version 1.4, 2011/03/21 13:32:44
|
version 1.40, 2017/03/29 21:00:44
|
Line 191 sub get_distro {
|
Line 191 sub get_distro {
|
$distro = 'rhes'.$1; |
$distro = 'rhes'.$1; |
$updatecmd = 'yum install LONCAPA-prerequisites'; |
$updatecmd = 'yum install LONCAPA-prerequisites'; |
$installnow = 'yum -y install LONCAPA-prerequisites'; |
$installnow = 'yum -y install LONCAPA-prerequisites'; |
} elsif ($versionstring =~ /CentOS release (\d+)/) { |
} elsif ($versionstring =~ /CentOS(?:| Linux) release (\d+)/) { |
$distro = 'centos'.$1; |
$distro = 'centos'.$1; |
$updatecmd = 'yum install LONCAPA-prerequisites'; |
$updatecmd = 'yum install LONCAPA-prerequisites'; |
$installnow = 'yum -y install LONCAPA-prerequisites'; |
$installnow = 'yum -y install LONCAPA-prerequisites'; |
} elsif ($versionstring =~ /Scientific Linux SL release ([\d.]+) /) { |
} elsif ($versionstring =~ /Scientific Linux (?:SL )?release ([\d.]+) /) { |
my $ver = $1; |
my $ver = $1; |
$ver =~ s/\.\d+$//; |
$ver =~ s/\.\d+$//; |
$distro = 'scientific'.$ver; |
$distro = 'scientific'.$ver; |
Line 219 sub get_distro {
|
Line 219 sub get_distro {
|
} |
} |
} elsif ($versionstring =~ /^SuSE Linux ([\d\.]+) /i) { |
} elsif ($versionstring =~ /^SuSE Linux ([\d\.]+) /i) { |
$distro = 'suse'.$1; |
$distro = 'suse'.$1; |
$updatecmd = 'yast -i LONCAPA-preprequisites'; |
$updatecmd = 'yast -i LONCAPA-prerequisites'; |
} elsif ($versionstring =~ /^openSUSE ([\d\.]+) /i) { |
} elsif ($versionstring =~ /^openSUSE ([\d\.]+) /i) { |
$distro = 'suse'.$1; |
$distro = 'suse'.$1; |
if ($1 >= 10.3 ) { |
if ($1 >= 10.3 ) { |
Line 293 sub check_prerequisites {
|
Line 293 sub check_prerequisites {
|
} else { |
} else { |
my $line = <PIPE>; |
my $line = <PIPE>; |
chomp($line); |
chomp($line); |
if ($line =~ /^LONCAPA-prerequisites\-([\d\-]+)\.(\w+)$/) { |
if ($line =~ /^LONCAPA\-prerequisites\-([\d\-]+)\.(?:[.\w]+)$/) { |
$gotprereqs = $1; |
$gotprereqs = $1; |
} |
} |
} |
} |
Line 305 sub check_prerequisites {
|
Line 305 sub check_prerequisites {
|
return $gotprereqs; |
return $gotprereqs; |
} |
} |
|
|
|
sub check_locale { |
|
my ($distro) = @_; |
|
my ($fh,$langvar,$command); |
|
$langvar = 'LANG'; |
|
if ($distro =~ /^(ubuntu|debian)/) { |
|
if (!open($fh,"</etc/default/locale")) { |
|
print &mt('Failed to open: [_1], default locale not checked.', |
|
'/etc/default/locale'); |
|
} |
|
} elsif ($distro =~ /^(suse|sles)/) { |
|
if (!open($fh,"</etc/sysconfig/language")) { |
|
print &mt('Failed to open: [_1], default locale not checked.', |
|
'/etc/sysconfig/language'); |
|
} |
|
$langvar = 'RC_LANG'; |
|
} elsif ($distro =~ /^fedora(\d+)/) { |
|
if ($1 >= 18) { |
|
if (!open($fh,"</etc/locale.conf")) { |
|
print &mt('Failed to open: [_1], default locale not checked.', |
|
'/etc/locale.conf'); |
|
} |
|
} elsif (!open($fh,"</etc/sysconfig/i18n")) { |
|
print &mt('Failed to open: [_1], default locale not checked.', |
|
'/etc/sysconfig/i18n'); |
|
} |
|
} elsif ($distro =~ /^(?:rhes|centos|scientific)(\d+)/) { |
|
if ($1 >= 7) { |
|
if (!open($fh,"</etc/locale.conf")) { |
|
print &mt('Failed to open: [_1], default locale not checked.', |
|
'/etc/locale.conf'); |
|
} |
|
} elsif (!open($fh,"</etc/sysconfig/i18n")) { |
|
print &mt('Failed to open: [_1], default locale not checked.', |
|
'/etc/sysconfig/i18n'); |
|
} |
|
} else { |
|
if (!open($fh,"</etc/sysconfig/i18n")) { |
|
print &mt('Failed to open: [_1], default locale not checked.', |
|
'/etc/sysconfig/i18n'); |
|
} |
|
} |
|
my @data = <$fh>; |
|
chomp(@data); |
|
foreach my $item (@data) { |
|
if ($item =~ /^\Q$langvar\E=\"?([^\"]*)\"?/) { |
|
my $default = $1; |
|
if ($default ne 'en_US.UTF-8') { |
|
if ($distro =~ /^debian/) { |
|
$command = 'locale-gen en_US.UTF-8'."\n". |
|
'update-locale LANG=en_US.UTF-8'; |
|
} elsif ($distro =~ /^ubuntu/) { |
|
$command = 'sudo locale-gen en_US.UTF-8'."\n". |
|
'sudo update-locale LANG=en_US.UTF-8'; |
|
} elsif ($distro =~ /^(suse|sles)/) { |
|
$command = 'yast language'; |
|
} else { |
|
$command = 'system-config-language'; |
|
} |
|
} |
|
last; |
|
} |
|
} |
|
close($fh); |
|
return $command; |
|
} |
|
|
sub check_required { |
sub check_required { |
my ($instdir,$dsn) = @_; |
my ($instdir,$dsn) = @_; |
my ($distro,$packagecmd,$updatecmd,$installnow) = &get_distro(); |
my ($distro,$packagecmd,$updatecmd,$installnow) = &get_distro(); |
Line 313 sub check_required {
|
Line 379 sub check_required {
|
} |
} |
my $gotprereqs = &check_prerequisites($packagecmd,$distro); |
my $gotprereqs = &check_prerequisites($packagecmd,$distro); |
if ($gotprereqs eq '') { |
if ($gotprereqs eq '') { |
return ($distro,$gotprereqs,$packagecmd,$updatecmd,$installnow); |
return ($distro,$gotprereqs,'',$packagecmd,$updatecmd); |
|
} |
|
my $localecmd = &check_locale($distro); |
|
unless ($localecmd eq '') { |
|
return ($distro,$gotprereqs,$localecmd); |
} |
} |
my ($mysqlon,$mysqlsetup,$dbh,$has_pass,$has_lcdb,%recommended,$downloadstatus, |
my ($mysqlon,$mysqlsetup,$mysqlrestart,$dbh,$has_pass,$has_lcdb,%recommended, |
$filetouse,$production,$testing); |
$downloadstatus,$filetouse,$production,$testing,$apachefw,$tostop,$uses_systemctl); |
my $wwwuid = &uid_of_www(); |
my $wwwuid = &uid_of_www(); |
my $wwwgid = getgrnam('www'); |
my $wwwgid = getgrnam('www'); |
if (($wwwuid eq '') || ($wwwgid eq '')) { |
if (($wwwuid eq '') || ($wwwgid eq '')) { |
Line 328 sub check_required {
|
Line 398 sub check_required {
|
$mysqlon = &check_mysql_running($distro); |
$mysqlon = &check_mysql_running($distro); |
if ($mysqlon) { |
if ($mysqlon) { |
my $mysql_has_wwwuser = &check_mysql_wwwuser(); |
my $mysql_has_wwwuser = &check_mysql_wwwuser(); |
($mysqlsetup,$has_pass,$dbh) = |
($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser) = |
&check_mysql_setup($instdir,$dsn); |
&check_mysql_setup($instdir,$dsn,$distro,$mysql_has_wwwuser); |
if ($mysqlsetup eq 'noroot') { |
if ($mysqlsetup eq 'needsrestart') { |
$recommended{'mysqlperms'} = 1; |
$mysqlrestart = ''; |
|
if ($distro eq 'ubuntu') { |
|
$mysqlrestart = 'sudo '; |
|
} |
|
$mysqlrestart .= 'service mysql restart'; |
|
return ($distro,$gotprereqs,$localecmd,$packagecmd,$updatecmd,$installnow,$mysqlrestart); |
} else { |
} else { |
unless ($mysql_has_wwwuser) { |
if ($mysqlsetup eq 'noroot') { |
$recommended{'mysqlperms'} = 1; |
$recommended{'mysqlperms'} = 1; |
|
} else { |
|
unless ($mysql_has_wwwuser) { |
|
$recommended{'mysqlperms'} = 1; |
|
} |
|
} |
|
if ($dbh) { |
|
$has_lcdb = &check_loncapa_mysqldb($dbh); |
|
} |
|
unless ($has_lcdb) { |
|
$recommended{'mysql'} = 1; |
} |
} |
} |
|
if ($dbh) { |
|
$has_lcdb = &check_loncapa_mysqldb($dbh); |
|
} |
|
unless ($has_lcdb) { |
|
$recommended{'mysql'} = 1; |
|
} |
} |
} |
} |
my $tostop; |
($recommended{'firewall'},$apachefw) = &chkfirewall($distro); |
$recommended{'firewall'} = &chkfirewall($distro); |
($recommended{'runlevels'},$tostop,$uses_systemctl) = &chkconfig($distro,$instdir); |
($recommended{'runlevels'},$tostop) = &chkconfig($distro); |
|
$recommended{'apache'} = &chkapache($distro,$instdir); |
$recommended{'apache'} = &chkapache($distro,$instdir); |
$recommended{'stopsrvcs'} = &chksrvcs($distro,$tostop); |
$recommended{'stopsrvcs'} = &chksrvcs($distro,$tostop); |
($recommended{'download'},$downloadstatus,$filetouse,$production,$testing) |
($recommended{'download'},$downloadstatus,$filetouse,$production,$testing) |
= &need_download(); |
= &need_download(); |
return ($distro,$gotprereqs,$packagecmd,$updatecmd,$installnow, |
return ($distro,$gotprereqs,$localecmd,$packagecmd,$updatecmd,$installnow, |
\%recommended,$dbh,$has_pass,$has_lcdb,$downloadstatus, |
$mysqlrestart,\%recommended,$dbh,$has_pass,$has_lcdb,$downloadstatus, |
$filetouse,$production,$testing); |
$filetouse,$production,$testing,$apachefw,$uses_systemctl); |
} |
} |
|
|
sub check_mysql_running { |
sub check_mysql_running { |
my ($distro) = @_; |
my ($distro) = @_; |
|
my $use_systemctl; |
my $mysqldaemon ='mysqld'; |
my $mysqldaemon ='mysqld'; |
if ($distro =~ /^(suse|sles|debian|ubuntu)/) { |
if ($distro =~ /^(suse|sles|debian|ubuntu)/) { |
$mysqldaemon = 'mysql'; |
$mysqldaemon = 'mysql'; |
} |
} |
if (open(PIPE,"ps -ef |grep mysqld_safe |grep -v grep 2>&1 |")) { |
my $process = 'mysqld_safe'; |
|
my $proc_owner = 'root'; |
|
if ($distro =~ /^ubuntu(\w+)/) { |
|
if ($1 >= 10) { |
|
$process = 'mysqld'; |
|
$proc_owner = 'mysql'; |
|
} |
|
} elsif ($distro =~ /^fedora(\d+)/) { |
|
if ($1 >= 16) { |
|
if ($1 >= 19) { |
|
$mysqldaemon ='mariadb'; |
|
} |
|
$process = 'mysqld'; |
|
$proc_owner = 'mysql'; |
|
$use_systemctl = 1; |
|
} |
|
if ($1 >= 19) { |
|
$mysqldaemon ='mariadb'; |
|
} |
|
} elsif ($distro =~ /^(?:centos|rhes|scientific)(\d+)/) { |
|
if ($1 >= 7) { |
|
$mysqldaemon ='mariadb'; |
|
$process = 'mysqld'; |
|
$proc_owner = 'mysql'; |
|
$use_systemctl = 1; |
|
} |
|
} elsif ($distro =~ /^sles(\d+)/) { |
|
if ($1 >= 12) { |
|
$use_systemctl = 1; |
|
} |
|
} elsif ($distro =~ /^suse(\d+)/) { |
|
if ($1 >= 13) { |
|
$use_systemctl = 1; |
|
} |
|
} |
|
if (open(PIPE,"ps -ef |grep $process |grep ^$proc_owner |grep -v grep 2>&1 |")) { |
my $status = <PIPE>; |
my $status = <PIPE>; |
close(PIPE); |
close(PIPE); |
chomp($status); |
chomp($status); |
if ($status =~ /^root\s+\d+\s+/) { |
if ($status =~ /^\Q$proc_owner\E\s+\d+\s+/) { |
print_and_log(&mt('MySQL is running.')."\n"); |
print_and_log(&mt('MySQL is running.')."\n"); |
return 1; |
return 1; |
} else { |
} else { |
system("/etc/rc.d/init.d/$mysqldaemon start"); |
if ($use_systemctl) { |
|
system("/bin/systemctl start $mysqldaemon.service >/dev/null 2>&1 "); |
|
} else { |
|
system("/etc/init.d/$mysqldaemon start >/dev/null 2>&1 "); |
|
} |
print_and_log(&mt('Waiting for MySQL to start.')."\n"); |
print_and_log(&mt('Waiting for MySQL to start.')."\n"); |
sleep 5; |
sleep 5; |
if (open (PIPE, "/etc/init.d/$mysqldaemon 2>&1 |")) { |
if (open(PIPE,"ps -ef |grep $process |grep -v grep 2>&1 |")) { |
my $status = <PIPE>; |
$status = <PIPE>; |
close(PIPE); |
close(PIPE); |
chomp($status); |
chomp($status); |
if ($status =~ /\(pid\s+\d\)/) { |
if ($status =~ /^\Q$proc_owner\E\s+\d+\s+/) { |
print_and_log(&mt('MySQL is running.')."\n"); |
print_and_log(&mt('MySQL is running.')."\n"); |
return 1; |
return 1; |
} else { |
} else { |
print_and_log(&mt('Unable to start MySQL.')."\n"); |
print_and_log(&mt('Still waiting for MySQL to start.')."\n"); |
|
sleep 5; |
|
if (open(PIPE,"ps -ef |grep $process |grep -v grep 2>&1 |")) { |
|
$status = <PIPE>; |
|
close(PIPE); |
|
chomp($status); |
|
if ($status =~ /^\Q$proc_owner\E\s+\d+\s+/) { |
|
print_and_log(&mt('MySQL is running.')."\n"); |
|
return 1; |
|
} else { |
|
print_and_log(&mt('Given up waiting for MySQL to start.')."\n"); |
|
} |
|
} |
} |
} |
} else { |
|
print_and_log(&mt('Unable to start MySQL.')."\n"); |
|
} |
} |
} |
} |
} else { |
} else { |
Line 394 sub check_mysql_running {
|
Line 522 sub check_mysql_running {
|
} |
} |
|
|
sub chkconfig { |
sub chkconfig { |
my ($distro) = @_; |
my ($distro,$instdir) = @_; |
my (%needfix,%tostop); |
my (%needfix,%tostop,%uses_systemctl); |
my $checker_bin = '/sbin/chkconfig'; |
my $checker_bin = '/sbin/chkconfig'; |
my $mysqldaemon ='mysqld'; |
my $sysctl_bin = '/bin/systemctl'; |
my $webserver = 'httpd'; |
my %daemon = ( |
my $cupsdaemon = 'cups'; |
mysql => 'mysqld', |
|
apache => 'httpd', |
|
cups => 'cups', |
|
ntp => 'ntpd', |
|
memcached => 'memcached', |
|
); |
my @runlevels = qw/3 4 5/; |
my @runlevels = qw/3 4 5/; |
my @norunlevels = qw/0 1 6/; |
my @norunlevels = qw/0 1 6/; |
if ($distro =~ /^(suse|sles)/) { |
if ($distro =~ /^(suse|sles)/) { |
@runlevels = qw/3 5/; |
@runlevels = qw/3 5/; |
@norunlevels = qw/0 2 1 6/; |
@norunlevels = qw/0 2 1 6/; |
$mysqldaemon = 'mysql'; |
$daemon{'mysql'} = 'mysql'; |
$webserver = 'apache2'; |
$daemon{'apache'} = 'apache2'; |
|
$daemon{'ntp'} = 'ntp'; |
if ($distro =~ /^(suse|sles)9/) { |
if ($distro =~ /^(suse|sles)9/) { |
$webserver = 'apache'; |
$daemon{'apache'} = 'apache'; |
} |
} |
} elsif ($distro =~ /^(debian|ubuntu)/) { |
if ($distro =~ /^(suse|sles)([\d\.]+)/) { |
|
my $name = $1; |
|
my $num = $2; |
|
if ($num > 11) { |
|
$uses_systemctl{'apache'} = 1; |
|
if (($name eq 'sles') || ($name eq 'suse' && $num >= 13.2)) { |
|
$uses_systemctl{'mysql'} = 1; |
|
$uses_systemctl{'ntp'} = 1; |
|
$uses_systemctl{'cups'} = 1; |
|
$uses_systemctl{'memcached'} = 1; |
|
$daemon{'ntp'} = 'ntpd'; |
|
} |
|
} |
|
} |
|
} elsif ($distro =~ /^(?:debian|ubuntu)(\d+)/) { |
|
my $version = $1; |
@runlevels = qw/2 3 4 5/; |
@runlevels = qw/2 3 4 5/; |
@norunlevels = qw/0 1 6/; |
@norunlevels = qw/0 1 6/; |
$checker_bin = '/usr/sbin/sysv-rc-conf'; |
$checker_bin = '/usr/sbin/sysv-rc-conf'; |
$mysqldaemon = 'mysql'; |
$daemon{'mysql'} = 'mysql'; |
$webserver = 'apache2'; |
$daemon{'apache'} = 'apache2'; |
|
$daemon{'ntp'} = 'ntp'; |
|
if (($distro =~ /^ubuntu/) && ($version <= 8)) { |
|
$daemon{'cups'} = 'cupsys'; |
|
} |
|
} elsif ($distro =~ /^fedora(\d+)/) { |
|
my $version = $1; |
|
if ($version >= 15) { |
|
$uses_systemctl{'ntp'} = 1; |
|
} |
|
if ($version >= 16) { |
|
$uses_systemctl{'mysql'} = 1; |
|
$uses_systemctl{'apache'} = 1; |
|
$uses_systemctl{'memcached'} = 1; |
|
$uses_systemctl{'cups'} = 1; |
|
} |
|
if ($version >= 19) { |
|
$daemon{'mysql'} = 'mariadb'; |
|
} |
|
} elsif ($distro =~ /^(?:centos|rhes|scientific)(\d+)/) { |
|
my $version = $1; |
|
if ($version >= 7) { |
|
$uses_systemctl{'ntp'} = 1; |
|
$uses_systemctl{'mysql'} = 1; |
|
$uses_systemctl{'apache'} = 1; |
|
$uses_systemctl{'memcached'} = 1; |
|
$uses_systemctl{'cups'} = 1; |
|
$daemon{'mysql'} = 'mariadb'; |
|
} |
} |
} |
|
my $nocheck; |
if (! -x $checker_bin) { |
if (! -x $checker_bin) { |
print &mt('Could not check runlevel status for MySQL or Apache.')."\n"; |
if ($uses_systemctl{'mysql'} && $uses_systemctl{'apache'}) { |
|
if (! -x $sysctl_bin) { |
|
$nocheck = 1; |
|
} |
|
} else { |
|
$nocheck = 1; |
|
} |
|
} |
|
if ($nocheck) { |
|
print &mt('Could not check runlevel status for MySQL or Apache')."\n"; |
return; |
return; |
} |
} |
my $rlstr = join('',@runlevels); |
my $rlstr = join('',@runlevels); |
my $nrlstr = join('',@norunlevels); |
my $nrlstr = join('',@norunlevels); |
foreach my $type ('apache','mysql','cups') { |
|
my $service; |
foreach my $type ('apache','mysql','ntp','cups','memcached') { |
if ($type eq 'apache') { |
my $service = $daemon{$type}; |
$service = $webserver; |
if ($uses_systemctl{$type}) { |
} elsif ($type eq 'mysql') { |
if (($type eq 'memcached') || ($type eq 'cups')) { |
$service = $mysqldaemon; |
if (-l "/etc/systemd/system/multi-user.target.wants/$service.service") { |
} elsif ($type eq 'cups') { |
$tostop{$type} = 1; |
$service = $cupsdaemon; |
} |
} |
} else { |
my $command = $checker_bin.' --list '.$service; |
if (!-l "/etc/systemd/system/multi-user.target.wants/$service.service") { |
my $results = `$command`; |
$needfix{$type} = "systemctl enable $service.service"; |
my $tofix; |
|
if ($results eq '') { |
|
if (($type eq 'apache') || ($type eq 'mysql')) { |
|
if ($distro =~ /^(debian|ubuntu)/) { |
|
$tofix = "$checker_bin --level $nrlstr $service off\n"; |
|
} else { |
|
$tofix = "$checker_bin --add $service\n"; |
|
} |
} |
} |
} |
} else { |
} else { |
my %curr_runlevels; |
my $command = $checker_bin.' --list '.$service.' 2>/dev/null'; |
for (my $rl=0; $rl<=6; $rl++) { |
if ($type eq 'cups') { |
if ($results =~ /$rl:on/) { $curr_runlevels{$rl}++; } |
if ($distro =~ /^(?:debian|ubuntu)(\d+)/) { |
|
my $version = $1; |
|
if (($distro =~ /^ubuntu/) && ($version <= 8)) { |
|
$command = $checker_bin.' --list cupsys 2>/dev/null'; |
|
} |
|
} |
} |
} |
if (($type eq 'apache') || ($type eq 'mysql')) { |
my $results = `$command`; |
my $warning; |
my $tofix; |
foreach my $rl (@runlevels) { |
if ($results eq '') { |
if (!exists($curr_runlevels{$rl})) { |
if (($type eq 'apache') || ($type eq 'mysql') || ($type eq 'ntp')) { |
$warning = 1; |
if ($distro =~ /^(debian|ubuntu)/) { |
|
$tofix = "update-rc.d $type defaults"; |
|
} else { |
|
$tofix = "$checker_bin --add $service\n"; |
} |
} |
} |
} |
if ($warning) { |
} else { |
$tofix = "$checker_bin --level $rlstr $service on\n"; |
my %curr_runlevels; |
|
for (my $rl=0; $rl<=6; $rl++) { |
|
if ($results =~ /$rl:on/) { $curr_runlevels{$rl}++; } |
|
} |
|
if (($type eq 'apache') || ($type eq 'mysql') || ($type eq 'ntp')) { |
|
my $warning; |
|
foreach my $rl (@runlevels) { |
|
if (!exists($curr_runlevels{$rl})) { |
|
$warning = 1; |
|
} |
|
} |
|
if ($warning) { |
|
$tofix = "$checker_bin --level $rlstr $service on\n"; |
|
} |
|
} elsif (keys(%curr_runlevels) > 0) { |
|
$tostop{$type} = 1; |
} |
} |
} elsif (keys(%curr_runlevels) > 0) { |
} |
$tostop{$type} = 1; |
if ($tofix) { |
|
$needfix{$type} = $tofix; |
} |
} |
} |
} |
if ($tofix) { |
|
$needfix{$type} = $tofix; |
|
} |
|
} |
} |
if ($distro =~ /^(suse|sles)([\d\.]+)$/) { |
if ($distro =~ /^(suse|sles)([\d\.]+)$/) { |
my $name = $1; |
my $name = $1; |
Line 476 sub chkconfig {
|
Line 677 sub chkconfig {
|
$major = $version; |
$major = $version; |
} |
} |
if ($major > 10) { |
if ($major > 10) { |
$needfix{'insserv'} = &check_SuSEfirewall2_setup(); |
if (&check_SuSEfirewall2_setup($instdir)) { |
|
$needfix{'insserv'} = 1; |
|
} |
} |
} |
} |
} |
return (\%needfix,\%tostop); |
return (\%needfix,\%tostop,\%uses_systemctl); |
} |
} |
|
|
sub chkfirewall { |
sub chkfirewall { |
|
my ($distro) = @_; |
my $configfirewall = 1; |
my $configfirewall = 1; |
my %ports = ( |
my %ports = ( |
http => 80, |
http => 80, |
https => 443, |
https => 443, |
); |
); |
|
my %activefw; |
if (&firewall_is_active()) { |
if (&firewall_is_active()) { |
my $iptables = &get_pathto_iptables(); |
my $iptables = &get_pathto_iptables(); |
if ($iptables eq '') { |
if ($iptables eq '') { |
print &mt('Firewall not checked as path to iptables not determined.')."\n"; |
print &mt('Firewall not checked as path to iptables not determined.')."\n"; |
} else { |
} else { |
my @fwchains = &get_fw_chains($iptables); |
my @fwchains = &get_fw_chains($iptables,$distro); |
if (@fwchains) { |
if (@fwchains) { |
my %activefw; |
|
foreach my $service ('http','https') { |
foreach my $service ('http','https') { |
foreach my $fwchain (@fwchains) { |
foreach my $fwchain (@fwchains) { |
if (&firewall_is_port_open($iptables,$fwchain,$ports{$service})) { |
if (&firewall_is_port_open($iptables,$fwchain,$ports{$service})) { |
Line 514 sub chkfirewall {
|
Line 718 sub chkfirewall {
|
} else { |
} else { |
print &mt('Firewall not enabled.')."\n"; |
print &mt('Firewall not enabled.')."\n"; |
} |
} |
return $configfirewall; |
return ($configfirewall,\%activefw); |
} |
} |
|
|
sub chkapache { |
sub chkapache { |
my ($distro,$instdir) = @_; |
my ($distro,$instdir) = @_; |
my $fixapache = 1; |
my $fixapache = 1; |
if ($distro =~ /^(debian|ubuntu)/) { |
if ($distro =~ /^(debian|ubuntu)(\d+)$/) { |
if (!-e "$instdir/apache2.conf") { |
my $distname = $1; |
|
my $version = $2; |
|
my ($stdconf,$stdsite); |
|
if (($distname eq 'ubuntu') && ($version > 12)) { |
|
$stdconf = "$instdir/debian-ubuntu/ubuntu14/loncapa_conf"; |
|
$stdsite = "$instdir/debian-ubuntu/ubuntu14/loncapa_sites"; |
|
} else { |
|
$stdconf = "$instdir/debian-ubuntu/loncapa"; |
|
} |
|
if (!-e $stdconf) { |
$fixapache = 0; |
$fixapache = 0; |
print &mt('Warning: No LON-CAPA Apache configuration file found for installation check.')."\n"; |
print &mt('Warning: No LON-CAPA Apache configuration file found for installation check.')."\n"; |
} elsif ((-e "/etc/apache2/sites-available/loncapa") && (-e "$instdir/apache2.conf")) { |
} else { |
if (open(PIPE, "diff --brief $instdir/apache2.conf /etc/apache2/sites-available/loncapa |")) { |
my ($configfile,$sitefile); |
|
if (($distname eq 'ubuntu') && ($version > 12)) { |
|
$sitefile = '/etc/apache2/sites-available/loncapa'; |
|
$configfile = "/etc/apache2/conf-available/loncapa"; |
|
} else { |
|
$configfile = "/etc/apache2/sites-available/loncapa"; |
|
} |
|
if (($configfile ne '') && (-e $configfile) && (-e $stdconf)) { |
|
if (open(PIPE, "diff --brief $stdconf $configfile |")) { |
|
my $diffres = <PIPE>; |
|
close(PIPE); |
|
chomp($diffres); |
|
unless ($diffres) { |
|
$fixapache = 0; |
|
} |
|
} |
|
} |
|
if ((!$fixapache) && ($distname eq 'ubuntu') && ($version > 12)) { |
|
if (($sitefile ne '') && (-e $sitefile) && (-e $stdsite)) { |
|
if (open(PIPE, "diff --brief $stdsite $sitefile |")) { |
|
my $diffres = <PIPE>; |
|
close(PIPE); |
|
chomp($diffres); |
|
unless ($diffres) { |
|
$fixapache = 0; |
|
} |
|
} |
|
} |
|
} |
|
} |
|
if (!$fixapache) { |
|
foreach my $module ('headers.load','expires.load') { |
|
unless (-l "/etc/apache2/mods-enabled/$module") { |
|
$fixapache = 1; |
|
} |
|
} |
|
} |
|
} elsif ($distro =~ /^(?:suse|sles)([\d\.]+)$/) { |
|
my $apache = 'apache'; |
|
if ($1 >= 10) { |
|
$apache = 'apache2'; |
|
} |
|
if (!-e "$instdir/sles-suse/default-server.conf") { |
|
$fixapache = 0; |
|
print &mt('Warning: No LON-CAPA Apache configuration file found for installation check.')."\n"; |
|
} elsif ((-e "/etc/$apache/default-server.conf") && (-e "$instdir/sles-suse/default-server.conf")) { |
|
if (open(PIPE, "diff --brief $instdir/sles-suse/default-server.conf /etc/$apache/default-server.conf |")) { |
my $diffres = <PIPE>; |
my $diffres = <PIPE>; |
close(PIPE); |
close(PIPE); |
chomp($diffres); |
chomp($diffres); |
Line 534 sub chkapache {
|
Line 793 sub chkapache {
|
} |
} |
} |
} |
} |
} |
} elsif ($distro =~ /^(?:suse|sles)([\d\.]+)$/) { |
} elsif ($distro eq 'rhes4') { |
my $apache = 'apache'; |
if (!-e "$instdir/rhes4/httpd.conf") { |
if ($1 >= 10) { |
|
my $apache = 'apache2'; |
|
} |
|
if (!-e "$instdir/default-server.conf") { |
|
$fixapache = 0; |
$fixapache = 0; |
print &mt('Warning: No LON-CAPA Apache configuration file found for installation check.')."\n"; |
print &mt('Warning: No LON-CAPA Apache configuration file found for installation check.')."\n"; |
} elsif ((-e "/etc/$apache/default-server.conf") && (-e "$instdir/default-server.conf")) { |
} elsif ((-e "/etc/httpd/conf/httpd.conf") && (-e "$instdir/rhes4/httpd.conf")) { |
if (open(PIPE, "diff --brief $instdir/default-server.conf /etc/$apache/default-server.conf |")) { |
if (open(PIPE, "diff --brief $instdir/rhes4/httpd.conf /etc/httpd/conf/httpd.conf |")) { |
my $diffres = <PIPE>; |
my $diffres = <PIPE>; |
close(PIPE); |
close(PIPE); |
chomp($diffres); |
chomp($diffres); |
Line 553 sub chkapache {
|
Line 808 sub chkapache {
|
} |
} |
} |
} |
} else { |
} else { |
if (!-e "$instdir/httpd.conf") { |
my $configfile = 'httpd.conf'; |
|
if ($distro =~ /^(?:centos|rhes|scientific)(\d+)$/) { |
|
if ($1 >= 7) { |
|
$configfile = 'apache2.4/httpd.conf'; |
|
} elsif ($1 > 5) { |
|
$configfile = 'new/httpd.conf'; |
|
} |
|
} elsif ($distro =~ /^fedora(\d+)$/) { |
|
if ($1 > 17) { |
|
$configfile = 'apache2.4/httpd.conf'; |
|
} elsif ($1 > 10) { |
|
$configfile = 'new/httpd.conf'; |
|
} |
|
} |
|
if (!-e "$instdir/centos-rhes-fedora-sl/$configfile") { |
$fixapache = 0; |
$fixapache = 0; |
print &mt('Warning: No LON-CAPA Apache configuration file found for installation check.')."\n"; |
print &mt('Warning: No LON-CAPA Apache configuration file found for installation check.')."\n"; |
} elsif ((-e "/etc/httpd/conf/httpd.conf") && (-e "$instdir/httpd.conf")) { |
} elsif ((-e "/etc/httpd/conf/httpd.conf") && (-e "$instdir/centos-rhes-fedora-sl/$configfile")) { |
if (open(PIPE, "diff --brief $instdir/httpd.conf /etc/httpd/conf/httpd.conf |")) { |
if (open(PIPE, "diff --brief $instdir/centos-rhes-fedora-sl/$configfile /etc/httpd/conf/httpd.conf |")) { |
my $diffres = <PIPE>; |
my $diffres = <PIPE>; |
close(PIPE); |
close(PIPE); |
chomp($diffres); |
chomp($diffres); |
print "Diff is ||$diffres||\n"; |
|
unless ($diffres) { |
unless ($diffres) { |
$fixapache = 0; |
$fixapache = 0; |
} |
} |
Line 577 sub chksrvcs {
|
Line 845 sub chksrvcs {
|
if (ref($tostop) eq 'HASH') { |
if (ref($tostop) eq 'HASH') { |
%stopsrvcs = %{$tostop}; |
%stopsrvcs = %{$tostop}; |
} |
} |
foreach my $service ('cups') { |
foreach my $service ('cups','memcached') { |
next if (exists($stopsrvcs{$service})); |
next if (exists($stopsrvcs{$service})); |
my $daemon = $service; |
my $daemon = $service; |
if ($service eq 'cups') { |
if ($service eq 'cups') { |
Line 589 sub chksrvcs {
|
Line 857 sub chksrvcs {
|
chomp($daemonrunning); |
chomp($daemonrunning); |
close(PIPE); |
close(PIPE); |
if ($daemonrunning) { |
if ($daemonrunning) { |
$stopsrvcs{$service} = 1; |
if ($service eq 'memcached') { |
|
my $cmd = '/usr/bin/memcached'; |
|
if ($distro =~ /^(suse|sles)/) { |
|
$cmd = '/usr/sbin/memcached'; |
|
} |
|
unless ($daemonrunning =~ m{^www[^/]+\Q$cmd -m 400 -v\E$}) { |
|
$stopsrvcs{$service} = 1; |
|
} |
|
} else { |
|
$stopsrvcs{$service} = 1; |
|
} |
} |
} |
} |
} |
} |
} |
return \%stopsrvcs; |
return \%stopsrvcs; |
} |
} |
|
|
Line 686 sub need_download {
|
Line 964 sub need_download {
|
} |
} |
|
|
sub check_mysql_setup { |
sub check_mysql_setup { |
my ($instdir,$dsn) = @_; |
my ($instdir,$dsn,$distro,$mysql_has_wwwuser) = @_; |
my ($mysqlsetup,$has_pass); |
my ($mysqlsetup,$has_pass); |
my $dbh = DBI->connect($dsn,'root','',{'PrintError'=>0}); |
my $dbh = DBI->connect($dsn,'root','',{'PrintError'=>0}); |
if ($dbh) { |
if ($dbh) { |
$mysqlsetup = 'noroot'; |
$mysqlsetup = 'noroot'; |
} elsif ($DBI::err =~ /1045/) { |
} elsif ($DBI::err =~ /1045/) { |
$has_pass = 1; |
$has_pass = 1; |
|
} elsif ($distro =~ /^ubuntu(\d+)$/) { |
|
my $version = $1; |
|
if ($1 > 12) { |
|
print_and_log(&mt('Restarting mysql, please be patient')."\n"); |
|
if (open (PIPE, "service mysql restart 2>&1 |")) { |
|
while (<PIPE>) { |
|
print $_; |
|
} |
|
close(PIPE); |
|
} |
|
unless ($mysql_has_wwwuser) { |
|
$mysql_has_wwwuser = &check_mysql_wwwuser(); |
|
} |
|
$dbh = DBI->connect($dsn,'root','',{'PrintError'=>0}); |
|
if ($dbh) { |
|
$mysqlsetup = 'noroot'; |
|
} elsif ($DBI::err =~ /1045/) { |
|
$has_pass = 1; |
|
} else { |
|
$mysqlsetup = 'needsrestart'; |
|
return ($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser); |
|
} |
|
} |
} |
} |
if ($has_pass) { |
if ($has_pass) { |
print &mt('You have already set a root password for the MySQL database.')."\n"; |
print &mt('You have already set a root password for the MySQL database.')."\n"; |
Line 719 sub check_mysql_setup {
|
Line 1020 sub check_mysql_setup {
|
} |
} |
} |
} |
} |
} |
} elsif ($mysqlsetup ne 'noroot') { |
} elsif ($mysqlsetup ne 'noroot') { |
print_and_log(&mt('Problem accessing MySQL.')."\n"); |
print_and_log(&mt('Problem accessing MySQL.')."\n"); |
$mysqlsetup = 'rootfail'; |
$mysqlsetup = 'rootfail'; |
} |
} |
return ($mysqlsetup,$has_pass,$dbh); |
return ($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser); |
} |
} |
|
|
sub check_mysql_wwwuser { |
sub check_mysql_wwwuser { |
my $mysql_wwwuser; |
my $mysql_wwwuser; |
my $dbhn = DBI->connect("DBI:mysql:database=information_schema",'www','localhostkey'); |
my $dbhn = DBI->connect("DBI:mysql:database=information_schema",'www','localhostkey', |
|
{PrintError => +0}) || return; |
if ($dbhn) { |
if ($dbhn) { |
$mysql_wwwuser = 1; |
$mysql_wwwuser = 1; |
$dbhn->disconnect; |
$dbhn->disconnect; |
Line 774 sub firewall_is_active {
|
Line 1076 sub firewall_is_active {
|
} |
} |
|
|
sub get_fw_chains { |
sub get_fw_chains { |
my ($iptables) = @_; |
my ($iptables,$distro) = @_; |
my @fw_chains; |
my @fw_chains; |
my $suse_config = "/etc/sysconfig/SuSEfirewall2"; |
my $suse_config = "/etc/sysconfig/SuSEfirewall2"; |
my $ubuntu_config = "/etc/ufw/ufw.conf"; |
my $ubuntu_config = "/etc/ufw/ufw.conf"; |
Line 784 sub get_fw_chains {
|
Line 1086 sub get_fw_chains {
|
my @posschains; |
my @posschains; |
if (-e $ubuntu_config) { |
if (-e $ubuntu_config) { |
@posschains = ('ufw-user-input','INPUT'); |
@posschains = ('ufw-user-input','INPUT'); |
|
} elsif ($distro =~ /^debian5/) { |
|
@posschains = ('INPUT'); |
} else { |
} else { |
@posschains = ('RH-Firewall-1-INPUT','INPUT'); |
@posschains = ('RH-Firewall-1-INPUT','INPUT'); |
if (!-e '/etc/sysconfig/iptables') { |
if (!-e '/etc/sysconfig/iptables') { |
Line 863 sub get_mysql_password {
|
Line 1167 sub get_mysql_password {
|
sub check_SuSEfirewall2_setup { |
sub check_SuSEfirewall2_setup { |
my ($instdir) = @_; |
my ($instdir) = @_; |
my $need_override = 1; |
my $need_override = 1; |
if ((-e "/etc/insserv/overrides/SuSEfirewall2_setup") && (-e "$instdir/SuSEfirewall2_setup")) { |
if ((-e "/etc/insserv/overrides/SuSEfirewall2_setup") && (-e "$instdir/sles-suse/SuSEfirewall2_setup")) { |
if (open(PIPE, "diff --brief $instdir/SuSEfirewall2_setup /etc/insserv/overrides/SuSEfirewall2_setup |")) { |
if (open(PIPE, "diff --brief $instdir/sles-suse/SuSEfirewall2_setup /etc/insserv/overrides/SuSEfirewall2_setup |")) { |
my $diffres = <PIPE>; |
my $diffres = <PIPE>; |
close(PIPE); |
close(PIPE); |
chomp($diffres); |
chomp($diffres); |
Line 976 my %prompts = &texthash(
|
Line 1280 my %prompts = &texthash(
|
print "\n".&mt('Checking system status ...')."\n"; |
print "\n".&mt('Checking system status ...')."\n"; |
|
|
my $dsn = "DBI:mysql:database=mysql"; |
my $dsn = "DBI:mysql:database=mysql"; |
my ($distro,$gotprereqs,$packagecmd,$updatecmd,$installnow,$recommended, |
my ($distro,$gotprereqs,$localecmd,$packagecmd,$updatecmd,$installnow,$mysqlrestart, |
$dbh,$has_pass,$has_lcdb,$downloadstatus,$filetouse,$production, |
$recommended,$dbh,$has_pass,$has_lcdb,$downloadstatus,$filetouse,$production, |
$testing) = &check_required($instdir,$dsn); |
$testing,$apachefw,$uses_systemctl) = &check_required($instdir,$dsn); |
if ($distro eq '') { |
if ($distro eq '') { |
print "\n".&mt('Linux distribution could not be verified as a supported distribution.')."\n". |
print "\n".&mt('Linux distribution could not be verified as a supported distribution.')."\n". |
&mt('The following are supported: [_1].', |
&mt('The following are supported: [_1].', |
Line 987 if ($distro eq '') {
|
Line 1291 if ($distro eq '') {
|
&mt('Stopping execution.')."\n"; |
&mt('Stopping execution.')."\n"; |
exit; |
exit; |
} |
} |
|
if ($mysqlrestart) { |
|
print "\n".&mt('The mysql daemon needs to be restarted using the following command:')."\n". |
|
$mysqlrestart."\n\n". |
|
&mt('Stopping execution of install.pl script.')."\n". |
|
&mt('Please run the install.pl script again, once you have restarted mysql.')."\n"; |
|
exit; |
|
} |
|
if ($localecmd ne '') { |
|
print "\n".&mt('Although the LON-CAPA application itself is localized for a number of different languages, the default locale language for the Linux OS on which it runs should be US English.')."\n"; |
|
print "\n".&mt('Run the following command from the command line to set the default language for your OS, and then run this LON-CAPA installation set-up script again.')."\n\n". |
|
$localecmd."\n\n". |
|
&mt('Stopping execution.')."\n"; |
|
exit; |
|
} |
if (!$gotprereqs) { |
if (!$gotprereqs) { |
print "\n".&mt('The LONCAPA-prequisites package is not installed.')."\n". |
print "\n".&mt('The LONCAPA-prerequisites package is not installed.')."\n". |
&mt('The following command can be used to install the package (and dependencies):')."\n\n". |
&mt('The following command can be used to install the package (and dependencies):')."\n\n". |
$updatecmd."\n\n"; |
$updatecmd."\n\n"; |
if ($installnow eq '') { |
if ($installnow eq '') { |
Line 1002 if (!$gotprereqs) {
|
Line 1320 if (!$gotprereqs) {
|
close(PIPE); |
close(PIPE); |
$gotprereqs = &check_prerequisites($packagecmd,$distro); |
$gotprereqs = &check_prerequisites($packagecmd,$distro); |
if (!$gotprereqs) { |
if (!$gotprereqs) { |
print &mt('The LONCAPA-prequisites package is not installed.')."\n". |
print &mt('The LONCAPA-prerequisites package is not installed.')."\n". |
&mt('Stopping execution.')."\n"; |
&mt('Stopping execution.')."\n"; |
exit; |
exit; |
} else { |
} else { |
($distro,$gotprereqs,$packagecmd,$updatecmd,$installnow, |
($distro,$gotprereqs,$localecmd,$packagecmd,$updatecmd,$installnow, |
$recommended,$dbh,$has_pass,$has_lcdb,$downloadstatus, |
$mysqlrestart,$recommended,$dbh,$has_pass,$has_lcdb,$downloadstatus, |
$filetouse) = &check_required($instdir,$dsn); |
$filetouse,$production,$testing,$apachefw,$uses_systemctl) = |
|
&check_required($instdir,$dsn); |
} |
} |
} else { |
} else { |
print &mt('Failed to run command to install LONCAPA-prequisites')."\n"; |
print &mt('Failed to run command to install LONCAPA-prerequisites')."\n"; |
exit; |
exit; |
} |
} |
} else { |
} else { |
Line 1081 if ($callsub{'download'}) {
|
Line 1400 if ($callsub{'download'}) {
|
print &mt('The most recent LON-CAPA release is version: [_1].',$production)."\n". |
print &mt('The most recent LON-CAPA release is version: [_1].',$production)."\n". |
&mt('Download the production release? ~[Y/n~]'); |
&mt('Download the production release? ~[Y/n~]'); |
if (&get_user_selection(1)) { |
if (&get_user_selection(1)) { |
$sourcetarball = $production.'tar.gz'; |
$sourcetarball = 'loncapa-'.$production.'.tar.gz'; |
} |
} |
} |
} |
} elsif ($filetouse ne '') { |
} elsif ($filetouse ne '') { |
Line 1133 if ($callsub{'apache'}) {
|
Line 1452 if ($callsub{'apache'}) {
|
if ($distro =~ /^(suse|sles)/) { |
if ($distro =~ /^(suse|sles)/) { |
©_apache2_suseconf($instdir); |
©_apache2_suseconf($instdir); |
} elsif ($distro =~ /^(debian|ubuntu)/) { |
} elsif ($distro =~ /^(debian|ubuntu)/) { |
©_apache2_debconf($instdir); |
©_apache2_debconf($instdir,$distro); |
} else { |
} else { |
©_httpd_conf($instdir); |
©_httpd_conf($instdir,$distro); |
} |
} |
} else { |
} else { |
print_and_log(&mt('Skipping configuration of Apache web server.')."\n"); |
print_and_log(&mt('Skipping configuration of Apache web server.')."\n"); |
Line 1159 if ($callsub{'runlevels'}) {
|
Line 1478 if ($callsub{'runlevels'}) {
|
} |
} |
} |
} |
} |
} |
&update_SuSEfirewall2_setup($instdir); |
if ($distro =~ /^(suse|sles)/) { |
|
&update_SuSEfirewall2_setup($instdir); |
|
} |
} else { |
} else { |
&print_and_log(&mt('Skipping setting override for start-up order of services.')."\n"); |
&print_and_log(&mt('Skipping setting override for start-up order of services.')."\n"); |
} |
} |
|
|
if ($callsub{'firewall'}) { |
if ($callsub{'firewall'}) { |
if ($distro =~ /^(suse|sles)/) { |
if ($distro =~ /^(suse|sles)/) { |
print &mt('Use [_1].','yast')."\n"; |
print &mt('Use [_1] to configure the firewall to allow access for [_2].', |
} elsif ($distro =~ /^(debian|ubuntu)/) { |
'yast -- Security and Users -> Firewall -> Interfaces', |
print &mt('Use [_1].','ufw')."\n"; |
'ssh, http, https')."\n"; |
} else { |
} elsif ($distro =~ /^(debian|ubuntu)(\d+)/) { |
print &mt('Use [_1].','setup')."\n"; |
if (($1 eq 'ubuntu') || ($2 > 5)) { |
|
print &mt('Use [_1] to configure the firewall to allow access for [_2].', |
|
'ufw','ssh, http, https')."\n"; |
|
} else { |
|
my $fwadded = &get_iptables_rules($distro,$instdir,$apachefw); |
|
if ($fwadded) { |
|
print &mt('Enable firewall? ~[Y/n~]'); |
|
my $enable_iptables = &get_user_selection(1); |
|
if ($enable_iptables) { |
|
system('/etc/network/if-pre-up.d/iptables'); |
|
print &mt('Firewall enabled using rules defined in [_1].', |
|
'/etc/iptables.loncapa.rules'); |
|
} |
|
} |
|
} |
|
} elsif ($distro =~ /^scientific/) { |
|
print &mt('Use [_1] to configure the firewall to allow access for [_2].', |
|
'system-config-firewall-tui -- Customize', |
|
'ssh, http')."\n"; |
|
} else { |
|
print &mt('Use [_1] to configure the firewall to allow access for [_2].', |
|
'setup -- Firewall configuration -> Customize', |
|
'ssh, http, https')."\n"; |
} |
} |
} else { |
} else { |
if ($distro =~ /^(suse|sles)/) { |
&print_and_log(&mt('Skipping Firewall configuration.')."\n"); |
&print_and_log(&mt('Skipping Firewall configuration.')."\n"); |
|
} |
|
} |
} |
|
|
if ($callsub{'stopsrvcs'}) { |
if ($callsub{'stopsrvcs'}) { |
&kill_extra_services($distro,$recommended->{'stopsrvcs'}); |
&kill_extra_services($distro,$recommended->{'stopsrvcs'}); |
} else { |
} else { |
&print_and_log(&mt('Skipping stopping unnecessary services ([_1] and [_2] daemons).',"'cups'","'sendmail'")."\n"); |
&print_and_log(&mt('Skipping stopping unnecessary service ([_1] daemons).',"'cups','memcached'")."\n"); |
} |
} |
|
|
my ($have_tarball,$updateshown); |
my ($have_tarball,$updateshown); |
Line 1334 ENDPATCH
|
Line 1675 ENDPATCH
|
## Compile patched pwauth |
## Compile patched pwauth |
## |
## |
print_and_log(&mt('Compiling pwauth')."\n"); |
print_and_log(&mt('Compiling pwauth')."\n"); |
my $result = `cd $dir/; make`; |
my $result = `cd $dir/; make 2>/dev/null `; |
my $expected = <<"END"; |
my $expected = <<"END"; |
gcc -g -c -o pwauth.o pwauth.c |
gcc -g -c -o pwauth.o pwauth.c |
gcc -o pwauth -g pwauth.o -lcrypt |
gcc -o pwauth -g pwauth.o -lcrypt |
Line 1345 END
|
Line 1686 END
|
# Install patched pwauth |
# Install patched pwauth |
print_and_log(&mt('Copying pwauth to [_1]',' /usr/local/sbin')."\n"); |
print_and_log(&mt('Copying pwauth to [_1]',' /usr/local/sbin')."\n"); |
if (copy "$dir/pwauth","/usr/local/sbin/pwauth") { |
if (copy "$dir/pwauth","/usr/local/sbin/pwauth") { |
if (chmod (06755, "/usr/local/sbin/pwauth")) { |
if (chmod(06755, "/usr/local/sbin/pwauth")) { |
print_and_log(&mt('[_1] copied successfully',"'pwauth'"). |
print_and_log(&mt('[_1] copied successfully',"'pwauth'"). |
"\n"); |
"\n"); |
} else { |
} else { |
Line 1370 sub kill_extra_services {
|
Line 1711 sub kill_extra_services {
|
if (ref($stopsrvcs) eq 'HASH') { |
if (ref($stopsrvcs) eq 'HASH') { |
my @stopping = sort(keys(%{$stopsrvcs})); |
my @stopping = sort(keys(%{$stopsrvcs})); |
if (@stopping) { |
if (@stopping) { |
my $kill_list = join("',' ",@stopping); |
my $kill_list = join("', '",@stopping); |
if ($kill_list) { |
if ($kill_list) { |
$kill_list = "'".$kill_list."'"; |
$kill_list = "'".$kill_list."'"; |
&print_and_log("\n".&mt('Killing unneccessary services ([_1] daemon(s)).',$kill_list)."\n"); |
&print_and_log("\n".&mt('Killing unnecessary services ([_1] daemon(s)).',$kill_list)."\n"); |
foreach my $daemon (@stopping) { |
foreach my $service (@stopping) { |
my $service = $daemon; |
my $daemon = $service; |
&print_and_log(`/etc/init.d/$service stop`); |
if ($service eq 'cups') { |
&print_and_log(&mt('Removing [_1] from startup.',$service)."\n"); |
$daemon = 'cupsd'; |
if ($daemon eq 'cupsd') { |
if ($distro =~ /^(?:debian|ubuntu)(\d+)/) { |
$service = 'cups'; |
my $version = $1; |
|
if (($distro =~ /^ubuntu/) && ($version <= 8)) { |
|
$daemon = 'cupsys'; |
|
} |
|
} else { |
|
$daemon = 'cups'; |
|
} |
|
} |
|
my $cmd = "ps -ef |grep '$daemon' |grep -v grep"; |
|
if (open(PIPE,'-|',$cmd)) { |
|
my $daemonrunning = <PIPE>; |
|
chomp($daemonrunning); |
|
close(PIPE); |
|
if ($daemonrunning) { |
|
&print_and_log(`/etc/init.d/$daemon stop`); |
|
} |
} |
} |
|
&print_and_log(&mt('Removing [_1] from startup.',$service)."\n"); |
if ($distro =~ /^(debian|ubuntu)/) { |
if ($distro =~ /^(debian|ubuntu)/) { |
&print_and_log(`/usr/sbin/sysv-rc-conf $service off`); |
&print_and_log(`update-rc.d -f $daemon remove`); |
} else { |
} else { |
&print_and_log(`chkconfig --del $service`); |
if (ref($uses_systemctl) eq 'HASH') { |
|
if ($uses_systemctl->{$service}) { |
|
if (`systemctl is-enabled $service`) { |
|
&print_and_log(`systemctl disable $service`); |
|
} |
|
} else { |
|
&print_and_log(`/sbin/chkconfig --del $service`); |
|
} |
|
} else { |
|
&print_and_log(`/sbin/chkconfig --del $service`); |
|
} |
} |
} |
} |
} |
} |
} |
Line 1401 sub setup_mysql {
|
Line 1768 sub setup_mysql {
|
} |
} |
push(@mysql_lc_commands,"USE loncapa"); |
push(@mysql_lc_commands,"USE loncapa"); |
push(@mysql_lc_commands,qq{ |
push(@mysql_lc_commands,qq{ |
CREATE TABLE IF NOT EXISTS metadata (title TEXT, author TEXT, subject TEXT, url TEXT, keywords TEXT, version TEXT, notes TEXT, abstract TEXT, mime TEXT, language TEXT, creationdate DATETIME, lastrevisiondate DATETIME, owner TEXT, copyright TEXT, FULLTEXT idx_title (title), FULLTEXT idx_author (author), FULLTEXT idx_subject (subject), FULLTEXT idx_url (url), FULLTEXT idx_keywords (keywords), FULLTEXT idx_version (version), FULLTEXT idx_notes (notes), FULLTEXT idx_abstract (abstract), FULLTEXT idx_mime (mime), FULLTEXT idx_language (language), FULLTEXT idx_owner (owner), FULLTEXT idx_copyright (copyright)) TYPE=MYISAM |
CREATE TABLE IF NOT EXISTS metadata (title TEXT, author TEXT, subject TEXT, url TEXT, keywords TEXT, version TEXT, notes TEXT, abstract TEXT, mime TEXT, language TEXT, creationdate DATETIME, lastrevisiondate DATETIME, owner TEXT, copyright TEXT, domain TEXT, dependencies TEXT, modifyinguser TEXT, authorspace TEXT, lowestgradelevel TEXT, highestgradelevel TEXT, standards TEXT, count INT, course INT, course_list TEXT, goto INT, goto_list TEXT, comefrom INT, comefrom_list TEXT, sequsage INT, sequsage_list TEXT, stdno INT, stdno_list TEXT, avetries FLOAT, avetries_list TEXT, difficulty FLOAT, difficulty_list TEXT, disc FLOAT, disc_list TEXT, clear FLOAT, technical FLOAT, correct FLOAT, helpful FLOAT, depth FLOAT, hostname TEXT, FULLTEXT idx_title (title), FULLTEXT idx_author (author), FULLTEXT idx_subject (subject), FULLTEXT idx_url (url), FULLTEXT idx_keywords (keywords), FULLTEXT idx_version (version), FULLTEXT idx_notes (notes), FULLTEXT idx_abstract (abstract), FULLTEXT idx_mime (mime), FULLTEXT idx_language (language), FULLTEXT idx_owner (owner), FULLTEXT idx_copyright (copyright)) ENGINE=MYISAM |
}); |
}); |
if ($setup_mysql_permissions) { |
if ($setup_mysql_permissions) { |
&setup_mysql_permissions($dbh,$has_pass,@mysql_lc_commands); |
&setup_mysql_permissions($dbh,$has_pass,@mysql_lc_commands); |
Line 1422 CREATE TABLE IF NOT EXISTS metadata (tit
|
Line 1789 CREATE TABLE IF NOT EXISTS metadata (tit
|
|
|
sub setup_mysql_permissions { |
sub setup_mysql_permissions { |
my ($dbh,$has_pass,@mysql_lc_commands) = @_; |
my ($dbh,$has_pass,@mysql_lc_commands) = @_; |
my $mysqlversion = &get_mysql_version(); |
my ($mysqlversion,$mysqlsubver,$mysqlname) = &get_mysql_version(); |
my @mysql_commands = ("INSERT user (Host, User, Password) VALUES('localhost','www',password('localhostkey'));"); |
my ($usesauth,@mysql_commands); |
|
if ($mysqlname =~ /^MariaDB/i) { |
|
if ($mysqlversion >= 10.2) { |
|
$usesauth = 1; |
|
} |
|
} else { |
|
if (($mysqlversion > 5.7) || (($mysqlversion == 5.7) && ($mysqlsubver > 5))) { |
|
$usesauth = 1; |
|
} |
|
} |
|
if ($usesauth) { |
|
@mysql_commands = ("INSERT user (Host, User, ssl_cipher, x509_issuer, x509_subject) VALUES('localhost','www','','','')", |
|
"ALTER USER 'www'\@'localhost' IDENTIFIED BY 'localhostkey'"); |
|
} else { |
|
@mysql_commands = ("INSERT user (Host, User, Password) VALUES('localhost','www',password('localhostkey'));"); |
|
} |
if ($mysqlversion < 4) { |
if ($mysqlversion < 4) { |
push (@mysql_commands," |
push (@mysql_commands," |
INSERT db (Host,Db,User,Select_priv,Insert_priv,Update_priv,Delete_priv,Create_priv,Drop_priv,Grant_priv,References_priv,Index_priv,Alter_priv) VALUES('localhost','loncapa','www','Y','Y','Y','Y','Y','Y','N','Y','Y','Y')"); |
INSERT db (Host,Db,User,Select_priv,Insert_priv,Update_priv,Delete_priv,Create_priv,Drop_priv,Grant_priv,References_priv,Index_priv,Alter_priv) VALUES('localhost','loncapa','www','Y','Y','Y','Y','Y','Y','N','Y','Y','Y')"); |
Line 1504 INSERT db (Host,Db,User,Select_priv,Inse
|
Line 1886 INSERT db (Host,Db,User,Select_priv,Inse
|
} |
} |
|
|
sub new_mysql_rootpasswd { |
sub new_mysql_rootpasswd { |
my ($currmysqlpass) = @_; |
my ($currmysqlpass,$usesauth) = @_; |
return ("SET PASSWORD FOR 'root'\@'localhost'=PASSWORD('$currmysqlpass')", |
if ($usesauth) { |
"FLUSH PRIVILEGES;"); |
return ("ALTER USER 'root'\@'localhost' IDENTIFIED BY '$currmysqlpass'", |
|
"FLUSH PRIVILEGES;"); |
|
} else { |
|
return ("SET PASSWORD FOR 'root'\@'localhost'=PASSWORD('$currmysqlpass')", |
|
"FLUSH PRIVILEGES;"); |
|
} |
} |
} |
|
|
sub get_mysql_version { |
sub get_mysql_version { |
my $version; |
my ($version,$subversion,$name); |
if (open(PIPE," mysql -V |")) { |
if (open(PIPE," mysql -V |")) { |
my $info = <PIPE>; |
my $info = <PIPE>; |
chomp($info); |
chomp($info); |
close(PIPE); |
close(PIPE); |
($version) = ($info =~ /(\d+\.\d+)\.\d+,/); |
($version,$subversion,$name) = ($info =~ /(\d+\.\d+)\.(\d+)\-?(\w*),/); |
} else { |
} else { |
print &mt('Could not determine which version of MySQL is installed.'). |
print &mt('Could not determine which version of MySQL is installed.'). |
"\n"; |
"\n"; |
} |
} |
return $version; |
return ($version,$subversion,$name); |
} |
} |
|
|
########################################################### |
########################################################### |
Line 1531 sub get_mysql_version {
|
Line 1918 sub get_mysql_version {
|
########################################################### |
########################################################### |
|
|
sub copy_httpd_conf { |
sub copy_httpd_conf { |
my ($instdir) = @_; |
my ($instdir,$distro) = @_; |
|
my $configfile = 'httpd.conf'; |
|
if ($distro =~ /^(?:centos|rhes|scientific)(\d+)$/) { |
|
if ($1 >= 7) { |
|
$configfile = 'apache2.4/httpd.conf'; |
|
} elsif ($1 > 5) { |
|
$configfile = 'new/httpd.conf'; |
|
} |
|
} elsif ($distro =~ /^fedora(\d+)$/) { |
|
if ($1 > 17) { |
|
$configfile = 'apache2.4/httpd.conf'; |
|
} elsif ($1 > 10) { |
|
$configfile = 'new/httpd.conf'; |
|
} |
|
} |
print_and_log(&mt('Copying the LON-CAPA [_1] to [_2].',"'httpd.conf'", |
print_and_log(&mt('Copying the LON-CAPA [_1] to [_2].',"'httpd.conf'", |
"'/etc/httpd/conf/httpd.conf'")."\n"); |
"'/etc/httpd/conf/httpd.conf'")."\n"); |
copy "/etc/httpd/conf/httpd.conf","/etc/httpd/conf/httpd.conf.original"; |
copy "/etc/httpd/conf/httpd.conf","/etc/httpd/conf/httpd.conf.original"; |
copy "$instdir/httpd.conf","/etc/httpd/conf/httpd.conf"; |
copy "$instdir/centos-rhes-fedora-sl/$configfile","/etc/httpd/conf/httpd.conf"; |
chmod 0444,"/etc/httpd/conf/httpd.conf"; |
chmod(0444,"/etc/httpd/conf/httpd.conf"); |
print_and_log("\n"); |
print_and_log("\n"); |
} |
} |
|
|
######################################################### |
######################################################### |
## |
## |
## Ubuntu/Debian -- copy our apache2 configuration file to |
## Ubuntu/Debian -- copy our loncapa configuration file to |
## sites-available and set the symlink from sites-enabled. |
## sites-available and set the symlink from sites-enabled. |
## |
## |
######################################################### |
######################################################### |
|
|
sub copy_apache2_debconf { |
sub copy_apache2_debconf { |
my ($instdir) = @_; |
my ($instdir,$distro) = @_; |
print_and_log(&mt('Copying loncapa [_1] config file to [_2] and pointing [_3] to it from sites-enabled.',"'apache2'","'/etc/apache2/sites-available'","'000-default symlink'")."\n"); |
my $apache2_mods_enabled_dir = '/etc/apache2/mods-enabled'; |
my $apache2_enabled_dir = '/etc/apache2/sites-enabled'; |
my $apache2_mods_available_dir = '/etc/apache2/mods-available'; |
my $apache2_available_dir = '/etc/apache2/sites-available'; |
foreach my $module ('headers.load','expires.load') { |
if (-l "$apache2_enabled_dir/000-default") { |
unless (-l "$apache2_mods_enabled_dir/$module") { |
unlink("$apache2_enabled_dir/000-default"); |
symlink("$apache2_mods_available_dir/$module","$apache2_mods_enabled_dir/$module"); |
} |
print_and_log(&mt('Enabling "[_1]" Apache module.',$module)."\n"); |
if (-e "$apache2_available_dir/loncapa") { |
} |
copy("$apache2_available_dir/loncapa","$apache2_available_dir/loncapa.original"); |
} |
} |
my $apache2_sites_enabled_dir = '/etc/apache2/sites-enabled'; |
copy("$instdir/apache2.conf","$apache2_available_dir/loncapa"); |
my $apache2_sites_available_dir = '/etc/apache2/sites-available'; |
chmod(0444,"$apache2_available_dir/loncapa"); |
my $defaultconfig = "$apache2_sites_enabled_dir/000-default"; |
symlink("$apache2_available_dir/loncapa","$apache2_enabled_dir/000-default"); |
my ($distname,$version); |
|
if ($distro =~ /^(debian|ubuntu)(\d+)$/) { |
|
$distname = $1; |
|
$version = $2; |
|
} |
|
if (($distname eq 'ubuntu') && ($version > 12)) { |
|
$defaultconfig = "$apache2_sites_enabled_dir/000-default.conf"; |
|
} |
|
if (-l $defaultconfig) { |
|
unlink($defaultconfig); |
|
} |
|
if (($distname eq 'ubuntu') && ($version > 12)) { |
|
print_and_log(&mt('Copying loncapa [_1] config file to [_2] and pointing [_3] to it from conf-enabled.',"'apache2'","'/etc/apache2/conf-available'","'loncapa.conf symlink'")."\n"); |
|
my $apache2_conf_enabled_dir = '/etc/apache2/conf-enabled'; |
|
my $apache2_conf_available_dir = '/etc/apache2/conf-available'; |
|
if (-e "$apache2_conf_available_dir/loncapa") { |
|
copy("$apache2_conf_available_dir/loncapa","$apache2_conf_available_dir/loncapa.original"); |
|
} |
|
my $defaultconf = $apache2_conf_enabled_dir.'/loncapa.conf'; |
|
copy("$instdir/debian-ubuntu/ubuntu14/loncapa_conf","$apache2_conf_available_dir/loncapa"); |
|
chmod(0444,"$apache2_conf_available_dir/loncapa"); |
|
if (-l $defaultconf) { |
|
unlink($defaultconf); |
|
} |
|
symlink("$apache2_conf_available_dir/loncapa","$defaultconf"); |
|
print_and_log(&mt('Copying loncapa [_1] site file to [_2] and pointing [_3] to it from sites-enabled.',"'apache2'","'/etc/apache2/sites-available'","'000-default.conf symlink'")."\n"); |
|
copy("$instdir/debian-ubuntu/ubuntu14/loncapa_site","$apache2_sites_available_dir/loncapa"); |
|
chmod(0444,"$apache2_sites_available_dir/loncapa"); |
|
symlink("$apache2_sites_available_dir/loncapa","$defaultconfig"); |
|
} else { |
|
print_and_log(&mt('Copying loncapa [_1] config file to [_2] and pointing [_3] to it from sites-enabled.',"'apache2'","'/etc/apache2/sites-available'","'000-default symlink'")."\n"); |
|
if (-e "$apache2_sites_available_dir/loncapa") { |
|
copy("$apache2_sites_available_dir/loncapa","$apache2_sites_available_dir/loncapa.original"); |
|
} |
|
copy("$instdir/debian-ubuntu/loncapa","$apache2_sites_available_dir/loncapa"); |
|
chmod(0444,"$apache2_sites_available_dir/loncapa"); |
|
symlink("$apache2_sites_available_dir/loncapa","$apache2_sites_enabled_dir/000-default"); |
|
} |
print_and_log("\n"); |
print_and_log("\n"); |
} |
} |
|
|
Line 1580 sub copy_apache2_suseconf {
|
Line 2018 sub copy_apache2_suseconf {
|
if (!-e "/etc/apache2/default-server.conf.original") { |
if (!-e "/etc/apache2/default-server.conf.original") { |
copy "/etc/apache2/default-server.conf","/etc/apache2/default-server.conf.original"; |
copy "/etc/apache2/default-server.conf","/etc/apache2/default-server.conf.original"; |
} |
} |
copy "$instdir/default-server.conf","/etc/apache2/default-server.conf"; |
copy "$instdir/sles-suse/default-server.conf","/etc/apache2/default-server.conf"; |
chmod 0444,"/etc/apache2/default-server.conf"; |
chmod(0444,"/etc/apache2/default-server.conf"); |
# Make symlink for conf directory (included in loncapa_apache.conf) |
# Make symlink for conf directory (included in loncapa_apache.conf) |
my $can_symlink = (eval { symlink('/etc/apache2','/srv/www/conf'); }, $@ eq ''); |
my $can_symlink = (eval { symlink('/etc/apache2','/srv/www/conf'); }, $@ eq ''); |
if ($can_symlink) { |
if ($can_symlink) { |
Line 1607 sub copy_apache2_conf_files {
|
Line 2045 sub copy_apache2_conf_files {
|
if (!-e "/etc/apache2/uid.conf.original") { |
if (!-e "/etc/apache2/uid.conf.original") { |
copy "/etc/apache2/uid.conf","/etc/apache2/uid.conf.original"; |
copy "/etc/apache2/uid.conf","/etc/apache2/uid.conf.original"; |
} |
} |
copy "$instdir/uid.conf","/etc/apache2/uid.conf"; |
copy "$instdir/sles-suse/uid.conf","/etc/apache2/uid.conf"; |
chmod 0444,"/etc/apache2/uid.conf"; |
chmod(0444,"/etc/apache2/uid.conf"); |
} |
} |
|
|
############################################### |
############################################### |
Line 1622 sub copy_sysconfig_apache2_file {
|
Line 2060 sub copy_sysconfig_apache2_file {
|
if (!-e "/etc/sysconfig/apache2.original") { |
if (!-e "/etc/sysconfig/apache2.original") { |
copy "/etc/sysconfig/apache2","/etc/sysconfig/apache2.original"; |
copy "/etc/sysconfig/apache2","/etc/sysconfig/apache2.original"; |
} |
} |
copy "$instdir/sysconfig_apache2","/etc/sysconfig/apache2"; |
copy "$instdir/sles-suse/sysconfig_apache2","/etc/sysconfig/apache2"; |
chmod 0444,"/etc/sysconfig/apache2"; |
chmod(0444,"/etc/sysconfig/apache2"); |
} |
} |
|
|
############################################### |
############################################### |
Line 1645 sub update_SuSEfirewall2_setup {
|
Line 2083 sub update_SuSEfirewall2_setup {
|
} elsif (!-e "/etc/insserv/overrides/SuSEfirewall2_setup.original") { |
} elsif (!-e "/etc/insserv/overrides/SuSEfirewall2_setup.original") { |
copy "/etc/insserv/overrides/SuSEfirewall2_setup","/etc/insserv/overrides/SuSEfirewall2_setup.original" |
copy "/etc/insserv/overrides/SuSEfirewall2_setup","/etc/insserv/overrides/SuSEfirewall2_setup.original" |
} |
} |
copy "$instdir/SuSEfirewall2_setup","/etc/insserv/overrides/SuSEfirewall2_setup"; |
copy "$instdir/sles-suse/SuSEfirewall2_setup","/etc/insserv/overrides/SuSEfirewall2_setup"; |
chmod 0444,"/etc/insserv/overrides/SuSEfirewall2_setup"; |
chmod(0444,"/etc/insserv/overrides/SuSEfirewall2_setup"); |
|
} |
|
|
|
sub get_iptables_rules { |
|
my ($distro,$instdir,$apachefw) = @_; |
|
my (@fwchains,@ports); |
|
if (&firewall_is_active()) { |
|
my $iptables = &get_pathto_iptables(); |
|
if ($iptables ne '') { |
|
@fwchains = &get_fw_chains($iptables,$distro); |
|
} |
|
} |
|
if (ref($apachefw) eq 'HASH') { |
|
foreach my $service ('http','https') { |
|
unless ($apachefw->{$service}) { |
|
push (@ports,$service); |
|
} |
|
} |
|
} else { |
|
@ports = ('http','https'); |
|
} |
|
if (@ports == 0) { |
|
return; |
|
} |
|
my $ask_to_enable; |
|
if (-e "/etc/iptables.loncapa.rules") { |
|
if (open(PIPE, "diff --brief $instdir/debian-ubuntu/iptables.loncapa.rules /etc/iptables.loncapa.rules |")) { |
|
my $diffres = <PIPE>; |
|
close(PIPE); |
|
chomp($diffres); |
|
if ($diffres) { |
|
print &mt('Warning: [_1] exists but differs from LON-CAPA supplied file.','/etc/iptables.loncapa.rules')."\n"; |
|
} |
|
} else { |
|
print &mt('Error: unable to open [_1] to compare contents with LON-CAPA supplied file.','/etc/iptables.loncapa.rules')."\n"; |
|
} |
|
} else { |
|
if (-e "$instdir/debian-ubuntu/iptables.loncapa.rules") { |
|
copy "$instdir/debian-ubuntu/iptables.loncapa.rules","/etc/iptables.loncapa.rules"; |
|
chmod(0600,"/etc/iptables.loncapa.rules"); |
|
} |
|
} |
|
if (-e "/etc/iptables.loncapa.rules") { |
|
if (-e "/etc/network/if-pre-up.d/iptables") { |
|
if (open(PIPE, "diff --brief $instdir/debian-ubuntu/iptables /etc/network/if-pre-up/iptables |")) { |
|
my $diffres = <PIPE>; |
|
close(PIPE); |
|
chomp($diffres); |
|
if ($diffres) { |
|
print &mt('Warning: [_1] exists but differs from LON-CAPA supplied file.','/etc/network/if-pre-up.d/iptables')."\n"; |
|
} |
|
} else { |
|
print &mt('Error: unable to open [_1] to compare contents with LON-CAPA supplied file.','/etc/network/if-pre-up.d/iptables')."\n"; |
|
} |
|
} else { |
|
copy "$instdir/debian-ubuntu/iptables","/etc/network/if-pre-up.d/iptables"; |
|
chmod(0755,"/etc/network/if-pre-up.d/iptables"); |
|
print_and_log(&mt('Installed script "[_1]" to add iptables rules to block all ports except 22, 80, and 443 when network is enabled during boot.','/etc/network/if-pre-up.d/iptables')); |
|
$ask_to_enable = 1; |
|
} |
|
} |
|
return $ask_to_enable; |
} |
} |
|
|
sub download_loncapa { |
sub download_loncapa { |