2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
5 * David L. Nugent. All rights reserved.
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
16 * THIS SOFTWARE IS PROVIDED BY DAVID L. NUGENT AND CONTRIBUTORS ``AS IS'' AND
17 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 * ARE DISCLAIMED. IN NO EVENT SHALL DAVID L. NUGENT OR CONTRIBUTORS BE LIABLE
20 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 static const char rcsid[] =
34 #include <sys/types.h>
72 static char bourne_shell[] = "sh";
74 static char *system_shells[_UC_MAXSHELLS] =
81 static char const *booltrue[] =
83 "yes", "true", "1", "on", NULL
85 static char const *boolfalse[] =
87 "no", "false", "0", "off", NULL
90 static struct userconf config =
92 0, /* Default password for new users? (nologin) */
95 NULL, /* NIS version of the passwd file */
96 "/usr/share/skel", /* Where to obtain skeleton files */
97 NULL, /* Mail to send to new accounts */
98 "/var/log/userlog", /* Where to log changes */
99 "/home", /* Where to create home directory */
100 _DEF_DIRMODE, /* Home directory perms, modified by umask */
101 "/bin", /* Where shells are located */
102 system_shells, /* List of shells (first is default) */
103 bourne_shell, /* Default shell */
104 NULL, /* Default group name */
105 NULL, /* Default (additional) groups */
106 NULL, /* Default login class */
107 1000, 32000, /* Allowed range of uids */
108 1000, 32000, /* Allowed range of gids */
109 0, /* Days until account expires */
110 0 /* Days until password expires */
113 static char const *comments[_UC_FIELDS] =
115 "#\n# pw.conf - user/group configuration defaults\n#\n",
116 "\n# Password for new users? no=nologin yes=loginid none=blank random=random\n",
117 "\n# Reuse gaps in uid sequence? (yes or no)\n",
118 "\n# Reuse gaps in gid sequence? (yes or no)\n",
119 "\n# Path to the NIS passwd file (blank or 'no' for none)\n",
120 "\n# Obtain default dotfiles from this directory\n",
121 "\n# Mail this file to new user (/etc/newuser.msg or no)\n",
122 "\n# Log add/change/remove information in this file\n",
123 "\n# Root directory in which $HOME directory is created\n",
124 "\n# Mode for the new $HOME directory, will be modified by umask\n",
125 "\n# Colon separated list of directories containing valid shells\n",
126 "\n# Comma separated list of available shells (without paths)\n",
127 "\n# Default shell (without path)\n",
128 "\n# Default group (leave blank for new group per user)\n",
129 "\n# Extra groups for new users\n",
130 "\n# Default login class for new users\n",
131 "\n# Range of valid default user ids\n",
133 "\n# Range of valid default group ids\n",
135 "\n# Days after which account expires (0=disabled)\n",
136 "\n# Days after which password expires (0=disabled)\n"
139 static char const *kwds[] =
167 unquote(char const * str)
169 if (str && (*str == '"' || *str == '\'')) {
170 char *p = strchr(str + 1, *str);
174 return (char *) (*++str ? str : NULL);
180 boolean_val(char const * str, int dflt)
182 if ((str = unquote(str)) != NULL) {
185 for (i = 0; booltrue[i]; i++)
186 if (strcmp(str, booltrue[i]) == 0)
188 for (i = 0; boolfalse[i]; i++)
189 if (strcmp(str, boolfalse[i]) == 0)
196 passwd_val(char const * str, int dflt)
198 if ((str = unquote(str)) != NULL) {
201 for (i = 0; booltrue[i]; i++)
202 if (strcmp(str, booltrue[i]) == 0)
204 for (i = 0; boolfalse[i]; i++)
205 if (strcmp(str, boolfalse[i]) == 0)
209 * Special cases for defaultpassword
211 if (strcmp(str, "random") == 0)
213 if (strcmp(str, "none") == 0)
216 errx(1, "Invalid value for default password");
229 return val ? booltrue[0] : boolfalse[0];
233 newstr(char const * p)
237 if ((p = unquote(p)) == NULL)
240 if ((q = strdup(p)) == NULL)
247 read_userconfig(char const * file)
259 file = _PATH_PW_CONF;
261 if ((fp = fopen(file, "r")) == NULL)
264 while ((linelen = getline(&buf, &linecap, fp)) > 0) {
265 if (*buf && (p = strtok(buf, " \t\r\n=")) != NULL && *p != '#') {
266 static char const toks[] = " \t\r\n,=";
267 char *q = strtok(NULL, toks);
271 while (i < _UC_FIELDS && strcmp(p, kwds[i]) != 0)
275 printf("Got unknown kwd `%s' val=`%s'\n", p, q ? q : "");
277 printf("Got kwd[%s]=%s\n", p, q);
281 config.default_password = passwd_val(q, 1);
284 config.reuse_uids = boolean_val(q, 0);
287 config.reuse_gids = boolean_val(q, 0);
290 config.nispasswd = (q == NULL || !boolean_val(q, 1))
294 config.dotdir = (q == NULL || !boolean_val(q, 1))
298 config.newmail = (q == NULL || !boolean_val(q, 1))
302 config.logfile = (q == NULL || !boolean_val(q, 1))
306 config.home = (q == NULL || !boolean_val(q, 1))
307 ? "/home" : newstr(q);
310 modeset = setmode(q);
311 config.homemode = (q == NULL || !boolean_val(q, 1))
312 ? _DEF_DIRMODE : getmode(modeset, _DEF_DIRMODE);
316 config.shelldir = (q == NULL || !boolean_val(q, 1))
317 ? "/bin" : newstr(q);
320 for (i = 0; i < _UC_MAXSHELLS && q != NULL; i++, q = strtok(NULL, toks))
321 system_shells[i] = newstr(q);
323 while (i < _UC_MAXSHELLS)
324 system_shells[i++] = NULL;
326 case _UC_DEFAULTSHELL:
327 config.shell_default = (q == NULL || !boolean_val(q, 1))
328 ? (char *) bourne_shell : newstr(q);
330 case _UC_DEFAULTGROUP:
332 config.default_group = (q == NULL || !boolean_val(q, 1) || GETGRNAM(q) == NULL)
335 case _UC_EXTRAGROUPS:
336 while ((q = strtok(NULL, toks)) != NULL) {
337 if (config.groups == NULL)
338 config.groups = sl_init();
339 sl_add(config.groups, newstr(q));
342 case _UC_DEFAULTCLASS:
343 config.default_class = (q == NULL || !boolean_val(q, 1))
347 if ((q = unquote(q)) != NULL) {
348 config.min_uid = strtounum(q, 0,
351 warnx("Invalid min_uid: '%s';"
356 if ((q = unquote(q)) != NULL) {
357 config.max_uid = strtounum(q, 0,
360 warnx("Invalid max_uid: '%s';"
365 if ((q = unquote(q)) != NULL) {
366 config.min_gid = strtounum(q, 0,
369 warnx("Invalid min_gid: '%s';"
374 if ((q = unquote(q)) != NULL) {
375 config.max_gid = strtounum(q, 0,
378 warnx("Invalid max_gid: '%s';"
383 if ((q = unquote(q)) != NULL) {
384 config.expire_days = strtonum(q, 0,
387 warnx("Invalid expire days:"
388 " '%s'; ignoring", q);
392 if ((q = unquote(q)) != NULL) {
393 config.password_days = strtonum(q, 0,
396 warnx("Invalid password days:"
397 " '%s'; ignoring", q);
414 write_userconfig(struct userconf *cnf, const char *file)
422 file = _PATH_PW_CONF;
424 if ((fd = open(file, O_CREAT|O_RDWR|O_TRUNC|O_EXLOCK, 0644)) == -1)
427 if ((fp = fdopen(fd, "w")) == NULL) {
432 buf = sbuf_new_auto();
433 for (i = _UC_NONE; i < _UC_FIELDS; i++) {
439 sbuf_cat(buf, boolean_str(cnf->default_password));
442 sbuf_cat(buf, boolean_str(cnf->reuse_uids));
445 sbuf_cat(buf, boolean_str(cnf->reuse_gids));
448 sbuf_cat(buf, cnf->nispasswd ? cnf->nispasswd : "");
452 sbuf_cat(buf, cnf->dotdir ? cnf->dotdir :
456 sbuf_cat(buf, cnf->newmail ? cnf->newmail :
460 sbuf_cat(buf, cnf->logfile ? cnf->logfile :
464 sbuf_cat(buf, cnf->home);
467 sbuf_printf(buf, "%04o", cnf->homemode);
471 sbuf_cat(buf, cnf->shelldir);
474 for (j = 0; j < _UC_MAXSHELLS &&
475 system_shells[j] != NULL; j++)
476 sbuf_printf(buf, "%s\"%s\"", j ?
477 "," : "", system_shells[j]);
480 case _UC_DEFAULTSHELL:
481 sbuf_cat(buf, cnf->shell_default ?
482 cnf->shell_default : bourne_shell);
484 case _UC_DEFAULTGROUP:
485 sbuf_cat(buf, cnf->default_group ?
486 cnf->default_group : "");
488 case _UC_EXTRAGROUPS:
489 for (j = 0; cnf->groups != NULL &&
490 j < (int)cnf->groups->sl_cur; j++)
491 sbuf_printf(buf, "%s\"%s\"", j ?
492 "," : "", cnf->groups->sl_str[j]);
495 case _UC_DEFAULTCLASS:
496 sbuf_cat(buf, cnf->default_class ?
497 cnf->default_class : "");
500 sbuf_printf(buf, "%ju", (uintmax_t)cnf->min_uid);
504 sbuf_printf(buf, "%ju", (uintmax_t)cnf->max_uid);
508 sbuf_printf(buf, "%ju", (uintmax_t)cnf->min_gid);
512 sbuf_printf(buf, "%ju", (uintmax_t)cnf->max_gid);
516 sbuf_printf(buf, "%jd", (intmax_t)cnf->expire_days);
520 sbuf_printf(buf, "%jd", (intmax_t)cnf->password_days);
529 fputs(comments[i], fp);
533 fprintf(fp, "%s = \"%s\"\n", kwds[i],
536 fprintf(fp, "%s = %s\n", kwds[i], sbuf_data(buf));
538 printf("WROTE: %s = %s\n", kwds[i], sbuf_data(buf));
543 return (fclose(fp) != EOF);