#!/usr/bin/env python

import daemon
import time
import socket
import fcntl
import struct
import md5
import sys
import os

def getHwAddr(ifname):
	s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
	info = fcntl.ioctl(s.fileno(), 0x8927,  struct.pack('256s', ifname[:15]))
	return ''.join(['%02x:' % ord(char) for char in info[18:24]])[:-1]

serverkey = md5.md5(getHwAddr('eth0')).hexdigest()

addr = ('', 30331)
isock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
isock.bind(addr)

daemon.daemonize()
while True:
	isock.listen(1)
	conn, addr = isock.accept()
	data = conn.recv(1024)
	print data
	sdata = data.split()
	if len(sdata) > 0:
		if sdata[0] != serverkey:
			conn.send('access denied')
			conn.close()
		else :
			if sdata[1] == 'create':
				if len(sdata) < 5:
					conn.send(&#039;Invalid parameters&#039;)
				else:
					username = sdata[2]
					password = sdata[3]
					quota = sdata[4]
					cmd = &#039;/usr/sbin/useradd -G backup -s /bin/bash %s 2>&1&#039; % (username)
					res = os.popen(cmd).read().rstrip()
					if len(res) == 0:
						cmd = &#039;/bin/echo %s > /var/lib/php/session/pw ; /usr/bin/passwd --stdin %s < /var/lib/php/session/pw; /bin/rm -f /var/lib/php/session/pw&#039; % (password, username)
						res = os.popen(cmd).read()
						cmd = &#039;/usr/sbin/jk_jailuser -m -j /home/jail %s&#039; % (username)
                        res = os.popen(cmd).read()
						cmd = &#039;sed "s=/home/%s:/usr/sbin/jk_lsh=/home/%s:/bin/bash=g" /home/jail/etc/passwd > /home/jail/etc/passwd.new; rm -f /home/jail/etc/passwd; mv /home/jail/etc/passwd.new /home/jail/etc/passwd&#039; % (username,username)
                        res = os.popen(cmd).read()
						cmd= &#039;/usr/sbin/setquota -u %s 0 %s 0 0 -a /home&#039; % (username, quota)
						res = os.popen(cmd).read()
						conn.send(&#039;success&#039;)
					else:
						conn.send(&#039;username already exists&#039;)
			elif sdata[1] == &#039;terminate&#039;:
				username = sdata[2]
				cmd = &#039;/usr/sbin/userdel -rf %s&#039; % (username)
				res = os.popen(cmd).read().rstrip()
				cmd = &#039;cat /home/jail/etc/passwd | grep -v %s > /home/jail/etc/passwd.new; rm -f /home/jail/etc/passwd; mv /home/jail/etc/passwd.new /home/jail/etc/passwd&#039; % (username)
				res = os.popen(cmd).read().rstrip()
				cmd = &#039;cat /home/jail/etc/group | grep -v ^%s > /home/jail/etc/group.new; rm -f /home/jail/etc/group; mv /home/jail/etc/group.new /home/jail/etc/group&#039; % (username)
				res = os.popen(cmd).read().rstrip()
				conn.send(&#039;success&#039;)
			elif sdata[1] == &#039;suspend&#039;:
				username = sdata[2]
				cmd = &#039;/usr/bin/chsh -s /bin/false %s 2>&1&#039; % (username)
				res = os.popen(cmd).read()
				conn.send(&#039;success&#039;)
			elif sdata[1] == &#039;unsuspend&#039;:
				username = sdata[2]
				cmd = &#039;/usr/bin/chsh -s /bin/bash %s 2>&1&#039; % (username)
				res = os.popen(cmd).read()
				conn.send(&#039;success&#039;)
			elif sdata[1] == &#039;chpw&#039;:
				username = sdata[2]
				password = sdata[3]
				cmd = &#039;/bin/echo %s > /var/lib/php/session/pw ; /usr/bin/passwd --stdin %s < /var/lib/php/session/pw; /bin/rm -f /tmp/pw&#039; % (password, username)
				res = os.popen(cmd).read()
				conn.send(&#039;success&#039;)
			elif sdata[1] == &#039;changepackage&#039;:
				username = sdata[2]
				quota = sdata[4]
				cmd =&#039;/usr/sbin/setquota -u %s 0 %s 0 0 -a /home&#039; % (username, quota)
				res = os.popen(cmd).read()
				conn.send(res)
			elif sdata[1] == &#039;getuserusage&#039;:
				username = sdata[2]
				cmd = &#039;/usr/bin/quota %s | /usr/bin/tail -1 | /bin/awk {\&#039;print $2\&#039;}&#039; % (username)
				res = os.popen(cmd).read()
				conn.send(res)
			elif sdata[1] == &#039;getuserlimit&#039;:
				username = sdata[2]
				cmd = &#039;/usr/bin/quota %s | /usr/bin/tail -1 | /bin/awk {\&#039;print $4\&#039;}&#039; % (username)
				res = os.popen(cmd).read()
				conn.send(res)
			else:
				conn.send(&#039;access denied&#039;)
			conn.close()