#!/bin/sh
#
# mkxauth: script to make per-user Xauthority database
# formerly 'newcookie' script; modified 18-Jul-1996 jim knoble
#
########################################################################
# $Log: mkxauth,v $
# Revision 1.1  2004/03/10 20:21:41  mharris
# automated commit of xorg-x11-0.0.6.6-0.0.2004_03_09.0
#
# Revision 1.8mh  2004/02/23 mharris
# changed chown to use foo:bar instead of foo.bar as the latter has been
# deprecated.  This entry is added by hand as mkxauth isn't in CVS
#
# Revision 1.7  1996/10/23 21:34:23  jmknoble
# take path of least surprise if no command specified;
# if hostnames specified with -c, don't assume local host.
#
# Revision 1.6  1996/10/02 20:34:12  jmknoble
# updated help text again
#
# Revision 1.5  1996/10/02 20:10:03  jmknoble
# updated help text
#
# Revision 1.4  1996/10/02 20:03:26  jmknoble
# fixed quoting problem in key generation
#
# Revision 1.3  1996/08/20 16:31:30  jmknoble
# refined random key generation (using mcookie if available)
#
# Revision 1.2  1996/08/20 15:49:33  jmknoble
# replaced key generation using perl with method using md5sum
#
# Revision 1.1  1996/08/05 16:40:20  jmknoble
# Initial revision
#
########################################################################

#set -x

## default values for some variables
usr_umask=0077
# eventual exit status
sts=0
# verbose operation if blank
opt_vrbopr=''
# eventual string of non-option arguments
cmd_args=''
# filename for per-user Xauthority database
usrauth=.Xauthority
# username for whom to make per-user database
lclusr=`whoami`
# mode for making database; 
# valid values are 'create', 'merge-local', 
# 'merge-ftp', 'merge-rsh', 'merge-rzip',
# and 'none'
xauth_mode='none'
# actual path to target database
dstauth=''
# user to login as for rsh/rzip modes
rmtusr=`whoami`
# host to contact for remote Xauthority databases
rmthst=''
# local user to grab Xauthority from in merge mode
srcusr=''

########################################################################
# help message
function prthlp() {
    echo ""
    echo "  usage:  $0 [-q] [-u <login>] -m <login>"
    echo "          $0 [-q] [-u <login>] -f <host>"
    echo "          $0 [-q] [-u <login>] -r <host> [-l <login>]"
    echo "          $0 [-q] [-u <login>] -z <host> [-l <login>]"
    echo "          $0 [-q] [-u <login>] -c [<host> [<host> ... ]]"
    echo ""
    echo "  create or update an Xauthority database containing authentication"
    echo "  keys for the current user or a specified user on the local host."
    echo ""
    echo "  commands:"
    echo ""
    echo "  -m <login>    merge the Xauthority database from local user <login>"
    echo "                (if readable) with the target .Xauthority"
    echo ""
    echo "  -f <host>     merge a remote Xauthority database with the target"
    echo "                .Xauthority, using ncftp"
    echo ""
    echo "  -r <host>     merge a remote Xauthority database with the target"
    echo "                .Xauthority, using rsh"
    echo ""
    echo "  -z <host>     merge a remote Xauthority database with the target"
    echo "                .Xauthority, using rsh and gzip"
    echo ""
    echo "  -c <host>...  create a local Xauthority database, or add keys to an"
    echo "                existing one, for all hosts listed (uses md5sum).  if"
    echo "                no hosts are listed, assume the local host."
    echo ""
    echo "  options:"
    echo ""
    echo "  -q            quiet operation"
    echo ""
    echo "  -u <login>    create/merge .Xauthority for user <login>"
    echo ""
    echo "  -l <login>    for '-f', '-r' and '-z' modes, use <login> for the"
    echo "                remote login"
    echo ""

    exit 0
}

# check that current user is root
function chkroot() {
    if [ `whoami` != root ]; then
        echo "sorry---you need to be root" "$*"
        exit 1
    fi
}

# write a message to stdout iff verbose mode on
function msg() {
    if [ -z "$opt_vrbopr" ]; then
        echo "$@"
    fi
}

# check that a command exists
function chkcmdexs() {
    for i in $*; do
        if [ -z `type -p $i` ]; then
            echo "`basename $0`: error: can't find command '$i'"
            exit 1
        fi
    done
}

# check that a file exists, and create it if it doesn't
# *and* if we have write permissions to its parent dir
function chkfilexs() {
    for i in $*; do
        if [ ! -f "$i" ]; then
            if [ -w `dirname $i` ]; then
                msg -n "creating file $i ... "
                touch $i
                msg "done"
            fi
        fi
    done
}

# check if a file is readable
function redabl() {
    local srcfil=$1
    if [ -r "$srcfil" ]; then
        sts=0
    else
        echo "`basename $0`: error: cannot read file $srcfil"
        sts=1
    fi
    return $sts
}

# check if a file is writable
function wrtabl() {
    local dstfil=$1
    if [ -w "$dstfil" ]; then
        sts=0
    else
        echo "`basename $0`: error: cannot write to file $dstfil"
        sts=1
    fi
    return $sts
}

# set the correct ownership for a file
function givusr() {
    local lststs=$1
    local usrnam=$2
    local dstfil=$3
    if [ $lststs = 0 ]; then
        chown $usrnam:$usrnam $dstfil
        sts=0
    else
        msg ""
        echo "`basename $0`: error writing to file $dstfil"
        sts=1
    fi
    return $sts
}

########################################################################
# set our umask so that no one else can read our files
umask $usr_umask

# test some command-line args
while [ "$*" ]; do
    case $1 in
        -h | --help)
            shift
            prthlp
            ;;
        -q | --quiet)
            shift
            opt_vrbopr='-q'
            ;;
        -u | --user)
            shift
            lclusr="$1"
            shift
            ;;
        -l | --login)
            shift
            rmtusr="$1"
            shift
            ;;
        -c | --create)
            shift
            xauth_mode='create'
            ;;
        -m | --merge)
            shift
            xauth_mode='merge-local'
            srcusr="$1"
            shift
            ;;
        -f | --ftp)
            shift
            xauth_mode='merge-ftp'
            rmthst="$1"
            shift
            ;;
        -r | --rsh)
            shift
            xauth_mode='merge-rsh'
            rmthst="$1"
            shift
            ;;
        -z | --rzip)
            shift
            xauth_mode='merge-rzip'
            rmthst="$1"
            shift
            ;;
        -*)
            echo "`basename $0`: invalid option '$1'"
            shift
            prthlp
            ;;
        *)
            cmd_args="$cmd_args $1"
            shift
            ;;
    esac
done

# if called without a valid command, follow path of least surprise
if [ "$xauth_mode" = "none" ]; then
    prthlp
fi

# figure out if we're allowed to do what we said we wanted to
if [ `whoami` != $lclusr ]; then
    chkroot "to change another user's .Xauthority."
fi

# make sure xauth is available
chkcmdexs xauth

# set name for target Xauthority database
dstauth=`eval echo ~$lclusr/$usrauth`

# figure out what action to take
case $xauth_mode in
    create)
        # create an Xauthority database for user 'userid'.
        # (requires md5sum, xauth)
        chkcmdexs uptime dd md5sum cut
        # create an empty database if one doesn't exist
        chkfilexs $dstauth
        # generate a random key -- depends on md5sum, among others
        key=`(
                whoami
                uptime
		[ \`type -p mcookie\` ] && mcookie
		[ -f /proc/meminfo ] && cat /proc/meminfo
                [ -f /dev/urandom ] && dd if=/dev/urandom bs=16 count=1
            ) 2>&1 | md5sum | cut -f 1 -d ' '`
        # add all hosts specified on command line;
	# if none specified, assume local host.
        authhosts=`hostname`
        if [ "$cmd_args" ]; then
            authhosts="$cmd_args"
        fi
        if wrtabl $dstauth; then
            for i in $authhosts; do 
                msg -n "adding key for $i to $dstauth ... "
                xauth -f $dstauth add $i/unix:0 . $key
                xauth -f $dstauth add $i:0      . $key
                if [ $? != 0 ]; then
                    break
                fi
                msg "done"
            done
            # make sure the user owns the file
            givusr $? $lclusr $dstauth
        fi
        ;;
    merge-local)
        # merge a local Xauthority database (if readable) 
        # from a specified user with the database for local user.
        # (requires xauth)
        srcauth=`eval echo ~$srcusr/$usrauth`
        if redabl $srcauth; then
            mrgcmd="xauth -f $dstauth merge $srcauth"
            mrgmsg="merging $srcauth into $dstauth"
        else
            exit $sts
        fi
        ;;
    merge-ftp)
        # merge a remote Xauthority database with the local one
        # for local user, using ncftp.
        # (requires ncftp, xauth)
        chkcmdexs ncftp
        srcauth="$rmtusr@$rmthst:$usrauth"
        if [ -z "$opt_vrbopr" ]; then
            ftp_vrbopr="-V quiet"
        else
            ftp_vrbopr="-V quiet"
        fi
        mrgcmd='ncftp $ftp_vrbopr <<-ENDFTPCMD
		open -ui $rmthst
		$rmtusr
		get $usrauth "|xauth -f $dstauth merge -"
		quit
		ENDFTPCMD'
        mrgmsg="merging $srcauth into $dstauth"
        ;;
    merge-rsh)
        # merge a remote Xauthority database with the local one
        # for local user, using rsh
        # (requires rsh, xauth)
        chkcmdexs rsh
        srcauth="$rmtusr@$rmthst:$usrauth"
        mrgcmd="{ rsh -l $rmtusr $rmthst cat $usrauth } \
            | { xauth -f $dstauth merge - }"
        mrgmsg="merging $srcauth into $dstauth"
        ;;
    merge-rzip)
        # merge a remote Xauthority database with the local one
        # for local user, using rsh and gzip.
        # (requires rsh, gzip, xauth)
        chkcmdexs rsh gzip
        srcauth="$rmtusr@$rmthst:$usrauth"
        mrgcmd="{ rsh -l $rmtusr $rmthst gzip -c $usrauth } \
            | { gzip -dc } \
            | { xauth -f $dstauth merge - }"
        mrgmsg="merging $srcauth into $dstauth"
        ;;
    *)
        # something's hosed
        echo "oops!  xauth_mode = '$xauth_mode' - this shouldn't happen."
        sts=1
        ;;
esac

# actually perform merge, if requested
case $xauth_mode in
    merge-*)
        # create an empty database if one doesn't exist
        chkfilexs $dstauth
        # perform the requested merge, if the target database is writable
        if wrtabl $dstauth; then
            msg "$mrgmsg ... "
            eval "$mrgcmd"
            # if successful, make sure the user owns the file
            if givusr $? $lclusr $dstauth; then
                msg "done"
            fi
        fi
        ;;
esac

exit $sts