Create & delete user accounts from the command line on Mac OS X

最新推荐文章于 2022-04-28 10:05:47 发布
最新推荐文章于 2022-04-28 10:05:47 发布
阅读量111 收藏
点赞数
原文链接：https://my.oschina.net/junwong/blog/46501
版权


1. Create a user account 

#!/bin/bash

# cf. Adding a User From the Command Line,
# http://developer.apple.com/documentation/Porting/Conceptual/PortingUnix/additionalfeatures/chapter_10_section_9.html

if [[ "$(/usr/bin/whoami)" != "root" ]]; then printf '/nMust be run as root!/n/n'; exit 1; fi

OPATH=$PATH
export PATH=/usr/bin:/usr/sbin:/bin:/sbin

OIFS=$IFS
export IFS=$' /t/n'

declare sudo=/usr/bin/sudo dscl=/usr/bin/dscl

printf "/e[1mEnter first name/e[m: "
read firstname

# no spaces in names
if [[ -z "$(printf -- "$firstname" | /usr/bin/grep -Eo "^[^[:space:]]+$")" ]]; then
   printf '/nUse a name without spaces! /nPlease, try again!/n/n'
   exit 1
fi

# name must not begin with a number
if [[ -n "$(printf -- "$firstname" | /usr/bin/grep -E "^[[:digit:]]")" ]]; then
   printf '/nName must not begin with a number! /nPlease, try again!/n/n'
   exit 1
fi


# make sure the user name is unique
new_user="$(/usr/bin/dscl . -search /Users name "$firstname" 2>/dev/null)"

if [[ -z "$new_user" ]]; then
  new_user="$firstname"               
else
  printf "/nUser name already exists: $firstname /nPlease, modify your name and try it again/x21/n/n"       # cf. man ascii for /x21
  exit 1
fi 


# make sure the user's primary group name is unique 
# note: the user's primary group name is also based on the first name!

new_group="$(/usr/bin/dscl . -search /Groups name "$firstname")"

if [[ -z "$new_group" ]]; then
new_group="$firstname"             
else
printf "/nThe user's primary group name already exists: $firstname/x21 /nPlease, try again/x21/n/n"
exit 1
fi 


# make sure there is no (file or) home directory of the same name already
if [[ -e "/Users/$new_user" ]]; then
printf "/nUser $new_user already exists at /Users/$new_user/x21 /nPlease, try again/x21/n/n"
exit 1
fi


# last name

printf "/e[1mEnter last name/e[m: "
read lastname

# no spaces in names
if [[ -z "$(printf -- "$lastname" | /usr/bin/grep -Eo "^[^[:space:]]+$")" ]]; then
   printf '/nUse a name without spaces! /nPlease, try again!/n/n'
   exit 1
fi

# name must not begin with a number
if [[ -n "$(printf -- "$lastname" | /usr/bin/grep -E "^[[:digit:]]")" ]]; then
   printf '/nName must not begin with a number! /nPlease, try again!/n/n'
   exit 1
fi


# enter password

printf "/e[1mEnter password/e[m: "
stty_orig=$(/bin/stty -g) 
pass=''
blank='false'

while [[ "$blank" != "true" ]]; do

   /bin/stty -icanon -echo

   c=$(/bin/dd bs=6 count=1 2> /dev/null)

   # Check for a CR.
   if [[ -z "$(printf -- "$c" | /usr/bin/tr -d "/r/n")" ]]; then
      blank='true'
   else
      /bin/stty echo
      printf "*"
      pass="$pass$c"
      /bin/stty -echo
   fi
done

/bin/stty icanon echo
/bin/stty "$stty_orig"
passwd1="$pass"
printf "/n"


# check minimum password length: 6
if [[ -z "$(printf -- "$passwd1" | /usr/bin/grep -Eo "^([[:alnum:]]|[[:punct:]]){6,}$")" ]]; then
   printf '/nUse at least 6 characters (alphanumeric, punctuational) for your password! /nPlease, try again!/n/n'
   exit 1
fi


# confirm password

printf "/e[1mConfirm password/e[m: "
stty_orig=$(/bin/stty -g) 
pass=''
blank='false'

while [[ "$blank" != "true" ]]; do

   /bin/stty -icanon -echo

   c=$(/bin/dd bs=6 count=1 2> /dev/null)

   # Check for a CR.
   if [[ -z "$(printf -- "$c" | /usr/bin/tr -d "/r/n")" ]]; then
      blank='true'
   else
      /bin/stty echo
      printf "*"
      pass="$pass$c"
      /bin/stty -echo
   fi
done

/bin/stty icanon echo
/bin/stty "$stty_orig"
passwd2="$pass"
printf "/n"


if [[ "$passwd1" != "$passwd2" ]]; then
   printf '/nPasswords do not match. /nPlease, try again!/n/n'
   exit 1
else
   printf '/nPassword confirmation was successful!/n/n'
fi



# get unique id numbers (uid, gid) that are greater than 500
unset -v i new_uid new_gid idvar
declare -i new_uid=0 new_gid=0 i=500 idvar=0

while [[ $idvar -eq 0 ]]; do 
   i=$[i+1]
   if [[ -z "$(/usr/bin/dscl . -search /Users uid $i)" ]] && [[ -z "$(/usr/bin/dscl . -search /Groups gid $i)" ]]; then
      new_uid=$i
      new_gid=$i
      idvar=1
      #break
   fi
done

if [[ $new_uid -eq 0 ]] || [[ $new_gid -eq 0 ]]; then printf 'Getting unique id numbers (uid, gid) failed!/n'; exit 1; fi

# old version
# get unique id numbers (for uid, gid) by increasing the highest id number already in use by 1
#new_uid=$(($(/usr/bin/dscl . -list /Users uid | /usr/bin/awk '{print $NF;}' | /usr/bin/sort -n | /usr/bin/tail -n 1) + 1))
#new_gid=$(($(/usr/bin/dscl . -list /Groups gid | /usr/bin/awk '{print $NF;}' | /usr/bin/sort -n | /usr/bin/tail -n 1) + 1))

# make sure $new_uid and $new_gid are equal
#if [[ $new_uid -ne $new_gid ]]; then
#   if [[ $new_uid -gt $new_gid ]]; then new_gid="$new_uid"; else new_uid=$new_gid; fi
#fi



# check once again ...

if [[ $new_uid -eq $new_gid ]] && [[ "$new_user" == "$firstname" ]] && [[ "$new_group" == "$firstname" ]]; then

# create the user's primary group
$sudo /usr/sbin/dseditgroup -o create -r "$firstname $lastname" -i $new_gid "$new_group"
$sudo $dscl . -append "/Groups/$new_group" passwd "*"

$sudo $dscl . -create "/Users/$new_user"
$sudo $dscl . -append "/Users/$new_user" RealName "$firstname $lastname"
$sudo $dscl . -append "/Users/$new_user" NFSHomeDirectory "/Users/$new_user"
###$sudo $dscl . -append "/Users/$new_user" NFSHomeDirectory "/Local/Users/$new_user"
$sudo $dscl . -append "/Users/$new_user" UserShell /bin/bash   
$sudo $dscl . -append "/Users/$new_user" PrimaryGroupID $new_gid
$sudo $dscl . -append "/Users/$new_user" UniqueID $new_uid
$sudo $dscl . -append "/Users/$new_user" hint ""
$sudo $dscl . -append "/Users/$new_user" comment "user account /"$firstname $lastname/" created: $(/bin/date)"
$sudo $dscl . -append "/Users/$new_user" picture "/Library/User Pictures/Animals/Butterfly.tif"
$sudo $dscl . -append "/Users/$new_user" sharedDir Public
$sudo $dscl . -passwd "/Users/$new_user" "$passwd1"

# add some other properties that are usually set (Mac OS X 10.4)
$sudo $dscl . -append "/Users/$new_user" _shadow_passwd ""
$sudo $dscl . -append "/Users/$new_user" _writers_hint "$new_user"
$sudo $dscl . -append "/Users/$new_user" _writers_real_name "$new_user"

$sudo $dscl . -append "/Groups/$new_group" GroupMembership "$new_user"      # add new user to the user's primary group
#$sudo /usr/sbin/dseditgroup -o edit -a "$new_group" -t user "$new_user"

$sudo $dscl . -append /Groups/staff GroupMembership "$new_user"             # test: add new user to group staff

# add the new user to the admin group (Mac OS X 10.4)
# This should be part of a separate admin user account shell script or 
# at least require an additional user input prompt at the beginning!
#$sudo $dscl . -append /Groups/admin GroupMembership "$new_user"
#$sudo $dscl . -append /Groups/appserverusr GroupMembership "$new_user"
#$sudo $dscl . -append /Groups/appserveradm GroupMembership "$new_user"

# log out after running the script to see the new user account has been created
$sudo /usr/sbin/createhomedir -l -u "$new_user"

else

printf "/nConfiguration of user account: $firstname failed/x21 /nPlease, try again/x21/n/n"
exit 1

fi


printf "/nUser account:  $firstname  successfully created/x21 /nYou can now log in to your new user account/x21/n/n"

export IFS=$OIFS
export PATH=$OPATH

exit 


#---------------------------


# test
dscl . list /Users
dscl . -read /Users/<firstname>

dscl . list /Groups
dscl . -read /Groups/<firstname>
dscl . list /Groups GroupMembership



2. Delete a user account 

#!/bin/bash

# cf. http://www.macos.utah.edu/documentation/authentication/dscl.html

if [[ "$(/usr/bin/whoami)" != "root" ]]; then printf '/nMust be run as root!/n/n'; exit 1; fi

OPATH=$PATH
export PATH=/usr/bin:/usr/sbin:/bin:/sbin

OIFS=$IFS
export IFS=$' /t/n'

declare sudo=/usr/bin/sudo

printf "/e[1mDelete user account/e[m: "
read user

if [[ -z "$user" ]]; then printf '/nNo user specified! Please, try again!/n/n'; exit 1; fi

# make sure the user exists
usertest="$(/usr/bin/dscl . -search /Users name "$user" 2>/dev/null)"

if [[ -z "$usertest" ]]; then printf "/nUser does not exist: $user/n/n"; exit 1; fi 


# get user's group memberships
groups_of_user="$(/usr/bin/id -Gn $user)"

if [[ $? -eq  ]] && [[ -n "$(/usr/bin/dscl . -search /Groups GroupMembership "$user")" ]]; then 
# delete the user's group memberships
for group in $groups_of_user; do
$sudo /usr/bin/dscl . -delete "/Groups/$group"  GroupMembership "$user"
#$sudo /usr/sbin/dseditgroup -o edit -d "$user" -t user "$group"           
done
fi


# delete the user's primary group
if [[ -n "$(/usr/bin/dscl . -search /Groups name "$user")" ]]; then
$sudo /usr/sbin/dseditgroup -o delete "$user"
fi

# if the user's primary group has not been deleted ...
if [[ -n "$(/usr/bin/dscl . -search /Groups name "$user")" ]]; then
printf "
/e[1mWarning/e[m:
   The group memberships of the user /e[1m$user/e[m have been deleted/x21
   groups_of_user: $groups_of_user
   The user's primary group /e[1m$user/e[m, however, has not been deleted/x21
   Please, try again/x21
   Exiting .../n
"
exit 1
fi


# find the GeneratedUID of the user and remove the password hash file 
# from /private/var/db/shadow/hash/<GeneratedUID>
# sudo ls -a /private/var/db/shadow/hash
# sudo ls -l /private/var/db/shadow/hash/<GeneratedUID>

guid="$(/usr/bin/dscl . -read "/Users/$user" GeneratedUID | /usr/bin/awk '{print $NF;}')"

if [[ -f "/private/var/db/shadow/hash/$guid" ]]; then
$sudo /bin/rm -f /private/var/db/shadow/hash/$guid
fi


# delete the user
$sudo /usr/bin/dscl . -delete "/Users/$user"

# make a backup
if [[ -d "/Users/$user" ]]; then
$sudo /usr/bin/ditto -rsrc -c -k "/Users/$user" "/Users/${user}-archive-$(/bin/date).zip"
fi

# remove the user's home directory
if [[ -d "/Users/$user" ]]; then
$sudo /bin/rm -rf "/Users/$user"
fi

export IFS=$OIFS
export PATH=$OPATH

exit 

-----------------------------
From: http://codesnippets.joyent.com/posts/show/1374

原文链接： http://blog.csdn.net/afatgoat/article/details/3299179

转载于:https://my.oschina.net/junwong/blog/46501

chengyixian7877
关注
Security: Inside Windows Vista User Account Control | Microsoft Docs
dvlinker的技术专栏
05-02 644
Security: Inside Windows Vista User Account Control
【grafana 】mac端grafana配置的文件 grafana.ini 及login
最新发布
突围
08-04 261
grafana.ini
重置Macos密码
平凡的脚步也可以走完伟大的行程
04-16 421
Recovery Mode In Lion and Mountain Lion you can use Recovery Mode to reset the password. Just restart the computer and hold downCommand+runtil the menu screen appears. ClickTerminalfrom theU...
OS X: 实用脚本程序系列-15
hududumo
07-05 62
脚本删除用户(removeuser)： 它可以删除多个用户，使用方法： removeuser user1 "user 2" "user 3" #!/bin/bash if [[ "$(/usr/bin/whoami)" != "root" ]]; then printf '\nMust be run as root!\n\n'; exit 1; fi OPATH=$PATH ex...
直接执行方式举例：查询account表中所有的用户名和密码
lbqBraveheart的专栏
05-05 1441
   SQLHENV         henv     =   NULL;   //定义环境句柄  SQLHSTMT       hstmt   =   NULL;   //定义语句句柄  SQLHDBC         hdbc     =   NULL;   //定义连接句柄  SQLRETURN     sqlreturn;                 sqlre
linux 添加和删除用户,[转载]linux添加和删除用户
weixin_42393362的博客
05-04 156
linux添加新用户使用 useradd -----create a new user or update default newuser information删除用户使用userdel -----delete a user account andrelated filesuseadd options:-c, --comment COMMENT set the GECOS field for ...
Mysql考试整理
m0_50828723的博客
12-21 1973
mysql整理 MySQL_Major_test 1、Which one of the following keyword is used if a sub-query is likely to return a list of values and you need to match a column value with any of the values in this list to obtain the final result? 如果子查询可能返回值列表，并且您需要将列值与该列表中的任何值进行匹
oracle11g OCP 认证 1Z0-052考试笔记3
wlbzy的专栏
11-16 5594
1: Examine the following statement that is used to modify the primary key constraint on theSALES table: SQL> ALTER TABLE SALES MODIFY CONSTRAINT pk DISABLE VALIDATE; Which three statements are true
SharePoint MCSE office365考题347--提出了好多问题并告诉你是怎么解决的。 好题
段传涛 的专栏
01-28 7848
70-347 Exam     thank wenxing for help  QUESTION 1 You are the Microsoft Lync administrator fora company that uses Lync Online. The companyhas mandated that employees may use Lync Online to commun
登录，注册，修改用户名密码，删除用户的实现（前端+后端+数据库）
lijiaxuan_的博客
01-22 2609
链接数据库 DBConnection.java代码： package com.qcby.db; import java.sql.Connection; import java.sql.DriverManager; public class DBConnection { public static void main(String[] args) { } String driver = "com.mysql.jdbc.Driver"; String url = "jdbc:mysql://1
Linux用户相关命令
qq_32226147的博客
04-28 1345
linux操作系统，用户相关命令
求救各位高手
zhangtaobeijin的专栏
05-31 4916
ddlNewType”有一个无效 SelectedValue，因为它不在项目列表中。<br />参数名: value 说明: 执行当前 Web 请求期间，出现未处理的异常。请检查堆栈跟踪信息，以了解有关该错误以及代码中导致错误的出处的详细信息。 <br /><br />异常详细信息: System.ArgumentOutOfRangeException: “ddlNewType”有一个无效 SelectedValue，因为它不在项目列表中。<br />参数名: value<br /><br />源错误:<b
零基础之liunx用户及组相关命令总结
菜鸟一号之家
05-27 370
用户,组和权限 用户 user linux是一个多任务（Multi-task)，多用户（Multi—user)的操作系统。 每个使用者都一个标识：用户ID号，也叫UID.用户登入输入用户名，密码。系统会做下面三件事： Authentication 认证 Authorization 授权 Audition 审计 用户类别 管理员用户 普通用户 ...
ARM汇编之堆栈溢出实战分析一（GDB）
github_38641765的博客
01-06 2391
转自：安全课传送门 引言 经过很长一段时间在azeria-labs进行的ARM基础汇编学习，学到了很多ARM汇编的基础知识、和简单的shellcode的编写，为了验证自己的学习成果，根据该网站提供的实例，做一次比较详细的逆向分析，和shellcode的实现，为自己的ARM入门学习巩固。 实例下载地址：git clone https://github.com...
OS X:实用脚本程序系列－16
hududumo
07-05 77
添加用户： 已经有好多添加用户的脚本了，这个就作为一个参考吧： #!/bin/bash if [[ "$(/usr/bin/whoami)" != "root" ]]; then printf '\nMust be run as root!\n\n'; exit 1; fi OPATH=$PATH export PATH=/usr/bin:/usr/sbin:/bin:/sbin O...
shell脚本：一键优化centos系统
weixin_33896069的博客
11-06 136
自己参考了系统优化的点，写了一个一键优化脚本，适用于centos6.x版本，各个项已经单独进行测试通过。适用于centos6.x系统最小化安装执行，可以根据自己的需求进行添加或修改完善。主要优化内容有：关闭系统不必要的服务；关闭selinux，关闭iptables；关闭ctrl+alt+del重启；设置ssh端口，关闭DNS解析；设置系统最大文件描述符；设置系统关键文件权限；配置安装ntp；安装v...
Mac终端dscl命令对组/用户的增删改查（转载）
jjj03230304的博客
12-06 2258
注意：注意空格，比如文中出现的"."，它的两侧都有一个空格！   查看所有的组    (仅显示组名) 方法①：        输入dscl    -&gt;    cd /Local/Default/Groups    -&gt;    ls 方法②：        dscl . -list /Groups 查看所有的组    （显示所有组的详细信息） dscl . -readal...
mac中delete键的5种用法
热门推荐
fanqiantao的博客
12-04 1万+
第一种：按 delete 键，实现 Windows 键盘上退格键的功能，也就是删除光标之前的一个字符（默认）； 第二种：按 fn+delete 键，删除光标之后的一个字符； 第三种：按 option+delete 键，删除光标之前的一个单词（英文有效）； 第四种：结合第二种，按住fn+option+delete，删除光标之后的一个单词； 第五种：选中文件后按 command+delete，删除掉该...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值