CVS log for loncom/init.d/loncontrol

Up to [LON-CAPA] / loncom / init.d

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- For 2.11
  Backport 1.46

- Dynamic management of LON-CAPA port 5663 compatible with firewalld
  - &get_default_zone(() provides default zone
  - Revert changes in rev. 1.17 to &uses_firewalld() -- now returns
    1 if firewalld in use, but not the default zone.
  - Additional arg, value = 1 if firewalld in use  is passed to
    &firewall_open_port(), &firewall_close_port(),
    &firewall_is_port_open(), &firewall_close_anywhere()

- Support Certificate Revocation List checking when using SSL channel
  for key exchange during negotiation of connection to remote lond.

- Eliminate "caching of id  ... failed" messages in lonnet.log when starting
  or restarting loncontrol.
  - Do not attempt to use memcache to store dns:/adm/dns/hosts, dns:/adm/dns/domain
    and iphost:iphost, when memcached is not running in this particular situation.

- loncontrol restart now echoes loncron by closing port 5663 for IP
  addresses no longer in the cluster, and opens port 5663 for IP
  addresses of servers added to cluster since loncron last ran.

- SuSE insserv: start loncontrol for runlevels 35 only.

- No longer stop and start of firewall rules for existing hosts when loncron
  calls lciptables.
- Additional arg in Firewall::firewall_close_port() - ref to %iphosts
  hash of hosts in cluster.

- Firewall needs to be setup for SuSE and SLES before loncontrol is run
  on boot.

Array of chains reurned by &Firewall::get_fw_chains()
- Second arg passed to
    Firewall::firewall_close_port()
    Firewall::firewall_open_port()
is a reference to this array of chains
(for redhat/centOS/fedora: one or both of RH-Firewall-1-INPUT and
INPUT may contain entries for LON-CAPA port).

- Backport part of Firewall.pm rev 1.3 to support cases where loncontrol is used
  on a system where chain is INPUT instead of RH-Firewall-1-INPUT.

- Pass $iptables (path to iptables) as arg to &get_fw_chain().

- Code to open ports in firewall moved from loncontrol to Firewall.pm
- New routines added:
   &get_pathto_iptables() - gets full path for iptables command
   &get_fw_chain() - gets chain name for firewall rules.

- open/close firewall for port 5663 for SuSE as well as Fedora/RHEL/CentOS/Scientific Linux.
- restrict inbound traffic on port 5663 to IP addresses identified for hosts in LON-CAPA cluster to which server belongs.
- loncontrol start and loncontrol stop will eliminate firewall rule which allows inbound traffic on port 5663 from anywhere.
- reports number of IP addresses for which lond port was opened or closed
- more verbose message when expected chain is missing from current iptables listing.

- Add lonr ('R' daemon).

- Add strict pragma.
- Get lond port number from LONCAPA::Configuration.
- For SuSE systems check for entries in /etc/sysconfig/SuSEfirewall2.
   - Dynamic opening/closing of ports not implemented for SuSE systems.

Eliminate lonhttpd on port 8080 due to increasing number of user and
institutional firewall issues

- give things a chance to cleanly exit on their own before killing

- add in header to loncontrol to get it to start after mysql/apache

- cleanup sockets directory when starting or stopping lonc

- eliminated old lonc

Adding lonmaxima daemon.

- suse puts it in /usr/sbin

- making it sleep for less time

- 'reload' command now sends USR2 against lonc/d causng them to reread the hosts.tab/doain.tab files

- adding memcached as a daemon we need to start up

Added $Id$ line.

Added support for multiple port opening and added port 8080.

Added GPL header.

Added firewall port opening code.

- trying to double check after a stop that all daemons are really gone

- use new argument mode
- re/start now don't test the connections
- status now does a conenction status check

Fix for non-redhat people, also note, NO change in style :0)

- renabling loncnew

- defaulting back to the old lonc

- make loncnew the default

- change to default to using loncnew

- making it easier to run loncnew,
   /etc/init.d/loncontrol startnew
   /etc/init.d/loncontrol restartnew
  will now start loncnew in place of lonc

-prettier and more effective at stopping daemons

best wishes to all.

minor grammatical improvement

removing deprecated reference to access.conf

updating chkconfig fields to indicate loncapa.conf as a dependency

removing 'quick' mode and cleaning up

calling loncron in "quick" mode

remove handling of the /etc/rc.d/init.d/httpd level...
this script just handles lonc/lond processes now

it works! priorities are set, and even though it is meant to be
run as 'root', it invokes the LON-CAPA processes under the ownership
of 'www'.  the only other thing to do is to specify the other rc.d
files (while chkconfig --add loncontrol works, the "proper" way
to construct an RPM is to not use chkconfig, but rather place into
explicit locations)

Trying to handle process ownership issues.  Nothing working yet.

a /etc/rc.d/init.d script for controlling the stopping and starting
of LON-CAPA network processes