adduser.sh revision 116624
1#!/bin/sh
2#
3# Copyright (c) 2002, 2003 Michael Telahun Makonnen. All rights reserved.
4#
5# Redistribution and use in source and binary forms, with or without
6# modification, are permitted provided that the following conditions
7# are met:
8# 1. Redistributions of source code must retain the above copyright
9#    notice, this list of conditions and the following disclaimer.
10# 2. Redistributions in binary form must reproduce the above copyright
11#    notice, this list of conditions and the following disclaimer in the
12#    documentation and/or other materials provided with the distribution.
13#
14# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
15# IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
16# OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
17# IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
18# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
19# NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
20# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
21# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
22# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
23# THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
24#
25#       Email: Mike Makonnen <mtm@FreeBSD.Org>
26#
27# $FreeBSD: head/usr.sbin/adduser/adduser.sh 116624 2003-06-20 16:53:36Z mtm $
28#
29
30# err msg
31#       Display $msg on stderr, unless we're being quiet.
32# 
33err() {
34	if [ -z "$quietflag" ]; then
35        	echo 1>&2 ${THISCMD}: ERROR: $*
36	fi
37}
38
39# info msg
40#       Display $msg on stdout, unless we're being quiet.
41# 
42info() {
43	if [ -z "$quietflag" ]; then
44        	echo ${THISCMD}: INFO: $*
45	fi
46}
47
48# get_nextuid
49#	Output the value of $_uid if it is available for use. If it
50#	is not, output the value of the next higher uid that is available.
51#	If a uid is not specified, output the first available uid, as indicated
52#	by pw(8).
53# 
54get_nextuid () {
55	_uid=$1
56	_nextuid=
57
58	if [ -z "$_uid" ]; then
59		_nextuid="`${PWCMD} usernext | cut -f1 -d:`"
60	else
61		while : ; do
62			${PWCMD} usershow $_uid > /dev/null 2>&1
63			if [ ! "$?" -eq 0 ]; then
64				_nextuid=$_uid
65				break
66			fi
67			_uid=$(($_uid + 1))
68		done
69	fi
70	echo $_nextuid
71}
72
73# show_usage
74#	Display usage information for this utility.
75#
76show_usage() {
77	echo "usage: ${THISCMD} [options]"
78	echo "  options may include:"
79	echo "  -C		save to the configuration file only"
80	echo "  -E		disable this account after creation"
81	echo "  -G		additional groups to add accounts to"
82	echo "  -L		login class of the user"
83	echo "  -N		do not read configuration file"
84	echo "  -d		home directory"
85	echo "  -f		file from which input will be received"
86	echo "  -g		default login group"
87	echo "  -h		display this usage message"
88	echo "  -k		path to skeleton home directory"
89	echo "  -m		user welcome message file"
90	echo "  -q		absolute minimal user feedback"
91	echo "  -s		shell"
92	echo "  -u		uid to start at"
93	echo "  -w		password type: no, none, yes or random"
94}
95
96# valid_shells
97#	Outputs a list of valid shells from /etc/shells. Only the
98#	basename of the shell is output.
99#
100valid_shells() {
101	_prefix=
102	cat ${ETCSHELLS} |
103	while read _path _junk ; do
104		case $_path in
105		\#*|'')
106			;;
107		*)
108			echo -n "${_prefix}`basename $_path`"
109			_prefix=' '
110			;;
111		esac
112	done
113}
114
115# fullpath_from_shell shell
116#	Given $shell, the basename component of a valid shell, get the
117#	full path to the shell from the /etc/shells file.
118#
119fullpath_from_shell() {
120	_shell=$1
121	[ -z "$_shell" ] && return 1
122
123	cat ${ETCSHELLS} |
124	while read _path _junk ; do
125		case "$_path" in
126		\#*|'')
127			;;
128		*)
129			if [ "`basename $_path`" = "$_shell" ]; then
130				echo $_path
131				return 0
132			fi
133			;;
134		esac
135	done
136	return 1
137}
138
139# save_config
140#	Save some variables to a configuration file.
141#	Note: not all script variables are saved, only those that
142#	      it makes sense to save.
143#
144save_config() {
145	echo "# Configuration file for adduser(8)."     >  ${ADDUSERCONF}
146	echo "# NOTE: only *some* variables are saved." >> ${ADDUSERCONF}
147	echo "# Last Modified on `${DATECMD}`."		>> ${ADDUSERCONF}
148	echo ''				>> ${ADDUSERCONF}
149	echo "defaultLgroup=$ulogingroup" >> ${ADDUSERCONF}
150	echo "defaultclass=$uclass"	>> ${ADDUSERCONF}
151	echo "defaultgroups=$ugroups"	>> ${ADDUSERCONF}
152	echo "passwdtype=$passwdtype" 	>> ${ADDUSERCONF}
153	echo "homeprefix=$homeprefix" 	>> ${ADDUSERCONF}
154	echo "defaultshell=$ushell"	>> ${ADDUSERCONF}
155	echo "udotdir=$udotdir"		>> ${ADDUSERCONF}
156	echo "msgfile=$msgfile"		>> ${ADDUSERCONF}
157	echo "disableflag=$disableflag" >> ${ADDUSERCONF}
158}
159
160# add_user
161#	Add a user to the user database. If the user chose to send a welcome
162#	message or lock the account, do so.
163#
164add_user() {
165
166	# Is this a configuration run? If so, don't modify user database.
167	#
168	if [ -n "$configflag" ]; then
169		save_config
170		return
171	fi
172
173	_uid=
174	_name=
175	_comment=
176	_gecos=
177	_home=
178	_group=
179	_grouplist=
180	_shell=
181	_class=
182	_dotdir=
183	_expire=
184	_pwexpire=
185	_passwd=
186	_upasswd=
187	_passwdmethod=
188
189	_name="-n '$username'"
190	[ -n "$uuid" ] && _uid='-u "$uuid"'
191	[ -n "$ulogingroup" ] && _group='-g "$ulogingroup"'
192	[ -n "$ugroups" ] && _grouplist='-G "$ugroups"'
193	[ -n "$ushell" ] && _shell='-s "$ushell"'
194	[ -n "$uhome" ] && _home='-m -d "$uhome"'
195	[ -n "$uclass" ] && _class='-L "$uclass"'
196	[ -n "$ugecos" ] && _comment='-c "$ugecos"'
197	[ -n "$udotdir" ] && _dotdir='-k "$udotdir"'
198	[ -n "$uexpire" ] && _expire='-e "$uexpire"'
199	[ -n "$upwexpire" ] && _pwexpire='-p "$upwexpire"'
200	case $passwdtype in
201	no)
202		_passwdmethod="-w no"
203		_passwd="-h -"
204		;;
205	yes)
206		# Note on processing the password: The outer double quotes
207		# make literal everything except ` and \ and $.
208		# The outer single quotes make literal ` and $.
209		# We can ensure the \ isn't treated specially by specifying
210		# the -r switch to the read command used to obtain the input.
211		#
212		_passwdmethod="-w yes"
213		_passwd="-h 0"
214		_upasswd='echo "$upass" |'
215		;;
216	none)
217		_passwdmethod="-w none"
218		;;
219	random)
220		_passwdmethod="-w random"
221		;;
222	esac
223
224	_pwcmd="$_upasswd ${PWCMD} useradd $_uid $_name $_group $_grouplist $_comment"
225	_pwcmd="$_pwcmd $_shell $_class $_home $_dotdir $_passwdmethod $_passwd"
226	_pwcmd="$_pwcmd $_expire $_pwexpire"
227
228	if ! _output=`eval $_pwcmd` ; then
229		err "There was an error adding user ($username)."
230		return 1
231	else
232		info "Successfully added ($username) to the user database."
233		if [ "random" = "$passwdtype" ]; then
234			randompass="$_output"
235			info "Password for ($username) is: $randompass"
236		fi
237	fi
238
239	if [ -n "$disableflag" ]; then
240		if ${PWCMD} lock $username ; then
241			info "Account ($username) is locked."
242		else
243			info "Account ($username) could NOT be locked."
244		fi
245	fi
246
247	_line=
248	_owner=
249	_perms=
250	if [ -n "$msgflag" ]; then
251		[ -r "$msgfile" ] && {
252			# We're evaluating the contents of an external file.
253			# Let's not open ourselves up for attack. _perms will
254			# be empty if it's writeable only by the owner. _owner
255			# will *NOT* be empty if the file is owned by root.
256			#
257			_dir="`dirname $msgfile`"
258			_file="`basename $msgfile`"
259			_perms=`/usr/bin/find $_dir -name $_file -perm +07022 -prune`
260			_owner=`/usr/bin/find $_dir -name $_file -user 0 -prune`
261			if [ -z "$_owner" -o -n "$_perms" ]; then
262				err "The message file ($msgfile) may be writeable only by root."
263				return 1
264			fi
265			cat "$msgfile" |
266			while read _line ; do
267				eval echo "$_line"
268			done | ${MAILCMD} -s"Welcome" ${username}
269			info "Sent welcome message to ($username)."
270		}
271	fi
272}
273
274# get_user
275#	Reads username of the account from standard input or from a global
276#	variable containing an account line from a file. The username is
277#	required. If this is an interactive session it will prompt in
278#	a loop until a username is entered. If it is batch processing from
279#	a file it will output an error message and return to the caller.
280#
281get_user() {
282	_input=
283
284	# No need to take down user names if this is a configuration saving run.
285	[ -n "$configflag" ] && return
286
287	while : ; do
288		if [ -z "$fflag" ]; then
289			echo -n "Username: "
290			read _input
291		else
292			_input="`echo "$fileline" | cut -f1 -d:`"
293		fi
294
295		# There *must* be a username. If this is an interactive
296		# session give the user an opportunity to retry.
297		#
298		if [ -z "$_input" ]; then
299			err "You must enter a username!"
300			[ -z "$fflag" ] && continue
301		fi
302		break
303	done
304	username="$_input"
305}
306
307# get_gecos
308#	Reads extra information about the user. Can be used both in interactive
309#	and batch (from file) mode.
310#
311get_gecos() {
312	_input=
313
314	# No need to take down additional user information for a configuration run.
315	[ -n "$configflag" ] && return
316
317	if [ -z "$fflag" ]; then
318		echo -n "Full name: "
319		read _input
320	else
321		_input="`echo "$fileline" | cut -f7 -d:`"
322	fi
323	ugecos="$_input"
324}
325
326# get_shell
327#	Get the account's shell. Works in interactive and batch mode. It
328#	accepts only the base name of the shell, NOT the full path.
329#	If an invalid shell is entered it will simply use the default shell.
330#
331get_shell() {
332	_input=
333	_fullpath=
334	ushell="$defaultshell"
335
336	# Make sure the current value of the shell is a valid one
337	_shellchk="${GREPCMD} '^$ushell$' ${ETCSHELLS} > /dev/null 2>&1"
338	eval $_shellchk || {
339		err "Invalid shell ($ushell). Using default shell ${defaultshell}."
340		ushell="$defaultshell"
341	}
342
343	if [ -z "$fflag" ]; then
344		echo -n "Shell ($shells) [`basename $ushell`]: "
345		read _input
346	else
347		_input="`echo "$fileline" | cut -f9 -d:`"
348	fi
349	if [ -n "$_input" ]; then
350		_fullpath=`fullpath_from_shell $_input`
351		if [ -n "$_fullpath" ]; then
352			ushell="$_fullpath"
353		else
354			err "Invalid shell selection. Using default shell ${defaultshell}."
355			ushell="$defaultshell"
356		fi
357	fi
358}
359
360# get_homedir
361#	Reads the account's home directory. Used both with interactive input
362#	and batch input.
363#
364get_homedir() {
365	_input=
366	if [ -z "$fflag" ]; then
367		echo -n "Home directory [${homeprefix}/${username}]: "
368		read _input
369	else
370		_input="`echo "$fileline" | cut -f8 -d:`"
371	fi
372
373	if [ -n "$_input" ]; then
374		uhome="$_input"
375		# if this is a configuration run, then user input is the home
376		# directory prefix. Otherwise it is understood to
377		# be $prefix/$user
378		#
379		[ -z "$configflag" ] && homeprefix="`dirname $uhome`" || homeprefix="$uhome"
380	else
381		uhome="${homeprefix}/${username}"
382	fi
383}
384
385# get_uid
386#	Reads a numeric userid in an interactive or batch session. Automatically
387#	allocates one if it is not specified.
388#
389get_uid() {
390	uuid=${uidstart}
391	_input=
392	_prompt=
393
394	# No need to take down uids for a configuration saving run.
395	[ -n "$configflag" ] && return
396
397	if [ -n "$uuid" ]; then
398		_prompt="Uid [$uuid]: "
399	else
400		_prompt="Uid (Leave empty for default): "
401	fi
402	if [ -z "$fflag" ]; then
403		echo -n "$_prompt"
404		read _input
405	else
406		_input="`echo "$fileline" | cut -f2 -d:`"
407	fi
408
409	[ -n "$_input" ] && uuid=$_input
410	uuid=`get_nextuid $uuid`
411	uidstart=$uuid
412}
413
414# get_class
415#	Reads login class of account. Can be used in interactive or batch mode.
416#
417get_class() {
418	uclass="$defaultclass"
419	_input=
420	_class=${uclass:-"default"}
421
422	if [ -z "$fflag" ]; then
423		echo -n "Login class [$_class]: "
424		read _input
425	else
426		_input="`echo "$fileline" | cut -f4 -d:`"
427	fi
428
429	[ -n "$_input" ] && uclass="$_input"
430}
431
432# get_logingroup
433#	Reads user's login group. Can be used in both interactive and batch
434#	modes. The specified value can be a group name or its numeric id.
435#	This routine leaves the field blank if nothing is provided and
436#	a default login group has not been set. The pw(8) command
437#	will then provide a login group with the same name as the username.
438#
439get_logingroup() {
440	ulogingroup="$defaultLgroup"
441	_input=
442
443	if [ -z "$fflag" ]; then
444		echo -n "Login group [${ulogingroup:-$username}]: "
445		read _input
446	else
447		_input="`echo "$fileline" | cut -f3 -d:`"
448	fi
449
450	# Pw(8) will use the username as login group if it's left empty
451	[ -n "$_input" ] && ulogingroup="$_input"
452}
453
454# get_groups
455#	Read additional groups for the user. It can be used in both interactive
456#	and batch modes.
457#
458get_groups() {
459	ugroups="$defaultgroups"
460	_input=
461	_group=${ulogingroup:-"${username}"}
462
463	if [ -z "$configflag" ]; then
464		[ -z "$fflag" ] && echo -n "Login group is $_group. Invite $username"
465		[ -z "$fflag" ] && echo -n " into other groups? [$ugroups]: "
466	else
467		[ -z "$fflag" ] && echo -n "Enter additional groups [$ugroups]: "
468	fi
469	read _input
470
471	[ -n "$_input" ] && ugroups="$_input"
472}
473
474# get_expire_dates
475#	Read expiry information for the account and also for the password. This
476#	routine is used only from batch processing mode.
477#
478get_expire_dates() {
479	upwexpire="`echo "$fileline" | cut -f5 -d:`"
480	uexpire="`echo "$fileline" | cut -f6 -d:`"
481}
482
483# get_password
484#	Read the password in batch processing mode. The password field matters
485#	only when the password type is "yes" or "random". If the field is empty and the
486#	password type is "yes", then it assumes the account has an empty passsword
487#	and changes the password type accordingly. If the password type is "random"
488#	and the password field is NOT empty, then it assumes the account will NOT
489#	have a random password and set passwdtype to "yes."
490#
491get_password() {
492	# We may temporarily change a password type. Make sure it's changed
493	# back to whatever it was before we process the next account.
494	#
495	[ -n "$savedpwtype" ] && {
496		passwdtype=$savedpwtype
497		savedpwtype=
498	}
499
500	# There may be a ':' in the password
501	upass=${fileline#*:*:*:*:*:*:*:*:*:}
502
503	if [ -z "$upass" ]; then
504		case $passwdtype in
505		yes)
506			# if it's empty, assume an empty password
507			passwdtype=none
508			savedpwtype=yes
509			;;
510		esac
511	else
512		case $passwdtype in
513		random)
514			passwdtype=yes
515			savedpwtype=random
516			;;
517		esac
518	fi
519}
520
521# input_from_file
522#	Reads a line of account information from standard input and
523#	adds it to the user database.
524#
525input_from_file() {
526	_field=
527
528	while read -r fileline ; do
529		case "$fileline" in
530		\#*|'')
531			return 0
532			;;
533		esac
534
535		get_user || continue
536		get_gecos
537		get_uid
538		get_logingroup
539		get_class
540		get_shell
541		get_homedir
542		get_password
543		get_expire_dates
544
545		add_user
546	done
547}
548
549# input_interactive
550#	Prompts for user information interactively, and commits to
551#	the user database.
552#
553input_interactive() {
554
555	_disable=
556	_pass=
557	_passconfirm=
558	_random="no"
559	_emptypass="no"
560	_usepass="yes"
561	_logingroup_ok="no"
562	_groups_ok="no"
563	case $passwdtype in
564	none)
565		_emptypass="yes"
566		_usepass="yes"
567		;;
568	no)
569		_usepass="no"
570		;;
571	random)
572		_random="yes"
573		;;
574	esac
575
576	get_user
577	get_gecos
578	get_uid
579
580	# The case where group = user is handled elsewhere, so
581	# validate any other groups the user is invited to.
582	until [ "$_logingroup_ok" = yes ]; do
583		get_logingroup
584		_logingroup_ok=yes
585		if [ -n "$ulogingroup" -a "$username" != "$ulogingroup" ]; then
586			if ! ${PWCMD} show group $ulogingroup > /dev/null 2>&1; then
587				echo "Group $ulogingroup does not exist!"
588				_logingroup_ok=no
589			fi
590		fi
591	done
592	until [ "$_groups_ok" = yes ]; do
593		get_groups
594		_groups_ok=yes
595		for i in $ugroups; do
596			if [ "$username" != "$i" ]; then
597				if ! ${PWCMD} show group $i > /dev/null 2>&1; then
598					echo "Group $i does not exist!"
599					_groups_ok=no
600				fi
601			fi
602		done
603	done
604
605	get_class
606	get_shell
607	get_homedir
608
609	while : ; do
610		echo -n "Use password-based authentication? [$_usepass]: "
611		read _input
612		[ -z "$_input" ] && _input=$_usepass
613		case $_input in
614		[Nn][Oo]|[Nn])
615			passwdtype="no"
616			;;
617		[Yy][Ee][Ss]|[Yy][Ee]|[Yy])
618			while : ; do
619				echo -n "Use an empty password? (yes/no) [$_emptypass]: "
620				read _input
621				[ -n "$_input" ] && _emptypass=$_input
622				case $_emptypass in
623				[Nn][Oo]|[Nn])
624					echo -n "Use a random password? (yes/no) [$_random]: "
625					read _input
626					[ -n "$_input" ] && _random="$_input"
627					case $_random in
628					[Yy][Ee][Ss]|[Yy][Ee]|[Yy])
629						passwdtype="random"
630						break
631						;;
632					esac
633					passwdtype="yes"
634					[ -n "$configflag" ] && break
635					trap 'stty echo; exit' 0 1 2 3 15
636					stty -echo
637					echo -n "Enter password: "
638					read -r upass
639					echo''
640					echo -n "Enter password again: "
641					read -r _passconfirm
642					echo ''
643					stty echo
644					# if user entered a blank password
645					# explicitly ask again.
646					[ -z "$upass" -a -z "$_passconfirm" ] \
647					    && continue
648					;;
649				[Yy][Ee][Ss]|[Yy][Ee]|[Yy])
650					passwdtype="none"
651					break;
652					;;
653				*)
654					# invalid answer; repeat the loop
655					continue
656					;;
657				esac
658				if [ "$upass" != "$_passconfirm" ]; then
659					echo "Passwords did not match!"
660					continue
661				fi
662				break
663			done
664			;;
665		*)
666			# invalid answer; repeat loop
667			continue
668			;;
669		esac
670		break;
671	done
672	_disable=${disableflag:-"no"}
673	while : ; do
674		echo -n "Lock out the account after creation? [$_disable]: "
675		read _input
676		[ -z "$_input" ] && _input=$_disable
677		case $_input in
678		[Nn][Oo]|[Nn])
679			disableflag=
680			;;
681		[Yy][Ee][Ss]|[Yy][Ee]|[Yy])
682			disableflag=yes
683			;;
684		*)
685			# invalid answer; repeat loop
686			continue
687			;;
688		esac
689		break
690	done
691	
692	# Display the information we have so far and prompt to
693	# commit it.
694	#
695	_disable=${disableflag:-"no"}
696	[ -z "$configflag" ] && printf "%-10s : %s\n" Username $username
697	case $passwdtype in
698	yes)
699		_pass='*****'
700		;;
701	no)
702		_pass='<disabled>'
703		;;
704	none)
705		_pass='<blank>'
706		;;
707	random)
708		_pass='<random>'
709		;;
710	esac
711	[ -z "$configflag" ] && printf "%-10s : %s\n" "Password" "$_pass"
712	[ -n "$configflag" ] && printf "%-10s : %s\n" "Pass Type" "$passwdtype"
713	[ -z "$configflag" ] && printf "%-10s : %s\n" "Full Name" "$ugecos"
714	[ -z "$configflag" ] && printf "%-10s : %s\n" "Uid" "$uuid"
715	printf "%-10s : %s\n" "Class" "$uclass"
716	printf "%-10s : %s %s\n" "Groups" "${ulogingroup:-$username}" "$ugroups"
717	printf "%-10s : %s\n" "Home" "$uhome"
718	printf "%-10s : %s\n" "Shell" "$ushell"
719	printf "%-10s : %s\n" "Locked" "$_disable"
720	while : ; do
721		echo -n "OK? (yes/no): "
722		read _input
723		case $_input in
724		[Nn][Oo]|[Nn])
725			return 1
726			;;
727		[Yy][Ee][Ss]|[Yy][Ee]|[Yy])
728			add_user
729			;;
730		*)
731			continue
732			;;
733		esac
734		break
735	done
736	return 0
737}
738
739#### END SUBROUTINE DEFENITION ####
740
741THISCMD=`/usr/bin/basename $0`
742DEFAULTSHELL=/bin/sh
743ADDUSERCONF="${ADDUSERCONF:-/etc/adduser.conf}"
744PWCMD="${PWCMD:-/usr/sbin/pw}"
745MAILCMD="${MAILCMD:-mail}"
746ETCSHELLS="${ETCSHELLS:-/etc/shells}"
747GREPCMD="/usr/bin/grep"
748DATECMD="/bin/date"
749
750# Set default values
751#
752username=
753uuid=
754uidstart=
755ugecos=
756ulogingroup=
757uclass=
758uhome=
759upass=
760ushell=
761udotdir=/usr/share/skel
762ugroups=
763uexpire=
764upwexpire=
765shells="`valid_shells`"
766passwdtype="yes"
767msgfile=/etc/adduser.msg
768msgflag=
769quietflag=
770configflag=
771fflag=
772infile=
773disableflag=
774readconfig="yes"
775homeprefix="/home"
776randompass=
777fileline=
778savedpwtype=
779defaultclass=
780defaultLgroup=
781defaultgoups=
782defaultshell="${DEFAULTSHELL}"
783
784# Make sure the user running this program is root. This isn't a security
785# measure as much as it is a usefull method of reminding the user to
786# 'su -' before he/she wastes time entering data that won't be saved.
787#
788procowner=${procowner:-`/usr/bin/id -u`}
789if [ "$procowner" != "0" ]; then
790	err 'you must be the super-user (uid 0) to use this utility.'
791	exit 1
792fi
793
794# Overide from our conf file
795# Quickly go through the commandline line to see if we should read
796# from our configuration file. The actual parsing of the commandline
797# arguments happens after we read in our configuration file (commandline
798# should override configuration file).
799#
800for _i in $* ; do
801	if [ "$_i" = "-N" ]; then
802		readconfig=
803		break;
804	fi
805done
806if [ -n "$readconfig" ]; then
807	# On a long-lived system, the first time this script is run it
808	# will barf upon reading the configuration file for its perl predecessor.
809	if ( . ${ADDUSERCONF} > /dev/null 2>&1 ); then
810		[ -r ${ADDUSERCONF} ] && . ${ADDUSERCONF} > /dev/null 2>&1
811	fi
812fi 
813
814# Proccess command-line options
815#
816for _switch ; do
817	case $_switch in
818	-L)
819		defaultclass="$2"
820		shift; shift
821		;;
822	-C)
823		configflag=yes
824		shift
825		;;
826	-E)
827		disableflag=yes
828		shift
829		;;
830	-k)
831		udotdir="$2"
832		shift; shift
833		;;
834	-f)
835		[ "$2" != "-" ] && infile="$2"
836		fflag=yes
837		shift; shift
838		;;
839	-g)
840		defaultLgroup="$2"
841		shift; shift
842		;;
843	-G)
844		defaultgroups="$2"
845		shift; shift
846		;;
847	-h)
848		show_usage
849		exit 0
850		;;
851	-d)
852		homeprefix="$2"
853		shift; shift
854		;;
855	-m)
856		case "$2" in
857		[Nn][Oo])
858			msgflag=
859			;;
860		*)
861			msgflag=yes
862			msgfile="$2"
863			;;
864		esac
865		shift; shift
866		;;
867	-N)
868		readconfig=
869		shift
870		;;
871	-w)
872		case "$2" in
873		no|none|random|yes)
874			passwdtype=$2
875			;;
876		*)
877			show_usage
878			exit 1
879			;;
880		esac
881		shift; shift
882		;;
883	-q)
884		quietflag=yes
885		shift
886		;;
887	-s)
888		defaultshell="`fullpath_from_shell $2`"
889		shift; shift
890		;;
891	-u)
892		uidstart=$2
893		shift; shift
894		;;
895	esac
896done
897
898# If the -f switch was used, get input from a file. Otherwise,
899# this is an interactive session.
900#
901if [ -n "$fflag" ]; then
902	if [ -z "$infile" ]; then
903		input_from_file
904	elif [ -n "$infile" ]; then
905		if [ -r "$infile" ]; then
906			input_from_file < $infile
907		else
908			err "File ($infile) is unreadable or does not exist."
909		fi
910	fi
911else
912	input_interactive
913	while : ; do
914		if [ -z "$configflag" ]; then
915			echo -n "Add another user? (yes/no): "
916		else
917			echo -n "Re-edit the default configuration? (yes/no): "
918		fi
919		read _input
920		case $_input in
921		[Yy][Ee][Ss]|[Yy][Ee]|[Yy])
922			uidstart=`get_nextuid $uidstart`
923			input_interactive
924			continue
925			;;
926		[Nn][Oo]|[Nn])
927			echo "Goodbye!"
928			;;
929		*)
930			continue
931			;;
932		esac
933		break
934	done
935fi
936