D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
usr
/
share
/
doc
/
adduser
/
examples
/
Filename :
adduser.local.conf
back
Copy
############################################################################ # /etc/adduser.local.conf: Configuration for /usr/local/sbin/adduser.local # ############################################################################ # [JNZ] Modified 21-Jun-2013 # This file configures the local system additions to adduser(8) and should # be modified to suit local conditions. # # adduser.local is a script that configures a user's account for various # "services". These services are simply convenient names for directories # that must be created, Unix groups to which the user must be added, files # that need to be copied and so on. # # Note that adduser(8) can now perform SOME of the tasks that adduser.local # does, particularly by using the EXTRA_GROUPS and ADD_EXTRA_GROUPS # variables in /etc/adduser.conf. However, adduser.local is far more # flexible than doing just that... # # Please see the end of this file for an explanation of its syntax. ###################### # Global Options # ###################### # The skelother variable points to the "other" (secondary) skeletal # directory. This directory is similar to /etc/skel (see the SKEL variable # in /etc/adduser.conf), except that files are not necessarily copied to the # home directory. skelother = /etc/skel.other # The dirmode variable specifies the octal mode used by chmod(1) for any # directories created by adduser.local. Note, however, that such created # directories automatically inherit the SGID (set group ID) bit from their # parent directory. dirmode = 0755 # The filemode variable specifies the octal mode used by chmod(1) for any # files created by adduser.local. filemode = 0644 ##################### # USERS service # ##################### # Add the user to the Unix group "users". Every user on this machine # should be a member of this group. This is already done if the file # /etc/adduser.conf includes the setting "USERGROUPS=no". If USERGROUPS # is set to "yes", you should uncomment the following three lines. service = users group[users] = users addtogroup[users] = true ################### # WWW service # ################### # Configure the WWW service for the user, a service that has a real UID # associated with it. Assuming the user "www" has a GID of "www" and a # home directory of "/home/www" (in actual fact, the values are taken from # the password database), the following actions are performed: # # - the user is added to the "www" group # - the directory "/home/www/doc/users/$USER" is created, owned by # the user, with group owner "www" # - the link "public_html" is created to point to this directory # - the file "/etc/skel.other/index.html" is copied to this directory # # This assumes that the system user "www" and group "www" are NOT the same # as the UID and GID of the web server ("www-data" on my system). The "www" # account is for the web administrator. service = www user[www] = www addtogroup[www] = true homedir[www] = "" subdir[www] = "doc/users" althome[www] = false mkdir[www] = true chgrpdir[www] = true mklink[www] = true linkname[www] = "public_html" skelfile[www] = "index.html" chgrpskel[www] = true # If your web server's configuration follows the "other" (more common!) # standard for personal web pages (wherein the "public_html" directory is a # real directory in the user's home directory), you might want to use # something like the following: #service = www #homedir[www] = "" #subdir[www] = "public_html" #althome[www] = true #mkdir[www] = true #skelfile[www] = "index.html" ################### # FTP service # ################### # Configure the FTP service for the user in a similar way to the WWW # service above. The only difference is that no skeleton file is copied. service = ftp user[ftp] = ftp addtogroup[ftp] = true homedir[ftp] = "" subdir[ftp] = "doc/users" althome[ftp] = false mkdir[ftp] = true chgrpdir[ftp] = true mklink[ftp] = true linkname[ftp] = "public_ftp" ############################## # Restricted FTP service # ############################## # Create the directory ~ftp/doc-restricted/users/$USER, owned by the user, # for the Restricted FTP service on the ZAP Group server. service = ftp_r user[ftp_r] = ftp homedir[ftp_r] = "" subdir[ftp_r] = "doc-restricted/users" althome[ftp_r] = false mkdir[ftp_r] = true chgrpdir[ftp_r] = true #################### # DATA service # #################### # Create the directory /data/$USER, owned by the user. This is only done # if /data exists (it is an ordinary directory, not a mount point). #service = data #homedir[data] = "/data" #subdir[data] = "" #mounted[data] = false #mkdir[data] = true ##################### # CDROM service # ##################### # Add the user to the Unix group "cdrom" (if it exists). This allows the # user to access the CD-ROM hardware on the machine. service = cdrom group[cdrom] = cdrom addtogroup[cdrom] = true ###################### # FLOPPY service # ###################### # Add the user to the Unix group "floppy" (if it exists). This allows the # user to access the floppy drive on the machine. service = floppy group[floppy] = floppy addtogroup[floppy] = true ##################### # AUDIO service # ##################### # Add the user to the Unix group "audio" (if it exists). This allows the # user to access the audio hardware on the machine. service = audio group[audio] = audio addtogroup[audio] = true ################### # DIP service # ################### # Add the user to the Unix group "dip" (if it exists). This allows the # user to dial out using the local modem. service = dip group[dip] = dip addtogroup[dip] = true ##################### # VIDEO service # ##################### # Add the user to the Unix group "video" (if it exists). This allows the # user to use video devices plugged into the computer. service = video group[video] = video addtogroup[video] = true ####################### # PLUGDEV service # ####################### # Add the user to the Unix group "plugdev" (if it exists). This allows # the user to use the pmount daemon with pluggable devices. service = plugdev group[plugdev] = plugdev addtogroup[plugdev] = true ####################### # SCANNER service # ####################### # Add the user to the Unix group "scanner" (if it exists). This allows # the user to use any attached scanners. service = scanner group[scanner] = scanner addtogroup[scanner] = true ########################### # Syntax of this file # ########################### # The syntax of this file will be familiar to anyone who has used a # scripting language before. This file is processed line by line, with each # line either being blank (and hence ignored), a comment or a configuration # variable. # # Comment lines (such as this one) begin with a hash character ("#") and # continue to the end of the line. The hash character may be preceded by # white space. Comment lines, like blank lines, are ignored. # # All lines that are not blank or are comment lines contain configuration # variables (one per line, with no comments allowed). A configuration # variable has one of two forms: # # VARIABLE = VALUE # VARIABLE[SERVICE] = VALUE # # The first form is for global variables, while the second form is for # variables associated with a particular service. Both the variable name # and the service name are alphanumeric strings and are case sensitive (ie, # the names "SKELOTHER", "skelother" and "SkelOther" refer to three # different variables). # # The value is typically a string which may or may not be case sensitive. # It may be (but usually does not need to be) surrounded by single or double # quotes, in which case everything within the quotes is part of the value. # Note that white space may surround the variable, service and value # components; such white space is discarded, unless it appears in quotes. # You may NOT use backslash to quote quote characters! # # If a value required is a boolean, "0", "false", "f", "no" and "n" are # treated as the false value, while "1", "true", "t", "yes" and "y" are # treated as the true value. In both cases, the value is case-insensitive. # # # GLOBAL VARIABLES: # ================= # # The following global variables are available: # # skelother # dirmode # filemode # # These are described in the section "Global Options" above. # # # SERVICE VARIABLES: # ================== # # The main role of adduser.local is to configure a user's account for # various "services". These services are simply convenient names for # directories that must be created, Unix groups to which the user must be # added, files that need to be copied and so on. # # adduser.local is informed of the existence of a service by the "service" # global variable: # # service = SERVICENAME # # The service name SERVICENAME may be any case-sensitive alphanumeric # string. Examples used within this file are "www" and "data". Service # names need not correspond to any real service --- they are completely # internal to adduser.local, and are only used as a key for service # variables. The "service" global variable may appear multiple times, each # time with a different service name. # # The order of the "service" global variables IS important, as that is the # order in which those services are created. This is important if one # service depends on a prior one having been set up. # # The "service" global variable must appear before any of the services # variables for that service are defined. # # The following service variables are available, and may be specified in any # order: # # user # group # addtogroup # homedir # subdir # althome # mounted # mkdir # chgrpdir # mklink # linkname # skelfile # chgrpskel # # Remember that each service variable is followed by a service name in # square brackets. In the following explanations, "SVC" is used as a # sample service name. # # # user[SVC] = USER # # Specifies that the service belongs to a real user, and that that # service user name is USER. This user name must appear in the password # database file either in the first field (ie, a user name) or in the # third (ie, a numeric UID). # # Specifying a user name or UID also sets default values for the # "group" and "homedir" service variables. These default values are # taken from the password database (the "homedir" variable is only set # if the "althome" variable is set to false). # # # group[SVC] = GROUP # # Specifies that the service's group name is GROUP. This group name # must appear in the group database file either in the first field (ie, # a group name) or in the third (ie, a numeric GID). # # If this variable is not specified, or is specified with GROUP as an # empty string "", and the user variable is specified (and points to a # valid user), the group name is taken to be the service user's default # group. For example, if "user[svc] = mail" were to be specified, and # group[svc] were not, the group used would be default group for the # user "mail" (which happens to be GID 8, ie, "mail"). # # This group is also used for the group owner of directories, links # and copied files, depending on the settings of the "chgrpdir" and # "chgrpskel" variables. # # # addtogroup[SVC] = BOOLEAN # # Instructs whether to add the user to the group specified by the # "group" variable or implied by the "user" variable. If true, # adduser.local adds the user to the group, assuming that the group, # in fact, exists. # # If this variable is not specified, false is assumed. # # # homedir[SVC] = PATH # # Specifies the service's home directory as an absolute path name (ie, # starting from "/"). The service's home directory is used to check if # it is a mount point, as well as a base directory for the "mkdir" and # "skelfile" variables. If the directory does not exist, those # variables take no effect. # # If this variable is not specified, or is specified with PATH as an # empty string "", the value used for the service's home directory is # calculated in one of two ways. The first method is to use the home # directory of the service user; the second is to use the home directory # of the user for whom adduser.local was called. # # The first method is used when the "althome" variable is set to false # and the "user" variable is specified (and points to a valid user). # For example, if "user[svc] = www" and "althome[svc] = false" were to # be specified, the default value of the "homedir" variable would be # taken from www's home directory, typically "/var/www". # # The second method is used when the "althome" variable is true. For # example, if adduser.local were to be called for the user "anna", and # "althome" were set to true, the "homedir" variable would be set to the # home directory of anna, typically "/home/anna". # # Note that neither of these methods is used if the "homedir" variable # is set to anything other than an empty string; in such a case, the # specified value for the variable is always used. # # # subdir[SVC] = PATH # # Specifies a subdirectory off the home directory. This subdirectory is # used for creating the new directory, copying the skeleton file and for # the destination of the link. # # If the "althome" variable is set to false, the subdirectory must # already exist and is used in conjunction with the home directory and # the user's name (for whom adduser.local was called). For example, if # the following were to be specified: # # homedir[svc] = /media/zip # subdir[svc] = home # althome[svc] = false # mkdir[svc] = true # # and the user's name (for whom adduser.local was called) was "james", # the directory "/media/zip/home/james" would be created. # # If, on the other hand, the "althome" variable was set to true, the # subdirectory is used only in conjunction with the home directory; it # is THAT directory that is created. For example, if the following were # to be specified: # # althome[svc] = true # subdir[svc] = "public_html" # mkdir[svc] = true # # and adduser.local were called for the user "kathy" (who had the home # directory "/home/kathy"), the directory "/home/kathy/public_html" # would be created. # # If this variable is not specified, blank is assumed. # # # althome[SVC] = BOOLEAN # # Specifies whether the default value for the "homedir" variable is to # be taken from the service's home directory or from the user's home # directory (for whom adduser.local was called). If false, the # service's home directory (implied by the "user" setting) is used. If # true, the actual user's home directory is used. # # This variable also controls whether or not the user's login name is # used as part of the directory created by the "mkdir" variable and used # by the "mklink" and "skelfile" variables. See "homedir" and "mklink" # for more details. # # If this variable is not specified, false is assumed. # # # mounted[SVC] = BOOLEAN # # Specifies whether to check if the directory specified by the # "homedir" variable (or implied by other variables) is mounted or # not. A directory is mounted if it, or any parent directory, is # mounted (excluding the root directory, which is always mounted). # For example, if the following were to be specified (and the user's # name were "alice"): # # homedir[svc] = /home/external/server/ftp # subdir[svc] = doc/users # mounted[svc] = true # mkdir[svc] = true # # then the directory "/home/external/server/ftp/doc/users/alice" would # be created only if either "/home/external/server/ftp", # "/home/external/server", "/home/external" or "/home" were mounted. # # If this variable is not specified, false is assumed (ie, the mount # check is NOT performed). # # Note that "checking for mounting" is defined as examining the contents # of /proc/mounts. It does NOT actually attempt to mount the # directories. # # # mkdir[SVC] = BOOLEAN # # Directs adduser.local whether or not to create the directory specified # by the "homedir" and "subdir" variables. If the "althome" variable is # false, the directory that is created has the user's login name at the # end. In all cases, the newly created directory belongs to that user. # For example, if adduser.local was called for the user "david", and the # following lines were to be specified: # # homedir[data1] = "/data/1" # subdir[data1] = "users" # althome[data1] = false # mkdir[data1] = true # # then the directory "/data/1/users/david" would be created, owned by # the user "david". If, on the other hand, the following were to be # specified (for the same user "david"): # # subdir[www] = "public_html" # althome[www] = true # mkdir[www] = true # # then the directory "/home/david/public_html" would be created # (assuming "/home/david" was david's home directory), owned by the # user "david". # # The mode of the directory is taken from the "dirmode" global variable # in this configuration file. See also the comment on that global # variable. # # The group owner of the directory is either the same as the user's (in # this case, if the user "david" was in the group "users" by default, # then the group owner would be "users"), or the same as the service # user's group (see the "group" variable for more information). The # "chgrpdir" variable specifies which of these two options is used. # # If this variable is not specified, false is assumed. # # # chgrpdir[SVC] = BOOLEAN # # Specifies the group owner of any directory and link created by the # "mkdir" and "mklink" variables respectively. If true is specified, # the group owner is the same as specified by the "group" variable (or # implied by the "user" variable). If false is specified, the group # owner is the same as the actual user's default group. # # If this variable is not specified, false is assumed. # # # mklink[SVC] = BOOLEAN # # Specifies whether or not to create a symbolic link to the created # directory (see "mkdir" above) in the actual user's home directory. # The name of the link is taken from the "linkname" variable below. For # example, if the following were to be specified, and adduser.local were # called for the user "mark": # # homedir[data1] = "/data/1" # subdir[data1] = "users" # althome[data1] = false # mkdir[data1] = true # mklink[data1] = true # linkname[data1] = "data1" # # then, not only would the directory "/data/1/users/mark" be created, # but the symbolic link "data1" would be created in his home directory # as well, pointing to that directory (that is, "/home/mark/data1" -> # "/data/1/users/mark"). # # If this variable is not specified, false is assumed. # # # linkname[SVC] = PATH # # Specifies the name of the symbolic link created in the user's home # directory, as demonstrated in the example above. If PATH includes # subdirectories, these subdirectories must already exist before the # symbolic link is created; these can be created by other services prior # to this one. # # If the "mklink" variable is true, and the "linkname" variable is not # specified, or is an empty string "", the name of the service is used # (as specified by the "service" global variable). # # # skelfile[SVC] = PATH # # Instructs adduser.local to copy the file PATH from the "skelother" # skeleton directory (see the global variable of that name) into the # newly-created directory specified by the "mkdir" variable. For # example, if adduser.local was called for the user "nina", and the # following lines were to be specified: # # homedir[www] = "/home/www" # subdir[www] = "doc/users" # althome[www] = false # mkdir[www] = true # skelfile[www] = "index.html" # # then the directory "/home/www/doc/users/nina" would be created and the # file "index.html" would be copied from /etc/skel.other (assuming this # is the directory specified by the "skelother" global variable) into # that newly-created directory. # # The newly-copied file will have a mode as specified by the "filemode" # global variable, and its group owner will either be the default group # of the user, or the group as specified by the "group" variable or # implied by the "user" variable. See the "chgrpskel" variable below. # # If this variable is not specified, or PATH is an empty string "", no # file is copied. If a file of that name already exists, it is NOT # overwritten. Only one file may be specified in any given service; if # more are needed, simply create additional services with matching # "homedir", "subdir", "althome" and "mkdir" variables. # # # chgrpskel[SVC] = BOOLEAN # # Determines whether or not adduser.local changes the group owner of the # copied skeleton file (specified by the "skelfile" variable above) to # the group specified by the "group" variable or implied by the "user" # variable. If this variable is false, the default group of the user # remains the group owner. # # If this variable is not specified, false is assumed. # # # End of /etc/adduser.local.conf.