-
Notifications
You must be signed in to change notification settings - Fork 5
/
lui_ubuntu.sh
169 lines (154 loc) · 4.3 KB
/
lui_ubuntu.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
#!/bin/bash
# LUI for Ubuntu - Version 2.1.6b
#
# Description: This script searches and organizes information about users on Ubuntu systems. It is written to make administration easier and for better transparency.
#
# Note: this program has been tested on Ubuntu 13.
#
# Author: s1x
# License: GNU AFFERO GENERAL PUBLIC LICENSE - Version 3, 19 November 2007
#
# Copyright (C) 2015 s1x, pgp key 0xF673700F
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published
# by the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
help () {
echo '''
Linux User Info v2.1.6b
-h This help message.
-i User information, use as "-i user".
-x eXtended information.
-a List all users.
-l List all users with locked password.
-u List all users with unlocked password.
-n List users with nologin shell.
You can use multiple arguments too, eg. "./lui_ubu.sh -l -u"
'''
}
user_info () {
data=$(grep ^$OPTARG: /etc/passwd)
if [ -z "$data" ]
then
echo "User not found in /etc/passwd."
exit ;
fi
user=$(echo $data | cut -d: -f1)
comment=$(grep ^$user /etc/passwd | cut -d: -f5)
if [ -z "$comment" ]
then
comment="-"
fi
home=$(echo $data | cut -d: -f6)
if [ -z "$home" ]
then
home="-"
fi
homepriv=$(ls -ld $home | awk {'print $1,$3,$4'})
if [ -z "$homepriv" ]
then
homepriv="Home directory does not exist."
fi
pass=$(passwd -S $OPTARG | cut -d' ' -f2-)
groups=$(grep $user /etc/group | cut -d: -f 1 | grep -v $user | paste -sd ' ')
if [ -z "$groups" ]
then
groups="-"
fi
shell=$(echo $data | cut -d: -f7)
group=$(echo $data | cut -d: -f3)
ID=$(echo $data | cut -d: -f4)
echo
echo "User name: $user"
echo "Comment: $comment"
echo "Password: $pass"
echo "Home dir: $home"
echo "Home perm: $homepriv"
echo "Groups: $groups"
echo "Login shell: $shell"
echo "User ID: $ID"
echo "Group ID: $group"
echo
}
eXtended () {
#Experimental function!
echo
echo "User information"
echo "----------------"
user_info
chage -l $user | tr -d '\t'
echo
echo
echo "Login information"
echo "-----------------"
echo
echo "Last four logins:"
last | grep $user | tail -4 | tr -s ' '
echo
fails=$(pam_tally --user $user | rev | cut -d ' ' -f1 | rev)
echo "Numer of failed logins: " $fails
echo
fail_list=$(grep sshd.\*Failed /var/log/auth.log | grep $user)
if [ ! -z "$fail_list" ]
then
echo "Last six login fails:"
grep sshd.\*Failed /var/log/auth.log | grep $user | tail -6
fi
}
all_users () {
min_uid=$(grep "^UID_MIN" /etc/login.defs | tr -s ' ' | cut -d' ' -f2)
echo "System users / Under UID $min_uid"
echo "---------------------------------"
awk -F':' -v "minuid=$min_uid" '{ if ( $3 < minuid ) print $0 }' /etc/passwd
grep nobody /etc/passwd
echo
echo "Normal users / Below UID $min_uid"
echo "---------------------------------"
awk -F':' -v "minuid=$min_uid" '{ if ( $3 >= minuid ) print $0 }' /etc/passwd | grep -v ^nobody:
echo
}
locked_users () {
echo "Locked users:"
cat /etc/passwd | cut -d : -f 1 | awk '{ system("passwd -S " $0) }' | grep -e "\sL\s"
echo
}
unlocked_users () {
echo "Unlocked users:"
cat /etc/passwd | cut -d : -f 1 | awk '{ system("passwd -S " $0) }' | grep -v -e "\sL\s"
echo
}
nologin_users () {
echo "Users with nologin:"
grep /nologin /etc/passwd
echo
}
while getopts ":hi:x:alun" opt;
do
case $opt in
h) help ;;
i) user_info ;;
x) eXtended ;;
a) all_users ;;
l) locked_users ;;
u) unlocked_users ;;
n) nologin_users ;;
\?)
echo "Invalid option."
exit 1 ;;
:)
echo "Option -$OPTARG requires an argument." ;;
esac
done
if [ -z "$1" ]
then
help
fi