initial commit of file from CVS for smeserver-lazy_admin_tools on Sat Sep 7 20:29:45 AEST 2024
This commit is contained in:
Trevor Batley
370
root/usr/sbin/lat-ibays
Normal file
370
root/usr/sbin/lat-ibays
Normal file
@@ -0,0 +1,370 @@
|
||||
#!/usr/bin/perl -w
|
||||
#==============================================================================
|
||||
# lat-users
|
||||
# =========
|
||||
# 0.9.0 (2004-09-08)
|
||||
# (c)2003-2004 Altiplano bvba
|
||||
#==============================================================================
|
||||
package esmith;
|
||||
use strict;
|
||||
use esmith::db;
|
||||
use esmith::util;
|
||||
use Getopt::Long;
|
||||
use Pod::Usage;
|
||||
my %conf;
|
||||
tie %conf, 'esmith::config';
|
||||
my %accounts;
|
||||
tie %accounts, 'esmith::config', '/home/e-smith/db/accounts';
|
||||
my ($Hlp, $Cml, $Frc, $Inp);
|
||||
my $Add =0;
|
||||
my $Del =0;
|
||||
|
||||
#==============================================================================
|
||||
# Main
|
||||
#==============================================================================
|
||||
# Analyze commandline options
|
||||
GetOptions ("help" => \$Hlp,
|
||||
"add" => \$Add,
|
||||
"delete" => \$Del,
|
||||
"force" => \$Frc,
|
||||
"command-line=s" => \$Cml,
|
||||
"input-file=s" => \$Inp);
|
||||
|
||||
if ( $Hlp ) { &PrintPod(9); exit; }
|
||||
|
||||
# We need one argument or the other, but not both
|
||||
if ((($Cml && $Inp) || (! $Cml && ! $Inp)) ||
|
||||
($Add + $Del != 1))
|
||||
{ &PrintPod(1); exit; }
|
||||
|
||||
my @records;
|
||||
if ($Inp) {
|
||||
open(LIST,"< $Inp") || die "Can't find $Inp.\n";
|
||||
@records = grep(!/(^\s*#)|(^\s*$)/,<LIST>);
|
||||
close(LIST); }
|
||||
elsif ($Cml) { @records=($Cml); }
|
||||
else { &PrintPod(1); exit; }
|
||||
|
||||
# Add ibays
|
||||
if ($Add) {
|
||||
# Process each ibay
|
||||
foreach my $record (@records)
|
||||
{
|
||||
my @fields=split(/\|/,$record);
|
||||
for (my $cnt=0; $cnt <= $#fields; ++$cnt) { for ($fields[$cnt]) { s/^\s+//; s/\s+$//; }}
|
||||
my $ibayname = $fields[0];
|
||||
my $password = ""; if ($fields[5]) { $password = $fields[5] }
|
||||
|
||||
my $uid;
|
||||
if ($fields[7]) { $uid = $fields[7]; }
|
||||
else { $uid = &FindUid;}
|
||||
if (&TestUid($uid)) {
|
||||
my %ibay;
|
||||
if ( $fields[1] ) { $ibay{'Name'} = $fields[1] } else { $ibay{'Name'} = $ibayname }
|
||||
if ( $fields[2] ) { $ibay{'Group'} = $fields[2] } else
|
||||
{die "We need a valid group to create '$ibayname'.\a\n";}
|
||||
if ( $fields[3] ) { $ibay{'UserAccess'} = $fields[3] } else { $ibay{'UserAccess'} = "wr-admin-rd-group" }
|
||||
if ( $fields[4] ) { $ibay{'PublicAccess'} = $fields[4] } else { $ibay{'PublicAccess'} = "local-pw" }
|
||||
if ( $fields[5] ) { $ibay{'PasswordSet'} = "yes" } else { $ibay{'PasswordSet'} = "no" }
|
||||
if ( $fields[6] ) { $ibay{'CgiBin'} = $fields[6] } else { $ibay{'CgiBin'} = "disabled" }
|
||||
$ibay{'Uid'} = $uid;
|
||||
$ibay{'Gid'} = $uid;
|
||||
|
||||
if (&ValidArguments(\%ibay, $ibayname, $password)) {
|
||||
print "Creating ibay '$ibayname' (Uid:$uid).\n";
|
||||
db_set(\%accounts, $ibayname, 'ibay', \%ibay);
|
||||
system("/sbin/e-smith/signal-event", "ibay-create", $ibayname) == 0 or
|
||||
die ("An error occurred while creating ibay '$ibayname'.\n");
|
||||
# Set password
|
||||
if ($ibay{'PasswordSet'} eq 'yes') { esmith::util::setIbayPassword($ibayname, $password); }
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Delete ibays
|
||||
if ($Del) {
|
||||
&ExpandWildCard; # Check for wildcards and expand if necessary
|
||||
foreach my $record (@records)
|
||||
{
|
||||
my @fields=split(/\|/,$record);
|
||||
for (my $cnt=0; $cnt <= $#fields; ++$cnt) { for ($fields[$cnt]) { s/^\s+//; s/\s+$//; }}
|
||||
my $ibayname = $fields[0];
|
||||
my $password = ""; if ($fields[5]) { $password = $fields[5] }
|
||||
|
||||
if ((db_get(\%accounts, $ibayname)) &&
|
||||
(db_get_type(\%accounts, $ibayname)) eq "ibay") {
|
||||
my $yn = 'yes';
|
||||
if (! $Frc) {
|
||||
print "Do you want to delete ibay '$ibayname'?\n";
|
||||
print "All files in this ibay will be deleted! [yes/NO/all] ";
|
||||
$yn = <STDIN>;
|
||||
if ($yn =~ /^a/i) { $Frc = -1; $yn="yes"; }
|
||||
}
|
||||
if ($yn =~ /^y/i) {
|
||||
print "Deleting ibay '$ibayname'.\n";
|
||||
db_delete(\%accounts, $ibayname);
|
||||
system("/sbin/e-smith/signal-event", "ibay-delete", $ibayname) == 0
|
||||
or die ("An error occurred while deleting ibay '$ibayname'.\n");
|
||||
}
|
||||
}
|
||||
else { print "Can't find ibay '$ibayname'.\n\a";}
|
||||
}
|
||||
}
|
||||
|
||||
#==============================================================================
|
||||
# Subroutines
|
||||
#==============================================================================
|
||||
# Find an unused Uid/Gid
|
||||
sub FindUid {
|
||||
open(ACC,"/home/e-smith/db/accounts") || die "Can't find /home/e-smith/db/accounts";
|
||||
my @recs = grep(/Uid\|\d*/,<ACC>);
|
||||
close(ACC);
|
||||
open(PWD,"/etc/passwd") || die "Can't find /etc/passwd";
|
||||
my @pwds = grep(/\:\d*\:/,<PWD>);
|
||||
close(PWD);
|
||||
open(GRP,"/etc/group") || die "Can't find /etc/group";
|
||||
my @grps = grep(/\:\d*\:/,<GRP>);
|
||||
close(GRP);
|
||||
|
||||
my $newuid=db_get(\%conf, 'MinUid');
|
||||
do { ++$newuid;} until ((! grep(/Uid\|$newuid\D/,@recs)) &&
|
||||
(! grep(/\:$newuid\:/,@pwds)) &&
|
||||
(! grep(/\:$newuid\:/,@grps)));
|
||||
return $newuid;
|
||||
}
|
||||
#==============================================================================
|
||||
# Test the uid/gid for availability and legality
|
||||
sub TestUid {
|
||||
open(ACC,"/home/e-smith/db/accounts") || die "Can't find /home/e-smith/db/accounts";
|
||||
my @recs = grep(/Uid\|\d*/,<ACC>);
|
||||
close(ACC);
|
||||
open(PWD,"/etc/passwd") || die "Can't find /etc/passwd";
|
||||
my @pwds = grep(/\:\d*\:/,<PWD>);
|
||||
close(PWD);
|
||||
open(GRP,"/etc/group") || die "Can't find /etc/group";
|
||||
my @grps = grep(/\:\d*\:/,<GRP>);
|
||||
close(GRP);
|
||||
|
||||
if (! ($_[0] =~ /^\d*$/)) {
|
||||
print "Error: A user ID should contain only numbers.\a\n";
|
||||
return 0;
|
||||
}
|
||||
elsif ( $_[0] < db_get(\%conf, 'MinUid')) {
|
||||
print "Error: The user ID should be greater or equal to ".&FindUid."\a\n";
|
||||
return 0;
|
||||
}
|
||||
|
||||
elsif ((grep(/Uid\|$_[0]\D/,@recs)) or
|
||||
(grep(/\:$_[0]\:/,@pwds)) or
|
||||
(grep(/\:$_[0]\:/,@grps))) {
|
||||
print "Error: The uid/gid '$_[0]' is already in use\a\n";
|
||||
return 0;
|
||||
}
|
||||
else { return 1 };
|
||||
}
|
||||
#==============================================================================
|
||||
# Test the various arguments for their validity
|
||||
sub ValidArguments {
|
||||
my $href = $_[0];
|
||||
my $nm =$_[1];
|
||||
my $pw =$_[2];
|
||||
my $ret = 1;
|
||||
|
||||
if (db_get(\%accounts, $nm)) {
|
||||
print "An account with the name '$nm' already exists on this server.\n\a";
|
||||
$ret = 0;
|
||||
}
|
||||
if ( ! ( $nm =~ /^[a-z][a-z\-\_\d\.]*$/ )) {
|
||||
print "Can't create ibay '$nm'. ";
|
||||
print "The name contains illegal characters.\n";
|
||||
print "The name should contain only lower-case letters, numbers, hyphens, periods and \n";
|
||||
print "underscores, and should start with a lower-case letter.\n\a";
|
||||
$ret = 0;
|
||||
}
|
||||
if (not defined(db_get(\%accounts, $href->{'Group'})) &&
|
||||
(db_get_type(\%accounts, $href->{'Group'} ) ne "ibay" )) {
|
||||
print "Can't create ibay '$href->{'Name'}'. ";
|
||||
print "The group '".$href->{'Group'}."' does not exist.\n\a";
|
||||
$ret = 0;
|
||||
}
|
||||
if ( ! ($href->{'UserAccess'} =~ /^wr-admin-rd-group$|^wr-group-rd-everyone$|^wr-group-rd-group$/)) {
|
||||
print "Can't create ibay '$href->{'Name'}'. ";
|
||||
print "User access must be either 'wr-admin-rd-group', \n'wr-group-rd-everyone' or 'wr-group-rd-group'.\n\a";
|
||||
$ret = 0;
|
||||
}
|
||||
if ( ! ($href->{'PublicAccess'} =~ /^local$|^local-pw$|^global$|^global-pw$|^global-pw-remote|^none$/)) {
|
||||
print "Can't create ibay '$href->{'Name'}'.\n";
|
||||
print "Public access must be either 'local', 'local-pw', 'global', 'global-pw', 'global-pw-remote', or 'none'.\n\a";
|
||||
$ret = 0;
|
||||
}
|
||||
if ( ! ($href->{'CgiBin'} =~ /^(disabled)$|^(enabled)$/)) {
|
||||
print "Can't create ibay '$href->{'Name'}'. ";
|
||||
print "The CGI-Bin must be either 'disabled' or 'enabled'.\n\a";
|
||||
$ret = 0;
|
||||
}
|
||||
|
||||
return $ret;
|
||||
}
|
||||
#==============================================================================
|
||||
# Test for wildcards in the ibayname. If any wildecards are found, the array
|
||||
# @records is expanded with the ibay names that meet the conditions.
|
||||
sub ExpandWildCard {
|
||||
my $ctrec = 0;
|
||||
foreach my $record (@records)
|
||||
{
|
||||
my @fld=split(/\|/,$record);
|
||||
for (my $cnt=0; $cnt <= $#fld; ++$cnt) { for ($fld[$cnt]) { s/^\s+//; s/\s+$//; }}
|
||||
|
||||
if ($fld[0] =~ /\*|\?/) { # Does it contain the wildcards?
|
||||
$fld[0] =~ s/\*/\.\*/g; # Replace * with .* to allow for grep.
|
||||
$fld[0] =~ s/\?/\./g; # Replace ? with . to allow for grep.
|
||||
|
||||
open USRS, "</home/e-smith/db/accounts" or die "Can't open /home/e-smith/db/accounts: $!";
|
||||
my @match = grep /^$fld[0]\=ibay\|/i, <USRS>;
|
||||
close(USRS);
|
||||
|
||||
my $cu = 0;
|
||||
foreach my $tst (@match) {
|
||||
$tst =~ /\=/; $tst = $`;
|
||||
for (my $cnt=1; $cnt <= $#fld; ++$cnt) { $tst = $tst." | ".$fld[$cnt]; };
|
||||
if ($cu == 0 ) {
|
||||
$records[$ctrec] = $tst;
|
||||
$cu =1;
|
||||
}
|
||||
else {
|
||||
push(@records, $tst);
|
||||
}
|
||||
}
|
||||
}
|
||||
++$ctrec;
|
||||
}
|
||||
}
|
||||
#==============================================================================
|
||||
# Print the pod text as a help screen
|
||||
sub PrintPod {
|
||||
my ($verbose, $message) = @_;
|
||||
pod2usage(-verbose => $verbose, -message => $message, -exitval => 64);
|
||||
}
|
||||
|
||||
#==============================================================================
|
||||
|
||||
=pod
|
||||
|
||||
=head1 NAME
|
||||
|
||||
B<lat-ibays> - The lazy administrator's tool to create ibays
|
||||
|
||||
=head1 DESCRIPTION
|
||||
|
||||
Creates or deletes ibays on Mitel's SME servers (5.x/6.x).
|
||||
This tool is functionally equivalent to the 'Information bays' option in the server-manager, but can be run from the command line or called from an other script.
|
||||
It allows you, for example, to create an i-bay as part of an installation script, or delete i-bays on a remote machine via an ssh console.
|
||||
|
||||
See F</usr/doc/lazy-admin-tools/example.ibays> for the format of the input file.
|
||||
|
||||
=head1 SYNOPSIS
|
||||
|
||||
B<lat-ibays> -a -c "ibay | descr | group | useraccess | publicaccess | password | cgi-bin | uid"
|
||||
|
||||
B<lat-ibays> -a -i /path/to/ibays.list
|
||||
|
||||
B<lat-ibays> -d [-f] -c "Ibay"
|
||||
|
||||
B<lat-ibays> -d [-f] -i /path/to/ibays.list
|
||||
|
||||
=head1 OPTIONS
|
||||
|
||||
The following options are supported:
|
||||
|
||||
=over 4
|
||||
|
||||
=item B<-a>, B<--add>
|
||||
|
||||
Add an ibay to the server
|
||||
|
||||
=item B<-c 'Arguments'>, B<--command-line='Arguments'>
|
||||
|
||||
Take arguments from the command line. See below for the various arguments that are accepted.
|
||||
|
||||
=item B<-d>, B<--delete>
|
||||
|
||||
Delete an ibay from the server. Wildcards (* and ?) are accepted.
|
||||
|
||||
=item B<-f>, B<--force>
|
||||
|
||||
Don't prompt before deleting.
|
||||
|
||||
=item B<-h>, B<--help>
|
||||
|
||||
Extended help for this tool
|
||||
|
||||
=item B<-i FILE>, B<--input-file=FILE>
|
||||
|
||||
Use the information from FILE to create or delete ibays.
|
||||
|
||||
=back
|
||||
|
||||
=head2 Arguments:
|
||||
|
||||
Ibay* : Must contain only lower-case letters, numbers, hyphens,
|
||||
periods and underscores, and should start with a lower-
|
||||
case letter. Wildcards (* and ?) can only be used to
|
||||
delete ibays!
|
||||
Descr. : Free text description of the ibay.
|
||||
Group* : Must be an existing group on the server.
|
||||
UserAccess : wr-admin-rd-group (default)
|
||||
wr-group-rd-everyone
|
||||
wr-group-rd-group
|
||||
PublicAcc. : local (default)
|
||||
local-pw
|
||||
global
|
||||
global-pw
|
||||
global-pw-remote
|
||||
none
|
||||
Passd : Password for the ibay in clear-text (dangerous!).
|
||||
CGI : enabled
|
||||
disabled (default)
|
||||
uid : User ID. If omitted, the first available uid will used.
|
||||
|
||||
* mandatory field
|
||||
|
||||
=head1 EXAMPLES
|
||||
|
||||
B<lat-ibays -a -c "library | Hogwarts' library | griffindor">
|
||||
|
||||
Creates the i-bay 'library' for user group 'griffindor'.
|
||||
|
||||
B<lat-ibays -a -i "/root/ibays.list">
|
||||
|
||||
Creates the i-bays defined in F</root/ibays.list>.
|
||||
Please refer to F</usr/doc/lazy-admin-tools/example.users> for an example of an input file.
|
||||
|
||||
B<lat-ibays -d -f -c "class*">
|
||||
|
||||
Deletes all ibays that start with 'class'. All ibays and their files are deleted without prompting (-f).
|
||||
|
||||
B<lat-ibays -a -c "library | Hogwarts' library | griffindor | wr-group-rd-group | local-pw | quidditch | enabled | 8003">
|
||||
|
||||
Creates the i-bay 'library' for user group 'griffindor'. Password is 'quiddich', cgi is enabled and the group ID is set to 8003.
|
||||
|
||||
=head1 SEE ALSO
|
||||
|
||||
lat-group(8), lat-pseudonyms(8), lat-users(8), lat-quota(8), lat-domains(8), lat-hosts(8), lat-procmail(8), lat-pptp(8), lat-dump(8)
|
||||
|
||||
=head1 VERSION
|
||||
|
||||
Version 0.9.0 (2004-09-08). The latest version is hosted at B<http://www.contribs.org/contribs/mblotwijk/>
|
||||
|
||||
=head1 COPYRIGHT
|
||||
|
||||
(c)2003-2004, Altiplano bvba (B<http://www.altiplano.be>). Released under the terms of the GNU license.
|
||||
|
||||
|
||||
=head1 BUGS
|
||||
|
||||
Please report bugs to <Bugs@Altiplano.Be>
|
||||
|
||||
=cut
|
||||
|
||||
#==============================================================================
|
||||
Reference in New Issue
Block a user