Compare commits
5 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
26c007dba6 | ||
|
|
785e3c116d | ||
|
|
adbfeb0074 | ||
|
|
8c7ef32894 | ||
|
|
70ef7a3fc5 |
25
Readme.md
25
Readme.md
@@ -26,6 +26,31 @@ Inside the base folder there are
|
|||||||
- ssh-keygen for temporary holding the PEM/PUB files
|
- ssh-keygen for temporary holding the PEM/PUB files
|
||||||
- zip file which holds the created user list, password and PEM/PUB files
|
- zip file which holds the created user list, password and PEM/PUB files
|
||||||
|
|
||||||
|
## Config
|
||||||
|
|
||||||
|
### create_user.sh: create_user.cfg
|
||||||
|
|
||||||
|
A `create_user.cfg` can be created to set a differen HOME_LOCATION and PASSWORD_LENGTH values
|
||||||
|
|
||||||
|
eg:
|
||||||
|
|
||||||
|
```ini
|
||||||
|
HOME_LOCATION="/storage"
|
||||||
|
PASSWORD_LENGTH=14
|
||||||
|
```
|
||||||
|
|
||||||
|
### authorized_key_location_change.sh: authorized_key_location_change.ignore
|
||||||
|
|
||||||
|
For this script a `authorized_key_location_change.ignore` with a list of user names to ignore for the
|
||||||
|
move
|
||||||
|
|
||||||
|
eg:
|
||||||
|
|
||||||
|
```ini
|
||||||
|
foo_user
|
||||||
|
bar_user
|
||||||
|
```
|
||||||
|
|
||||||
## Options
|
## Options
|
||||||
|
|
||||||
### -g (go)
|
### -g (go)
|
||||||
|
|||||||
@@ -27,13 +27,14 @@ LOG="${BASE_FOLDER}/../log";
|
|||||||
# auth log file user;date from collect_login_data script
|
# auth log file user;date from collect_login_data script
|
||||||
AUTH_LOG="${BASE_FOLDER}/../auth-log/user_auth.log";
|
AUTH_LOG="${BASE_FOLDER}/../auth-log/user_auth.log";
|
||||||
|
|
||||||
|
error=0;
|
||||||
if [ $(whoami) != "root" ]; then
|
if [ $(whoami) != "root" ]; then
|
||||||
echo "Script must be run as root user";
|
echo "Script must be run as root user";
|
||||||
exit;
|
error=1;
|
||||||
fi;
|
fi;
|
||||||
if [ ! -d "${LOG}" ]; then
|
if [ ! -d "${LOG}" ]; then
|
||||||
echo "log folder ${LOG} not found";
|
echo "log folder ${LOG} not found";
|
||||||
exit;
|
error=1;
|
||||||
fi;
|
fi;
|
||||||
if [ -z $(command -v curl) ]; then
|
if [ -z $(command -v curl) ]; then
|
||||||
echo "Missing curl application, aborting";
|
echo "Missing curl application, aborting";
|
||||||
@@ -43,6 +44,9 @@ if [ -z $(command -v jq) ]; then
|
|||||||
echo "Missing jq application, aborting";
|
echo "Missing jq application, aborting";
|
||||||
error=1;
|
error=1;
|
||||||
fi;
|
fi;
|
||||||
|
if [ $error -eq 1 ]; then
|
||||||
|
exit;
|
||||||
|
fi;
|
||||||
# option 1 in list
|
# option 1 in list
|
||||||
case "${1,,}" in
|
case "${1,,}" in
|
||||||
text)
|
text)
|
||||||
|
|||||||
@@ -87,6 +87,13 @@ if [ ! -d "${HOME_FOLDER}" ]; then
|
|||||||
echo "Home folder location not found: ${HOME_FOLDER}";
|
echo "Home folder location not found: ${HOME_FOLDER}";
|
||||||
error=1;
|
error=1;
|
||||||
fi;
|
fi;
|
||||||
|
# allow 10 to 39 length for password
|
||||||
|
if [ ! -z "${PASSWORD_LENGTH}" ] && ! [[ "${PASSWORD_LENGTH}" =~ ^[13][0-9]$ ]]; then
|
||||||
|
echo "Password length set error, can only be a value between 10 and 39";
|
||||||
|
error=1;
|
||||||
|
elif [ -z ${PASSWORD_LENGTH} ]; then
|
||||||
|
PASSWORD_LENGTH=14;
|
||||||
|
fi;
|
||||||
# home dir error abort
|
# home dir error abort
|
||||||
if [ $error -eq 1 ]; then
|
if [ $error -eq 1 ]; then
|
||||||
exit;
|
exit;
|
||||||
@@ -309,7 +316,11 @@ while read i; do
|
|||||||
# Note we only create a password if we need it
|
# Note we only create a password if we need it
|
||||||
# password + store pwgen 10 1 -1
|
# password + store pwgen 10 1 -1
|
||||||
if [ -z "${_password}" ]; then
|
if [ -z "${_password}" ]; then
|
||||||
password=$(printf "%s" $(pwgen 14 1));
|
password=$(printf "%s" $(pwgen ${PASSWORD_LENGTH} 1));
|
||||||
|
elif [ "${_password}" = "SET_NO_PASSWORD" ]; then
|
||||||
|
# set empty
|
||||||
|
echo "* No password set";
|
||||||
|
password="";
|
||||||
else
|
else
|
||||||
echo "! Override password set";
|
echo "! Override password set";
|
||||||
password=${_password};
|
password=${_password};
|
||||||
|
|||||||
Reference in New Issue
Block a user