--- loncom/Attic/lcuseradd 2000/10/29 23:14:16 1.7 +++ loncom/Attic/lcuseradd 2000/10/30 02:50:23 1.10 @@ -99,6 +99,19 @@ else { my ($username,$password1,$password2)=@input; $username=~/^(\w+)$/; my $safeusername=$1; +if ($username ne $safeusername) { + print "Error. The user name specified has invalid characters.\n"; + unlink('/tmp/lock_lcpasswd'); + exit 9; +} +my $pbad=0; +map {if ((ord($_)<32)||(ord($_)>126)){$pbad=1;}} (split(//,$password1)); +map {if ((ord($_)<32)||(ord($_)>126)){$pbad=1;}} (split(//,$password2)); +if ($pbad) { + print "Error. A password entry had an invalid character.\n"; + unlink('/tmp/lock_lcpasswd'); + exit 10; +} # Only add user if we can create a brand new home directory (/home/username). if (-e "/home/$safeusername") { @@ -137,8 +150,99 @@ if (system('/usr/sbin/usermod','-G',$saf # for crazy characters in the password, and the setuid environment of perl # requires me to make everything safe. +# Grab the line corresponding to username +open (IN, "; +close IN; +my ($userid,$useroldcryptpwd); +my @F; my @U; +for my $l (@lines) { + @F=split(/\:/,$l); + if ($F[0] eq $username) {($userid,$useroldcryptpwd)=($F[2],$F[1]); @U=@F;} +} + +# Verify existence of user +if (!defined($userid)) { + print "Error. User $username does not exist.\n" unless $noprint; + unlink('/tmp/lock_lcpasswd'); + exit 5; +} +# Construct new password entry (random salt) +my $newcryptpwd=crypt($password1,(join '', ('.', '/', 0..9, 'A'..'Z', 'a'..'z')[rand 64, rand 64])); +$U[1]=$newcryptpwd; +my $userline=join(':',@U); +my $rootid=&enable_root_capability; +if ($rootid!=0) { + print "Error. Root was not successfully enabled.\n" unless $noprint; + unlink('/tmp/lock_lcpasswd'); + exit 7; +} +open PASSWORDFILE, '>/etc/passwd' or (print("Error. Cannot open /etc/passwd.\n") && unlink('/tmp/lock_lcpasswd') && exit(8)); +for my $l (@lines) { + @F=split(/\:/,$l); + if ($F[0] eq $username) {print PASSWORDFILE "$userline\n";} + else {print PASSWORDFILE "$l\n";} +} +close PASSWORDFILE; +($>,$<)=(0,0); # fool smbpasswd here to think this is not a setuid environment +unless (-e '/etc/smbpasswd') { + open (OUT,'>/etc/smbpasswd'); close OUT; +} +my $smbexist=0; +open (IN, '; +close IN; +for my $l (@lines) { + chop $l; + my @F=split(/\:/,$l); + if ($F[0] eq $username) {$smbexist=1;} +} +unless ($smbexist) { + open(OUT,'>>/etc/smbpasswd'); + print OUT join(':',($safeusername,$userid,'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX','','/home/'.$safeusername,'/bin/bash')) . "\n"; + close OUT; +} +open(OUT,"|/usr/bin/smbpasswd -s $safeusername>/dev/null"); +print OUT $password1; print OUT "\n"; +print OUT $password1; print OUT "\n"; +close OUT; +$<=$wwwid; # unfool the program + +# Make final modifications to the user directory. +# Add a public_html file with a stand-in index.html file. + +system('/bin/chmod','-R','0640',"/home/$safeusername"); +system('/bin/chmod','0750',"/home/$safeusername"); +mkdir "/home/$safeusername/public_html",0750; +open OUT,">/home/$safeusername/public_html"; +print OUT< + +$safeusername + + +

$safeusername

+

+Learning Online Network +

+

+This area provides for: +

+ + + +END +close OUT; + +&disable_root_capability; +unlink('/tmp/lock_lcpasswd'); +exit 0; # ----------------------------------------------------------- have setuid script run as root sub enable_root_capability {