From 01cb2d675103283664e0a870818cfc413f546b37 Mon Sep 17 00:00:00 2001
From: Rafael Laboissiere <rafael@laboissiere.net>
Date: Sat, 9 May 2015 10:42:34 +0200
Subject: Initial commit

---
 add-git-user | 75 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 75 insertions(+)
 create mode 100755 add-git-user

(limited to 'add-git-user')

diff --git a/add-git-user b/add-git-user
new file mode 100755
index 0000000..1f5eec1
--- /dev/null
+++ b/add-git-user
@@ -0,0 +1,75 @@
+#!/bin/sh
+
+### Add a Git user to the system  
+
+### Copyright (C) 2015 Rafael Laboissiere
+###
+### This program is free software; you can redistribute it and/or modify it under
+### the terms of the GNU General Public License as published by the Free Software
+### Foundation; either version 3 of the License, or (at your option) any later
+### version.
+###
+### This program is distributed in the hope that it will be useful, but WITHOUT
+### ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+### FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+### details.
+###
+### You should have received a copy of the GNU General Public License along with
+### this program; if not, see <http://www.gnu.org/licenses/>.
+
+### Get the program name
+prog=${0##*/}
+
+### Ensure that at least one argument is given
+if [ $# != 1 ] ; then
+    echo "Usage: $prog name" 1>&2
+    exit 1
+fi
+
+### Get the specified user name
+user=$1
+
+### Generate a temporary file with configuration for adduser
+tmp=$(tempfile)
+
+### Cleanup function
+cleanup(){
+    rm -f $tmp
+}
+trap "cleanup" 1 2 3 13 15
+
+### Create the temporary configuration file
+home=/var/git
+cat > $tmp <<EOF
+DHOME=$home
+DSHELL=/usr/bin/git-shell
+FIRST_UID=2000
+FIRST_GID=2000
+SKEL=
+EOF
+
+### Add the new user to the system
+adduser --conf $tmp --disabled-password --disabled-login --gecos "" $user
+
+### Create the no-interactive-login script
+homedir=$home/$user
+gitshdir=$homedir/git-shell-commands
+mkdir -p $gitshdir
+nolog=$gitshdir/no-interactive-login
+cat > $nolog <<EOF
+#!/bin/sh
+printf '\\n%s\\n' "Hi \$USER! You've successfully authenticated, but I do not"
+printf '%s\\n\\n' "provide interactive shell access."
+exit 128
+EOF
+chmod +x $nolog
+chown -R $user:$user $gitshdir
+
+### Initialize the SSH directory
+sshdir=$homedir/.ssh
+mkdir --mode=700 $sshdir
+touch $sshdir/authorized_keys
+chown -R $user:$user $sshdir
+
+### Exit gracefully
+cleanup
-- 
cgit v1.2.3