#!/bin/bash # # priority: 850 # # Manage settings for the RT installtion # # Stephen Soltesz # Copyright (C) 2008 The Trustees of Princeton University # # $Id$ # # Source function library and configuration . /etc/plc.d/functions . /etc/planetlab/plc_config local_config=/etc/planetlab/configs/site.xml PLCRTPATH=/usr/share/plcrt # Be verbose set -x # Default locations PGDATA=/var/lib/pgsql/data postgresql_conf=$PGDATA/postgresql.conf pghba_conf=$PGDATA/pg_hba.conf # Export so that we do not have to specify -p to psql invocations export PGPORT=$PLC_DB_PORT RT3_DB_USER="rt3user" RT3_DB_NAME="rt3" WROTE_PG_CONFIG= if [ -z "$PLC_RT_IP" ] ; then PLC_RT_IP=$( gethostbyname $PLC_RT_HOST ) fi # NOTE: code duplicated from monitor.functions to allow package to be separate # from it. function check_pg_hba () { NAME=$1 USER=$2 #### SETUP ACCESS to this user and database mkdir -p $PGDATA/pg_hba.conf.d CONF=$PGDATA/pg_hba.conf.d/${NAME}.conf if [ ! -f $CONF ] ; then echo "host $NAME $USER 127.0.0.1/32 password" > $CONF echo "host $NAME $USER $PLC_RT_IP/32 password" >> $CONF WROTE_PG_CONFIG="true" fi } # TODO: make values re-configurable... this may be an issue with RT's db, though. function update_config () { pattern=$1 with=$2 file=$3 sed -i -e "s/$pattern/$with/g" $file } function check_rt_siteconfig () { tmp_siteconfig=$(mktemp) tmp_initialdata=$(mktemp) # TODO: need a better approach for this. for f in $PLCRTPATH/conf.d/*.pl ; do update_config PLC_RT_HOSTNAME $PLC_RT_HOST $f done # TODO: need a better approach for this. if [ -f /etc/httpd/conf.d/rt3.conf ] ; then update_config PLC_RT_HOST $PLC_RT_HOST /etc/httpd/conf.d/rt3.conf fi # if the templates are newer than the actual config, then replace them. if [ $PLCRTPATH/RT_SiteConfig.pm -nt /etc/rt3/RT_SiteConfig.pm ] ; then # copy templates cp -f $PLCRTPATH/RT_SiteConfig.pm $tmp_siteconfig cp -f $PLCRTPATH/initialdata $tmp_initialdata # setup RT_SiteConfig.pm update_config PLC_NAME "$PLC_NAME" $tmp_siteconfig update_config PLC_RT_HOSTNAME $PLC_RT_HOST $tmp_siteconfig update_config PLC_WWW_HOSTNAME $PLC_WWW_HOST $tmp_siteconfig update_config RT_DB_NAME $RT3_DB_NAME $tmp_siteconfig update_config RT_DB_USER $RT3_DB_USER $tmp_siteconfig update_config RT_DB_PASSWORD $PLC_MONITOR_DBPASSWORD $tmp_siteconfig # setup initialdata update_config PLC_RT_HOSTNAME $PLC_RT_HOST $tmp_initialdata # copy to live configuration cp -f $tmp_siteconfig /etc/rt3/RT_SiteConfig.pm cp -f $tmp_initialdata /etc/rt3/initialdata chmod 644 /etc/rt3/RT_SiteConfig.pm chmod 644 /etc/rt3/initialdata rm -f $tmp_siteconfig rm -f $tmp_initialdata fi } function check_rt_custom () { rsync -qv -az $PLCRTPATH/local/html /usr/share/rt3 } function check_rt_pghba () { NAME=$RT3_DB_NAME USER=$RT3_DB_USER CONF=$PGDATA/pg_hba.conf.d/${NAME}.conf PATTERN="host all postgres 127.0.0.1/32 trust" PATTERN="host all postgres $PLC_RT_IP/32 trust" if ! grep -q "$PATTERN" $CONF ; then #### SETUP ACCESS from postgres user to run init for the first time. echo "$PATTERN" >> $CONF WROTE_PG_CONFIG="true" fi } function check_rt_aliases () { if ! grep -q "rt-mailgate --queue support" /etc/aliases ; then sed -i -e "s/^support.*postmaster//g" /etc/aliases sed -i -e "s/^security.*root//g" /etc/aliases cat <> /etc/aliases # added by RT init scripts for default queues. support: "|/usr/sbin/rt-mailgate --queue support --action correspond --url http://localhost/rt3/" monitor: "|/usr/sbin/rt-mailgate --queue monitor --action correspond --url http://localhost/rt3/" security: "|/usr/sbin/rt-mailgate --queue security --action correspond --url http://localhost/rt3/" legal: "|/usr/sbin/rt-mailgate --queue legal --action correspond --url http://localhost/rt3/" EOF /usr/bin/newaliases fi } function check_rt_init () { if [ ! -f /etc/rt3/setup.finished ] ; then /usr/sbin/rt-setup-database --action init --dba postgres for f in $PLCRTPATH/conf.d/*.pl ; do /usr/sbin/rt-setup-database --action insert --dba postgres --datafile $f done # run initial setup scripts (run only once, or for the first time) if [ -d $PLCRTPATH/setup.d ] ; then for f in $PLCRTPATH/setup.d/*.{pl,py,sh} ; do $f done fi touch /etc/rt3/setup.finished fi } check_rt_sendmail () { tmp_sendmailmc=$(mktemp) # if the templates is newer than the processed config, then update it if grep -q "Addr=127.0.0.1," /etc/mail/sendmail.mc ; then # copy templates cp -f /etc/mail/sendmail.mc $tmp_sendmailmc # setup initialdata update_config "Addr=127.0.0.1," "" $tmp_sendmailmc # copy to live configuration cp -f $tmp_sendmailmc /etc/mail/sendmail.mc rm -f $tmp_sendmailmc # edit /etc/mail/access to add local IP if ! grep "$PLC_RT_IP" /etc/mail/access ; then echo "$PLC_RT_IP RELAY" >> /etc/mail/access makemap hash /etc/mail/access.db < /etc/mail/access fi if [ ! -f /etc/smrsh/rt-mailgate ] ; then ln -s /usr/sbin/rt-mailgate /etc/smrsh/rt-mailgate fi if ! grep "$PLC_RT_HOST" /etc/mail/local-host-names ; then # edit /etc/mail/local-host-names echo "$PLC_RT_HOST" >> /etc/mail/local-host-names fi m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf service sendmail restart fi } if [ "$PLC_RT_ENABLED" != "1" ] ; then exit 0 fi case "$1" in start) MESSAGE=$"Bootstrap RT (please wait...)" dialog "$MESSAGE" check_pg_hba $RT3_DB_NAME $RT3_DB_USER #check_user_and_db $RT3_DB_NAME $RT3_DB_USER check_rt_siteconfig # TODO: make this dependent on whether a change was made! service plc restart httpd check_rt_pghba if [ -n "$WROTE_PG_CONFIG" ] ; then # NOTE: restart db to enable access by users granted above. service plc restart postgresql MESSAGE=$"Bootstrap RT 2 (please wait...)" dialog "$MESSAGE" fi check_rt_aliases check_rt_init check_rt_sendmail check_rt_custom # todo: restart httpd if needed. # TODO: remove external permission result "$MESSAGE" ;; delete) MESSAGE=$"Deleting databases..." dialog "$MESSAGE" service plc stop httpd dropdb -U postgres $RT3_DB_NAME dropuser -U postgres $RT3_DB_USER rm -f /etc/rt3/RT_SiteConfig.pm rm -f /etc/rt3/initialdata rm -f $PGDATA/pg_hba.conf.d/${RT3_DB_NAME}.conf sed -i -e "s/.*mailgate.*//g" /etc/aliases rm -f /etc/rt3/setup.finished sed -i -e "s/Port=smtp, Name=MTA/Port=smtp,Addr=127.0.0.1, Name=MTA/g" /etc/mail/sendmail.mc service plc start httpd result "$MESSAGE" ;; stop) MESSAGE=$"Stopping RT" dialog "$MESSAGE" # TODO: is there anything to stop? result "$MESSAGE" ;; esac exit $ERRORS