#!/bin/sh
groupdel xguest 2>/dev/null
userdel -r xguest 2>/dev/null

case $(env | grep -m 1 -i lang | cut -d= -f2 | cut -d. -f1) in
	fr_FR) comment_xguest="Compte invité";;
	de_DE) comment_xguest="Gast-Zugang";;
	es_ES) comment_xguest="Cuenta invitado";;
	it_IT) comment_xguest="Opsite conto";;
	pl_PL) comment_xguest="Konto gościa";;
	pt_PT) comment_xguest="Conta convidado";;
	ru_RU) comment_xguest="Гость";;
	*) comment_xguest="Guest Account";;
esac

useradd -s /bin/rbash -K UID_MIN=56000 -K UID_MAX=60000 -K GID_MIN=56000 -K GID_MAX=60000 -U -p '' -c "$comment_xguest" xguest || :

# prevent remote login:
if [ -e /etc/ssh/denyusers ]; then
	if ! grep -q xguest /etc/ssh/denyusers; then
		echo xguest >> /etc/ssh/denyusers
	fi
fi

# prevent accessing most configuration tools (mcc still available with root password)
for i in /etc/pam.d/{mandriva-simple-auth,simple_root_authen,urpmi.update}; do
	if [ -e $i ]; then
		grep -F -q xguest $i && continue
	fi
	echo -e "\nauth\trequired\tpam_succeed_if.so\tquiet user != xguest" >> $i
done
