/[useradm]/otvori_nove+db
This is repository of my old source code which isn't updated any more. Go to git.rot13.org for current projects!
ViewVC logotype

Contents of /otvori_nove+db

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.9 - (show annotations)
Fri Jan 26 07:44:36 2001 UTC (23 years, 2 months ago) by dpavlin
Branch: MAIN
CVS Tags: HEAD
Changes since 1.8: +12 -9 lines
ispravno odreivanje max. uida za nove accounte

1 #!/usr/local/bin/perl -w
2
3 # Dobrica Pavlinusic <dpavlin@pliva.hr>
4 # 2000-01-31 DbP prva verzija
5 # 2000-02-14 DbP mozda i radi?
6 # 2000-03-06 DbP koristi DBD::pg
7 # 2000-03-09 DbP e-mail alias samo od malih slova
8 # 2000-03-13 DbP podrska za novu support/last_open tablicu
9 # 2000-03-16 DbP cuva stare aliase iz /etc/aliases
10 # 2000-03-20 DbP skida razmake prije/poslje imena/prezimena
11
12 use DBI;
13 use strict;
14
15 my $debug=0;
16
17 my $res_uids=60000; # uids larger than this are for system use
18
19 if (defined($ARGV[0]) && $ARGV[0] eq "-d") {
20 $debug++;
21 shift @ARGV;
22 }
23 my $open_only_id=shift @ARGV if (defined($ARGV[0]));
24
25 warn "DEBUG -- ne kreira ni¹ta!" if ($debug);
26
27 $|++;
28
29
30 #----
31
32 sub xerror { print ERROR @_; print STDERR @_; }
33 sub xdebug { print DEBUG @_; print STDOUT @_ if ($debug); }
34 sub v { print STDOUT @_; print DEBUG @_; };
35
36 open(ERROR,"> error-log") || die "can't open error-log: $!";
37 open(DEBUG,"> debug-log") || die "can't open debug-log: $!";
38
39 my %etc_aliases;
40 my $mail_alias;
41 my $mail_login;
42
43 my @mail_to; # array to main initial message to
44 open(WHO,"who am i |") || die "who am i? $!";
45 my $db_user=<WHO>;
46 chomp $db_user;
47 $db_user=~s/\s.+$//g;
48 close(WHO);
49
50 xdebug "koristim korisnika $db_user\n";
51
52 open(HOSTNAME,"hostname |") || die "hostname: $!";
53 my $hostname=<HOSTNAME>;
54 chomp $hostname;
55 close(HOSTNAME);
56
57 xdebug "koristim hostname $hostname\n";
58
59 v "/etc/aliases\n";
60 open(ALIAS,"/etc/aliases") || die "Can't open /etc/aliases: $!";
61 open(NALIAS,">aliases.new") || die "Can't open aliases.new: $!";
62 while(<ALIAS>) {
63 chop;
64 print NALIAS "$_\n";
65 next if (m!^#! || m!^$!);
66 my ($mail_alias,$mail_login);
67 if (m!\w+.\w+!) {
68 ($mail_alias,$mail_login) = split(/\s*:\s*/,$_,2);
69 $mail_alias =~ tr [A-Z] [a-z];
70 }
71 $etc_aliases{$mail_alias}=$mail_login;
72 # xdebug "$mail_alias:$mail_login\n";
73 }
74 close(ALIAS);
75
76 my %etc_passwd;
77 my $max_uid = 0; # maximum uid
78
79 v "/etc/passwd\n";
80 open(PASSWD,"/etc/passwd") || die "Can't open /etc/passwd !";
81 open(NPASSWD,">passwd.new") || die "Can't open passwd.new !";
82 while(<PASSWD>) {
83 chop;
84 my ($login,$uid,$gid,$full_name,$dir,$shell);
85 ($login,undef,$uid,$gid,$full_name,$dir,$shell) = split(/:/,$_,7);
86 $etc_passwd{$login}=$full_name;
87 print NPASSWD "$_\n";
88 # xdebug "$login:$full_name\n";
89 $max_uid = $uid if ($max_uid < $uid && $uid < $res_uids);
90 }
91 close(PASSWD);
92
93 my %group_id;
94
95 v "/etc/group\n";
96 open(GROUP,"/etc/group") || die "Can't open /etc/group !";
97 while(<GROUP>) {
98 my ($group,undef,$gid,undef) = split (/:/,$_,4);
99 $group_id{$group}=$gid;
100 # xdebug "$group:$gid\n";
101 }
102 close(GROUP);
103
104 sub nuke_chars {
105 my $foo=$_[0];
106 $foo =~ tr/šðè枊ÐÈƎ/¹ðè澩ÐÈÆ®/; # cp1250 -> iso88592
107 $foo =~ s/ð/dj/g;
108 $foo =~ s/Ð/Dj/g;
109 $foo =~ tr/¹ðè澩ÐÈÆ®/sdcczSDCCZ/; # nuke iso88592
110 $foo =~ s/^\s+//g;
111 $foo =~ s/\s+$//g;
112 return $foo;
113 }
114
115 my $max_osoba_id=0;
116
117 my $dbh = DBI->connect("DBI:Pg:dbname=informatika;host=support.pliva.hr;user=$db_user","","") || die $DBI::errstr;
118
119 my $sth = $dbh->prepare("select ko_id from unix2ko where login='$db_user' and host='$hostname'") || die $dbh->errstr();
120 $sth->execute() || die $sth->errstr();
121 my ($ko_id)=$sth->fetchrow_array;
122
123 xdebug "upotrebljavam ID kontakt osobe: $ko_id\n";
124
125 $sth = $dbh->prepare("select max(id) from last_open") || die $dbh->errstr();
126 $sth->execute() || die $sth->errstr();
127 my ($last_open)=$sth->fetchrow_array;
128
129 if (! defined($open_only_id)) {
130 $sth = $dbh->prepare("select id,ime,prezime,sifra,objekt,kat,soba,shell from view_otvori_nove where id > $last_open") || die $dbh->errstr();
131 } else {
132 $sth = $dbh->prepare("select id,ime,prezime,sifra,objekt,kat,soba,shell from view_otvori_nove where id=$open_only_id") || die $dbh->errstr();
133
134 }
135 $sth->execute() || die $sth->errstr();
136
137
138 my $sth2;
139
140 while (my ($osoba_id,$ime,$prezime,$sifra,$objekt,$kat,$soba,$shell) = $sth->fetchrow_array() ) {
141
142 $sth2 = $dbh->prepare("select max(status_tip_id) from status where osoba_id = $osoba_id") || die $dbh->errstr();
143 $sth2->execute() || die $sth2->errstr();
144 my ($max_status) = $sth2->fetchrow_array();
145 xdebug "max status zahtjeva $osoba_id je $max_status\n";
146 next if ($max_status > 3); # 3 .. otvoren
147
148 next if ($ime eq "ime" || $prezime eq "prezime");
149
150 if (!defined($ime) || !defined($prezime) || $ime eq "" || $prezime eq "") {
151 xerror "preskacem red '$_'\n";
152 next;
153 }
154
155 $ime=nuke_chars($ime);
156 $prezime=nuke_chars($prezime);
157
158 my ($prezime_za_login,$ime_za_login);
159
160 if ($prezime =~ /[- ]/) { # dva prezimena prezime1-prezime2
161 ($prezime_za_login,undef) = split(/[- ]/,$prezime,2);
162 } else {
163 $prezime_za_login = $prezime;
164 }
165
166 if ($ime =~ /[- ]/) { # dva imena ime1-ime2
167 ($ime_za_login,undef) = split(/[- ]/,$ime,2);
168 } else {
169 $ime_za_login = $ime;
170 }
171
172 my $add="";
173 my $login;
174
175 do {
176 $login=substr($ime_za_login,0,1).substr($prezime_za_login,0,7-length($add)).$add;
177 $login =~ tr [A-Z] [a-z];
178 xdebug "$ime, $prezime login: $login\n";
179 $add++;
180 } while defined($etc_passwd{$login});
181
182 my $email_alias;
183
184 $add="";
185 do {
186 $email_alias="$ime.$prezime$add";
187 $email_alias =~ s/ /./g; # space -> dot
188 $email_alias =~ tr [A-Z] [a-z];
189 xdebug "\t$email_alias\n";
190 $add++;
191 } while defined($etc_aliases{$login});
192
193
194 my $group="users";
195
196 if (defined($etc_passwd{$login})) {
197 xerror "preskocen: $ime $prezime osoba_id=$osoba_id (postoji isti login $login)\n";
198 $dbh->do("insert into status (osoba_id,kontakt_osoba_id,datum,status_tip_id) values ($osoba_id,3,'now'::datetime,4)") if (! $debug);
199 next;
200 }
201
202 push @mail_to,$email_alias;
203
204 my @saltch = ( 'a'..'z','0'..'9','A'..'Z' );
205 my @passwdch = ( 'a'..'k','m'..'z','2'..'9','A'..'H','J'..'N','P'..'Z',
206 '!','#','$','%','&','(',')','=','-','/','?' );
207
208 my $passwd="";
209 for (1..8) { $passwd.=$passwdch[int(rand($#passwdch))] };
210
211 my $salt = $saltch[int(rand($#saltch))].$saltch[int(rand($#saltch))];
212 my $crypt_passwd = crypt($passwd,$salt);
213
214 $max_uid++;
215 my $loc="";
216 $loc.=$objekt if (defined($objekt));
217 $loc.=" $kat" if (defined($kat));
218 $loc.=" $soba" if (defined($soba));
219 my $full_name="$ime $prezime,$loc,$sifra";
220 $full_name=~s/, +/,/g;
221 $full_name=~s/ +:/:/g;
222 $full_name=~s/ +/ /g;
223 $full_name=nuke_chars($full_name);
224 if ($shell) {
225 $shell="/usr/local/bin/bash";
226 } else {
227 $shell="/usr/bin/false";
228 }
229 my $dir="/usr/users/$login";
230
231 die "Nema grupe $group!" if (! defined($group_id{$group}));
232 xdebug "$login:$passwd:$max_uid:$group_id{$group}:$full_name:$dir:$shell\n";
233
234 print NPASSWD "$login:$crypt_passwd:$max_uid:$group_id{$group}:$full_name:$dir:$shell\n";
235 $dbh->do("insert into racuni (osoba_id,login,passwd) values ($osoba_id,'$login','$passwd')") if (! $debug);
236 $etc_passwd{$login}=$full_name;
237
238 if (defined($etc_aliases{$email_alias})) {
239 xerror "upozorenje: $ime $prezime osoba_id=$osoba_id (postoji e-mail alias) -- $email_alias\n";
240 print NALIAS "$email_alias:\t$login,$etc_aliases{$email_alias}\n";
241 } else {
242 print NALIAS "$email_alias:\t$login\n";
243 }
244
245 $dbh->do("insert into e_mail (osoba_id,alias) values ($osoba_id,'$email_alias')") if (! $debug);
246 $etc_aliases{$email_alias}=$login;
247
248 #---- C2 security
249 # if (!$debug || 1) {
250 # open(AUTH,">> $0.auth");
251 # print AUTH "$login:u_name=$login:u_id#$max_uid:u_pwd=$crypt_passwd:u_succhg#",time,":u_lock\@:chkent:\n";
252 # close(AUTH);
253 # }
254
255 system "mkdir -p $dir ; mkdir $dir/bin ; \
256 chown -R $max_uid:$group_id{$group} $dir ; chmod 755 $dir" if (! $debug);
257
258 $dbh->do("insert into status (osoba_id,kontakt_osoba_id,datum,status_tip_id) values ($osoba_id,$ko_id,'now'::datetime,3)") if (! $debug);
259
260 $max_osoba_id = $osoba_id if ($max_osoba_id < $osoba_id) ;
261 }
262
263 $dbh->do("insert into last_open values ('now',$max_osoba_id)") if (! $debug);
264
265 close(NPASSWD);
266 close(NALIAS);
267
268 $sth->finish;
269 undef $sth;
270 if (defined($sth2)) {
271 $sth2->finish;
272 undef $sth2;
273 }
274 $dbh->disconnect;
275
276 system "mv /etc/passwd passwd.orig" if (! $debug);
277 system "cp passwd.new /etc/passwd" if (! $debug);
278 system "chmod 644 /etc/passwd" if (! $debug);
279 system "/usr/sbin/mkpasswd /etc/passwd" if (! $debug);
280 system "mv /etc/aliases aliases.orig" if (! $debug);
281 system "cp aliases.new /etc/aliases" if (! $debug);
282 system "chmod 644 /etc/aliases" if (! $debug);
283 system "/usr/sbin/newaliases" if (! $debug);
284 #system "/tcb/bin/edauth -s < $0.auth" if (! $debug);
285
286 foreach my $alias (@mail_to) {
287 system "/usr/lib/sendmail $alias < mail.txt" if (! $debug);
288 }

  ViewVC Help
Powered by ViewVC 1.1.26