mkadmin.pl 2.31 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113
#!/usr/bin/perl -w
#
# Copyright (c) 2000-2012 University of Utah and the Flux Group.
# 
# {{{EMULAB-LICENSE
# 
# This file is part of the Emulab network testbed software.
# 
# This file is free software: you can redistribute it and/or modify it
# under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or (at
# your option) any later version.
# 
# This file is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public
# License for more details.
# 
# You should have received a copy of the GNU Affero General Public License
# along with this file.  If not, see <http://www.gnu.org/licenses/>.
# 
# }}}
#
use English;
use Getopt::Std;

#
# Create an admin user on the control node. 
#
sub usage()
{
    print STDERR "Usage: mkadmin.pl <uid> <pubkeyfile>\n";
    print STDERR "       mkadmin.pl [-r] <uid>\n";
    exit(-1);
}
my $optlist	= "r";
my $remove	= 0;
my $HOMEDIR     = "/home";
my $pubkey;

#
# Turn off line buffering on output
#
$| = 1;

#
# Parse command arguments.
#
my %options = ();
if (! getopts($optlist, \%options)) {
    usage();
}
if (exists($options{"r"})) {
    $remove = 1;
}
if ($remove) {
    usage()
	if (@ARGV != 1);
}
else {
    usage()
	if (@ARGV != 2);

    $pubkey = $ARGV[1];
    die("$pubkey does not exist\n")
	if (! -e $pubkey);
}
my $uid = $ARGV[0];

sub mysystem($)
{
    my ($command) = @_;

    system($command);
    if ($?) {
	print STDERR "Command failed: $? - '$command'\n";
    }
}

if ($remove) {
    mysystem("deluser --remove-home $uid");
    exit(1)
	if ($?);
    exit(0);
}

#
# Add the user; if it already exists too bad.
#
mysystem("adduser --disabled-password --gecos '$uid' --ingroup root $uid");
exit(1)
    if ($?);

# Need to be in this group too, for sudo.
mysystem("adduser $uid admin");
exit(1)
    if ($?);

#
# Create and populate the .ssh dir. 
#
mysystem("mkdir $HOMEDIR/$uid/.ssh")
    if (! -e "$HOMEDIR/$uid/.ssh");
exit(1)
    if ($?);

mysystem("cp -pf $pubkey $HOMEDIR/$uid/.ssh/authorized_keys");
exit(1)
    if ($?);

mysystem("chmod 700 $HOMEDIR/$uid/.ssh");
mysystem("chmod 600 $HOMEDIR/$uid/.ssh/authorized_keys");
mysystem("chown -R $uid:root $HOMEDIR/$uid/.ssh");