#!/usr/bin/perl -w
#==============================================================================
# lat-users
# =========
# 0.9.0 (2004-09-08)
# (c)2003-2004 Altiplano bvba
#==============================================================================
package esmith;
use strict;
use esmith::db;
use esmith::util;
use Getopt::Long;
use Pod::Usage;
my %conf;
tie %conf, 'esmith::config';
my %accounts;
tie %accounts, 'esmith::config', '/home/e-smith/db/accounts';
my ($Hlp, $Cml, $Frc, $Inp, $Pwf);
my $Add =0;
my $Del =0;
my $Kaa =0;
my $passwlist="./passwords.new";

#==============================================================================
#  Main
#==============================================================================
# Analyze commandline options
GetOptions  ("help"           => \$Hlp,
             "add"            => \$Add,
             "delete"         => \$Del,
             "force"          => \$Frc,
             "nickname"	      => \$Kaa,
	     "passwords"      => \$Pwf,
             "command-line=s" => \$Cml,
             "input-file=s"   => \$Inp);

if ( $Hlp ) { &PrintPod(9); exit; }

# We need one argument or the other, but not both
if ((($Cml && $Inp) || (! $Cml && ! $Inp)) ||
    ($Add + $Del != 1))
	{ &PrintPod(1); exit; }

my @records;
if ($Inp) {
    open(LIST,"< $Inp")  ||  die "Can't find $Inp.\n";
    @records = grep(!/(^\s*#)|(^\s*$)/,<LIST>);
    close(LIST); }
elsif ($Cml) { @records=($Cml); }
else { &PrintPod(1); exit; }

# Add accounts
if ($Add) {
    # Process each user
    foreach my $record (@records)
    {
        my @fields=split(/\|/,$record);
        for (my $cnt=0; $cnt <= $#fields; ++$cnt) { for ($fields[$cnt]) { s/^\s+//; s/\s+$//; }}
        my $username = $fields[0];

        if ( @fields >= 1) { 
            if ( &TestName($username))
            {
                my $uid;
                if ($fields[11]) { $uid = $fields[11]; }
                else { $uid = &FindUid;}
                if (&TestUid($uid)) {
                    my %user = ("FirstName", $fields[1],
                                "LastName", $fields[2],
                                "PasswordSet", "no",
                                "Uid",$uid,
                                "Dept", $fields[4],
                                "Company", $fields[5],
				"Shell", "/usr/bin/rssh",
				"VPNClientAccess","no",
                                "Street", $fields[6],
                                "City", $fields[7],
                                "Phone", $fields[8],
                                "EmailForward", $fields[9],
                                "ForwardAddress", $fields[10]);
                    if ( ! $user{'FirstName'}    ) { $user{"FirstName"} = $username; }
                    if ( ! $user{'LastName' }    ) { $user{"LastName"} =  $username; }
                    if ( ! $user{'EmailForward'} ) { $user{"EmailForward"} = "local"; }
                    if ( ! $user{'EmailForward'} =~/^(local)$|^(forward)$|^(both)$/)
                       { $user{"EmailForward"} = "local"; }

                    # Create or update account
                    if ( ! db_get(\%accounts, $username)) {
                        print "Creating user account for $username (Uid:$uid).\n";
                        db_set(\%accounts, $username, 'user', \%user);
                        system("/sbin/e-smith/signal-event", "user-create", $username) == 0
                            or die ("An error occurred while creating account '$username'.\n");
                    }
                    else {
                        print "Updating user account $username.\n";
                        foreach my $value (keys %user) {
                            if ( ! $user{$value} ) { $user{$value} = "" }
                            if ($user{$value} eq "" )
                                { $user{$value} = db_get_prop(\%accounts, $username, $value) }
                            $user{"PasswordSet"} = db_get_prop(\%accounts, $username, "PasswordSet");
                            $user{"Uid"} = db_get_prop(\%accounts, $username, "Uid");
                        }
                        
                        db_set(\%accounts, $username, 'user', \%user);
                        system("/sbin/e-smith/signal-event", "user-modify", $username) == 0
                            or die ("An error occurred while modifying account '$username'.\n");
                    }
                    
                    # Set password
                    if ((! $fields[3]) && ($Pwf)) { $fields[3] = &RandomPassword($username);}
                    if ($fields[3]) {
                        esmith::util::setUserPassword($username, $fields[3]);
                        db_set_prop(\%accounts, $username, 'PasswordSet', 'yes');
                    }
                    # Should we assign the user to a group?
                    if ( @fields > 11) {
                        for (my $cntgrps=12; $cntgrps < @fields; $cntgrps++) {
                            system("/usr/sbin/lat-groups -a -c='$fields[$cntgrps]|$fields[$cntgrps]||$username'");
                        }
                    }
		   if ($Kaa) {
			
			print "creating SME default pseudonyms\a\n";
                        $user{"FirstName"} = lc($user{"FirstName"}) ;
                        $user{"LastName"} = lc($user{"LastName"});
 			system("/usr/sbin/lat-pseudonyms -a -c='$username|".$user{"FirstName"}.".".$user{"LastName"}."|".$user{"FirstName"}."_".$user{"LastName"}."'"); 
			
		   }
                }
            }
            else { print "User '$username' is not a correct username.\a\n"; }
        }
        else { print "Please provide at least an account name and the first and last name of the user.\n\a";}
    }
}

# Delete  accounts
if ($Del) {
    &ExpandWildCard;  # Check for wildcards and expand if necessary

    foreach my $record (@records)
    {
        my @fields=split(/\|/,$record);
        for (my $cnt=0; $cnt <= $#fields; ++$cnt) { for ($fields[$cnt]) { s/^\s+//; s/\s+$//; }}
        my $username = $fields[0];

        if ((db_get(\%accounts, $username)) && (db_get_type(\%accounts, $username) eq "user")) {
            my $yn = 'yes';
	    my $userdir = `cat /etc/passwd|grep "^$username:"|cut -d":" -f6|tr -d '\n'`;
	    #print "user folder: '$userdir'\n";
	    if ( $userdir eq "/home/e-smith/files/users/$username" )
            	{
            	if (! $Frc) {
                	print "Do you want to delete user '$username'?\n";
                	print "All files belonging to this user account will be deleted! [yes/NO/all] ";
                	$yn = <STDIN>;
                	if ($yn =~ /^a/i) { $Frc = -1; $yn="yes"; }
            	}
            	if ($yn =~ /^y/i) {
                	print "Deleting user account '$username'.\n";
                	db_delete(\%accounts, $username);
                	system("/sbin/e-smith/signal-event", "user-delete", $username);
            	}
	    }
	    else { print "'$username' is not a regular SME user with its home in /home/e-smith/files/users/, can not remove it\n\a";}	
        }
        else { print "Can't find user '$username'.\n\a";}
    }
}
#==============================================================================
# Subroutines
#==============================================================================
# Find a unused Uid/Gid
sub FindUid {
    open(ACC,"/home/e-smith/db/accounts")  ||  die "Can't find /home/e-smith/db/accounts";
    my @recs = grep(/Uid\|\d*/,<ACC>);
    close(ACC);
    open(PWD,"/etc/passwd")  ||  die "Can't find /etc/passwd";
    my @pwds = grep(/\:\d*\:/,<PWD>);
    close(PWD);
    open(GRP,"/etc/group")  ||  die "Can't find /etc/group";
    my @grps = grep(/\:\d*\:/,<GRP>);
    close(GRP);

    my $newuid=db_get(\%conf, 'MinUid');
    do { ++$newuid;} until ((! grep(/Uid\|$newuid\D/,@recs)) &&
                (! grep(/\:$newuid\:/,@pwds)) &&
                (! grep(/\:$newuid\:/,@grps)));
    return $newuid;
}
#==============================================================================
# Test the uid/gid for availability and legality
sub TestUid {
    open(ACC,"/home/e-smith/db/accounts")  ||  die "Can't find /home/e-smith/db/accounts";
    my @recs = grep(/Uid\|\d*/,<ACC>);
    close(ACC);
    open(PWD,"/etc/passwd")  ||  die "Can't find /etc/passwd";
    my @pwds = grep(/\:\d*\:/,<PWD>);
    close(PWD);
    open(GRP,"/etc/group")  ||  die "Can't find /etc/group";
    my @grps = grep(/\:\d*\:/,<GRP>);
    close(GRP);

    if (! ($_[0] =~ /^\d*$/)) {
        print "Error: A user ID should contain only numbers.\a\n";
        return 0;
    }
    elsif ( $_[0] < db_get(\%conf, 'MinUid')) {
        print "Error: The user ID should be greater or equal to ".&FindUid."\a\n";
        return 0;
    }

    elsif ((grep(/Uid\|$_[0]\D/,@recs)) or
        (grep(/\:$_[0]\:/,@pwds)) or
        (grep(/\:$_[0]\:/,@grps))) {
        print "Error: The uid/gid '$_[0]' is already in use\a\n";
        return 0;
    }
    else { return 1 };
}
#==============================================================================
# Test name for illegal characters and length
sub TestName {
    if ( ! $_[0] =~ /^[a-z][a-z\-\d]*$/ ) {
        print "The name '$_[0]' contains illegal characters.\n";
    	print "User names should contain only lower-case letters, ";
    	print "numbers, hyphens or periods\n";
        print "and should start with a lower-case letter.\n\a";
        return 0;
    }
    if ( length($_[0]) > 31 ) {
        print "The name '$_[0]' is too long. The maximum is 31 characters.\n";
        return 0;
    }
    return -1;
}
#==============================================================================
# Create a random password
sub RandomPassword {
    my $password;
    my $_rand;
    my $password_length = 8;

    my @chars = split(" ",
    "a b c d e f g h i j k l m n o p q r s t u v w x y z
    A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
    0 1 2 3 4 5 6 7 8 9
    , . ; - & ! ?");

    srand;
    $_rand = int(rand 62);
    for (my $i=0; $i <= $password_length-1 ;$i++) {
        $password .= $chars[$_rand];
        $_rand = int(rand 69);
    }

    open(PWD, ">> $passwlist") or die "Can't create or open $passwlist.\n";
    print PWD "Username: $_[0]\nPassword: $password\n\n";
    close(PWD);

    return $password;
}
#==============================================================================
# Test for wildcards in the username. If any wildecards are found, the array
# @records is expanded with the user names that meet the conditions.
sub ExpandWildCard {
    my $ctrec = 0;
    foreach my $record (@records)
    {
        my @fld=split(/\|/,$record);
        for (my $cnt=0; $cnt <= $#fld; ++$cnt) { for ($fld[$cnt]) { s/^\s+//; s/\s+$//; }}

        if ($fld[0] =~ /\*|\?/) {   # Does it contain the wildcards?
            $fld[0] =~ s/\*/\.\*/g; # Replace * with .* to allow for grep.
            $fld[0] =~ s/\?/\./g;   # Replace ? with . to allow for grep.

            open USRS, "</home/e-smith/db/accounts" or die "Can't open /home/e-smith/db/accounts: $!";
            my @match = grep /^$fld[0]\=user\|/i, <USRS>;
            close(USRS);

            my $cu = 0;
            foreach my $tst (@match) {
                $tst =~ /\=/; $tst = $`;
                for (my $cnt=1; $cnt <= $#fld; ++$cnt) { $tst = $tst." | ".$fld[$cnt]; };
                if ($cu == 0 ) {
                    $records[$ctrec] = $tst;
                    $cu =1;
                }
                else {
                    push(@records, $tst);
                }
            }
        }
        ++$ctrec;
    }
}
#==============================================================================
# Print the pod text as a help screen
sub PrintPod {
    my ($verbose, $message) = @_;
    pod2usage(-verbose => $verbose, -message => $message, -exitval => 64);
}

#==============================================================================

=pod

=head1 NAME

B<lat-users> - The lazy administrator's tool to add user accounts

=head1 DESCRIPTION

Creates or deletes user accounts on Mitel's SME servers (5.x/6.x).
This tool is functionally equivalent to the 'User accounts' option in the server-manager, but can be run from the command line or called from an other script.
It allows you, for example, to create a large number of accounts in a batch process, or delete accounts on a remote machine via an ssh console.

See F</usr/doc/lazy-admin-tools/example.users> for the format of the input file.

=head1 SYNOPSIS

B<lat-tools> -a [-p] -c "user | first | last | password | department | company | street | city | tel | forward | email | uid | group1 [| group..]"

B<lat-users> -a [-p] -i /path/to/users.list

B<lat-users> -d [-f] -c "user"

B<lat-users> -d [-f] -i /path/to/users.list

=head1 OPTIONS

The following options are supported:

=over 4

=item B<-a>, B<--add>

Add a user account to the server.

=item
B<-c "Arguments">, B<--command-line="Arguments">

Take arguments from the command line.
See the 'Arguments' section below for the various arguments that are accepted.

=item B<-d>, B<--delete>

Delete a user account from the server. Wildcards (* and ?) are accepted.

=item B<-f>, B<--force>

Don't prompt before deleting.

=item B<-h>, B<--help>

Extended help for this tool

=item B<-i=FILE>, B<--input-file=FILE>

Use the information from FILE to create or delete the user accounts.
See F</usr/doc/lazy-admin-tools> for an example of an input file.

=item B<-p>, B<--passwords>

Generate random passwords for the users and write them to F<./passwords.new>. If a password was supplied, this option will be ignored.

=item B<-n>, B<--nickname>

Generate standard pseudonyms for the user: firstname_lastname and firstname.lastname.

=back

=head2 Arguments:

   user*      - Must contain only lower-case letters, numbers,
                hyphens, periods and underscores, and should start
                with a lower-case letter. Wildcards (* and ?) can
                only be used to delete users.
   first*     - First name
   last*      - Last name
   password   - Password for the user (in clear-text!)
   department - Department
   company    - Company
   street     - Street name and number
   city       - Zip & City
   tel        - Telephone number
   forward    - E-mail delivery: 'local', 'forward' or 'both'
   email      - Forwarding e-mail adres
   uid        - User ID. If omitted, a suitable uid will be generated.
   group(s)   - Group name(s) to which the user should be added. If the 
                group doesn't exist, it will be created. 

   * mandatory field

=head1 EXAMPLES

B<lat-users -a -c "harry | Harry | Potter | Quidditch">

Creates user 'harry' from the command line, with password 'Quidditch'.

B<lat-users -a -i /root/users.list>

Uses the arguments specified in F</root/users.list> to create user accounts.
Please refer to F</usr/doc/lazy-admin-tools/example.users> for an example of an input file.

B<lat-users -d -f -c "user*">

Deletes all user accounts that start with 'user'. All users and their files will be deleted without prompting (-f).

B<lat-users -a -p -i /root/users.list>

Creates user accounts as defined in F</root/users.list> and generates a random password for each user.
The names and passwords are written to F<./passwords.new>.

B<lat-users -a -c "ron | Ron | Weasley ||||||||| 6005">

Creates user 'ron' with user ID 6005. All other fields (company, departments, etc.)  are left empty.

B<lat-users -a -c "ron | Ron | Weasley |||||||||| quiddich | dada ">

Creates user 'ron' and assigns him to groups quiddich and dada. If any of these groups doesn't exist, it will be created.

B<lat-users -a -n -c "ron | Ron | Weasley |||||||||| quiddich | dada ">

Creates user 'ron' and assigns him to groups quiddich and dada. If any of these groups doesn't exist, it will be created. 
Also create pseudonyms ron_weasley and ron.weasley associated with user ron if available, else produces an alert.

=head1 SEE ALSO

lat-group(8), lat-pseudonyms(8), lat-ibays(8), lat-quota(8), lat-domains(8), lat-hosts(8), lat-procmail(8), lat-pptp(8), lat-dump(8)

=head1 VERSION

Version 0.9.0 (2004-09-08). The latest version is hosted at B<http://www.contribs.org/contribs/mblotwijk/>

=head1 COPYRIGHT

(c)2003-2004, Altiplano bvba (B<http://www.altiplano.be>). Released under the terms of the GNU license.


=head1 BUGS

Please report bugs to <Bugs@Altiplano.Be>

=cut

#==============================================================================