Annotation of loncom/init.d/loncontrol, revision 1.23

1.1       harris41    1: #!/usr/bin/perl
1.2       harris41    2: #
1.23    ! matthew     3: # $Id$
        !             4: #
1.6       harris41    5: # The LearningOnline Network with CAPA
                      6: #
1.21      matthew     7: # Copyright Michigan State University Board of Trustees
                      8: #
                      9: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
                     10: #
                     11: # LON-CAPA is free software; you can redistribute it and/or modify
                     12: # it under the terms of the GNU General Public License as published by
                     13: # the Free Software Foundation; either version 2 of the License, or
                     14: # (at your option) any later version.
                     15: #
                     16: # LON-CAPA is distributed in the hope that it will be useful,
                     17: # but WITHOUT ANY WARRANTY; without even the implied warranty of
                     18: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
                     19: # GNU General Public License for more details.
                     20: #
                     21: # You should have received a copy of the GNU General Public License
                     22: # along with LON-CAPA; if not, write to the Free Software
                     23: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
                     24: #
                     25: # /home/httpd/html/adm/gpl.txt
                     26: #
                     27: # http://www.lon-capa.org/
                     28: #
1.2       harris41   29: # Startup script for the LON-CAPA network processes
1.6       harris41   30: #
1.7       harris41   31: 
1.3       harris41   32: # chkconfig: 345 95 5
1.21      matthew    33: # description: LON-CAPA is a "network of knowledge".  It is used to \
1.6       harris41   34: # distribute knowledge resources and instructional management.
1.2       harris41   35: # processnames: lonc, lond, lonsql
                     36: # pidfiles: /home/httpd/perl/logs/lon*.pid
1.7       harris41   37: # config: /etc/httpd/conf/loncapa.conf
1.2       harris41   38: # config: /home/httpd/lonTabs/hosts.tab
                     39: # config: /home/httpd/lonTabs/spare.tab
                     40: 
1.1       harris41   41: $command=$ARGV[0]; $command=~s/[^a-z]//g;
                     42: 
                     43: $ENV{'PATH'}="/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/root/bin";
                     44: $ENV{'BASH_ENV'}="";
                     45: 
1.20      matthew    46: { # Firewall variable scoping
                     47:     # Firewall code is based on the code in FC2 /etc/init.d/ntpd
                     48:     my $fw_chain = 'RH-Firewall-1-INPUT';
                     49:     my $iptables = '/sbin/iptables';
1.22      matthew    50:     my $lond_port = 5663;
                     51:     my $lonhttpd_port = 8080;
1.20      matthew    52: 
                     53: sub firewall_open_port {
                     54:     return if (! &firewall_is_active);
                     55:     if (! `$iptables -L -n 2>/dev/null | grep $fw_chain | wc -l`) { return; }
                     56:     # iptables is running with our chain
                     57:     #
                     58:     # We could restrict the servers allowed to attempt to communicate
                     59:     # here, but the logistics of updating the /home/httpd/lonTabs/host.tab
                     60:     # file are likely to be a problem
1.22      matthew    61:     foreach my $port ($lond_port,$lonhttpd_port) {
                     62:         print "Opening firewall access on port $port.\n";
                     63: 
                     64:         my $firewall_command = 
                     65:             "$iptables -I $fw_chain -p tcp -d 0/0 --dport $port -j ACCEPT";
                     66:         system($firewall_command);
                     67:         my $return_status = $?>>8;
                     68:         if ($return_status == 1) {
                     69:             # Error
                     70:             print "Error opening port.\n";
                     71:         } elsif ($return_status == 2) {
                     72:             # Bad command
                     73:             print "Bad command error opening port.  Command was\n".
                     74:                 "  ".$firewall_command."\n";
                     75:         }
1.20      matthew    76:     }
1.22      matthew    77:     
1.20      matthew    78: }
                     79: 
                     80: sub firewall_is_port_open {
                     81:     # returns 1 if the firewall port is open, 0 if not.
                     82:     #
                     83:     # check if firewall is active or installed
                     84:     return if (! &firewall_is_active);
                     85:     if (`$iptables -L -n 2>/dev/null | grep "tcp dpt:$port"`) { 
                     86:         return 1;
                     87:     } else {
                     88:         return 0;
                     89:     }
                     90: }
                     91: 
                     92: sub firewall_is_active {
                     93:     if (-e '/proc/net/ip_tables_names') {
                     94:         return 1;
                     95:     } else {
                     96:         return 0;
                     97:     }
                     98: }
                     99: 
                    100: sub firewall_close_port {
                    101:     return if (! &firewall_is_active);
1.22      matthew   102:     foreach my $port ($lond_port,$lonhttpd_port) {
                    103:         print "Closing firewall access on port $port.\n";
                    104:         my $firewall_command = 
                    105:             "$iptables -D $fw_chain -p tcp -d 0/0 --dport $port -j ACCEPT";
                    106:         system($firewall_command);
                    107:         my $return_status = $?>>8;
                    108:         if ($return_status == 1) {
                    109:             # Error
                    110:             print "Error closing port.\n";
                    111:         } elsif ($return_status == 2) {
                    112:             # Bad command
                    113:             print "Bad command error closing port.  Command was\n".
                    114:                 "  ".$firewall_command."\n";
                    115:         }
1.20      matthew   116:     }
                    117: }
                    118: 
                    119: } # End firewall variable scope
                    120: 
1.11      albertel  121: sub stop_daemon {
1.19      albertel  122:     my ($daemon,$killallname)=@_;
1.11      albertel  123:     my $pidfile="/home/httpd/perl/logs/$daemon.pid";
                    124:     
                    125:     printf("%-10s ",$daemon);
                    126:     if (-e $pidfile) {
                    127: 	open(PIDFILE,$pidfile);
                    128: 	my $daemonpid=<PIDFILE>;
                    129: 	chomp($daemonpid);
                    130: 	kill TERM => $daemonpid;
                    131: 	sleep 2;
                    132: 	if (kill 0 => $daemonpid) {
                    133: 	    kill KILL => $daemonpid;
                    134: 	    sleep 2;
                    135: 	    if (kill 0 => $daemonpid) {
1.19      albertel  136: 		print("failed to kill");
1.11      albertel  137: 	    } else {
1.19      albertel  138: 		print("killed");
1.11      albertel  139: 	    }
                    140: 	} else {
1.19      albertel  141: 	    print("stopped");
1.11      albertel  142: 	}
1.19      albertel  143:     } else {
                    144: 	print("not running");
                    145:     }
                    146:     system("killall -q -0 $killallname");
                    147:     if ($? == 0) {
                    148: 	system("killall -q $killallname");
                    149: 	print(", killed off extraneous processes");
1.11      albertel  150:     }
1.19      albertel  151:     print("\n");
1.11      albertel  152: }
                    153: 
1.20      matthew   154: 
1.16      albertel  155: if (($command eq "restartold") or ($command eq "reloadold")) {
1.6       harris41  156:     print 'Restarting LON-CAPA'."\n";
                    157:     print 'Ending LON-CAPA client and daemon processes'."\n";
1.13      albertel  158:     foreach my $daemon ('lonsql','lond','lonc','lonhttpd') {
1.19      albertel  159: 	&stop_daemon($daemon,$daemon);
1.11      albertel  160:     }
1.6       harris41  161:     print 'Starting LON-CAPA client and daemon processes (please be patient)'.
                    162: 	"\n";
1.18      albertel  163:     system("su www -c '/home/httpd/perl/loncron --oldlonc --justcheckdaemons'");
1.16      albertel  164: } elsif (($command eq "restart") or ($command eq "reload")) {
1.12      albertel  165:     print 'Restarting LON-CAPA'."\n";
                    166:     print 'Ending LON-CAPA client and daemon processes'."\n";
1.13      albertel  167:     foreach my $daemon ('lonsql','lond','lonc','lonhttpd') {
1.19      albertel  168: 	my $killallname=$daemon;
                    169: 	if ($daemon eq 'lonc') { $killallname='loncnew'; }
                    170: 	&stop_daemon($daemon,$killallname);
1.12      albertel  171:     }
                    172:     print 'Starting LON-CAPA client and daemon processes (please be patient)'.
                    173: 	"\n";
1.18      albertel  174:     system("su www -c '/home/httpd/perl/loncron --justcheckdaemons'");
1.16      albertel  175: } elsif ($command eq "stop") {
1.6       harris41  176:     print 'Stopping LON-CAPA'."\n";
1.13      albertel  177:     foreach my $daemon ('lonsql','lond','lonc','lonhttpd') {
1.19      albertel  178: 	my $killallname=$daemon;
                    179: 	if ($daemon eq 'lonc') { $killallname='loncnew'; }
                    180: 	&stop_daemon($daemon,$killallname);
1.11      albertel  181:     }
1.20      matthew   182:     &firewall_close_port();
1.16      albertel  183: } elsif ($command eq "startold") {
1.20      matthew   184:     &firewall_open_port();
1.6       harris41  185:     print 'Starting LON-CAPA'."\n";
                    186:     print 'Starting LON-CAPA client and daemon processes (please be patient)'.
                    187: 	"\n"; 
1.18      albertel  188:     system("su www -c '/home/httpd/perl/loncron --oldlonc --justcheckdaemons'");
1.16      albertel  189: } elsif ($command eq "start") {
1.20      matthew   190:     &firewall_open_port();
1.12      albertel  191:     print 'Starting LON-CAPA'."\n";
                    192:     print 'Starting LON-CAPA client and daemon processes (please be patient)'.
                    193: 	"\n"; 
1.18      albertel  194:     system("su www -c '/home/httpd/perl/loncron --justcheckdaemons'");
1.16      albertel  195: } elsif ($command eq "status") {
1.1       harris41  196:     $response=`/bin/cat /home/httpd/perl/logs/*.pid 2>&1`;
                    197:     if ($response=~/No such file or directory/) {
1.6       harris41  198: 	print 'LON-CAPA is not running.'."\n";
1.18      albertel  199:     } else {
1.6       harris41  200: 	print 'LON-CAPA is running.'."\n";
1.18      albertel  201: 	system("su www -c '/home/httpd/perl/loncron --justcheckconnections'");
1.1       harris41  202:     }
1.20      matthew   203:     if (! &firewall_is_active) {
                    204:         print 'The iptables firewall is not active'."\n";
                    205:     }
                    206:     if (&firewall_is_port_open()) {
                    207:         print 'The LON-CAPA port is open in firewall.'."\n";
                    208:     } elsif (&firewall_is_active) {
                    209:         print 'The LON-CAPA port is NOT open in running firewall!'."\n";
                    210:     }
1.16      albertel  211: } else {
1.18      albertel  212:     print 'You need to specify one of restart|stop|start|status on the command line.'."\n";
1.1       harris41  213: }

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>