   1.1      agc 		warn("can't open source . files dir `%s'", skeldir);
    241   1.1      agc 		return 0;
    242   1.1      agc 	}
    243   1.1      agc 	for (n = 0; (dp = readdir(dirp)) != (struct dirent *) NULL && n == 0 ; ) {
    244   1.1      agc 		if (strcmp(dp->d_name, ".") == 0 ||
    245   1.1      agc 		    strcmp(dp->d_name, "..") == 0) {
    246   1.1      agc 			continue;
    247   1.1      agc 		}
    248  1.10      agc 		n = 1;
    249   1.1      agc 	}
    250   1.1      agc 	(void) closedir(dirp);
    251   1.1      agc 	if (n == 0) {
    252   1.1      agc 		warnx("No \"dot\" initialisation files found");
    253   1.1      agc 	} else {
    254  1.10      agc 		(void) asystem("cd %s; %s -rw -pe %s . %s",
    255  1.10      agc 				skeldir, PAX, (verbose) ? "-v" : "", dir);
    256   1.1      agc 	}
    257  1.10      agc 	(void) asystem("%s -R -h %d:%d %s", CHOWN, uid, gid, dir);
    258   1.1      agc 	return n;
    259   1.1      agc }
    260   1.1      agc 
    261   1.1      agc /* create a group entry with gid `gid' */
    262   1.1      agc static int
    263   1.1      agc creategid(char *group, int gid, char *name)
    264   1.1      agc {
    265   1.1      agc 	struct stat	st;
    266   1.1      agc 	FILE		*from;
    267   1.1      agc 	FILE		*to;
    268   1.1      agc 	char		buf[MaxEntryLen];
    269   1.1      agc 	char		f[MaxFileNameLen];
    270   1.1      agc 	int		fd;
    271   1.1      agc 	int		cc;
    272   1.1      agc 
    273  1.12      agc 	if (getgrnam(group) != (struct group *) NULL) {
    274  1.12      agc 		warnx("group `%s' already exists", group);
    275  1.12      agc 		return 0;
    276  1.12      agc 	}
    277   1.1      agc 	if ((from = fopen(ETCGROUP, "r")) == (FILE *) NULL) {
    278   1.1      agc 		warn("can't create gid for %s: can't open %s", name, ETCGROUP);
    279   1.1      agc 		return 0;
    280   1.1      agc 	}
    281   1.1      agc 	if (flock(fileno(from), LOCK_EX | LOCK_NB) < 0) {
    282   1.1      agc 		warn("can't lock `%s'", ETCGROUP);
    283   1.1      agc 	}
    284   1.1      agc 	(void) fstat(fileno(from), &st);
    285   1.1      agc 	(void) snprintf(f, sizeof(f), "%s.XXXXXX", ETCGROUP);
    286   1.1      agc 	if ((fd = mkstemp(f)) < 0) {
    287   1.1      agc 		(void) fclose(from);
    288   1.1      agc 		warn("can't create gid: mkstemp failed");
    289   1.1      agc 		return 0;
    290   1.1      agc 	}
    291   1.1      agc 	if ((to = fdopen(fd, "w")) == (FILE *) NULL) {
    292   1.1      agc 		(void) fclose(from);
    293   1.1      agc 		(void) close(fd);
    294   1.1      agc 		(void) unlink(f);
    295   1.1      agc 		warn("can't create gid: fdopen `%s' failed", f);
    296   1.1      agc 		return 0;
    297   1.1      agc 	}
    298   1.1      agc 	while ((cc = fread(buf, sizeof(char), sizeof(buf), from)) > 0) {
    299   1.1      agc 		if (fwrite(buf, sizeof(char), (unsigned) cc, to) != cc) {
    300   1.1      agc 			(void) fclose(from);
    301   1.1      agc 			(void) close(fd);
    302   1.1      agc 			(void) unlink(f);
    303   1.1      agc 			warn("can't create gid: short write to `%s'", f);
    304   1.1      agc 			return 0;
    305   1.1      agc 		}
    306   1.1      agc 	}
    307   1.1      agc 	(void) fprintf(to, "%s:*:%d:%s\n", group, gid, name);
    308   1.1      agc 	(void) fclose(from);
    309   1.1      agc 	(void) fclose(to);
    310   1.1      agc 	if (rename(f, ETCGROUP) < 0) {
    311   1.1      agc 		warn("can't create gid: can't rename `%s' to `%s'", f, ETCGROUP);
    312   1.1      agc 		return 0;
    313   1.1      agc 	}
    314   1.1      agc 	(void) chmod(ETCGROUP, st.st_mode & 07777);
    315   1.1      agc 	return 1;
    316   1.1      agc }
    317   1.1      agc 
    318   1.1      agc /* modify the group entry with name `group' to be newent */
    319   1.1      agc static int
    320   1.1      agc modify_gid(char *group, char *newent)
    321   1.1      agc {
    322   1.1      agc 	struct stat	st;
    323   1.1      agc 	FILE		*from;
    324   1.1      agc 	FILE		*to;
    325   1.1      agc 	char		buf[MaxEntryLen];
    326   1.1      agc 	char		f[MaxFileNameLen];
    327   1.1      agc 	char		*colon;
    328   1.1      agc 	int		groupc;
    329   1.1      agc 	int		entc;
    330   1.1      agc 	int		fd;
    331   1.1      agc 	int		cc;
    332   1.1      agc 
    333   1.1      agc 	if ((from = fopen(ETCGROUP, "r")) == (FILE *) NULL) {
    334   1.1      agc 		warn("can't create gid for %s: can't open %s", group, ETCGROUP);
    335   1.1      agc 		return 0;
    336   1.1      agc 	}
    337   1.1      agc 	if (flock(fileno(from), LOCK_EX | LOCK_NB) < 0) {
    338   1.1      agc 		warn("can't lock `%s'", ETCGROUP);
    339   1.1      agc 	}
    340   1.1      agc 	(void) fstat(fileno(from), &st);
    341   1.1      agc 	(void) snprintf(f, sizeof(f), "%s.XXXXXX", ETCGROUP);
    342   1.1      agc 	if ((fd = mkstemp(f)) < 0) {
    343   1.1      agc 		(void) fclose(from);
    344   1.1      agc 		warn("can't create gid: mkstemp failed");
    345   1.1      agc 		return 0;
    346   1.1      agc 	}
    347   1.1      agc 	if ((to = fdopen(fd, "w")) == (FILE *) NULL) {
    348   1.1      agc 		(void) fclose(from);
    349   1.1      agc 		(void) close(fd);
    350   1.1      agc 		(void) unlink(f);
    351   1.1      agc 		warn("can't create gid: fdopen `%s' failed", f);
    352   1.1      agc 		return 0;
    353   1.1      agc 	}
    354   1.1      agc 	groupc = strlen(group);
    355  1.15    soren 	while (fgets(buf, sizeof(buf), from) != NULL) {
    356  1.12      agc 		cc = strlen(buf);
    357  1.15    soren 		if ((colon = strchr(buf, ':')) == NULL) {
    358   1.1      agc 			warn("badly formed entry `%s'", buf);
    359   1.1      agc 			continue;
    360   1.1      agc 		}
    361   1.1      agc 		entc = (int)(colon - buf);
    362   1.1      agc 		if (entc == groupc && strncmp(group, buf, (unsigned) entc) == 0) {
    363  1.15    soren 			if (newent == NULL) {
    364   1.1      agc 				continue;
    365   1.1      agc 			} else {
    366   1.1      agc 				cc = strlen(newent);
    367   1.5    lukem 				(void) strlcpy(buf, newent, sizeof(buf));
    368   1.1      agc 			}
    369   1.1      agc 		}
    370   1.1      agc 		if (fwrite(buf, sizeof(char), (unsigned) cc, to) != cc) {
    371   1.1      agc 			(void) fclose(from);
    372   1.1      agc 			(void) close(fd);
    373   1.1      agc 			(void) unlink(f);
    374   1.1      agc 			warn("can't create gid: short write to `%s'", f);
    375   1.1      agc 			return 0;
    376   1.1      agc 		}
    377   1.1      agc 	}
    378   1.1      agc 	(void) fclose(from);
    379   1.1      agc 	(void) fclose(to);
    380   1.1      agc 	if (rename(f, ETCGROUP) < 0) {
    381   1.1      agc 		warn("can't create gid: can't rename `%s' to `%s'", f, ETCGROUP);
    382   1.1      agc 		return 0;
    383   1.1      agc 	}
    384   1.1      agc 	(void) chmod(ETCGROUP, st.st_mode & 07777);
    385   1.1      agc 	return 1;
    386   1.1      agc }
    387   1.1      agc 
    388   1.1      agc /* return 1 if `login' is a valid login name */
    389   1.1      agc static int
    390   1.1      agc valid_login(char *login)
    391   1.1      agc {
    392   1.1      agc 	char	*cp;
    393   1.1      agc 
    394   1.1      agc 	for (cp = login ; *cp ; cp++) {
    395   1.1      agc 		if (!isalnum(*cp) && *cp != '.' && *cp != '_' && *cp != '-') {
    396   1.1      agc 			return 0;
    397   1.1      agc 		}
    398   1.1      agc 	}
    399   1.1      agc 	return 1;
    400   1.1      agc }
    401   1.1      agc 
    402   1.1      agc /* return 1 if `group' is a valid group name */
    403   1.1      agc static int
    404   1.1      agc valid_group(char *group)
    405   1.1      agc {
    406   1.1      agc 	char	*cp;
    407   1.1      agc 
    408   1.1      agc 	for (cp = group ; *cp ; cp++) {
    409   1.1      agc 		if (!isalnum(*cp)) {
    410   1.1      agc 			return 0;
    411   1.1      agc 		}
    412   1.1      agc 	}
    413   1.1      agc 	return 1;
    414   1.1      agc }
    415   1.1      agc 
    416   1.1      agc /* find the next gid in the range lo .. hi */
    417   1.1      agc static int
    418   1.1      agc getnextgid(int *gidp, int lo, int hi)
    419   1.1      agc {
    420   1.1      agc 	for (*gidp = lo ; *gidp < hi ; *gidp += 1) {
    421   1.1      agc 		if (getgrgid((gid_t)*gidp) == (struct group *) NULL) {
    422   1.1      agc 			return 1;
    423   1.1      agc 		}
    424   1.1      agc 	}
    425   1.1      agc 	return 0;
    426   1.1      agc }
    427   1.1      agc 
    428   1.1      agc #ifdef EXTENSIONS
    429   1.1      agc /* save a range of uids */
    430   1.1      agc static int
    431   1.1      agc save_range(user_t *up, char *cp)
    432   1.1      agc {
    433   1.1      agc 	int	from;
    434   1.1      agc 	int	to;
    435   1.1      agc 	int	i;
    436   1.1      agc 
    437   1.1      agc 	if (up->u_rsize == 0) {
    438   1.1      agc 		up->u_rsize = 32;
    439   1.1      agc 		NEWARRAY(range_t, up->u_rv, up->u_rsize, return(0));
    440   1.1      agc 	} else if (up->u_rc == up->u_rsize) {
    441   1.1      agc 		up->u_rsize *= 2;
    442   1.1      agc 		RENEW(range_t, up->u_rv, up->u_rsize, return(0));
    443   1.1      agc 	}
    444   1.1      agc 	if (up->u_rv && sscanf(cp, "%d..%d", &from, &to) == 2) {
    445   1.1      agc 		for (i = 0 ; i < up->u_rc ; i++) {
    446   1.1      agc 			if (up->u_rv[i].r_from == from && up->u_rv[i].r_to == to) {
    447   1.1      agc 				break;
    448   1.1      agc 			}
    449   1.1      agc 		}
    450   1.1      agc 		if (i == up->u_rc) {
    451   1.1      agc 			up->u_rv[up->u_rc].r_from = from;
    452   1.1      agc 			up->u_rv[up->u_rc].r_to = to;
    453   1.1      agc 			up->u_rc += 1;
    454   1.1      agc 		}
    455   1.1      agc 	} else {
    456   1.1      agc 		warnx("Bad range `%s'", cp);
    457   1.1      agc 		return 0;
    458   1.1      agc 	}
    459   1.1      agc 	return 1;
    460   1.1      agc }
    461   1.1      agc #endif
    462   1.1      agc 
    463   1.1      agc /* set the defaults in the defaults file */
    464   1.1      agc static int
    465   1.1      agc setdefaults(user_t *up)
    466   1.1      agc {
    467   1.1      agc 	char	template[MaxFileNameLen];
    468   1.1      agc 	FILE	*fp;
    469   1.1      agc 	int	ret;
    470   1.1      agc 	int	fd;
    471   1.1      agc 	int	i;
    472   1.1      agc 
    473   1.1      agc 	(void) snprintf(template, sizeof(template), "%s.XXXXXX", CONFFILE);
    474   1.1      agc 	if ((fd = mkstemp(template)) < 0) {
    475   1.1      agc 		warnx("can't mkstemp `%s' for writing", CONFFILE);
    476   1.1      agc 		return 0;
    477   1.1      agc 	}
    478   1.1      agc 	if ((fp = fdopen(fd, "w")) == (FILE *) NULL) {
    479   1.1      agc 		warn("can't fdopen `%s' for writing", CONFFILE);
    480   1.1      agc 		return 0;
    481   1.1      agc 	}
    482   1.1      agc 	ret = 1;
    483   1.1      agc 	if (fprintf(fp, "group\t\t%s\n", up->u_primgrp) <= 0 ||
    484   1.1      agc 	    fprintf(fp, "base_dir\t%s\n", up->u_basedir) <= 0 ||
    485   1.1      agc 	    fprintf(fp, "skel_dir\t%s\n", up->u_skeldir) <= 0 ||
    486   1.1      agc 	    fprintf(fp, "shell\t\t%s\n", up->u_shell) <= 0 ||
    487   1.1      agc 	    fprintf(fp, "inactive\t%d\n", up->u_inactive) <= 0 ||
    488  1.15    soren 	    fprintf(fp, "expire\t\t%s\n", (up->u_expire == NULL) ? UNSET_EXPIRY : up->u_expire) <= 0) {
    489   1.1      agc 		warn("can't write to `%s'", CONFFILE);
    490   1.1      agc 		ret = 0;
    491   1.1      agc 	}
    492   1.1      agc #ifdef EXTENSIONS
    493   1.9      agc 	for (i = (up->u_defrc != up->u_rc) ? up->u_defrc : 0 ; i < up->u_rc ; i++) {
    494   1.1      agc 		if (fprintf(fp, "range\t\t%d..%d\n", up->u_rv[i].r_from, up->u_rv[i].r_to) <= 0) {
    495   1.1      agc 			warn("can't write to `%s'", CONFFILE);
    496   1.1      agc 			ret = 0;
    497   1.1      agc 		}
    498   1.1      agc 	}
    499   1.1      agc #endif
    500   1.1      agc 	(void) fclose(fp);
    501   1.1      agc 	if (ret) {
    502   1.1      agc 		ret = ((rename(template, CONFFILE) == 0) && (chmod(CONFFILE, 0644) == 0));
    503   1.1      agc 	}
    504   1.1      agc 	return ret;
    505   1.1      agc }
    506   1.1      agc 
    507   1.1      agc /* read the defaults file */
    508   1.1      agc static void
    509   1.1      agc read_defaults(user_t *up)
    510   1.1      agc {
    511   1.1      agc 	struct stat	st;
    512   1.1      agc 	size_t		lineno;
    513   1.1      agc 	size_t		len;
    514   1.1      agc 	FILE		*fp;
    515   1.1      agc 	char		*cp;
    516   1.1      agc 	char		*s;
    517   1.1      agc 
    518   1.1      agc 	memsave(&up->u_primgrp, DEF_GROUP, strlen(DEF_GROUP));
    519   1.1      agc 	memsave(&up->u_basedir, DEF_BASEDIR, strlen(DEF_BASEDIR));
    520   1.1      agc 	memsave(&up->u_skeldir, DEF_SKELDIR, strlen(DEF_SKELDIR));
    521   1.1      agc 	memsave(&up->u_shell, DEF_SHELL, strlen(DEF_SHELL));
    522   1.1      agc 	memsave(&up->u_comment, DEF_COMMENT, strlen(DEF_COMMENT));
    523   1.1      agc 	up->u_rsize = 16;
    524   1.1      agc 	NEWARRAY(range_t, up->u_rv, up->u_rsize, exit(1));
    525   1.9      agc 	up->u_inactive = DEF_INACTIVE;
    526   1.1      agc 	up->u_expire = DEF_EXPIRE;
    527   1.1      agc 	if ((fp = fopen(CONFFILE, "r")) == (FILE *) NULL) {
    528   1.1      agc 		if (stat(CONFFILE, &st) < 0 && !setdefaults(up)) {
    529   1.1      agc 			warn("can't create `%s' defaults file", CONFFILE);
    530   1.1      agc 		}
    531   1.1      agc 		fp = fopen(CONFFILE, "r");
    532   1.1      agc 	}
    533   1.1      agc 	if (fp != (FILE *) NULL) {
    534  1.15    soren 		while ((s = fparseln(fp, &len, &lineno, NULL, 0)) != NULL) {
    535   1.1      agc 			if (strncmp(s, "group", 5) == 0) {
    536   1.1      agc 				for (cp = s + 5 ; *cp && isspace(*cp) ; cp++) {
    537   1.1      agc 				}
    538   1.1      agc 				memsave(&up->u_primgrp, cp, strlen(cp));
    539   1.1      agc 			} else if (strncmp(s, "base_dir", 8) == 0) {
    540   1.1      agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    541   1.1      agc 				}
    542   1.1      agc 				memsave(&up->u_basedir, cp, strlen(cp));
    543   1.1      agc 			} else if (strncmp(s, "skel_dir", 8) == 0) {
    544   1.1      agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    545   1.1      agc 				}
    546   1.1      agc 				memsave(&up->u_skeldir, cp, strlen(cp));
    547   1.1      agc 			} else if (strncmp(s, "shell", 5) == 0) {
    548   1.1      agc 				for (cp = s + 5 ; *cp && isspace(*cp) ; cp++) {
    549   1.1      agc 				}
    550   1.1      agc 				memsave(&up->u_shell, cp, strlen(cp));
    551   1.1      agc 			} else if (strncmp(s, "inactive", 8) == 0) {
    552   1.1      agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    553   1.1      agc 				}
    554   1.1      agc 				up->u_inactive = atoi(cp);
    555   1.1      agc #ifdef EXTENSIONS
    556   1.1      agc 			} else if (strncmp(s, "range", 5) == 0) {
    557   1.1      agc 				for (cp = s + 5 ; *cp && isspace(*cp) ; cp++) {
    558   1.1      agc 				}
    559   1.1      agc 				(void) save_range(up, cp);
    560   1.1      agc #endif
    561   1.1      agc #ifdef EXTENSIONS
    562   1.1      agc 			} else if (strncmp(s, "preserve", 8) == 0) {
    563   1.1      agc 				for (cp = s + 8 ; *cp && isspace(*cp) ; cp++) {
    564   1.1      agc 				}
    565   1.1      agc 				up->u_preserve = (strncmp(cp, "true", 4) == 0) ? 1 :
    566   1.1      agc 						  (strncmp(cp, "yes", 3) == 0) ? 1 :
    567   1.1      agc 						   atoi(cp);
    568   1.1      agc #endif
    569   1.1      agc 			} else if (strncmp(s, "expire", 6) == 0) {
    570   1.1      agc 				for (cp = s + 6 ; *cp && isspace(*cp) ; cp++) {
    571   1.1      agc 				}
    572   1.1      agc 				if (strcmp(cp, UNSET_EXPIRY) == 0) {
    573   1.1      agc 					if (up->u_expire) {
    574   1.1      agc 						FREE(up->u_expire);
    575   1.1      agc 					}
    576  1.15    soren 					up->u_expire = NULL;
    577   1.1      agc 				} else {
    578   1.1      agc 					memsave(&up->u_expire, cp, strlen(cp));
    579   1.1      agc 				}
    580   1.1      agc 			}
    581   1.1      agc 			(void) free(s);
    582   1.1      agc 		}
    583   1.1      agc 		(void) fclose(fp);
    584   1.1      agc 	}
    585   1.9      agc 	if (up->u_rc == 0) {
    586   1.9      agc 		up->u_rv[up->u_rc].r_from = DEF_LOWUID;
    587   1.9      agc 		up->u_rv[up->u_rc].r_to = DEF_HIGHUID;
    588   1.9      agc 		up->u_rc += 1;
    589   1.9      agc 	}
    590   1.9      agc 	up->u_defrc = up->u_rc;
    591   1.1      agc }
    592   1.1      agc 
    593   1.1      agc /* return the next valid unused uid */
    594   1.1      agc static int
    595   1.1      agc getnextuid(int sync_uid_gid, int *uid, int low_uid, int high_uid)
    596   1.1      agc {
    597   1.1      agc 	for (*uid = low_uid ; *uid <= high_uid ; (*uid)++) {
    598   1.1      agc 		if (getpwuid((uid_t)(*uid)) == (struct passwd *) NULL && *uid != NOBODY_UID) {
    599   1.1      agc 			if (sync_uid_gid) {
    600   1.1      agc 				if (getgrgid((gid_t)(*uid)) == (struct group *) NULL) {
    601   1.1      agc 					return 1;
    602   1.1      agc 				}
    603   1.1      agc 			} else {
    604   1.1      agc 				return 1;
    605   1.1      agc 			}
    606   1.1      agc 		}
    607   1.1      agc 	}
    608   1.1      agc 	return 0;
    609   1.1      agc }
    610   1.1      agc 
    611   1.1      agc /* add a user */
    612   1.1      agc static int
    613   1.1      agc adduser(char *login, user_t *up)
    614   1.1      agc {
    615   1.1      agc 	struct group	*grp;
    616   1.1      agc 	struct stat	st;
    617   1.1      agc 	struct tm	tm;
    618   1.1      agc 	time_t		expire;
    619   1.1      agc 	char		password[PasswordLength + 1];
    620   1.1      agc 	char		home[MaxFileNameLen];
    621   1.1      agc 	char		buf[MaxFileNameLen];
    622   1.1      agc 	int		sync_uid_gid;
    623   1.1      agc 	int		masterfd;
    624   1.1      agc 	int		ptmpfd;
    625   1.1      agc 	int		gid;
    626   1.1      agc 	int		cc;
    627   1.1      agc 	int		i;
    628   1.1      agc 
    629   1.1      agc 	if (!valid_login(login)) {
    630   1.1      agc 		errx(EXIT_FAILURE, "`%s' is not a valid login name", login);
    631   1.1      agc 	}
    632   1.1      agc 	if ((masterfd = open(MASTER, O_RDONLY)) < 0) {
    633   1.1      agc 		err(EXIT_FAILURE, "can't open `%s'", MASTER);
    634   1.1      agc 	}
    635   1.1      agc 	if (flock(masterfd, LOCK_EX | LOCK_NB) < 0) {
    636   1.1      agc 		err(EXIT_FAILURE, "can't lock `%s'", MASTER);
    637   1.1      agc 	}
    638   1.1      agc 	pw_init();
    639   1.1      agc 	if ((ptmpfd = pw_lock(WAITSECS)) < 0) {
    640   1.1      agc 		(void) close(masterfd);
    641   1.1      agc 		err(EXIT_FAILURE, "can't obtain pw_lock");
    642   1.1      agc 	}
    643   1.1      agc 	while ((cc = read(masterfd, buf, sizeof(buf))) > 0) {
    644   1.1      agc 		if (write(ptmpfd, buf, (size_t)(cc)) != cc) {
    645   1.1      agc 			(void) close(masterfd);
    646   1.1      agc 			(void) close(ptmpfd);
    647   1.1      agc 			(void) pw_abort();
    648   1.1      agc 			err(EXIT_FAILURE, "short write to /etc/ptmp (not %d chars)", cc);
    649   1.1      agc 		}
    650   1.1      agc 	}
    651   1.1      agc 	/* if no uid was specified, get next one in [low_uid..high_uid] range */
    652   1.1      agc 	sync_uid_gid = (strcmp(up->u_primgrp, "=uid") == 0);
    653   1.1      agc 	if (up->u_uid == -1) {
    654   1.1      agc 		for (i = 0 ; i < up->u_rc ; i++) {
    655   1.1      agc 			if (getnextuid(sync_uid_gid, &up->u_uid, up->u_rv[i].r_from, up->u_rv[i].r_to)) {
    656   1.1      agc 				break;
    657   1.1      agc 			}
    658   1.1      agc 		}
    659   1.1      agc 		if (i == up->u_rc) {
    660   1.1      agc 			(void) close(ptmpfd);
    661   1.1      agc 			(void) pw_abort();
    662   1.1      agc 			errx(EXIT_FAILURE, "can't get next uid for %d", up->u_uid);
    663   1.1      agc 		}
    664   1.1      agc 	}
    665   1.1      agc 	/* check uid isn't already allocated */
    666   1.1      agc 	if (!up->u_dupuid && getpwuid((uid_t)(up->u_uid)) != (struct passwd *) NULL) {
    667   1.1      agc 		(void) close(ptmpfd);
    668   1.1      agc 		(void) pw_abort();
    669   1.1      agc 		errx(EXIT_FAILURE, "uid %d is already in use", up->u_uid);
    670   1.1      agc 	}
    671   1.1      agc 	/* if -g=uid was specified, check gid is unused */
    672   1.1      agc 	if (sync_uid_gid) {
    673   1.1      agc 		if (getgrgid((gid_t)(up->u_uid)) != (struct group *) NULL) {
    674   1.1      agc 			(void) close(ptmpfd);
    675   1.1      agc 			(void) pw_abort();
    676   1.1      agc 			errx(EXIT_FAILURE, "gid %d is already in use", up->u_uid);
    677   1.1      agc 		}
    678   1.1      agc 		gid = up->u_uid;
    679   1.1      agc 	} else if ((grp = getgrnam(up->u_primgrp)) != (struct group *) NULL) {
    680   1.1      agc 		gid = grp->gr_gid;
    681   1.9      agc 	} else if (is_number(up->u_primgrp) &&
    682   1.9      agc 		   (grp = getgrgid((gid_t)atoi(up->u_primgrp))) != (struct group *) NULL) {
    683   1.1      agc 		gid = grp->gr_gid;
    684   1.1      agc 	} else {
    685   1.1      agc 		(void) close(ptmpfd);
    686   1.1      agc 		(void) pw_abort();
    687   1.1      agc 		errx(EXIT_FAILURE, "group %s not found", up->u_primgrp);
    688   1.1      agc 	}
    689   1.1      agc 	/* check name isn't already in use */
    690   1.1      agc 	if (!up->u_dupuid && getpwnam(login) != (struct passwd *) NULL) {
    691   1.1      agc 		(void) close(ptmpfd);
    692   1.1      agc 		(void) pw_abort();
    693   1.1      agc 		errx(EXIT_FAILURE, "already a `%s' user", login);
    694   1.1      agc 	}
    695  1.13     jlam 	if (up->u_homeset) {
    696  1.13     jlam 		(void) strlcpy(home, up->u_home, sizeof(home));
    697  1.13     jlam 	} else {
    698  1.13     jlam 		/* if home directory hasn't been given, make it up */
    699   1.1      agc 		(void) snprintf(home, sizeof(home), "%s/%s", up->u_basedir, login);
    700   1.1      agc 	}
    701   1.1      agc 	expire = 0;
    702  1.15    soren 	if (up->u_expire != NULL) {
    703   1.1      agc 		(void) memset(&tm, 0, sizeof(tm));
    704  1.15    soren 		if (strptime(up->u_expire, "%c", &tm) == NULL) {
    705   1.1      agc 			warnx("invalid time format `%s'", optarg);
    706   1.1      agc 		} else {
    707   1.1      agc 			expire = mktime(&tm);
    708   1.1      agc 		}
    709   1.1      agc 	}
    710  1.14    soren 	password[PasswordLength] = '\0';
    711  1.15    soren 	if (up->u_password != NULL &&
    712   1.1      agc 	    strlen(up->u_password) == PasswordLength) {
    713   1.1      agc 		(void) memcpy(password, up->u_password, PasswordLength);
    714   1.1      agc 	} else {
    715   1.1      agc 		(void) memset(password, '*', PasswordLength);
    716  1.15    soren 		if (up->u_password != NULL) {
    717   1.2   simonb 			warnx("Password `%s' is invalid: setting it to `%s'",
    718   1.9      agc 				up->u_password, password);
    719   1.1      agc 		}
    720   1.1      agc 	}
    721   1.2   simonb 	cc = snprintf(buf, sizeof(buf), "%s:%s:%d:%d::%d:%ld:%s:%s:%s\n",
    722   1.1      agc 			login,
    723   1.1      agc 			password,
    724   1.1      agc 			up->u_uid,
    725   1.1      agc 			gid,
    726   1.1      agc 			up->u_inactive,
    727   1.9      agc 			(long) expire,
    728   1.1      agc 			up->u_comment,
    729   1.1      agc 			home,
    730   1.1      agc 			up->u_shell);
    731   1.1      agc 	if (write(ptmpfd, buf, (size_t) cc) != cc) {
    732   1.1      agc 		(void) close(ptmpfd);
    733   1.1      agc 		(void) pw_abort();
    734   1.1      agc 		err(EXIT_FAILURE, "can't add `%s'", buf);
    735   1.1      agc 	}
    736   1.1      agc 	if (up->u_mkdir) {
    737   1.1      agc 		if (lstat(home, &st) < 0 && asystem("%s -p %s", MKDIR, home) != 0) {
    738   1.1      agc 			(void) close(ptmpfd);
    739   1.1      agc 			(void) pw_abort();
    740   1.1      agc 			err(EXIT_FAILURE, "can't mkdir `%s'", home);
    741   1.1      agc 		}
    742   1.1      agc 		(void) copydotfiles(up->u_skeldir, up->u_uid, gid, home);
    743   1.1      agc 	}
    744   1.1      agc 	if (strcmp(up->u_primgrp, "=uid") == 0 &&
    745   1.1      agc 	    getgrnam(login) == (struct group *) NULL &&
    746   1.1      agc 	    !creategid(login, gid, login)) {
    747   1.1      agc 		(void) close(ptmpfd);
    748   1.1      agc 		(void) pw_abort();
    749   1.1      agc 		err(EXIT_FAILURE, "can't create gid %d for login name %s", gid, login);
    750   1.1      agc 	}
    751   1.1      agc 	(void) close(ptmpfd);
    752   1.1      agc 	if (pw_mkdb() < 0) {
    753   1.1      agc 		err(EXIT_FAILURE, "pw_mkdb failed");
    754   1.1      agc 	}
    755   1.1      agc 	return 1;
    756   1.1      agc }
    757   1.1      agc 
    758   1.1      agc /* modify a user */
    759   1.1      agc static int
    760   1.1      agc moduser(char *login, char *newlogin, user_t *up)
    761   1.1      agc {
    762   1.1      agc 	struct passwd	*pwp;
    763   1.1      agc 	struct group	*grp;
    764   1.1      agc 	struct tm	tm;
    765   1.1      agc 	time_t		expire;
    766   1.1      agc 	size_t		loginc;
    767   1.1      agc 	size_t		colonc;
    768   1.1      agc 	FILE		*master;
    769   1.1      agc 	char		password[PasswordLength + 1];
    770   1.1      agc 	char		oldhome[MaxFileNameLen];
    771   1.1      agc 	char		home[MaxFileNameLen];
    772   1.1      agc 	char		buf[MaxFileNameLen];
    773   1.1      agc 	char		*colon;
    774   1.1      agc 	int		masterfd;
    775   1.1      agc 	int		ptmpfd;
    776   1.1      agc 	int		gid;
    777   1.1      agc 	int		cc;
    778   1.1      agc 
    779   1.1      agc 	if (!valid_login(newlogin)) {
    780   1.1      agc 		errx(EXIT_FAILURE, "`%s' is not a valid login name", login);
    781   1.1      agc 	}
    782   1.1      agc 	if ((pwp = getpwnam(login)) == (struct passwd *) NULL) {
    783  1.10      agc 		errx(EXIT_FAILURE, "No such user `%s'", login);
    784   1.1      agc 	}
    785   1.1      agc 	if ((masterfd = open(MASTER, O_RDONLY)) < 0) {
    786   1.1      agc 		err(EXIT_FAILURE, "can't open `%s'", MASTER);
    787   1.1      agc 	}
    788   1.1      agc 	if (flock(masterfd, LOCK_EX | LOCK_NB) < 0) {
    789   1.1      agc 		err(EXIT_FAILURE, "can't lock `%s'", MASTER);
    790   1.1      agc 	}
    791   1.1      agc 	pw_init();
    792   1.1      agc 	if ((ptmpfd = pw_lock(WAITSECS)) < 0) {
    793   1.1      agc 		(void) close(masterfd);
    794   1.1      agc 		err(EXIT_FAILURE, "can't obtain pw_lock");
    795   1.1      agc 	}
    796   1.1      agc 	if ((master = fdopen(masterfd, "r")) == (FILE *) NULL) {
    797   1.1      agc 		(void) close(masterfd);
    798   1.1      agc 		(void) close(ptmpfd);
    799   1.1      agc 		(void) pw_abort();
    800   1.1      agc 		err(EXIT_FAILURE, "can't fdopen fd for %s", MASTER);
    801   1.1      agc 	}
    802   1.1      agc 	if (up != (user_t *) NULL) {
    803   1.1      agc 		if (up->u_mkdir) {
    804   1.1      agc 			(void) strcpy(oldhome, pwp->pw_dir);
    805   1.1      agc 		}
    806   1.1      agc 		if (up->u_uid == -1) {
    807   1.1      agc 			up->u_uid = pwp->pw_uid;
    808   1.1      agc 		}
    809   1.1      agc 		/* if -g=uid was specified, check gid is unused */
    810   1.1      agc 		if (strcmp(up->u_primgrp, "=uid") == 0) {
    811   1.1      agc 			if (getgrgid((gid_t)(up->u_uid)) != (struct group *) NULL) {
    812   1.1      agc 				(void) close(ptmpfd);
    813   1.1      agc 				(void) pw_abort();
    814   1.1      agc 				errx(EXIT_FAILURE, "gid %d is already in use", up->u_uid);
    815   1.1      agc 			}
    816   1.1      agc 			gid = up->u_uid;
    817   1.1      agc 		} else if ((grp = getgrnam(up->u_primgrp)) != (struct group *) NULL) {
    818   1.1      agc 			gid = grp->gr_gid;
    819   1.9      agc 		} else if (is_number(up->u_primgrp) &&
    820   1.9      agc 			   (grp = getgrgid((gid_t)atoi(up->u_primgrp))) != (struct group *) NULL) {
    821   1.1      agc 			gid = grp->gr_gid;
    822   1.1      agc 		} else {
    823   1.1      agc 			(void) close(ptmpfd);
    824   1.1      agc 			(void) pw_abort();
    825   1.1      agc 			errx(EXIT_FAILURE, "group %s not found", up->u_primgrp);
    826   1.1      agc 		}
    827   1.1      agc 		/* if changing name, check new name isn't already in use */
    828   1.1      agc 		if (strcmp(login, newlogin) != 0 && getpwnam(newlogin) != (struct passwd *) NULL) {
    829   1.1      agc 			(void) close(ptmpfd);
    830   1.1      agc 			(void) pw_abort();
    831   1.1      agc 			errx(EXIT_FAILURE, "already a `%s' user", newlogin);
    832   1.1      agc 		}
    833   1.1      agc 		/* if home directory hasn't been given, use the old one */
    834   1.1      agc 		if (!up->u_homeset) {
    835   1.1      agc 			(void) strcpy(home, pwp->pw_dir);
    836   1.1      agc 		}
    837   1.1      agc 		expire = 0;
    838  1.15    soren 		if (up->u_expire != NULL) {
    839   1.1      agc 			(void) memset(&tm, 0, sizeof(tm));
    840  1.15    soren 			if (strptime(up->u_expire, "%c", &tm) == NULL) {
    841   1.1      agc 				warnx("invalid time format `%s'", optarg);
    842   1.1      agc 			} else {
    843   1.1      agc 				expire = mktime(&tm);
    844   1.1      agc 			}
    845   1.1      agc 		}
    846  1.14    soren 		password[PasswordLength] = '\0';
    847  1.15    soren 		if (up->u_password != NULL &&
    848   1.1      agc 		    strlen(up->u_password) == PasswordLength) {
    849   1.1      agc 			(void) memcpy(password, up->u_password, PasswordLength);
    850   1.1      agc 		} else {
    851   1.1      agc 			(void) memcpy(password, pwp->pw_passwd, PasswordLength);
    852   1.1      agc 		}
    853   1.1      agc 		if (strcmp(up->u_comment, DEF_COMMENT) == 0) {
    854   1.1      agc 			memsave(&up->u_comment, pwp->pw_gecos, strlen(pwp->pw_gecos));
    855   1.1      agc 		}
    856   1.1      agc 		if (strcmp(up->u_shell, DEF_SHELL) == 0 && strcmp(pwp->pw_shell, DEF_SHELL) != 0) {
    857   1.1      agc 			memsave(&up->u_comment, pwp->pw_shell, strlen(pwp->pw_shell));
    858   1.1      agc 		}
    859   1.1      agc 	}
    860   1.1      agc 	loginc = strlen(login);
    861  1.15    soren 	while (fgets(buf, sizeof(buf), master) != NULL) {
    862   1.1      agc 		cc = strlen(buf);
    863  1.15    soren 		if ((colon = strchr(buf, ':')) == NULL) {
    864   1.1      agc 			warnx("Malformed entry `%s'. Skipping", buf);
    865   1.1      agc 			continue;
    866   1.1      agc 		}
    867   1.1      agc 		colonc = (size_t)(colon - buf);
    868   1.1      agc 		if (strncmp(login, buf, loginc) == 0 && loginc == colonc) {
    869   1.1      agc 			if (up != (user_t *) NULL) {
    870   1.2   simonb 				cc = snprintf(buf, sizeof(buf), "%s:%s:%d:%d::%d:%ld:%s:%s:%s\n",
    871   1.1      agc 					newlogin,
    872   1.1      agc 					password,
    873   1.1      agc 					up->u_uid,
    874   1.1      agc 					gid,
    875   1.1      agc 					up->u_inactive,
    876   1.9      agc 					(long) expire,
    877   1.1      agc 					up->u_comment,
    878   1.1      agc 					home,
    879   1.1      agc 					up->u_shell);
    880   1.1      agc 				if (write(ptmpfd, buf, (size_t) cc) != cc) {
    881   1.1      agc 					(void) close(ptmpfd);
    882   1.1      agc 					(void) pw_abort();
    883   1.1      agc 					err(EXIT_FAILURE, "can't add `%s'", buf);
    884   1.1      agc 				}
    885   1.1      agc 			}
    886   1.1      agc 		} else if (write(ptmpfd, buf, (size_t)(cc)) != cc) {
    887   1.1      agc 			(void) close(masterfd);
    888   1.1      agc 			(void) close(ptmpfd);
    889   1.1      agc 			(void) pw_abort();
    890   1.1      agc 			err(EXIT_FAILURE, "short write to /etc/ptmp (not %d chars)", cc);
    891   1.1      agc 		}
    892   1.1      agc 	}
    893   1.1      agc 	if (up != (user_t *) NULL &&
    894   1.1      agc 	    up->u_mkdir &&
    895   1.1      agc 	    asystem("%s %s %s", MV, oldhome, home) != 0) {
    896   1.1      agc 		(void) close(ptmpfd);
    897   1.1      agc 		(void) pw_abort();
    898   1.1      agc 		err(EXIT_FAILURE, "can't move `%s' to `%s'", oldhome, home);
    899   1.1      agc 	}
    900   1.1      agc 	(void) close(ptmpfd);
    901   1.1      agc 	if (pw_mkdb() < 0) {
    902   1.1      agc 		err(EXIT_FAILURE, "pw_mkdb failed");
    903   1.1      agc 	}
    904   1.1      agc 	return 1;
    905   1.1      agc }
    906   1.1      agc 
    907   1.9      agc 
    908   1.9      agc #ifdef EXTENSIONS
    909   1.9      agc /* see if we can find out the user struct */
    910   1.9      agc static struct passwd *
    911   1.9      agc find_user_info(char *name)
    912   1.9      agc {
    913   1.9      agc 	struct passwd	*pwp;
    914   1.9      agc 
    915   1.9      agc 	if ((pwp = getpwnam(name)) != (struct passwd *) NULL) {
    916   1.9      agc 		return pwp;
    917   1.9      agc 	}
    918   1.9      agc 	if (is_number(name) && (pwp = getpwuid((uid_t)atoi(name))) != (struct passwd *) NULL) {
    919   1.9      agc 		return pwp;
    920   1.9      agc 	}
    921   1.9      agc 	return (struct passwd *) NULL;
    922   1.9      agc }
    923   1.9      agc #endif
    924   1.9      agc 
    925   1.9      agc #ifdef EXTENSIONS
    926   1.9      agc /* see if we can find out the group struct */
    927   1.9      agc static struct group *
    928   1.9      agc find_group_info(char *name)
    929   1.9      agc {
    930   1.9      agc 	struct group	*grp;
    931   1.9      agc 
    932   1.9      agc 	if ((grp = getgrnam(name)) != (struct group *) NULL) {
    933   1.9      agc 		return grp;
    934   1.9      agc 	}
    935   1.9      agc 	if (is_number(name) && (grp = getgrgid((gid_t)atoi(name))) != (struct group *) NULL) {
    936   1.9      agc 		return grp;
    937   1.9      agc 	}
    938   1.9      agc 	return (struct group *) NULL;
    939   1.9      agc }
    940   1.9      agc #endif
    941   1.9      agc 
    942   1.1      agc /* print out usage message, and then exit */
    943   1.9      agc void
    944   1.9      agc usermgmt_usage(char *prog)
    945   1.1      agc {
    946   1.1      agc 	if (strcmp(prog, "useradd") == 0) {
    947  1.16    soren 		(void) fprintf(stderr, "Usage: %s -D [-b basedir] [-e expiry] "
    948  1.16    soren 		    "[-f inactive] [-g group] [-r lowuid..highuid] [-s shell]"
    949  1.16    soren 		    "\n", prog);
    950  1.16    soren 		(void) fprintf(stderr, "Usage: %s [-G group] [-b basedir] "
    951  1.16    soren 		    "[-c comment] [-d homedir] [-e expiry] [-f inactive]\n"
    952  1.16    soren 		    "\t[-g group] [-k skeletondir] [-m] [-o] [-p password] "
    953  1.16    soren 		    "[-r lowuid..highuid] [-s shell]\n\t[-u uid] [-v] user\n",
    954  1.16    soren 		    prog);
    955   1.9      agc 	} else if (strcmp(prog, "usermod") == 0) {
    956  1.16    soren 		(void) fprintf(stderr, "Usage: %s [-G group] [-c comment] "
    957  1.16    soren 		    "[-d homedir] [-e expire] [-f inactive] [-g group] "
    958  1.16    soren 		    "[-l newname] [-m] [-o] [-p password] [-s shell] [-u uid] "
    959  1.16    soren 		    "[-v] user\n", prog);
    960   1.7    lukem 	} else if (strcmp(prog, "userdel") == 0) {
    961   1.9      agc 		(void) fprintf(stderr, "Usage: %s -D [-p preserve]\n", prog);
    962  1.16    soren 		(void) fprintf(stderr, "Usage: %s [-p preserve] [-r] [-v] "
    963  1.16    soren 		    "user\n", prog);
    964   1.9      agc #ifdef EXTENSIONS
    965   1.9      agc 	} else if (strcmp(prog, "userinfo") == 0) {
    966   1.9      agc 		(void) fprintf(stderr, "Usage: %s [-e] [-v] user\n", prog);
    967   1.9      agc #endif
    968   1.1      agc 	} else if (strcmp(prog, "groupadd") == 0) {
    969  1.16    soren 		(void) fprintf(stderr, "Usage: %s [-g gid] [-o] [-v] group\n",
    970  1.16    soren 		    prog);
    971   1.1      agc 	} else if (strcmp(prog, "groupdel") == 0) {
    972   1.9      agc 		(void) fprintf(stderr, "Usage: %s [-v] group\n", prog);
    973   1.1      agc 	} else if (strcmp(prog, "groupmod") == 0) {
    974  1.16    soren 		(void) fprintf(stderr, "Usage: %s [-g gid] [-o] [-n newname] "
    975  1.16    soren 		    "[-v] group\n", prog);
    976   1.9      agc 	} else if (strcmp(prog, "user") == 0 || strcmp(prog, "group") == 0) {
    977  1.16    soren 		(void) fprintf(stderr, "Usage: %s ( add | del | mod ) ...\n",
    978  1.16    soren 		    prog);
    979   1.9      agc #ifdef EXTENSIONS
    980   1.9      agc 	} else if (strcmp(prog, "groupinfo") == 0) {
    981   1.9      agc 		(void) fprintf(stderr, "Usage: %s [-e] [-v] group\n", prog);
    982   1.9      agc #endif
    983   1.1      agc 	}
    984   1.1      agc 	exit(EXIT_FAILURE);
    985   1.1      agc 	/* NOTREACHED */
    986   1.1      agc }
    987   1.1      agc 
    988   1.1      agc #ifdef EXTENSIONS
    989   1.1      agc #define ADD_OPT_EXTENSIONS	"p:r:v"
    990   1.1      agc #else
    991   1.1      agc #define ADD_OPT_EXTENSIONS
    992   1.1      agc #endif
    993   1.1      agc 
    994   1.9      agc int
    995   1.1      agc useradd(int argc, char **argv)
    996   1.1      agc {
    997   1.1      agc 	user_t	u;
    998   1.1      agc 	int	defaultfield;
    999   1.1      agc 	int	bigD;
   1000   1.1      agc 	int	c;
   1001   1.1      agc 	int	i;
   1002   1.1      agc 
   1003   1.1      agc 	(void) memset(&u, 0, sizeof(u));
   1004   1.1      agc 	read_defaults(&u);
   1005   1.1      agc 	u.u_uid = -1;
   1006   1.1      agc 	defaultfield = bigD = 0;
   1007   1.1      agc 	while ((c = getopt(argc, argv, "DG:b:c:d:e:f:g:k:mou:s:" ADD_OPT_EXTENSIONS)) != -1) {
   1008   1.1      agc 		switch(c) {
   1009   1.1      agc 		case 'D':
   1010   1.1      agc 			bigD = 1;
   1011   1.1      agc 			break;
   1012   1.1      agc 		case 'G':
   1013   1.1      agc 			memsave(&u.u_groupv[u.u_groupc++], optarg, strlen(optarg));
   1014   1.1      agc 			break;
   1015   1.1      agc 		case 'b':
   1016   1.1      agc 			defaultfield = 1;
   1017   1.1      agc 			memsave(&u.u_basedir, optarg, strlen(optarg));
   1018   1.1      agc 			break;
   1019   1.1      agc 		case 'c':
   1020   1.1      agc 			memsave(&u.u_comment, optarg, strlen(optarg));
   1021   1.1      agc 			break;
   1022   1.1      agc 		case 'd':
   1023   1.1      agc 			u.u_homeset = 1;
   1024   1.1      agc 			memsave(&u.u_home, optarg, strlen(optarg));
   1025   1.1      agc 			break;
   1026   1.1      agc 		case 'e':
   1027   1.1      agc 			defaultfield = 1;
   1028   1.1      agc 			memsave(&u.u_expire, optarg, strlen(optarg));
   1029   1.1      agc 			break;
   1030   1.1      agc 		case 'f':
   1031   1.1      agc 			defaultfield = 1;
   1032   1.1      agc 			u.u_inactive = atoi(optarg);
   1033   1.1      agc 			break;
   1034   1.1      agc 		case 'g':
   1035   1.1      agc 			defaultfield = 1;
   1036   1.1      agc 			memsave(&u.u_primgrp, optarg, strlen(optarg));
   1037   1.1      agc 			break;
   1038   1.1      agc 		case 'k':
   1039   1.1      agc 			memsave(&u.u_skeldir, optarg, strlen(optarg));
   1040   1.1      agc 			break;
   1041   1.1      agc 		case 'm':
   1042   1.1      agc 			u.u_mkdir = 1;
   1043   1.1      agc 			break;
   1044   1.1      agc 		case 'o':
   1045   1.1      agc 			u.u_dupuid = 1;
   1046   1.1      agc 			break;
   1047   1.1      agc #ifdef EXTENSIONS
   1048   1.1      agc 		case 'p':
   1049   1.1      agc 			memsave(&u.u_password, optarg, strlen(optarg));
   1050   1.1      agc 			break;
   1051   1.1      agc #endif
   1052   1.1      agc #ifdef EXTENSIONS
   1053   1.1      agc 		case 'r':
   1054   1.1      agc 			defaultfield = 1;
   1055   1.1      agc 			(void) save_range(&u, optarg);
   1056   1.1      agc 			break;
   1057   1.1      agc #endif
   1058   1.1      agc 		case 's':
   1059   1.1      agc 			defaultfield = 1;
   1060   1.1      agc 			memsave(&u.u_shell, optarg, strlen(optarg));
   1061   1.1      agc 			break;
   1062   1.1      agc 		case 'u':
   1063   1.9      agc 			if (!is_number(optarg)) {
   1064   1.9      agc 				errx(EXIT_FAILURE, "When using [-u uid], the uid must be numeric");
   1065   1.9      agc 			}
   1066   1.1      agc 			u.u_uid = atoi(optarg);
   1067   1.1      agc 			break;
   1068   1.1      agc #ifdef EXTENSIONS
   1069   1.1      agc 		case 'v':
   1070   1.1      agc 			verbose = 1;
   1071   1.1      agc 			break;
   1072   1.1      agc #endif
   1073   1.1      agc 		}
   1074   1.1      agc 	}
   1075   1.1      agc 	if (bigD) {
   1076   1.1      agc 		if (defaultfield) {
   1077   1.9      agc 			checkeuid();
   1078   1.1      agc 			return setdefaults(&u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1079   1.1      agc 		}
   1080   1.1      agc 		(void) printf("group\t\t%s\n", u.u_primgrp);
   1081   1.1      agc 		(void) printf("base_dir\t%s\n", u.u_basedir);
   1082   1.1      agc 		(void) printf("skel_dir\t%s\n", u.u_skeldir);
   1083   1.1      agc 		(void) printf("shell\t\t%s\n", u.u_shell);
   1084   1.1      agc 		(void) printf("inactive\t%d\n", u.u_inactive);
   1085  1.15    soren 		(void) printf("expire\t\t%s\n", (u.u_expire == NULL) ? UNSET_EXPIRY : u.u_expire);
   1086   1.1      agc #ifdef EXTENSIONS
   1087   1.1      agc 		for (i = 0 ; i < u.u_rc ; i++) {
   1088   1.1      agc 			(void) printf("range\t\t%d..%d\n", u.u_rv[i].r_from, u.u_rv[i].r_to);
   1089   1.1      agc 		}
   1090   1.1      agc #endif
   1091   1.1      agc 		return EXIT_SUCCESS;
   1092   1.1      agc 	}
   1093   1.1      agc 	if (argc == optind) {
   1094   1.9      agc 		usermgmt_usage("useradd");
   1095   1.1      agc 	}
   1096   1.9      agc 	checkeuid();
   1097   1.1      agc 	return adduser(argv[optind], &u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1098   1.1      agc }
   1099   1.1      agc 
   1100   1.1      agc #ifdef EXTENSIONS
   1101   1.1      agc #define MOD_OPT_EXTENSIONS	"p:v"
   1102   1.1      agc #else
   1103   1.1      agc #define MOD_OPT_EXTENSIONS
   1104   1.1      agc #endif
   1105   1.1      agc 
   1106   1.9      agc int
   1107   1.1      agc usermod(int argc, char **argv)
   1108   1.1      agc {
   1109   1.1      agc 	user_t	u;
   1110   1.1      agc 	char	newuser[MaxUserNameLen + 1];
   1111   1.1      agc 	int	have_new_user;
   1112   1.1      agc 	int	c;
   1113   1.1      agc 
   1114   1.1      agc 	(void) memset(&u, 0, sizeof(u));
   1115   1.1      agc 	(void) memset(newuser, 0, sizeof(newuser));
   1116   1.1      agc 	read_defaults(&u);
   1117   1.1      agc 	u.u_uid = -1;
   1118   1.1      agc 	have_new_user = 0;
   1119   1.1      agc 	while ((c = getopt(argc, argv, "G:c:d:e:f:g:l:mos:u:" MOD_OPT_EXTENSIONS)) != -1) {
   1120   1.1      agc 		switch(c) {
   1121   1.1      agc 		case 'G':
   1122   1.1      agc 			memsave(&u.u_groupv[u.u_groupc++], optarg, strlen(optarg));
   1123   1.1      agc 			break;
   1124   1.1      agc 		case 'c':
   1125   1.1      agc 			memsave(&u.u_comment, optarg, strlen(optarg));
   1126   1.1      agc 			break;
   1127   1.1      agc 		case 'd':
   1128   1.1      agc 			u.u_homeset = 1;
   1129   1.1      agc 			memsave(&u.u_home, optarg, strlen(optarg));
   1130   1.1      agc 			break;
   1131   1.1      agc 		case 'e':
   1132   1.1      agc 			memsave(&u.u_expire, optarg, strlen(optarg));
   1133   1.1      agc 			break;
   1134   1.1      agc 		case 'f':
   1135   1.1      agc 			u.u_inactive = atoi(optarg);
   1136   1.1      agc 			break;
   1137   1.1      agc 		case 'g':
   1138   1.1      agc 			memsave(&u.u_primgrp, optarg, strlen(optarg));
   1139   1.1      agc 			break;
   1140   1.1      agc 		case 'l':
   1141   1.1      agc 			have_new_user = 1;
   1142   1.5    lukem 			(void) strlcpy(newuser, optarg, sizeof(newuser));
   1143   1.1      agc 			break;
   1144   1.1      agc 		case 'm':
   1145   1.1      agc 			u.u_mkdir = 1;
   1146   1.1      agc 			break;
   1147   1.1      agc 		case 'o':
   1148   1.1      agc 			u.u_dupuid = 1;
   1149   1.1      agc 			break;
   1150   1.1      agc #ifdef EXTENSIONS
   1151   1.1      agc 		case 'p':
   1152   1.1      agc 			memsave(&u.u_password, optarg, strlen(optarg));
   1153   1.1      agc 			break;
   1154   1.1      agc #endif
   1155   1.1      agc 		case 's':
   1156   1.1      agc 			memsave(&u.u_shell, optarg, strlen(optarg));
   1157   1.1      agc 			break;
   1158   1.1      agc 		case 'u':
   1159   1.9      agc 			if (!is_number(optarg)) {
   1160   1.9      agc 				errx(EXIT_FAILURE, "When using [-u uid], the uid must be numeric");
   1161   1.9      agc 			}
   1162   1.1      agc 			u.u_uid = atoi(optarg);
   1163   1.1      agc 			break;
   1164   1.1      agc #ifdef EXTENSIONS
   1165   1.1      agc 		case 'v':
   1166   1.1      agc 			verbose = 1;
   1167   1.1      agc 			break;
   1168   1.1      agc #endif
   1169   1.1      agc 		}
   1170   1.1      agc 	}
   1171   1.1      agc 	if (argc == optind) {
   1172   1.9      agc 		usermgmt_usage("usermod");
   1173   1.1      agc 	}
   1174  1.16    soren 	checkeuid();
   1175   1.1      agc 	return moduser(argv[optind], (have_new_user) ? newuser : argv[optind], &u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1176   1.1      agc }
   1177   1.1      agc 
   1178   1.1      agc #ifdef EXTENSIONS
   1179   1.1      agc #define DEL_OPT_EXTENSIONS	"Dp:v"
   1180   1.1      agc #else
   1181   1.1      agc #define DEL_OPT_EXTENSIONS
   1182   1.1      agc #endif
   1183   1.1      agc 
   1184   1.9      agc int
   1185   1.1      agc userdel(int argc, char **argv)
   1186   1.1      agc {
   1187   1.1      agc 	struct passwd	*pwp;
   1188   1.1      agc 	struct stat	st;
   1189   1.1      agc 	user_t		u;
   1190   1.1      agc 	char		password[PasswordLength + 1];
   1191   1.1      agc 	int		defaultfield;
   1192   1.1      agc 	int		rmhome;
   1193   1.1      agc 	int		bigD;
   1194   1.1      agc 	int		c;
   1195   1.1      agc 
   1196   1.1      agc 	(void) memset(&u, 0, sizeof(u));
   1197   1.1      agc 	read_defaults(&u);
   1198   1.1      agc 	defaultfield = bigD = rmhome = 0;
   1199   1.1      agc 	while ((c = getopt(argc, argv, "r" DEL_OPT_EXTENSIONS)) != -1) {
   1200   1.1      agc 		switch(c) {
   1201   1.1      agc #ifdef EXTENSIONS
   1202   1.1      agc 		case 'D':
   1203   1.1      agc 			bigD = 1;
   1204   1.1      agc 			break;
   1205   1.1      agc #endif
   1206   1.1      agc #ifdef EXTENSIONS
   1207   1.1      agc 		case 'p':
   1208   1.1      agc 			defaultfield = 1;
   1209   1.1      agc 			u.u_preserve = (strcmp(optarg, "true") == 0) ? 1 :
   1210   1.1      agc 					(strcmp(optarg, "yes") == 0) ? 1 :
   1211   1.1      agc 					 atoi(optarg);
   1212   1.1      agc 			break;
   1213   1.1      agc #endif
   1214   1.1      agc 		case 'r':
   1215   1.1      agc 			rmhome = 1;
   1216   1.1      agc 			break;
   1217   1.1      agc #ifdef EXTENSIONS
   1218   1.1      agc 		case 'v':
   1219   1.1      agc 			verbose = 1;
   1220   1.1      agc 			break;
   1221   1.1      agc #endif
   1222   1.1      agc 		}
   1223   1.1      agc 	}
   1224   1.1      agc #ifdef EXTENSIONS
   1225   1.1      agc 	if (bigD) {
   1226   1.1      agc 		if (defaultfield) {
   1227   1.9      agc 			checkeuid();
   1228   1.1      agc 			return setdefaults(&u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1229   1.1      agc 		}
   1230   1.1      agc 		(void) printf("preserve\t%s\n", (u.u_preserve) ? "true" : "false");
   1231   1.1      agc 		return EXIT_SUCCESS;
   1232   1.1      agc 	}
   1233   1.1      agc #endif
   1234   1.1      agc 	if (argc == optind) {
   1235   1.9      agc 		usermgmt_usage("userdel");
   1236   1.1      agc 	}
   1237   1.9      agc 	checkeuid();
   1238   1.1      agc 	if ((pwp = getpwnam(argv[optind])) == (struct passwd *) NULL) {
   1239  1.10      agc 		warnx("No such user `%s'", argv[optind]);
   1240   1.1      agc 		return EXIT_FAILURE;
   1241   1.1      agc 	}
   1242   1.1      agc 	if (rmhome) {
   1243   1.1      agc 		if (stat(pwp->pw_dir, &st) < 0) {
   1244   1.1      agc 			warn("Home directory `%s' does not exist", pwp->pw_dir);
   1245   1.1      agc 			return EXIT_FAILURE;
   1246   1.1      agc 		}
   1247   1.1      agc 		(void) asystem("%s -rf %s", RM, pwp->pw_dir);
   1248   1.1      agc 	}
   1249   1.1      agc 	if (u.u_preserve) {
   1250  1.10      agc 		memsave(&u.u_shell, NOLOGIN, strlen(NOLOGIN));
   1251   1.1      agc 		(void) memset(password, '*', PasswordLength);
   1252  1.14    soren 		password[PasswordLength] = '\0';
   1253   1.1      agc 		memsave(&u.u_password, password, PasswordLength);
   1254   1.1      agc 		return moduser(argv[optind], argv[optind], &u) ? EXIT_SUCCESS : EXIT_FAILURE;
   1255   1.1      agc 	}
   1256   1.1      agc 	return moduser(argv[optind], argv[optind], (user_t *) NULL) ? EXIT_SUCCESS : EXIT_FAILURE;
   1257   1.1      agc }
   1258   1.1      agc 
   1259   1.1      agc #ifdef EXTENSIONS
   1260   1.1      agc #define GROUP_ADD_OPT_EXTENSIONS	"v"
   1261   1.1      agc #else
   1262   1.1      agc #define GROUP_ADD_OPT_EXTENSIONS
   1263   1.1      agc #endif
   1264   1.1      agc 
   1265   1.1      agc /* add a group */
   1266   1.1      agc int
   1267   1.1      agc groupadd(int argc, char **argv)
   1268   1.1      agc {
   1269   1.1      agc 	int	dupgid;
   1270   1.1      agc 	int	gid;
   1271   1.1      agc 	int	c;
   1272   1.1      agc 
   1273   1.1      agc 	gid = -1;
   1274   1.1      agc 	dupgid = 0;
   1275   1.1      agc 	while ((c = getopt(argc, argv, "g:o" GROUP_ADD_OPT_EXTENSIONS)) != -1) {
   1276   1.1      agc 		switch(c) {
   1277   1.1      agc 		case 'g':
   1278   1.9      agc 			if (!is_number(optarg)) {
   1279   1.9      agc 				errx(EXIT_FAILURE, "When using [-g gid], the gid must be numeric");
   1280   1.9      agc 			}
   1281   1.1      agc 			gid = atoi(optarg);
   1282   1.1      agc 			break;
   1283   1.1      agc 		case 'o':
   1284   1.1      agc 			dupgid = 1;
   1285   1.1      agc 			break;
   1286   1.1      agc #ifdef EXTENSIONS
   1287   1.1      agc 		case 'v':
   1288   1.1      agc 			verbose = 1;
   1289   1.1      agc 			break;
   1290   1.1      agc #endif
   1291   1.1      agc 		}
   1292   1.1      agc 	}
   1293   1.1      agc 	if (argc == optind) {
   1294   1.9      agc 		usermgmt_usage("groupadd");
   1295   1.1      agc 	}
   1296  1.16    soren 	checkeuid();
   1297   1.1      agc 	if (gid < 0 && !getnextgid(&gid, LowGid, HighGid)) {
   1298   1.1      agc 		err(EXIT_FAILURE, "can't add group: can't get next gid");
   1299   1.1      agc 	}
   1300   1.1      agc 	if (!dupgid && getgrgid((gid_t) gid) != (struct group *) NULL) {
   1301   1.9      agc 		errx(EXIT_FAILURE, "can't add group: gid %d is a duplicate", gid);
   1302   1.1      agc 	}
   1303   1.1      agc 	if (!valid_group(argv[optind])) {
   1304   1.9      agc 		warnx("warning - invalid group name `%s'", argv[optind]);
   1305   1.1      agc 	}
   1306   1.1      agc 	if (!creategid(argv[optind], gid, "")) {
   1307   1.1      agc 		err(EXIT_FAILURE, "can't add group: problems with %s file", ETCGROUP);
   1308   1.1      agc 	}
   1309   1.1      agc 	return EXIT_SUCCESS;
   1310   1.1      agc }
   1311   1.1      agc 
   1312   1.1      agc #ifdef EXTENSIONS
   1313   1.1      agc #define GROUP_DEL_OPT_EXTENSIONS	"v"
   1314   1.1      agc #else
   1315   1.1      agc #define GROUP_DEL_OPT_EXTENSIONS
   1316   1.1      agc #endif
   1317   1.1      agc 
   1318   1.1      agc /* remove a group */
   1319   1.1      agc int
   1320   1.1      agc groupdel(int argc, char **argv)
   1321   1.1      agc {
   1322   1.1      agc 	int	c;
   1323   1.1      agc 
   1324   1.1      agc 	while ((c = getopt(argc, argv, "" GROUP_DEL_OPT_EXTENSIONS)) != -1) {
   1325   1.1      agc 		switch(c) {
   1326   1.1      agc #ifdef EXTENSIONS
   1327   1.1      agc 		case 'v':
   1328   1.1      agc 			verbose = 1;
   1329   1.1      agc 			break;
   1330   1.1      agc #endif
   1331   1.1      agc 		}
   1332   1.1      agc 	}
   1333   1.1      agc 	if (argc == optind) {
   1334   1.9      agc 		usermgmt_usage("groupdel");
   1335   1.1      agc 	}
   1336  1.16    soren 	checkeuid();
   1337  1.15    soren 	if (!modify_gid(argv[optind], NULL)) {
   1338   1.1      agc 		err(EXIT_FAILURE, "can't change %s file", ETCGROUP);
   1339   1.1      agc 	}
   1340   1.1      agc 	return EXIT_SUCCESS;
   1341   1.1      agc }
   1342   1.1      agc 
   1343   1.1      agc #ifdef EXTENSIONS
   1344   1.1      agc #define GROUP_MOD_OPT_EXTENSIONS	"v"
   1345   1.1      agc #else
   1346   1.1      agc #define GROUP_MOD_OPT_EXTENSIONS
   1347   1.1      agc #endif
   1348   1.1      agc 
   1349   1.1      agc /* modify a group */
   1350   1.1      agc int
   1351   1.1      agc groupmod(int argc, char **argv)
   1352   1.1      agc {
   1353   1.1      agc 	struct group	*grp;
   1354   1.1      agc 	char		buf[MaxEntryLen];
   1355   1.1      agc 	char		*newname;
   1356   1.1      agc 	char		**cpp;
   1357   1.1      agc 	int		dupgid;
   1358   1.1      agc 	int		gid;
   1359   1.1      agc 	int		cc;
   1360   1.1      agc 	int		c;
   1361   1.1      agc 
   1362   1.1      agc 	gid = -1;
   1363   1.1      agc 	dupgid = 0;
   1364  1.15    soren 	newname = NULL;
   1365   1.1      agc 	while ((c = getopt(argc, argv, "g:on:" GROUP_MOD_OPT_EXTENSIONS)) != -1) {
   1366   1.1      agc 		switch(c) {
   1367   1.1      agc 		case 'g':
   1368   1.9      agc 			if (!is_number(optarg)) {
   1369   1.9      agc 				errx(EXIT_FAILURE, "When using [-g gid], the gid must be numeric");
   1370   1.9      agc 			}
   1371   1.1      agc 			gid = atoi(optarg);
   1372   1.1      agc 			break;
   1373   1.1      agc 		case 'o':
   1374   1.1      agc 			dupgid = 1;
   1375   1.1      agc 			break;
   1376   1.1      agc 		case 'n':
   1377   1.1      agc 			memsave(&newname, optarg, strlen(optarg));
   1378   1.1      agc 			break;
   1379   1.1      agc #ifdef EXTENSIONS
   1380   1.1      agc 		case 'v':
   1381   1.1      agc 			verbose = 1;
   1382   1.1      agc 			break;
   1383   1.1      agc #endif
   1384   1.1      agc 		}
   1385   1.1      agc 	}
   1386   1.1      agc 	if (argc == optind) {
   1387   1.9      agc 		usermgmt_usage("groupmod");
   1388   1.1      agc 	}
   1389  1.16    soren 	checkeuid();
   1390  1.15    soren 	if (gid < 0 && newname == NULL) {
   1391   1.1      agc 		err(EXIT_FAILURE, "Nothing to change");
   1392   1.1      agc 	}
   1393   1.1      agc 	if (dupgid && gid < 0) {
   1394   1.1      agc 		err(EXIT_FAILURE, "Duplicate which gid?");
   1395   1.1      agc 	}
   1396   1.1      agc 	if ((grp = getgrnam(argv[optind])) == (struct group *) NULL) {
   1397   1.1      agc 		err(EXIT_FAILURE, "can't find group `%s' to modify", argv[optind]);
   1398   1.1      agc 	}
   1399  1.15    soren 	if (newname != NULL && !valid_group(newname)) {
   1400   1.1      agc 		warn("warning - invalid group name `%s'", newname);
   1401   1.1      agc 	}
   1402   1.1      agc 	cc = snprintf(buf, sizeof(buf), "%s:%s:%d:",
   1403   1.1      agc 			(newname) ? newname : grp->gr_name,
   1404   1.1      agc 			grp->gr_passwd,
   1405   1.1      agc 			(gid < 0) ? grp->gr_gid : gid);
   1406   1.1      agc 	for (cpp = grp->gr_mem ; *cpp && cc < sizeof(buf) ; cpp++) {
   1407   1.1      agc 		cc += snprintf(&buf[cc], sizeof(buf) - cc, "%s%s", *cpp,
   1408  1.15    soren 			(cpp[1] == NULL) ? "" : ",");
   1409   1.1      agc 	}
   1410   1.1      agc 	if (!modify_gid(argv[optind], buf)) {
   1411   1.1      agc 		err(EXIT_FAILURE, "can't change %s file", ETCGROUP);
   1412   1.1      agc 	}
   1413   1.1      agc 	return EXIT_SUCCESS;
   1414   1.1      agc }
   1415   1.1      agc 
   1416   1.9      agc #ifdef EXTENSIONS
   1417   1.9      agc /* display user information */
   1418   1.9      agc int
   1419   1.9      agc userinfo(int argc, char **argv)
   1420   1.9      agc {
   1421   1.9      agc 	struct passwd	*pwp;
   1422   1.9      agc 	struct group	*grp;
   1423   1.9      agc 	char		buf[MaxEntryLen];
   1424   1.9      agc 	char		**cpp;
   1425   1.9      agc 	int		exists;
   1426   1.9      agc 	int		cc;
   1427   1.9      agc 	int		i;
   1428   1.1      agc 
   1429   1.9      agc 	exists = 0;
   1430   1.9      agc 	while ((i = getopt(argc, argv, "ev")) != -1) {
   1431   1.9      agc 		switch(i) {
   1432   1.9      agc 		case 'e':
   1433   1.9      agc 			exists = 1;
   1434   1.9      agc 			break;
   1435   1.9      agc 		case 'v':
   1436   1.9      agc 			verbose = 1;
   1437   1.9      agc 			break;
   1438   1.9      agc 		}
   1439   1.9      agc 	}
   1440   1.9      agc 	if (argc == optind) {
   1441   1.9      agc 		usermgmt_usage("userinfo");
   1442   1.9      agc 	}
   1443   1.9      agc 	pwp = find_user_info(argv[optind]);
   1444   1.9      agc 	if (exists) {
   1445   1.9      agc 		exit((pwp) ? EXIT_SUCCESS : EXIT_FAILURE);
   1446   1.9      agc 	}
   1447   1.9      agc 	if (pwp == (struct passwd *) NULL) {
   1448   1.9      agc 		errx(EXIT_FAILURE, "can't find user `%s'", argv[optind]);
   1449   1.9      agc 	}
   1450   1.9      agc 	(void) printf("login\t%s\n", pwp->pw_name);
   1451   1.9      agc 	(void) printf("passwd\t%s\n", pwp->pw_passwd);
   1452   1.9      agc 	(void) printf("uid\t%d\n", pwp->pw_uid);
   1453   1.9      agc 	for (cc = 0 ; (grp = getgrent()) != (struct group *) NULL ; ) {
   1454   1.9      agc 		for (cpp = grp->gr_mem ; *cpp ; cpp++) {
   1455   1.9      agc 			if (strcmp(*cpp, argv[optind]) == 0 && grp->gr_gid != pwp->pw_gid) {
   1456   1.9      agc 				cc += snprintf(&buf[cc], sizeof(buf) - cc, "%s ", grp->gr_name);
   1457   1.9      agc 			}
   1458   1.9      agc 		}
   1459   1.9      agc 	}
   1460   1.9      agc 	if ((grp = getgrgid(pwp->pw_gid)) == (struct group *) NULL) {
   1461   1.9      agc 		(void) printf("groups\t%d %s\n", pwp->pw_gid, buf);
   1462   1.9      agc 	} else {
   1463   1.9      agc 		(void) printf("groups\t%s %s\n", grp->gr_name, buf);
   1464   1.9      agc 	}
   1465   1.9      agc 	(void) printf("change\t%s", ctime(&pwp->pw_change));
   1466   1.9      agc 	(void) printf("class\t%s\n", pwp->pw_class);
   1467   1.9      agc 	(void) printf("gecos\t%s\n", pwp->pw_gecos);
   1468   1.9      agc 	(void) printf("dir\t%s\n", pwp->pw_dir);
   1469   1.9      agc 	(void) printf("shell\t%s\n", pwp->pw_shell);
   1470   1.9      agc 	(void) printf("expire\t%s", ctime(&pwp->pw_expire));
   1471   1.9      agc 	return EXIT_SUCCESS;
   1472   1.9      agc }
   1473   1.9      agc #endif
   1474   1.1      agc 
   1475   1.9      agc #ifdef EXTENSIONS
   1476   1.9      agc /* display user information */
   1477   1.1      agc int
   1478   1.9      agc groupinfo(int argc, char **argv)
   1479   1.1      agc {
   1480   1.9      agc 	struct group	*grp;
   1481   1.9      agc 	char		**cpp;
   1482   1.9      agc 	int		exists;
   1483   1.9      agc 	int		i;
   1484   1.1      agc 
   1485   1.9      agc 	exists = 0;
   1486   1.9      agc 	while ((i = getopt(argc, argv, "ev")) != -1) {
   1487   1.9      agc 		switch(i) {
   1488   1.9      agc 		case 'e':
   1489   1.9      agc 			exists = 1;
   1490   1.9      agc 			break;
   1491   1.9      agc 		case 'v':
   1492   1.9      agc 			verbose = 1;
   1493   1.9      agc 			break;
   1494   1.9      agc 		}
   1495   1.9      agc 	}
   1496   1.9      agc 	if (argc == optind) {
   1497   1.9      agc 		usermgmt_usage("groupinfo");
   1498   1.9      agc 	}
   1499   1.9      agc 	grp = find_group_info(argv[optind]);
   1500   1.9      agc 	if (exists) {
   1501   1.9      agc 		exit((grp) ? EXIT_SUCCESS : EXIT_FAILURE);
   1502   1.9      agc 	}
   1503   1.9      agc 	if (grp == (struct group *) NULL) {
   1504   1.9      agc 		errx(EXIT_FAILURE, "can't find group `%s'", argv[optind]);
   1505   1.9      agc 	}
   1506   1.9      agc 	(void) printf("name\t%s\n", grp->gr_name);
   1507   1.9      agc 	(void) printf("passwd\t%s\n", grp->gr_passwd);
   1508   1.9      agc 	(void) printf("gid\t%d\n", grp->gr_gid);
   1509   1.9      agc 	(void) printf("members\t");
   1510   1.9      agc 	for (cpp = grp->gr_mem ; *cpp ; cpp++) {
   1511   1.9      agc 		(void) printf("%s ", *cpp);
   1512   1.9      agc 	}
   1513   1.9      agc 	(void) fputc('\n', stdout);
   1514   1.9      agc 	return EXIT_SUCCESS;
   1515   1.1      agc }
   1516   1.9      agc #endif
   1517