CVS log for loncom/Attic/lcuseradd

Up to [LON-CAPA] / loncom

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- Web interface to support switching/adding filesystem-authenticated
  "unix" users was removed in LON-CAPA 2.6.0, so lcuseradd not needed.
- Authoring Spaces migration from /home/<username>/public_html to
  /home/httpd/html/priv/<domain>/<username> for 2.11.0, so lchtmldir
  not needed (bug 1320).

- Bug 1320.
   - No need to create a user directory in /home/httpd/html/priv/$udom/$uname
     when a unix auth user is created; one will be created automatically if an
     author role is assigned.

Bug #1320: NOT SURE IF THIS IS NEEDED ANYMORE
If we don't support UNIX accounts anymore,
we should remove calls to lcuseradd from lond

- some cleanups and informational adds

The default filename for the httpd PID file for Apache 2 on SuSE is /var/run/httpd2.pid

In the future, setting PidFile explicitly in Apache 2 configuration during install is expected to be a better long term solution.

- eliminating some syntax warnings

Changes to accommodate suse, where new users are put into default group rather than into new group with same name as username.  Solve this by creating group first, before adding user. Also create user's home directory if not created automatically.

Cosmetic changes to ensure that:
- status file is written while euid is www.
- There's a newline after the status code.

- commiting Martin Siegert's updates to work on systems that don't create user groups by default

use File::Find::find to recurse the public_html dir ensuring that all
subdirs get 02770 mode.
(defect 3853)

Fix some safing issues with the pid for httpd that prevented the
kill -USR1 from being sent to the right pid.

Ensure that lond invokes lchtmldir for authors that switch both in and
out of filesystem auth mode.

Reset the ownership to user:user rather than user:www even though the latter
is objectively probably better and I don't think it will break any existing
stuff since the www already has groups for users that don't match this scheme.

Fix defect 3853: Directory ownerships were not correct if the user
was to become an author e.g.  Set the ownerships as follows:
top level dir: username:www  public_html and below username:www
everything else, the user should be able to control via their Unix
login and should be, if deisired, hide-able from LonCAPA.

Defect 550: Allow users to be created if their home dir already exists, as
           long as they don't already appear in the /etc/passwd file.
           This is necessary for users to be able to change auth mode
           from internal -> filesystem if they are authors.

- backport 1.29 1.30

- remove debug message

- actualy parse the result of the groups command correctly

Raise the self esteem of all the else's by cuddling them, in accordance with
LonCAPA style.

- backport 1.27

- BUG#3238 was not properly handling taint

Add capability (optional for compatibilty with existing code)
to write the error code to a file passed in to lcuseradd. NOte
that the file must be in a directory that is writable by www
I recommend /tmp -- and that the reader of that file unlink it.

This is my way to get around the fact that runing lcuseradd on a pipe
prevents you from getting the exit status of the program, which in turn
prevents the loncapa UI from knowing that adding a user has actually failed!

best wishes to all.

Checking in for TESTING only - move to lower version for 0.6 if not
sufficiently tested.

This sends USR1 to the Apache parent process on a server where a new
filesystem authenticated user is generated. The purpose is to re-init
the group associations.

Bug 701 Fixed various little diddly stuff that prevented a new filesystem authenticated user from getting an initial passwd.

Bug 701 - added additional $noprint conditionalized deubgging.
    In lcpasswd, removed code too put a dummy entry at the end of
    /etc/smbpasswd (it's not the right file anyway), and added the -a
   switch to the smbpasswd command invocation.

Forgot to propagate change for -p switch into mkdir.

Hid all the
if($DEBUG) {
   &logthis(text)
}
Behind a sub Debug... should have done this a >long< time ago.

map to foreach

just to be sure.. octal

more very necessary bug fixes related to group membership addition and
public_html permissions

bug fixes and documentation additions

updated and ready to use

removed 2>/dev/null from lcuserdel to get it working.  solidified file
creation permissions. -Scott

scripts are almost all working. lcuserdel still has some problems, and lcuseradd
doesn't get the permissions quite right yet.

I'm updating the error code listings in the comments.

Ok.  It works.  I just need to make user directories to be
www-writeable in addition to www-readable. -Scott

The program is basically working with a few minor bugs
like improper directory ownership, failing to create'
index.html, inserting too many lines into /etc/passwd.
-Scott

Finished some of the error checking algorithms as well as
file permission handling upon directory initialization.

more error catching and commenting.  lcuseradd should be complete, but
I've yet to test the script or give a careful look-through. -Scott

trying to add error-checking to make sure invalid characters are not in the
user name or passwords.  lcuseradd appears to be basically working, but I
still need to implement the addition of passwords.  I cannot do this with
a system call to lcpasswd due to the restrictions of perl setuid scripts.L

implementing conditional printing of error messagtes

various small changes..

fixing up exit code documentation for lcpasswd and lcuserdel.  lcuseradd
useradd system call syntax still incorrect here.  I'm putting in more
of the setuid handling code. -Scott

solidifying group deletion in lcuserdel, improving useradd syntax system command
for lcuseradd

adjusting comments and shell command execution order in lcuserdel.  lcuseradd
is beginning to take form, but is still buggy...

starting program script descriptions for setuid scripts
which allow for adding and deleting users