/*
 * Copyright 2000, International Business Machines Corporation and others.
 * All Rights Reserved.
 * 
 * This software has been released under the terms of the IBM Public
 * License.  For details, see the LICENSE file in the top-level source
 * directory or online at http://www.openafs.org/dl/license10.html
 */

#ifndef lint
#endif
#include <afs/param.h>
#include <stdio.h>
#include <string.h>
#ifdef	AFS_AIX32_ENV
#include <signal.h>
#endif
#include <ctype.h>
#include <sys/types.h>
#include <errno.h>
#include <afs/cmd.h>
#ifdef AFS_NT40_ENV
#include <winsock2.h>
#include <WINNT/afsevent.h>
#else
#include <netinet/in.h>
#endif
#include <afs/cellconfig.h>
#include <rx/rx.h>
#include <rx/xdr.h>
#include "ptclient.h"
#include "pterror.h"
#include <afs/afsutil.h>

#undef FOREIGN

char *whoami;
int force = 0;


int osi_audit()
{
/* OK, this REALLY sucks bigtime, but I can't tell who is calling
 * afsconf_CheckAuth easily, and only *SERVERS* should be calling osi_audit
 * anyway.  It's gonna give somebody fits to debug, I know, I know.
 */
return 0;
}

int GetGlobals (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    char *cell;
    afs_int32 sec = 1;

    whoami = as->a0name;

    if (!strcmp(as->name,"help")) return 0;
    if (as->parms[16].items) 
	cell = as->parms[16].items->data;
    else cell = 0;
    if (as->parms[17].items)
	sec = 0;
    
    if (as->parms[18].items) {		/* testing? */
	code = pr_Initialize(sec, AFSDIR_SERVER_ETC_DIRPATH, cell);
    }
    else {
	code = pr_Initialize(sec, AFSDIR_CLIENT_ETC_DIRPATH, cell);
    }
    if (code) {
	com_err (whoami, code, "Couldn't initialize");
	return code;
    }
    if (as->parms[19].items)
	force = 1;
    return code;
}

int CleanUp (as)
  register struct cmd_syndesc *as;
{
    if (!strcmp(as->name,"help")) return;
    /* Need to shutdown the ubik_client & other connections */
    pr_End();
    rx_Finalize();

    return 0;
}

CreateGroup (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    afs_int32 id;
    char *owner;
    struct cmd_item *namei;
    struct cmd_item *idi;

    namei = as->parms[0].items;
    idi = as->parms[2].items;
    if (as->parms[1].items)
	owner = as->parms[1].items->data;
    else owner = NULL;

    while (namei) {
	if (idi) {
	    code = util_GetInt32 (idi->data, &id);
	    if (code) {
		com_err (whoami, code,
			 "because group id was: '%s'", idi->data);
		return code;
	    }
	    if (id >= 0) {
		code = PRBADARG;
		com_err (whoami, code,
			 "because group id %d was not negative", id);
		return code;
	    }
	    idi = idi->next;
	} else id = 0;

	code = pr_CreateGroup (namei->data, owner, &id);
	if (code) {
	    if (owner || id) 
		com_err (whoami, code,
			 "; unable to create group %s with id %d owned by '%s' %s",
			 namei->data, id, owner, (force?"(ignored)":""));
	    else com_err (whoami, code,
			 "; unable to create group %s %s", namei->data, (force?"(ignored)":""));
	    if (!force)
		return code;
	}
	printf ("group %s has id %d\n", namei->data, id);
	namei = namei->next;
    }
    return 0;
}

CreateUser (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    afs_int32 id;
    struct cmd_item *namei;
    struct cmd_item *idi;

    namei = as->parms[0].items;
    idi = as->parms[1].items;

    while (namei) {
	if (idi) {
	    code = util_GetInt32 (idi->data, &id);
	    if (code) {
		com_err (whoami, code, "because id was: '%s'", idi->data);
		return code;
	    }
	    if (id == 0) {
		printf ("0 isn't a valid user id; aborting\n");
		return EINVAL;
	    }
	    idi = idi->next;
	} else id = 0;

	code = pr_CreateUser (namei->data, &id);
	if (code) {
	    if (id) com_err (whoami, code,
			     "; unable to create user %s with id %d %s",
			     namei->data, id, (force?"(ignored)":""));
	    else com_err (whoami, code,
			  "; unable to create user %s %s", namei->data, (force?"(ignored)":""));
	    if (!force)
		return code;
	}
	printf ("User %s has id %d\n", namei->data, id);
	namei = namei->next;
    }
    return 0;
}


#ifdef notdef
int GetNameOrId (as, lids, lnames)
  register struct cmd_syndesc *as;
  struct idlist *lids;
  struct namelist *lnames;
{
    register afs_int32 code = 0;
    int n = 0;
    struct cmd_item *i;
    int goodCount;

    if (!(as->parms[0].items || as->parms[1].items)) {
	com_err (whoami, 0, "must specify either a name or an id.");
	return -1;
    }
    if (as->parms[0].items && as->parms[1].items) {
	com_err (whoami, 0, "can't specify both a name and id.");
	return -1;
    }

    goodCount = 0;
    lids->idlist_len = 0;
    lids->idlist_val = 0;

    if (as->parms[0].items) {		/* name */
	struct namelist names;		/* local copy, if not ret. names */
	struct namelist *nl;

	names.namelist_val = 0;		/* so it gets freed later if needed */
	if (lnames) nl = lnames;
	else nl = &names;

	n = 0;				/* count names */
	for (i=as->parms[0].items; i; i=i->next) n++;
	nl->namelist_val = (prname *)malloc(n*PR_MAXNAMELEN);
	nl->namelist_len = n;
	n = 0;
	for (i=as->parms[0].items; i; i=i->next)
	    strncpy (nl->namelist_val[n++], i->data, PR_MAXNAMELEN);

	code = pr_NameToId (nl, lids);
	if (code) com_err (whoami, code, "so couldn't look up names");
	else {
	    for (n=0; n<lids->idlist_len; n++) {
		if ((lids->idlist_val[n] == ANONYMOUSID)) {
		    com_err (whoami, PRNOENT,
			     "so couldn't look up id for %s", nl->namelist_val[n]);
		}
		else goodCount++;
	    }
	    /* treat things as working if any of the lookups worked */
	    if (goodCount==0) code = PRNOENT;
	}
	
	if (names.namelist_val) free (names.namelist_val);
    }
    else if (as->parms[1].items) {	/* id */
	n = 0;
	for (i=as->parms[1].items; i; i=i->next) n++;
	lids->idlist_val = (afs_int32 *)malloc(n*sizeof(afs_int32));
	lids->idlist_len = n;
	n = 0;
	for (i=as->parms[1].items; i; i=i->next) {
	    code = util_GetInt32 (i->data, &lids->idlist_val[n]);
	    if (code)
		com_err (whoami, code=PRNOENT,
			 "because a bogus id '%s' was specified", i->data);
	    n++;
	}
	if (!code && lnames) {
	    lnames->namelist_val = 0;
	    lnames->namelist_len = 0;
	    code = pr_IdToName (lids, lnames);
	    if (code) com_err (whoami, code, "translating ids");
	}
    }
    if (code) {
	if (lids->idlist_val) free (lids->idlist_val);
	return -1;
    }
    return 0;
}
#endif


int GetNameOrId (as, lids, lnames)
  register struct cmd_syndesc *as;
  struct idlist *lids;
  struct namelist *lnames;
{
    register afs_int32 code = 0;
    int n = 0, nd = 0, nm = 0, id, x;
    struct cmd_item *i;
    struct namelist names, tnames;	/* local copy, if not ret. names */
    struct idlist ids, tids;		/* local copy, if not ret. ids */
    int goodCount = 0;

    for (i = as->parms[0].items; i; i = i->next) n++;
    lids->idlist_val = (afs_int32 *)malloc(n*sizeof(afs_int32));
    lids->idlist_len = n;
    ids.idlist_val = (afs_int32 *)malloc(n*sizeof(afs_int32));
    ids.idlist_len = n;
    names.namelist_val = (prname *)malloc(n*PR_MAXNAMELEN);
    names.namelist_len = n;
    if (lnames) {
	lnames->namelist_val = (prname *)malloc(n*PR_MAXNAMELEN);
	lnames->namelist_len = 0;
    }
    for (i=as->parms[0].items; i; i=i->next) {
	tnames.namelist_val = (prname *)malloc(PR_MAXNAMELEN);
	strncpy (tnames.namelist_val[0], i->data, PR_MAXNAMELEN);	    
	tnames.namelist_len = 1;
	tids.idlist_len =  0;
	tids.idlist_val = 0;
	code = pr_NameToId(&tnames, &tids);
	if ((!code && (tids.idlist_val[0] != 32766)) || (code = util_GetInt32 (i->data, &id))) {
	    /* Assume it's a name instead */
	    strncpy (names.namelist_val[nm++], i->data, PR_MAXNAMELEN);	    
	} else {
	    ids.idlist_val[nd++] = id;
	}
	free(tnames.namelist_val);
    }
    names.namelist_len = nm;
    ids.idlist_len = nd;
    tids.idlist_len = nd = nm = 0;
    tids.idlist_val = 0;
    code = pr_NameToId (&names, &tids);
    if (code) com_err (whoami, code, "so couldn't look up names");
    else {
	for (n=0; n < tids.idlist_len; n++) {
	    if ((tids.idlist_val[n] == ANONYMOUSID)) {
		com_err (whoami, PRNOENT,
			 "so couldn't look up id for %s", names.namelist_val[n]);
	    } else 
		goodCount++;
	    lids->idlist_val[nd] = tids.idlist_val[n];
	    if (lnames)
		strcpy(lnames->namelist_val[nd], names.namelist_val[n]);	    
	    nd++;
	}
    }
    for (x=0; x < ids.idlist_len; x++) {
	lids->idlist_val[nd+x] = ids.idlist_val[x];
    }
    lids->idlist_len = nd+x;    
    if (!code && lnames) {
	tnames.namelist_val = 0;
	tnames.namelist_len = 0;
	code = pr_IdToName (&ids, &tnames);
	if (code) com_err (whoami, code, "translating ids");
	else goodCount++;
	if (lnames) {
	    for (x=0; x < ids.idlist_len; x++)
		strcpy(lnames->namelist_val[nd+x], tnames.namelist_val[x]);	    
	    lnames->namelist_len = nd+x;
	}
    }
    /* treat things as working if any of the lookups worked */
    if (goodCount==0) code = PRNOENT;
    if (code) {
	if (lids->idlist_val) free (lids->idlist_val);
	return -1;
    }
    return 0;
}


AddToGroup(as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    struct cmd_item *u, *g;

    for (u=as->parms[0].items; u; u=u->next) {
	for (g=as->parms[1].items; g; g=g->next) {
	    code = pr_AddToGroup (u->data, g->data);
	    if (code) {
		com_err (whoami, code,
			 "; unable to add user %s to group %s %s",
			 u->data, g->data, (force?"(ignored)":""));
		if (!force)
		    return code;
	    }
	}
    }
    return 0;
}

RemoveFromGroup (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    struct cmd_item *u, *g;

    for (u=as->parms[0].items; u; u=u->next) {
	for (g=as->parms[1].items; g; g=g->next) {
	    code = pr_RemoveUserFromGroup (u->data, g->data);
	    if (code) {
		com_err (whoami, code,
			 "; unable to remove user %s from group %s %s",
			 u->data, g->data, (force?"(ignored)":""));
		if (!force)
		    return code;
	    }
	}
    }
    return 0;
}

ListMembership (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    idlist ids;
    namelist names;
    int i;
    namelist list;
    int j;

    if (GetNameOrId(as, &ids, &names)) return PRBADARG;

    for (i=0; i<ids.idlist_len; i++) {
	afs_int32 id = ids.idlist_val[i];
	char *name = names.namelist_val[i];

	if (id == ANONYMOUSID) continue;	/* bad entry */

	list.namelist_val = 0;
	list.namelist_len = 0;
	code = pr_IDListMembers(ids.idlist_val[i],&list);
	if (code) {
	    com_err (whoami, code,
		     "; unable to get membership of %s (id: %d)", name, id);
	    continue;
	}
	if (id < 0) printf ("Members of %s (id: %d) are:\n", name, id);
	else printf ("Groups %s (id: %d) is a member of:\n", name, id);

	for (j=0; j<list.namelist_len; j++)
	    printf("  %s\n", list.namelist_val[j]);
	if (list.namelist_val) free (list.namelist_val);
    }
    if (ids.idlist_val) free (ids.idlist_val);
    if (names.namelist_val) free (names.namelist_val);
    return 0;
}

Delete (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    idlist ids;
    namelist names;
    int i;

    if (GetNameOrId (as, &ids, &names)) return PRBADARG;

    for (i=0; i<ids.idlist_len; i++) {
	afs_int32 id = ids.idlist_val[i];
	char *name = names.namelist_val[i];

	if (id == ANONYMOUSID) continue;

	code = pr_DeleteByID (id);
	if (code) {
	    com_err (whoami, code, "deleting %s (id: %d) %s", name, id, (force?"(ignored)":""));
	    if (!force)
		return code;
	}
    }
    if (ids.idlist_val) free (ids.idlist_val);
    if (names.namelist_val) free (names.namelist_val);
    return 0;
}

/* access bit translation info */

char *flags_upcase = "SOMA ";		/* legal all access values */
char *flags_dncase = "s mar";		/* legal member acces values */
int   flags_shift[5] = {2,1,2,2,1};	/* bits for each */

CheckEntry (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    afs_int32 rcode = 1;
    int i, flag = 0, admin = 0;
    namelist lnames, names;
    idlist ids;
    idlist lids;
    struct prcheckentry aentry;

    if (GetNameOrId (as, &ids, &names)) return PRBADARG;

    lids.idlist_len = 2;
    lids.idlist_val = (afs_int32 *)malloc(sizeof(afs_int32)*2);
    lnames.namelist_len = 0;
    lnames.namelist_val = 0;

    for (i=0; i<ids.idlist_len; i++) {
	afs_int32 id = ids.idlist_val[i];

	if (id == ANONYMOUSID) continue;

	rcode = 0;
	code = pr_ListEntry (id, &aentry);
	if (code) {
	    rcode = code;
	    com_err (whoami, code, "; unable to find entry for (id: %d)", id);
	    continue;
	}

	lids.idlist_val[0] = aentry.owner;
	lids.idlist_val[1] = aentry.creator;
	code = pr_IdToName (&lids, &lnames);
	if (code) {
	    rcode = code;
	    com_err (whoami, code,
		     "translating owner (%d) and creator (%d) ids",
		     aentry.owner, aentry.creator);
	    continue;
	}
	printf("Name: %s, id: %d, owner: %s, creator: %s,\n",
	       aentry.name, aentry.id,
	       lnames.namelist_val[0], lnames.namelist_val[1]);
	printf ("  membership: %d", aentry.count);
	{   char access[6];
	    afs_int32 flags = aentry.flags;
	    int  j, s, new;
	    char c;
	    access[5] = 0;	/* null-terminate the string */
	    for (j=4; j>=0; j--) {
		s = flags_shift[j];
		if (s == 1) new = flags & 1;
		else new = flags & 3;
		if (new == 0) c = '-';
		else if (new == 1) {
		    c = flags_dncase[j];
		    if (c == ' ') c = flags_upcase[j];
		} else if (new == 2) c = flags_upcase[j];
		else c = 'X';
		access[j] = c;
		flags >>= s;
	    }
	    printf(", flags: %s", access);
	}
	if (aentry.id == SYSADMINID) 
	    admin = 1;
	else if (!pr_IsAMemberOf (aentry.name, "system:administrators", &flag)) {
	    if (flag)
		admin = 1;
	}
	if (admin)
	    printf (", group quota: unlimited");		    
	else
	    printf (", group quota: %d", aentry.ngroups);
#if FOREIGN
	printf (", foreign user quota=%d", aentry.nusers);
#endif
	printf (".\n");
    }

  done:
    if (lnames.namelist_val) free(lnames.namelist_val);
    if (lids.idlist_val) free(lids.idlist_val);
    if (ids.idlist_val) free(ids.idlist_val);

    return(rcode);
}

ListEntries (as)
  struct cmd_syndesc *as;
{
  afs_int32 code=0;
  afs_int32 flag, startindex, nentries, nextstartindex;
  struct prlistentries *entriesp=0, *e;
  afs_int32 i;

  flag = PRUSERS;
  if (as->parms[1].items) flag  = PRGROUPS;
  if (as->parms[0].items) flag |= PRUSERS;
  
  printf("Name                          ID  Owner Creator\n");
  for (startindex = 0; startindex!=-1; startindex=nextstartindex) {
     code = pr_ListEntries(flag, startindex, &nentries, &entriesp, &nextstartindex);
     if (code) {
        com_err (whoami, code, "; unable to list entries\n");
	if (entriesp) free(entriesp);
	break;
     }

     /* Now display each of the entries we read */
     for (i=0,e=entriesp; i<nentries; i++,e++) {
        printf("%-25s %6d %6d %7d \n", e->name, e->id, e->owner, e->creator);
     }
     if (entriesp) free(entriesp);
  }
  return code;
}

ChownGroup (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    char *name;
    char *owner;

    name = as->parms[0].items->data;
    owner = as->parms[1].items->data;
    code = pr_ChangeEntry (name, "", 0, owner);
    if (code) com_err (whoami, code,
		       "; unable to change owner of %s to %s", name, owner);
    return code;
}

ChangeName (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    char *oldname;
    char *newname;

    oldname = as->parms[0].items->data;
    newname = as->parms[1].items->data;
    code = pr_ChangeEntry (oldname, newname, 0, "");
    if (code) com_err (whoami, code,
		       "; unable to change name of %s to %s",
		       oldname, newname);
    return code;
}

ListMax (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    afs_int32 maxUser, maxGroup;

    code = pr_ListMaxUserId (&maxUser);
    if (code) 
	com_err (whoami, code, "getting maximum user id");
    else {
	code = pr_ListMaxGroupId (&maxGroup);
	if (code) com_err (whoami, code, "getting maximum group id");
	else {
	    printf("Max user id is %d and max group id is %d.\n",
		   maxUser, maxGroup);	    
	}
    }
    return code;
}

SetMax (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    afs_int32 maxid;

    code = 0;
    if (as->parms[1].items) {
	/* set user max */
	code = util_GetInt32 (as->parms[1].items->data, &maxid);
	if (code) {
	    com_err (whoami, code,
		     "because id was: '%s'", as->parms[1].items->data);
	}
	else {
	    code = pr_SetMaxUserId (maxid);
	    if (code)
		com_err (whoami, code,
			 "so couldn't set Max User Id to %d", maxid);
	}
    }
    if (as->parms[0].items) {
	/* set group max */
	code = util_GetInt32 (as->parms[0].items->data, &maxid);
	if (code) {
	    com_err (whoami, code,
		     "because id was: '%s'", as->parms[0].items->data);
	}
	else {
	    code = pr_SetMaxGroupId (maxid);
	    if (code)
		com_err (whoami, code,
			 "so couldn't set Max Group Id to %d", maxid);
	}
    }
    if (!as->parms[0].items && !as->parms[1].items) {
	code = PRBADARG;
	printf("Must specify at least one of group or user.\n");
    }
    return code;
}

SetFields (as)
  register struct cmd_syndesc *as;
{
    register afs_int32 code;
    idlist ids;
    namelist names;
    int i;
    afs_int32 mask, flags, ngroups, nusers;

    if (GetNameOrId (as, &ids, &names)) return PRBADARG;

    mask = 0;
    nusers = 0;
    if (as->parms[1].items) {		/* privacy bits */
	char *access = as->parms[1].items->data;
	int   new;

	if (strpbrk (access, "76543210") != 0) { /* all octal digits */
	    sscanf (access, "%lo", &flags);
	} else {			/* interpret flag bit names */
	    if (strlen(access) != 5) {
	      form_error:
		printf ("Access bits must be of the form 'somar', not %s\n", access);
		return PRBADARG;
	    }
	    if (strpbrk(access, "somar-") == 0) goto form_error;
	    flags = 0;
	    for (i=0; i<5; i++) {
		if (access[i] == flags_upcase[i]) new = 2;
		else if (access[i] == flags_dncase[i]) new = 1;
		else if (access[i] == '-') new = 0;
		else {
		    printf ("Access bits out of order or illegal:\n  must be a combination of letters from '%s' or '%s' or hyphen, not %s\n", flags_upcase, flags_dncase, access);
		    return PRBADARG;
		}
		flags <<= flags_shift[i];
		if (flags_shift[i] == 1) {
		    if (new) flags |= 1;
		}
		else flags |= new;
	    }
	}
	mask |= PR_SF_ALLBITS;
    }
    if (as->parms[2].items) {		/* limitgroups */
	code = util_GetInt32 (as->parms[2].items->data, &ngroups);
	if (code) {
	    com_err (whoami, code, "because ngroups was: '%s'",
		     as->parms[2].items->data);
	    return code;
	}
	mask |= PR_SF_NGROUPS;
    }
#if FOREIGN
    if (as->parms[3].items) {		/* limitgroups */
	code = util_GetInt32 (as->parms[3].items->data, &nusers);
	if (code) {
	    com_err (whoami, code, "because nusers was: '%s'",
		     as->parms[3].items->data);
	    return code;
	}
	mask |= PR_SF_NUSERS;
    }
#endif

    for (i=0; i<ids.idlist_len; i++) {
	afs_int32 id = ids.idlist_val[i];
	char *name = names.namelist_val[i];
	if (id == ANONYMOUSID) continue;
	code = pr_SetFieldsEntry (id, mask, flags, ngroups, nusers);
	if (code) {
	    com_err (whoami, code,
		     "; unable to set fields for %s (id: %d)", name, id);
	    return code;
	}
    }
    if (ids.idlist_val) free (ids.idlist_val);
    if (names.namelist_val) free (names.namelist_val);
    return 0;
}	    

ListOwned (as)
  register struct cmd_syndesc *as;
{   register afs_int32 code;
    idlist ids;
    namelist names;
    namelist list;
    int i,j;
    afs_int32 more;

    if (GetNameOrId (as, &ids, &names)) return PRBADARG;

    for (i=0; i<ids.idlist_len; i++) {
	afs_int32 oid = ids.idlist_val[i];
	char *name = names.namelist_val[i];

	if (oid == ANONYMOUSID) continue;

	if (oid) printf("Groups owned by %s (id: %d) are:\n", name, oid);
	else printf ("Orphaned groups are:\n");
	more = 0;
	do {
	   list.namelist_val = 0;
	   list.namelist_len = 0;
	   code = pr_ListOwned(oid, &list, &more);
	   if (code) {
	      com_err (whoami, code,
		       "; unable to get owner list for %s (id: %d)",
		       name, oid);
	      break;
	   }

	   for (j=0; j<list.namelist_len; j++)
	      printf ("  %s\n", list.namelist_val[j]);
	   if (list.namelist_val) free(list.namelist_val);
	} while (more);
    }

    if (ids.idlist_val) free (ids.idlist_val);
    if (names.namelist_val) free (names.namelist_val);
    return 0;
}

static void add_std_args (ts)
  register struct cmd_syndesc *ts;
{
    char test_help[AFSDIR_PATH_MAX];

    sprintf(test_help, "use config file in %s", AFSDIR_SERVER_ETC_DIRPATH);

    cmd_Seek(ts,16);
    cmd_AddParm(ts,"-cell",CMD_SINGLE,CMD_OPTIONAL,"cell name");
    cmd_AddParm(ts,"-noauth",CMD_FLAG,CMD_OPTIONAL,"run unauthenticated");
    cmd_AddParm(ts,"-test", CMD_FLAG,CMD_OPTIONAL|CMD_HIDE, test_help);
    cmd_AddParm(ts,"-force",CMD_FLAG,CMD_OPTIONAL,"Continue oper despite reasonable errors");
}

/*
static void add_NameOrId_args (ts)
  register struct cmd_syndesc *ts;
{
    cmd_AddParm(ts,"-name",CMD_LIST,CMD_OPTIONAL,"user or group name");
    cmd_AddParm(ts,"-id",CMD_LIST,CMD_OPTIONAL,"user or group id");
}
*/

#include "AFS_component_version_number.c"

int main (argc, argv)
  int argc;
  char **argv;
{
    register afs_int32 code;
    register struct cmd_syndesc *ts;

#ifdef	AFS_AIX32_ENV
    /*
     * The following signal action for AIX is necessary so that in case of a 
     * crash (i.e. core is generated) we can include the user's data section 
     * in the core dump. Unfortunately, by default, only a partial core is
     * generated which, in many cases, isn't too useful.
     */
    struct sigaction nsa;
    
    sigemptyset(&nsa.sa_mask);
    nsa.sa_handler = SIG_DFL;
    nsa.sa_flags = SA_FULLDUMP;
    sigaction(SIGSEGV, &nsa, NULL);
#endif

    ts = cmd_CreateSyntax("creategroup",CreateGroup,0,"create a new group");
    cmd_AddParm(ts,"-name",CMD_LIST,0,"group name");
    cmd_AddParm(ts,"-owner",CMD_SINGLE,CMD_OPTIONAL,"owner of the group");
    cmd_AddParm(ts,"-id",CMD_LIST,CMD_OPTIONAL,"id (negated) for the group");
    add_std_args (ts);
    cmd_CreateAlias(ts,"cg");

    ts = cmd_CreateSyntax("createuser",CreateUser,0,"create a new user");
    cmd_AddParm(ts,"-name",CMD_LIST,0,"user name");
    cmd_AddParm(ts,"-id",CMD_LIST,CMD_OPTIONAL,"user id");
    add_std_args (ts);
    cmd_CreateAlias(ts,"cu");

    ts = cmd_CreateSyntax("adduser",AddToGroup,0,"add a user to a group");
    cmd_AddParm(ts, "-user",CMD_LIST,0,"user name");
    cmd_AddParm(ts, "-group",CMD_LIST,0,"group name");
    add_std_args (ts);

    ts = cmd_CreateSyntax("removeuser",RemoveFromGroup,0,
			  "remove a user from a group");
    cmd_AddParm(ts,"-user",CMD_LIST,0,"user name");
    cmd_AddParm(ts,"-group",CMD_LIST,0,"group name");
    add_std_args (ts);

    ts = cmd_CreateSyntax ("membership",ListMembership, 0,
			   "list membership of a user or group");
    cmd_AddParm(ts,"-nameorid",CMD_LIST,0,"user or group name or id");
    add_std_args (ts);
    cmd_CreateAlias(ts,"groups");

    ts = cmd_CreateSyntax ("delete", Delete, 0,
			   "delete a user or group from database");
    cmd_AddParm(ts,"-nameorid",CMD_LIST,0,"user or group name or id");
    add_std_args (ts);

    ts = cmd_CreateSyntax ("examine", CheckEntry, 0, "examine an entry");
    cmd_AddParm(ts,"-nameorid",CMD_LIST,0,"user or group name or id");
    add_std_args (ts);
    cmd_CreateAlias (ts, "check");

    ts = cmd_CreateSyntax("chown",ChownGroup,0,"change ownership of a group");
    cmd_AddParm(ts,"-name",CMD_SINGLE,0,"group name");
    cmd_AddParm(ts,"-owner",CMD_SINGLE,0,"new owner");
    add_std_args (ts);

    ts = cmd_CreateSyntax("rename",ChangeName,0,"rename user or group");
    cmd_AddParm(ts,"-oldname",CMD_SINGLE,0,"old name");
    cmd_AddParm(ts,"-newname",CMD_SINGLE,0,"new name");
    add_std_args (ts);
    cmd_CreateAlias(ts, "chname");

    ts = cmd_CreateSyntax("listmax",ListMax,0,"list max id");
    add_std_args (ts);

    ts = cmd_CreateSyntax("setmax",SetMax,0,"set max id");
    cmd_AddParm(ts,"-group",CMD_SINGLE,CMD_OPTIONAL,"group max");
    cmd_AddParm(ts,"-user",CMD_SINGLE,CMD_OPTIONAL,"user max");
    add_std_args (ts);

    ts = cmd_CreateSyntax("setfields",SetFields,0,"set fields for an entry");
    cmd_AddParm(ts,"-nameorid",CMD_LIST,0,"user or group name or id");
    cmd_AddParm (ts, "-access", CMD_SINGLE, CMD_OPTIONAL,
		 "set privacy flags"); 
    cmd_AddParm (ts, "-groupquota", CMD_SINGLE, CMD_OPTIONAL,
		 "set limit on group creation"); 
#if FOREIGN
    cmd_AddParm (ts, "-userquota", CMD_SINGLE, CMD_OPTIONAL,
		 "set limit on foreign user creation"); 
#endif
    add_std_args (ts);

    ts = cmd_CreateSyntax
	("listowned", ListOwned, 0,
	 "list groups owned by an entry or zero id gets orphaned groups");
    cmd_AddParm(ts,"-nameorid",CMD_LIST,0,"user or group name or id");
    add_std_args (ts);
    
    ts = cmd_CreateSyntax
	("listentries", ListEntries, 0,
	 "list users/groups in the protection database");
    cmd_AddParm(ts, "-users",  CMD_FLAG, CMD_OPTIONAL, "list user entries");
    cmd_AddParm(ts, "-groups", CMD_FLAG, CMD_OPTIONAL, "list group entries");
    add_std_args (ts);
    
    cmd_SetBeforeProc(GetGlobals,0);
    cmd_SetAfterProc(CleanUp,0);
    code = cmd_Dispatch(argc,argv);
    exit (code != 0);
}

