This file contains ambiguous Unicode characters that may be confused with others in your current locale. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to highlight these characters.
#!/usr/bin/env bash
set -efu
DIRS="${PWD};@DATADIR@/duma-ssh-central-auth"
echo_err(){
echo"$@" 1>&2
}
# Коды возврата:
# 1 - некая ошибка
# 2 - отказ в доступе
_main(){
if[ -z "$1"];then
echo_err "No user defined!"
return1
fi
ALLOWED=0
user="$1"
# not --fqdn, it may give strange results,
# e.g. webinar.dumalogiya.ru -> webinar
hostname="$(hostname)"
if[ -z "$hostname"];then
echo_err "Empty hostname!"
return1
fi
IFS_old="$IFS"
IFS=";"
# При запуске из папки с исходным кодом использовать ее,
# иначе - общесистемную папку
DIR=""
for dir in ${DIRS}
do
if[ -d "$dir"/users ]&&[ -d "$dir"/servers ];then
DIR="$dir"
fi
done
IFS="$IFS_old"
if[ -z "$DIR"];then
echo_err "No directory with data has been found!"
return1
fi
ACL="${DIR}/servers/${hostname}"
if[ ! -f "$ACL"]||[ ! -r "$ACL"];then
echo_err "ACL for this server does not exist or cannot be read!"
fi
if grep -q "^${user}$""$ACL";then
ALLOWED=1
else
if grep -q "^${user}$""${DIR}/servers/all";then
ALLOWED=1
fi
fi
if["$ALLOWED"=1];then
# Выводим все публичные ключи пользователя на stdout
# Если файлы не будут найдены, xargs сделает ненулевой код возврата
find -L "${DIR}/users/${user}" -name "*.key" -type f | xargs cat
else
echo_err "User ${user} does not have access to ${hostname}!"