Subversion Repositories ALCASAR

#!/bin/bash
# $Id: alcasar-profil.sh 2488 2018-02-25 14:53:54Z lucas.echard $

# alcasar-profil.sh
# by Richard REY
# This script is distributed under the Gnu General Public License (GPL)

# Gestion des comptes liés aux profiles
# Manage the profil logins

DIR_BIN="/usr/local/bin" # scripts directory
ADM_PROFIL="admin"
PROFILS="backup manager"
ALL_PROFILS=`echo $ADM_PROFIL $PROFILS`
DIR_KEY="/usr/local/etc/digest"
SED="/bin/sed -i"
Lang=`echo $LANG|cut -c 1-2`
REALM="ALCASAR Control Center (ACC)"

# génère le htdigest
function htdigest () {
        passwdfile="$1"
        username="$2"

        [ -f "$passwdfile" ] || touch "$passwdfile"

        [ $(grep -c "${username}:${REALM}:" "$passwdfile") ] && existing_user=0 || existing_user=1

        if [ $existing_user -eq 1 ]; then
                echo "Changing password for user $username in realm $REALM"
        else
                echo "Adding user $username in realm $REALM"
        fi

        equal=0

        while [ $equal -eq 0 ]; do
                echo -n "New password: "
                read -s pass_1
                echo
                echo -n "Confirm the new password: "
                read -s pass_2
                echo

                if [ "$pass_1" != "$pass_2" ]; then
                        echo -e "\nThe passwords don't match.\n"
                else
                        equal=1
                fi
        done

        digest="${username}:${REALM}:"
        digest+=$(echo -n "${username}:${REALM}:${pass_1}" | md5sum | cut -d" " -f1)

        if [ $existing_user -eq 0 ]; then
                echo "$digest" >> "$passwdfile"
        else 
                sed -i "s/${username}:${REALM}:.*/${digest}/" "$passwdfile"
        fi
}

# liste les comptes de chaque profile
function list () {
        for i in $ALL_PROFILS
        do
                if [ $Lang == "fr" ]
                        then
                        echo -n "Comptes liés au profil '$i' : "

                else
                        echo -n "accounts linked with profile '$i' : "
                fi
                account_list=`cat $DIR_KEY/key_only_$i | cut -d':' -f1|sort`
                for account in $account_list
                do
                        echo -n "$account "
                done
        echo
        done
}
# ajoute les comptes du profil "admin" aux autres profils
# crée le fichier de clés contenant tous les compte (pour l'accès au centre de gestion)
function concat () {
        > $DIR_KEY/key_all
        for i in $PROFILS
        do
                cp -f $DIR_KEY/key_only_$ADM_PROFIL $DIR_KEY/key_$i
                cat $DIR_KEY/key_only_$i >> $DIR_KEY/key_$i
                cat $DIR_KEY/key_only_$i >> $DIR_KEY/key_all
        done
        cp -f $DIR_KEY/key_only_$ADM_PROFIL $DIR_KEY/key_$ADM_PROFIL
        cat $DIR_KEY/key_only_$ADM_PROFIL >> $DIR_KEY/key_all
        chown -R root:apache $DIR_KEY
        chmod 640 $DIR_KEY/key_*
}

usage="Usage: alcasar-profil.sh [-l|--list] [-a|--add [profil]] [-d|--del] [-p|--pass]"
nb_args=$#
arg1=$1
arg2=$2

# on met en place la structure minimale
if [ ! -e $DIR_KEY/key_$ADM_PROFIL ]
then
        touch $DIR_KEY/key_$ADM_PROFIL
fi
cp -f $DIR_KEY/key_$ADM_PROFIL $DIR_KEY/key_only_$ADM_PROFIL
for i in $PROFILS
do
        if [ ! -e $DIR_KEY/key_only_$i ]
        then
                touch $DIR_KEY/key_only_$i
        fi
done
concat
if [ $nb_args -eq 0 ]
then
        echo $usage
        exit 0
fi
case $arg1 in
        -\? | -h* | --h*)
                echo "$usage"
                exit 0
                ;;
        --add|-a)
                if [ $nb_args -eq 1 ]
                then
                        # ajout d'un compte
                        list
                        if [ $Lang == "fr" ]
                        then
                                echo -n "Choisissez un profil ($ALL_PROFILS) : "
                        else
                                echo -n "Select a profile ($ALL_PROFILS) : "
                        fi
                        read profil
                else
                        profil="$2"
                fi
                if [ $Lang == "fr" ]
                then
                        echo -n "Entrez le nom du compte à créer (profil '$profil') : "
                else
                        echo "Enter the name of the account to create (profile '$profil') : "
                fi
                read account
                # on teste s'il n'existe pas déjà
                for i in $ALL_PROFILS
                do
                        tmp_account=`cat $DIR_KEY/key_only_$i | cut -d':' -f1`
                        for j in $tmp_account
                                do
                                if [ "$j" = "$account" ]
                                        then if [ $Lang == "fr" ]
                                                then
                                                        echo "Ce compte existe déjà"
                                                else
                                                        echo "This account already exists"
                                                fi
                                        exit 0
                                fi
                                done
                done
                htdigest $DIR_KEY/key_only_$profil "$account"
                concat
                list
                ;;
        --del|-d)
                # suppression d'un compte
                list
                if [ $Lang == "fr" ]
                then
                        echo -n "entrez le nom du compte à supprimer : "
                else
                        echo -n "enter the name of the account to remove : "
                fi
                read account
                for i in $ALL_PROFILS
                        do
                        $SED "/^$account:/d" $DIR_KEY/key_only_$i
                        done
                concat
                list
                ;;
        --pass|-p)
                # changement du mot de passe d'un compte
                list
                if [ $Lang == "fr" ]
                then
                        echo "Changement de mot de passe"
                        echo -n "Entrez le nom du compte : "
                else
                        echo "Password change"
                        echo -n "Enter the name of the account : "
                fi
                read account
                for i in $ALL_PROFILS
                do
                        tmp_account=`cat $DIR_KEY/key_only_$i | cut -d':' -f1`
                        for j in $tmp_account
                                do
                                if [ "$j" = "$account" ]
                                then
                                        htdigest $DIR_KEY/key_only_$i "$account"
                                fi
                                done
                done
                concat
                ;;
        --list|-l)
                # liste des comptes par profil
                list
                ;;
        *)
                if [ $Lang == "fr" ]
                then
                        echo "Argument inconnu :$1";
                else
                        echo "Unknown argument : $i";
                fi
                echo "$usage"
                exit 1
                ;;
esac