osx adduser bash script

adduser.sh

#!/bin/bash
# =========================
# Add User OS X Interactive Command Line
# =========================

getHiddenUserUid()
{
    local __UIDS=$(dscl . -list /Users UniqueID | awk '{print $2}' | sort -ugr)

    #echo $__UIDS
    local __NewUID
    for __NewUID in $__UIDS
    do
        if [[ $__NewUID -lt 499 ]] ; then
            break;
        fi
    done

    echo $((__NewUID+1))
}

getInteractiveUserUid()
{
    # Find out the next available user ID
    local __MAXID=$(dscl . -list /Users UniqueID | awk '{print $2}' | sort -ug | tail -1)
    echo $((__MAXID+1))
}

if  [ $UID -ne 0 ] ; then echo "Please run $0 as root." && exit 1; fi

read -p "Enter your desired user name: " USERNAME

read -p "Enter a password for this user: " PASSWORD
echo

# ====

# A list of (secondary) groups the user should belong to
# This makes the difference between admin and non-admin users.

read -p "Is this an administrative user? [y/n] (n): " GROUP_ADD
GROUP_ADD=${GROUP_ADD:-n}

if [ "$GROUP_ADD" = n ] ; then
    SECONDARY_GROUPS="staff"  # for a non-admin user
elif [ "$GROUP_ADD" = y ] ; then
    SECONDARY_GROUPS="admin _lpadmin _appserveradm _appserverusr" # for an admin user
else
    echo "You did not make a valid selection!"
    exit 1;
fi

# ====

# Create a nobody user

read -p "Is this user for nginx/apache? [y/n] (n): " NOBODY_USER
NOBODY_USER=${NOBODY_USER:-n}

if [ "$NOBODY_USER" = y ] ; then
    SECONDARY_GROUPS="www-data"  # for a non-admin user
elif [ "$NOBODY_USER" = n ]; then
    SECONDARY_GROUPS=${SECONDARY_GROUPS}
else
    echo "You did not make a valid selection!"
    exit 1;
fi

# ====

# Create a UID that is not currently in use

read -p "Should this user have interactive access?  [y/n] (y): " IS_INTERACTIVE
IS_INTERACTIVE=${IS_INTERACTIVE:-y}

if [ "$IS_INTERACTIVE" = y ] ; then
    USERID=$(getInteractiveUserUid)
elif [ "$IS_INTERACTIVE" = n ] ; then
    USERID=$(getHiddenUserUid)
else
    echo "You did not make a valid selection!"
    exit 1;
fi

echo "Going to create user as:"
echo "User name: " $USERNAME
echo "Secondary groups: " $SECONDARY_GROUPS
echo "UniqueID: " $USERID
echo "Nobody User? " $NOBODY_USER

read -p "Is this information correct?  [y/n] (y): " IS_INFO_CORRECT
IS_INFO_CORRECT=${IS_INFO_CORRECT:-y}

if [ "$IS_INFO_CORRECT" = y ] ; then
    echo "Configuring Open Directory..."
elif [ "$IS_INFO_CORRECT" = n ] ; then
    echo "User creation cancelled!"
    exit 1;
else
    echo "You did not make a valid selection!"
    exit 1;
fi

# Create the user account by running dscl (normally you would have to do each of these commands one
# by one in an obnoxious and time consuming way.

dscl . -create /Users/$USERNAME
dscl . -create /Users/$USERNAME UserShell /bin/bash
dscl . -create /Users/$USERNAME RealName "$USERNAME"
dscl . -create /Users/$USERNAME UniqueID "$USERID"
if [ "$NOBODY_USER" = y ] ; then
    # check for user group, if exists continue, otherwise create it
    dscl . -read /groups/www-data &> /dev/null || dseditgroup -o create www-data
    dscl . -create /Users/$USERNAME PrimaryGroupID 70
    dscl . -create /Users/$USERNAME NFSHomeDirectory /var/$USERNAME
    dscl . create /Users/$USERNAME IsHidden 1
else 
    dscl . -create /Users/$USERNAME PrimaryGroupID 20
    dscl . -create /Users/$USERNAME NFSHomeDirectory /Users/$USERNAME
fi
dscl . -passwd /Users/$USERNAME $PASSWORD


# Add user to any specified groups
echo "Adding user to specified groups..."

for GROUP in $SECONDARY_GROUPS ; do
    dseditgroup -o edit -t user -a $USERNAME $GROUP
done

# Create the home directory
echo "Creating home directory..."
createhomedir -c 2>&1 | grep -v "shell-init"

echo "Created user #$USERID: $USERNAME"

## get the groups of a given username
dscl . search /Groups GroupMembership <USERNAME> | grep = | awk '{print $1}' | sort

## show all users of group type
dscl . -read /groups/<GROUPNAME> GroupMembership

# shows usernames only
# http://unix.stackexchange.com/questions/24140/return-only-the-portion-of-a-line-after-a-matching-pattern
dscl . -read /groups/www-data GroupMembership | sed -n -e 's/^.*: //p'

# create group
dseditgroup -o create www-data

## add user to group
dseditgroup -o edit -t user -a <USERNAME> <GROUPNAME>

#example add user to group
dseditgroup -o edit -t user -a toddsby www-data

#switch to root user
sudo -s