--- doc/loncapafiles/updatequery.piml	2002/06/12 17:07:55	1.16
+++ doc/loncapafiles/updatequery.piml	2024/07/06 16:01:11	1.84.2.5
@@ -1,7 +1,6 @@
 <!-- updatequery.piml -->
-<!-- Scott Harrison -->
 
-<!-- $Id: updatequery.piml,v 1.16 2002/06/12 17:07:55 harris41 Exp $ -->
+<!-- $Id: updatequery.piml,v 1.84.2.5 2024/07/06 16:01:11 raeburn Exp $ -->
 
 <!--
 
@@ -34,6 +33,8 @@ http://www.lon-capa.org/
 <target dist='default'>/</target>
 <perlscript mode='fg'>
 $|=1;
+use strict;
+
   print(&lt;&lt;END);
 
 
@@ -48,26 +49,112 @@ $|=1;
 *********************************************
 
 END
-sleep(3);
+#sleep(3);
+</perlscript>
+</file>
+<file>
+<target dist='default'>loncom/hosts.tab</target>
+<perlscript mode='fg'>
+my $lonCluster;
+unless (-l "<TARGET />") {
+  print(&lt;&lt;END);
+
+===============================================================================
+Which cluster option would you like to have installed?
+IMPORTANT: to take advantage of the cluster options 1) and 3),
+you must contact loncapa\@loncapa.org.
+
+1) PRODUCTION - you want to eventually connect this machine to the
+                LON-CAPA content sharing network. This setting is for
+                schools, colleges, and universities, that currently
+                are running - or in the future will run - courses.
+2) STAND-ALONE - you want this machine to run in 'stand-alone' mode and
+                 not be connected to other LON-CAPA machines for now.
+3) DEVELOPMENT - you want to do software (not content!) development with
+                 this workstation and eventually link it with the
+                 workstations of other LON-CAPA software developers.
+4) RUNNING YOUR OWN CLUSTER - this machine is not in the standard LON-CAPA
+                 clusters and won't be in the future and you want the existing
+                 hosts.tab and domain.tab files to be left alone.
+                 (This choice is unlikely what you want to select.)
+END
+# Option number 26 will install rawhide_hosts.tab, but
+# the typical user does not want to be part of an intensive
+# machine test cluster.
+
+# get input
+# if valid then process, otherwise loop
+my $flag=0;
+while (!$flag) {
+  print "ENTER 1, 2, 3, or 4:\n";
+  my $choice=&lt;&gt;;
+  chomp($choice);
+  if ($choice==1) {
+    $lonCluster='production'; $flag=1;
+  }
+  elsif ($choice==2) {
+    $lonCluster='standalone'; $flag=1;
+  }
+  elsif ($choice==3) {
+    $lonCluster='development'; $flag=1;
+  }
+  elsif ($choice==4) {
+    $lonCluster='existing'; $flag=1;
+    foreach my $file ('hosts.tab','dns_hosts.tab',
+                      'domain.tab','dns_domain.tab') {
+        if (-e '/home/httpd/lonTabs/'.$file) {
+	    `cp /home/httpd/lonTabs/$file ../existing_$file`;
+        }
+        else {
+	    print &lt;&lt;END;
+There is no existing /home/httpd/lonTabs/$file
+END
+            die('');
+        }
+    }
+  }
+  elsif ($choice==26) {
+    $lonCluster='rawhide'; $flag=1;
+  }
+}
+}
 </perlscript>
 </file>
 <file>
 <target dist='default'>/home/httpd/lonTabs/hosts.tab</target>
 <perlscript mode='fg'>
 $|=1;
+my $domainDescription;
+my $domainTabExtras;
+my $primaryLibServer;
+my $protocol;
+my $intdom;
+my $desiredhostname;
+my @libservers = ();
 unless (-e "<TARGET />") {
   print(&lt;&lt;END);
            WELCOME TO LON-CAPA!
 
-If you have questions, please visit http://install.lon-capa.org
-or contact sharrison\@mail.lon-capa.org.
+If you have questions, please visit http://install.loncapa.org
+or contact helpdesk\@loncapa.org.
 
 ===============================================================================
-The following 4 values are needed to configure LON-CAPA:
+The following 8 values are needed to configure LON-CAPA:
 * Machine Role
 * LON-CAPA Domain Name
-* LON-CAPA Machine ID Name, and
-* System Administration E-mail Address.
+* LON-CAPA Machine ID Name
+* Server Administration E-mail Address
+* LON-CAPA Domain's Primary Library Server Machine ID
+* Web Server Protocol
+* Internet Domain Name of Your Institution
+* Hostname
+===============================================================================
+
+In addition, a Support E-mail Address can also be included. If
+an address is included then one of the options in the LON-CAPA 
+help menu will be a link to a form that a user will complete to
+request LON-CAPA help.  
+
 END
 
 open(OUT,'&gt;/tmp/loncapa_updatequery.out');
@@ -78,8 +165,8 @@ close(OUT);
 **** Machine Role ****
 Library server (recommended if first-time installation of LON-CAPA):
    Servers that are repositories of authoritative educational resources.
-   These servers also provide the construction space by which instructors
-   assemble their classroom online material.
+   These servers also provide the authoring spaces in which content
+   creators (e.g., faculty instructors) create their learning content.
 Access server:
    Servers that load-balance high-traffic delivery of educational resources
    over the world-wide web.
@@ -115,7 +202,7 @@ while (!$flag) {
 }
 
 # need to recommend a machine ID name (ipdomain.l.somenumber)
-my $hostname=`hostname`; chomp($hostname);
+my $hostname=`hostname -f`; chomp($hostname);
 my $ipdomain='';
 if ($hostname=~/([^\.]*)\.([^\.]*)$/) {
   $ipdomain=$1;
@@ -124,8 +211,26 @@ if ($hostname=~/([^\.]*)\.([^\.]*)$/) {
   print(&lt;&lt;END);
 
 **** Domain ****
-[this does NOT need to correspond to internet address domains,
- examples might be "msu" or "bionet" or "vermontcc"]
+[This does NOT need to correspond to an internet address domain.
+ Please make this name short AND descriptive of your organization.
+ Domain names are close to impossible to change later!!!
+ Good examples might be "msu" or "bionet" or "vermontcc".
+ Bad examples are "physics" (too general)
+   or "michiganstateuniversity" (too long)
+   or "msuedu" (just make it "msu", or else make it msu.edu)
+   or "msuphysics" (only if there is a good reason to limit to department
+                    - we don't know of one)
+   or "mydomain" (what is that?)
+ Avoid multiple domains at the same institution, even if it means that you 
+ have to actually work together with your colleagues. You can still run
+ multiple library servers within the same domain.
+ If this domain is eventually going to be part of the main production
+ cluster, you MUST contact the LON-CAPA group at MSU (loncapa\@loncapa.org)
+ to have a domain name assigned, and then use it exactly as given. This is
+ also true for test installs that might eventually turn into production setups.
+ The short domain name needs to be unique, if your aim is to join a cluster 
+ containing existing domains. Stop now if you have not yet contacted the 
+ MSU LON-CAPA group.] 
 END
 
 # get domain name
@@ -145,6 +250,15 @@ END
 }
   my $choice=&lt;&gt;;
   chomp($choice);
+  my $bad_domain_flag=0;
+  my @bad_domain_names=('res','raw','userfiles','priv','adm','uploaded',
+	'editupload');
+  foreach my $bad (@bad_domain_names) {
+    $bad_domain_flag=1 if $choice eq $bad;
+  }
+  if ($choice=~/capa/i) {
+     $bad_domain_flag=1;
+  }
   if ($ipdomain and $choice=~/^\s*$/) {
     $choice=$ipdomain;
     open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
@@ -152,17 +266,49 @@ END
     close(OUT);
     $lonDefDomain=$choice;
     $flag=1;
-  }
-  elsif ($choice!~/\_/ and $choice=~/^\w+$/) {
+  } elsif (length($choice)>35) {
+    print "Name too long\n";
+  } elsif (length($choice)<2) {
+    print "Name too short\n";
+  } elsif ($bad_domain_flag) {
+    print "Invalid input ('$choice' conflicts with LON-CAPA namespace).\n";
+    print "Please try something different than '$choice'\n";
+  } elsif ($choice!~/\_/ and $choice=~/^[\w\-.]+$/) {
     open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
     print(OUT 'lonDefDomain'."\t".$choice."\n");
     close(OUT);
     $lonDefDomain=$choice;
     $r='l';
     $flag=1;
+  } else {
+    print "Invalid input (only alphanumeric characters, '-', and '.' supported).\n";
+  }
+}
+
+# get domain description
+# accept if valid, if not valid, tell user and repeat
+$flag=0;
+
+while (!$flag) {
+  print(&lt;&lt;END);
+
+**** Domain Description ****
+String describing the domain, to be shown to users.
+[Example, msu is Michigan State University]
+ENTER DOMAIN DESCRIPTION:
+END
+
+  my $choice=&lt;&gt;;
+  chomp($choice);
+  if ($choice!~/:/) {
+    open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
+    print(OUT 'domainDescription'."\t".$choice."\n");
+    close(OUT);
+    $domainDescription=$choice;
+    $flag=1;
   }
   else {
-    print "Invalid input (only alphanumeric characters supported).\n";
+    print "Invalid input (no ':' allowed).\n";
   }
 }
 
@@ -175,11 +321,12 @@ if ($lonDefDomain) {
   print(&lt;&lt;END);
 
 **** Machine ID Name ****
-[this does NOT need to correspond to internet address names;
+[This does NOT need to correspond to internet address names;
  this name MUST be unique to the whole LON-CAPA network;
- we recommend that you use a name based off of your institution;
- good examples: "msul1" or "bionetl1";
- bad examples: "loncapabox" or "studentsinside"]
+ we recommend that you use a name based off of your institution.
+ Good examples: "msul1" or "bioneta2".
+ Bad examples: "loncapabox" or "studentsinside".
+ Note that machine names are very hard to change later.]
 END
 # get machine name
 # accept if valid, if not valid, tell user and repeat
@@ -197,37 +344,100 @@ END
 }
   my $choice=&lt;&gt;;
   chomp($choice);
-  if ($lonHostID and $choice=~/^\s*$/) {
+  if ($choice=~/capa/i) {
+    print "Invalid input (names containing 'capa' are reserved).\n";
+  } elsif ($lonHostID and $choice=~/^\s*$/) {
     $choice=$lonHostID;
     open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
     print(OUT 'lonHostID'."\t".$choice."\n");
     close(OUT);
     $lonHostID=$choice;
     $flag=1;
-  }
-  elsif ($choice!~/\_/ and $choice=~/^\w+$/) {
+  } elsif (length($choice)>45) {
+    print "Name too long\n";
+  } elsif (length($choice)<4) {
+    print "Name too short\n";
+  } elsif ($choice!~/\_/ and $choice=~/^[\w\-.]+$/) {
     open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
     print(OUT 'lonHostID'."\t".$choice."\n");
     close(OUT);
     $lonHostID=$choice;
     $flag=1;
+  } else {
+    print "Invalid input (only alphanumeric characters, '-', and '.' supported).\n";
   }
-  else {
-    print "Invalid input (only alphanumeric characters supported).\n";
-  }
 }
 
-# get e-mail address
+# get primary library server in domain
+if ($lonRole eq 'library') {
+    if (!grep/^\Q$lonHostID\E$/,@libservers) {
+        push(@libservers,$lonHostID);
+    } 
+    if (@libservers == 1) {
+        $primaryLibServer = $libservers[0];
+    }
+}
+
+$flag=0;
+while (!$flag) {
+  print(&lt;&lt;END);
+**** Domain's Primary Library Server ID ****
+This should be the LON-CAPA machine ID of a library server in your 
+domain.  If you only have a single library server in your domain, then
+the Primary Library server ID will be the machine ID of that server. 
+This server will be where domain data which are not associated with any
+specific home library server will be stored (e.g., configurations that
+apply to all nodes in the domain).
+END
+    if (defined($primaryLibServer)) {
+        print(&lt;&lt;END);
+ENTER DOMAIN'S PRIMARY LIBRARY SERVER ID [$primaryLibServer]:
+END
+    } elsif (@libservers > 0) {
+        print(&lt;&lt;END);
+ENTER DOMAIN'S PRIMARY LIBRARY SERVER ID [$libservers[0]]
+END
+    } else {
+        print (&lt;&lt;END);
+No library servers could be identified for this domain.  If you have already installed LON-CAPA on a different server (designated as a library server) in this domain, please enter the LONCAPA MACHINE ID of that server.  If not, you will need to install a LON-CAPA library server.  Enter the MACHINE ID of the server you plan to designate as a library server.
+END
+    }
+
+    my $choice=&lt;&gt;;
+    chomp($choice);
+    if ($primaryLibServer and $choice=~/^\s*$/) {
+        $choice=$primaryLibServer;
+        open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
+        print(OUT 'primaryLibServer'."\t".$choice."\n");
+        close(OUT);
+        $flag=1;
+    } elsif (length($choice)>35) {
+        print "Name too long\n";
+    } elsif (length($choice)<4) {
+        print "Name too short\n";
+    } elsif ($choice!~/\_/ and $choice=~/^[\w\-.]+$/) {
+        open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
+        print(OUT 'primaryLibServer'."\t".$choice."\n");
+        close(OUT);
+        $primaryLibServer=$choice;
+        $flag=1;
+    } else {
+        print "Invalid input (only alphanumeric characters, '-', and '.' supported).\n";
+    }
+}
+
+
+# get admin e-mail address
 # accept if valid, if not valid, tell user and repeat
 $flag=0;
 my $lonAdmEMail;
 while (!$flag) {
   print(&lt;&lt;END);
 
-**** System Administrator's E-mail ****
+**** Server Administrators E-mail ****
 E-mail address of the person who will manage this machine
 [should be in the form somebody\@somewhere]
-ENTER E-MAIL ADDRESS:
+ENTER ADMIN E-MAIL ADDRESS:
 END
 
   my $choice=&lt;&gt;;
@@ -244,9 +454,155 @@ END
   }
 }
 
+
+# get support e-mail address
+# accept if valid, if not valid, tell user and repeat
+$flag=0;
+my $lonSupportEMail;
+while (!$flag) {
+  print(&lt;&lt;END);
+
+**** Support E-mail ****
+E-mail address of the person who will receive 
+help requests from LON-CAPA users who access 
+the system via this server. If the address is left blank,
+then a help support form will not be displayed 
+as part of the help menu.
+[should be in the form somebody\@somewhere]
+ENTER SUPPORT E-MAIL ADDRESS:
+END
+
+  my $choice=&lt;&gt;;
+  chomp($choice);
+  $choice =~ s/\s//g;
+  if ( ($choice=~/\@/) || $choice eq '') {
+    open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
+    print(OUT 'lonSupportEMail'."\t".$choice."\n");
+    close(OUT);
+    $lonSupportEMail=$choice;
+    $flag=1;
+  }
+  else {
+    print "Invalid input (this either needs to be blank, or look like an e-mail address!).\n";
+  }
+}
+
+# get protocol
+# accept if valid, if not valid, tell user and repeat
+$flag=0;
+while (!$flag) {
+  print(&lt;&lt;END);
+
+****  Web Server Protocol ****
+If you plan to run the Apache server with SSL enabled, 
+the protocol should be: https; otherwise it should be http.
+ENTER WEB SERVER PROTOCOL [http]:
+END
+
+  my $choice=&lt;&gt;;
+  chomp($choice);
+  if ($choice =~ /^https?$/) {
+    open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
+    print(OUT 'protocol'."\t".$choice."\n");
+    close(OUT);
+    $protocol=$choice;
+    $flag=1;
+  } elsif ($choice eq '') {
+    open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
+    print(OUT 'protocol'."\t".'http'."\n");
+    close(OUT);
+    $protocol = 'http';
+    $flag = 1;
+  } else {
+    print "Invalid input (only http or https allowed).\n";
+  }
+}
+
+# get internet domain
+# accept if valid, if not valid, tell user and repeat
+$flag=0;
+while (!$flag) {
+  print(&lt;&lt;END);
+
+****  Internet Domain Name of Your Institution ****
+
+The internet domain name used for servers at your institution 
+should be provided.  This will be similar to: ustate.edu or
+topcollege.ac.uk or myhostingcompany.com, i.e., the part of
+a server hostname which indicates to which organization the 
+server belongs.
+
+ENTER INTERNET DOMAIN NAME:
+END
+
+  my $choice=&lt;&gt;;
+  chomp($choice);
+  if ($choice =~/[^.]+\.[^.]+/) {
+    open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
+    print(OUT 'internet domain'."\t".$choice."\n");
+    close(OUT);
+    $intdom=$choice;
+    $flag=1;
+  }
+  else {
+    print "Invalid input (must be at least two levels separated by .  - e.g., ustate.edu).\n";
+  }
+}
+
+# get hostname
+# accept if valid, if not valid, tell user and repeat
+$flag=0;
+my $posshostname;
+if (($hostname =~ /^[A-Za-z0-9\-]+$/) && ($intdom ne '')) {
+    $posshostname = $hostname.'.'.$intdom;
+} 
+if (($hostname =~ /^[A-Za-z0-9\-]+\.[A-Za-z0-9\-]+/) &&
+    ($hostname =~ /^[A-Za-z0-9.\-]+$/)) {
+    $posshostname = $hostname;
+}
+while (!$flag) {
+  print(&lt;&lt;END);
+
+****** Hostname of the server/VM *****
+
+The hostname of the server/VM is required. This will be similar to:
+somename.ustate.edu or somename.department.ustate.edu, and would be 
+the web address which users would point their web browsers at to
+access the server.
+
+END
+
+if ($posshostname) {
+    print "ENTER HOSTNAME OF SERVER [$posshostname]:\n";
+} else {
+    print "ENTER HOSTNAME OF SERVER:\n";
+}
+
+  my $choice=&lt;&gt;;
+  chomp($choice);
+  if (($choice =~ /^[A-Za-z0-9\-]+\.[A-Za-z0-9\-]+/) &&
+      ($choice =~ /^[A-Za-z0-9.\-]+$/)) {
+    open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
+    print(OUT 'hostname'."\t".$choice."\n");
+    close(OUT);
+    $desiredhostname=$choice;
+    $flag=1;
+  } elsif (($choice eq '') && ($posshostname ne '')) {
+    open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
+    print(OUT 'hostname'."\t$posshostname\n");
+    close(OUT);
+    $desiredhostname = $posshostname;
+    $flag = 1;
+  } else {
+    print "Invalid input (only letters, numbers, - and . allowed, with at least one .).\n";
+  }
+}
+
 # update loncapa.conf
-my $confdir='/etc/httpd/conf/';
-#my $confdir='';
+my $confdir = '/etc/httpd/conf/';
+if ('<DIST />' eq 'sles10' || '<DIST />' eq 'sles11' || '<DIST />' eq 'sles12' || '<DIST />' eq 'sles15' || '<DIST />' eq 'suse10.1' || '<DIST />' eq 'suse10.2' || '<DIST />' eq 'suse10.3' || '<DIST />' eq 'suse11.1' || '<DIST />' eq 'suse11.2' || '<DIST />' eq 'suse11.3' || '<DIST />' eq 'suse11.4' || '<DIST />' eq 'suse12.1' || '<DIST />' eq 'suse12.2' || '<DIST />' eq 'suse12.3' || '<DIST />' eq 'suse13.1' || '<DIST />' eq 'suse13.2' || '<DIST />' eq 'debian5' || '<DIST />' eq 'debian6' || '<DIST />' eq 'ubuntu6' || '<DIST />' eq 'ubuntu8' || '<DIST />' eq 'ubuntu10' || '<DIST />' eq 'ubuntu12' || '<DIST />' eq 'ubuntu14' || '<DIST />' eq 'ubuntu16' || '<DIST />' eq 'ubuntu18' || '<DIST />' eq 'ubuntu20' || '<DIST />' eq 'ubuntu22' || '<DIST />' eq 'ubuntu24' || '<DIST />' eq 'debian10' || '<DIST />' eq 'debian11' || '<DIST />' eq 'debian12') {
+     $confdir = '/etc/apache2/';
+}   
 my $filename='loncapa.conf';
 my %perlvar;
     if (-e "$confdir$filename") {
@@ -263,17 +619,21 @@ my %perlvar;
     $perlvar{'lonHostID'}=$lonHostID;
     $perlvar{'lonDefDomain'}=$lonDefDomain;
     $perlvar{'lonAdmEMail'}=$lonAdmEMail;
+    $perlvar{'lonSupportEMail'}=$lonSupportEMail;
     $perlvar{'lonRole'}=$lonRole;
     unless ($perlvar{'lonLoadLim'} and $perlvar{'lonLoadLim'}!~/\{\[\[\[\[/) {
        $perlvar{'lonLoadLim'}='2.00';
     }
+    unless ($perlvar{'lonUserLoadLim'} and $perlvar{'lonUserLoadLim'}!~/\{\[\[\[\[/) {
+       $perlvar{'lonUserLoadLim'}='0';
+    }
     unless ($perlvar{'lonExpire'} and $perlvar{'lonExpire'}!~/\{\[\[\[\[/) {
        $perlvar{'lonExpire'}='86400';
     }
     unless ($perlvar{'lonReceipt'} and $perlvar{'lonReceipt'}!~/\{\[\[\[\[/) {
        my $lonReceipt='';
        srand(time ^ $$ ^ unpack "%L*", `ps axww | gzip`);
-       my @alnum=(0..9,a..z);
+       my @alnum=(0..9,"a".."z");
        foreach my $i (1..20) {
 	 $lonReceipt.=$alnum[int(rand(36))];
        }
@@ -283,8 +643,12 @@ my %perlvar;
       die("Cannot output to $confdir$filename\n");
     foreach my $key (keys %perlvar) {
       my $value=$perlvar{$key};
+      my $line = "PerlSetVar     $key      $value"; 
+      if ($value eq '') {
+          $line = '#'.$line;
+      }
       print(OUT &lt;&lt;END);
-PerlSetVar     $key      $value
+$line
 END
     }
     close(OUT);
@@ -292,12 +656,29 @@ END
 </perlscript>
 </file>
 <file>
-<target dist='default'>/</target>
+<target dist='default'>/etc/httpd/conf/</target>
+<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 debian10 debian11 debian12 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18 ubuntu20 ubuntu22 ubuntu24'>/etc/apache2/</target>
 <perlscript mode='fg'>
+sub securesetting {
+    my (%perlvar)=@_;
+    my $securestatus='unknown';
+    my $securenum='';
+    if      ( $perlvar{'loncAllowInsecure'}&&  $perlvar{'londAllowInsecure'}) {
+	$securestatus='no';                  $securenum='4';
+    } elsif ( $perlvar{'loncAllowInsecure'}&& !$perlvar{'londAllowInsecure'}) {
+	$securestatus='lond';                $securenum='3';
+    } elsif (!$perlvar{'loncAllowInsecure'}&&  $perlvar{'londAllowInsecure'}) {
+	$securestatus='lonc';                $securenum='2';
+    } elsif (!$perlvar{'loncAllowInsecure'}&& !$perlvar{'londAllowInsecure'}) {
+	$securestatus='yes (lond and lonc)'; $securenum='1';
+    }
+    return ($securestatus,$securenum);
+}
 # read values from loncapa.conf
-my $confdir='/etc/httpd/conf/';
+my $confdir = "<TARGET />";
 my $filename='loncapa.conf';
 my %perlvar;
+my ($securestatus,$securenum);
     if (-e "$confdir$filename") {
 	open(CONFIG,'&lt;'.$confdir.$filename) or 
           die("Can't read $confdir$filename");
@@ -313,13 +694,23 @@ my %perlvar;
     unless ($perlvar{'lonLoadLim'} and $perlvar{'lonLoadLim'}!~/\{\[\[\[\[/) {
        $perlvar{'lonLoadLim'}='2.00';
     }
+    unless ($perlvar{'lonUserLoadLim'} and $perlvar{'lonUserLoadLim'}!~/\{\[\[\[\[/) {
+       $perlvar{'lonUserLoadLim'}='0';
+    }
     unless ($perlvar{'lonExpire'} and $perlvar{'lonExpire'}!~/\{\[\[\[\[/) {
        $perlvar{'lonExpire'}='86400';
     }
+    unless ($perlvar{'londAllowInsecure'} and $perlvar{'londAllowInsecure'}!~/\{\[\[\[\[/) {
+       $perlvar{'londAllowInsecure'}='1';
+    }
+    unless ($perlvar{'loncAllowInsecure'} and $perlvar{'loncAllowInsecure'}!~/\{\[\[\[\[/) {
+       $perlvar{'loncAllowInsecure'}='1';
+    }
+    ($securestatus,$securenum)=&securesetting(%perlvar);
     unless ($perlvar{'lonReceipt'} and $perlvar{'lonReceipt'}!~/\{\[\[\[\[/) {
        my $lonReceipt='';
        srand(time ^ $$ ^ unpack "%L*", `ps axww | gzip`);
-       my @alnum=(0..9,a..z);
+       my @alnum=(0..9,"a".."z");
        foreach my $i (1..20) {
 	 $lonReceipt.=$alnum[int(rand(36))];
        }
@@ -338,32 +729,199 @@ my %perlvarstatic;
 	}
 	close(CONFIG);
     }
+
+    my (@hosts_files, @domain_files);
+    if ( $lonCluster ne 'existing') {
+	push(@domain_files,'../'.$lonCluster.'_domain.tab',
+	     '../'.$lonCluster.'_dns_domain.tab');
+	push(@hosts_files,'../'.$lonCluster.'_hosts.tab',
+	     '../'.$lonCluster.'_dns_hosts.tab');
+    }
+    push(@domain_files,'/home/httpd/lonTabs/domain.tab',
+         '/home/httpd/lonTabs/dns_domain.tab');
+    push(@hosts_files,'/home/httpd/lonTabs/hosts.tab',
+         '/home/httpd/lonTabs/dns_hosts.tab');
+
+    if (!$domainDescription) {
+	foreach my $file (@domain_files) {
+	    open(IN,'&lt;'.$file);
+	    while(my $line = &lt;IN&gt;) {
+		if ($line =~ /^\Q$perlvar{'lonDefDomain'}\E\:/) {
+		    (undef,$domainDescription,$domainTabExtras)=split(/:/,$line,3);
+		    chomp($domainDescription);
+		    chomp($domainTabExtras);
+		    # the remaining field (primary lib server) is handled later
+		    $domainTabExtras = join(':',(split(/:/,$domainTabExtras))[0..5]);
+		    last;
+		}
+	    }
+	    close(IN);
+	    last if ($domainDescription);
+	}
+    }
+
+    if ((!$protocol) || (!$desiredhostname)) {
+        foreach my $file (@hosts_files) {
+            open(IN,'&lt;'.$file);
+            while(my $line = &lt;IN&gt;) {
+                if ($line =~ /^\Q$perlvar{'lonHostID'}\E:\Q$perlvar{'lonDefDomain'}\E\:(?:access|library)\:([^:]+)\:(https?)/) {
+                    if (!$desiredhostname) {
+                        $desiredhostname = $1;
+                    }
+                    if (!$protocol) { 
+                        $protocol = $2;
+                        chomp($protocol);
+                    }
+                    last;
+                }
+            }
+        }
+    }
+
+    if (!$protocol) {
+        $protocol = 'http';
+    }
+
+    if (!$intdom) {
+        foreach my $file (@hosts_files) {
+            open(IN,'&lt;'.$file);
+            while(my $line = &lt;IN&gt;) {
+                if ($line =~ /^\Q$perlvar{'lonHostID'}\E:\Q$perlvar{'lonDefDomain'}\E\:(?:access|library)\:[^:]+\:https?\:([^:]+)/) {
+                    $intdom = $1;
+                    chomp($intdom);
+                    last;
+                }
+            }
+        }
+    }
+
+    while(!$primaryLibServer && (@hosts_files || @domain_files)) {
+	my $file = shift(@domain_files);
+        open(IN,'&lt;'.$file);
+        while(my $line = &lt;IN&gt;) {
+            if ($line =~ /^\Q$perlvar{'lonDefDomain'}\E\:/) {
+		$primaryLibServer=(split(/:/,$line))[8];
+                chomp($primaryLibServer);
+            }
+        }
+        close(IN);
+	last if ($primaryLibServer);
+	$file = shift(@hosts_files);
+	open(IN,'&lt;'.$file);
+	while(my $line = &lt;IN&gt;) {
+	    if ($line =~ /^([^\:]+)\:\Q$perlvar{'lonDefDomain'}\E\:library\:/) {
+		push(@libservers,$1);
+	    }
+	}
+	# make list unique
+	@libservers = keys(%{{ map { $_ => 1 } (@libservers) }});
+	close(IN);
+	if (@libservers == 1) {
+	    $primaryLibServer = $libservers[0];
+	}
+    }
+   
 # implement editing logic below, interactively
-# update loncapa.conf until 7 is entered
+# update loncapa.conf until 15 is entered
+
+my $flag=0;
 
-$flag=0;
 while (!$flag) {
   print(&lt;&lt;END);
 
 ===============================================================================
 This is now the current configuration of your machine.
-1) Domain Name: $perlvar{'lonDefDomain'}
-2) Machine Name: $perlvar{'lonHostID'}
-3) System Administrator's E-mail Address: $perlvar{'lonAdmEMail'}
-4) Role: $perlvar{'lonRole'}
-5) Cache Expiration Time: $perlvar{'lonExpire'}
-6) Server Load: $perlvar{'lonLoadLim'}
-7) Everything is correct up above
-END
+ 1) Domain Name: $perlvar{'lonDefDomain'}
+ 2) Domain Description: $domainDescription
+ 3) Machine Name: $perlvar{'lonHostID'}
+ 4) ID of primary library server for domain: $primaryLibServer
+ 5) Server Administrator's E-mail Address: $perlvar{'lonAdmEMail'}
+ 6) Support E-mail Address: $perlvar{'lonSupportEMail'}
+ 7) Web Server Protocol (http or https): $protocol 
+ 8) Internet Domain Name: $intdom 
+ 9) Hostname: $desiredhostname
+10) Role: $perlvar{'lonRole'}
+11) Cache Expiration Time: $perlvar{'lonExpire'}
+12) Server Load: $perlvar{'lonLoadLim'}
+13) User Load: $perlvar{'lonUserLoadLim'}
+14) Allow only secure connections: $securestatus 
+15) Everything is correct up above
+END
+
+my @error;
+foreach my $v ($perlvar{'lonDefDomain'},$perlvar{'lonHostID'}) {
+   if (length($v)>35) { push(@error,"Name $v too long"); }		
+   if (length($v)<2) { push(@error,"Name $v too short"); }
+   if ($v=~/capa/i) {
+	if ($v!~/^oucapa\d+$/ && 
+	    ($v!~/^capa\d+$/ && $perlvar{'lonDefDomain'} eq 'uwsp')) {
+		 push(@error,"Name $v contains 'capa'");
+	}
+   }
+   foreach my $bad ('res','raw','userfiles','priv','adm','uploaded',
+	'editupload') {
+      push(@error,"\nName $v reserved.") if $v eq $bad;
+   }
+   if ($v=~/[^\w\-.]/) { push(@error,"Name $v contains special characters"); }
+}
+if ($domainDescription =~ /^\s*$/) {
+   push(@error,"Domain Description is blank.");
+} elsif ($domainDescription!~/^[\(\)\-\w\s,]+$/) {
+   push(@error,"Domain Description contains special characters.");
+} 
+foreach my $v ($perlvar{'lonExpire'},$perlvar{'lonLoadLim'}) {
+   unless ($v=~/^[\d+\.]+$/) { push(@error,"Number expected instead of $v"); }
+}
+unless (($perlvar{'lonRole'} eq 'library') || ($perlvar{'lonRole'} eq 'access')) {
+   push(@error,"Invalid Role");
+}
+
+unless (($protocol eq 'http') || ($protocol eq 'https')) {
+   push(@error,"Invalid Protocol (must be http or https");
+}
+
+if (!defined($intdom)) { 
+   push(@error,"No internet domain name designated. Enter something like ustate.edu"); 
+} elsif ($intdom !~ /[^.]+\.\w{2,6}$/) {
+   push(@error,"Invalid Internet domain name (must be at least two levels separated by .  - e.g., ustate.edu");
+}
+
+if (!defined($primaryLibServer)) {
+   if (@libservers > 0) {
+       push(@error,"No primary library server ID designated. Choose from: ".join(',',sort(@libservers)));
+   } else {
+       push(@error,"No library servers in this domain (including current server)");
+   }
+} else {
+   if (length($primaryLibServer)>35) { push(@error,"Primary Library Server ID:  $primaryLibServer too long"); }
+   if (length($primaryLibServer)<2) { push(@error,"Primary Library Server ID:  $primaryLibServer too short"); }
+   if ($primaryLibServer =~/capa/i) {
+        if ($primaryLibServer!~/^oucapa\d+$/ &&
+            ($primaryLibServer!~/^capa\d+$/ && $perlvar{'lonDefDomain'} eq 'uwsp')) {
+                 push(@error,"Primary library server ID $primaryLibServer contains 'capa'")
+        }
+   }
+   foreach my $bad ('res','raw','userfiles','priv','adm','uploaded',
+        'editupload') {
+      push(@error,"Primary library server ID $primaryLibServer reserved.") if $primaryLibServer eq $bad;
+   }
+   if ($primaryLibServer=~/[^\w\-.]/) { push(@error,"Primary library server ID $primaryLibServer contains special characters"); }
+}
+
+
+if (@error) { print "\n*** ERRORS: \n\t".join("\n\t",@error)."\n"; }
   print(&lt;&lt;END);
-ENTER A CHOICE OF 1-6 TO CHANGE, otherwise ENTER 7:
+ENTER A CHOICE OF 1-14 TO CHANGE, otherwise ENTER 15:
 END
 my $choice=&lt;&gt;;
 chomp($choice);
   if ($choice==1) {
   print(&lt;&lt;END);
 1) Domain Name: $perlvar{'lonDefDomain'}
-ENTER NEW VALUE:
+ENTER NEW VALUE (this is an internal value used to identify a group of
+                 LON-CAPA machines, it must be alphanumerical, we suggest
+                 using a part of your actual DNS domain. For example, for
+                 the machine loncapa.msu.edu, we set the Domain to msu):
 END
     my $choice2=&lt;&gt;;
     chomp($choice2);
@@ -371,62 +929,174 @@ END
   }
   elsif ($choice==2) {
   print(&lt;&lt;END);
-2) Machine Name: $perlvar{'lonHostID'}
-ENTER NEW VALUE:
+2) Domain Description: $domainDescription
+ENTER NEW VALUE (this should be a string that describes your domain, spaces
+                 and punctuation are fine except for ':'):
 END
     my $choice2=&lt;&gt;;
     chomp($choice2);
-    $perlvar{'lonHostID'}=$choice2;
+    $domainDescription=$choice2;
   }
   elsif ($choice==3) {
   print(&lt;&lt;END);
-3) System Administrator's E-mail Address: $perlvar{'lonAdmEMail'}
+3) Machine Name: $perlvar{'lonHostID'}
+ENTER NEW VALUE (this will be the name of the machine in the LON-CAPA network
+                 it cannot contain any of '_' '-' '.' or ':'. We suggest that
+                 if you are in the domain 'example' and are the first library
+                 server you enter 'examplel1') :
+END
+    my $choice2=&lt;&gt;;
+    chomp($choice2);
+    $perlvar{'lonHostID'}=$choice2;
+  }
+  elsif ($choice==4) {
+  print(&lt;&lt;END);
+4) ID of primary library server for domain: $primaryLibServer
+ENTER NEW VALUE (this will be the LON-CAPA Machine ID of a library server in
+                 your domain; it cannot contain any of '_' '-' '.' or ':'. 
+                 This server will be where domain data which are not 
+                 associated with any specific home library server
+                 will be stored (e.g., e-mail broadcast by Domain Coordinators
+                 to users in the domain).
+END
+    my $choice2=&lt;&gt;;
+    chomp($choice2);
+    $primaryLibServer=$choice2;
+  }
+  elsif ($choice==5) {
+  print(&lt;&lt;END);
+5) Server Administrator's E-mail Address: $perlvar{'lonAdmEMail'}
 ENTER NEW VALUE:
 END
     my $choice2=&lt;&gt;;
     chomp($choice2);
     $perlvar{'lonAdmEMail'}=$choice2;
   }
-  elsif ($choice==4) {
+  elsif ($choice==6) {
   print(&lt;&lt;END);
-4) Role: $perlvar{'lonRole'}
+6) Support E-mail Address: $perlvar{'lonSupportEMail'}
 ENTER NEW VALUE:
 END
     my $choice2=&lt;&gt;;
     chomp($choice2);
-    $perlvar{'lonRole'}=$choice2;
+    $perlvar{'lonSupportEMail'}=$choice2;
   }
-  elsif ($choice==5) {
+  elsif ($choice==7) {
   print(&lt;&lt;END);
-5) Cache Expiration Time: $perlvar{'lonExpire'}
+7) Server Protocol (http or https): 
+ENTER NEW VALUE: (this should be either 'http' or 'https'
+                 if in doubt set to 'http'):
+END
+    my $choice2=&lt;&gt;;
+    chomp($choice2);
+    $protocol=$choice2;
+  }
+  elsif ($choice==8) {
+  print(&lt;&lt;END);
+8) Internet Domain Name of Institution
+ENTER NEW VALUE: 
+
+END
+    my $choice2=&lt;&gt;;
+    chomp($choice2);
+    $intdom=$choice2;
+  }
+  elsif ($choice==9) {
+  print(&lt;&lt;END);
+9) Hostname of Server/VM
 ENTER NEW VALUE:
+
+END
+    my $choice2=&lt;&gt;;
+    chomp($choice2);
+    $desiredhostname=$choice2;
+  }
+
+  elsif ($choice==10) {
+  print(&lt;&lt;END);
+10) Role: $perlvar{'lonRole'}
+ENTER NEW VALUE (this should be either 'access' or 'library' 
+                 if in doubt select 'library'):
+END
+    my $choice2=&lt;&gt;;
+    chomp($choice2);
+    $perlvar{'lonRole'}=$choice2;
+  }
+  elsif ($choice==11) {
+  print(&lt;&lt;END);
+11) Cache Expiration Time: $perlvar{'lonExpire'}
+ENTER NEW VALUE (in seconds, 86400 is a reasonable value):
 END
     my $choice2=&lt;&gt;;
     chomp($choice2);
     $perlvar{'lonExpire'}=$choice2;
   }
-  elsif ($choice==6) {
+  elsif ($choice==12) {
   print(&lt;&lt;END);
-6) Server Load: $perlvar{'lonLoadLim'}
+12) Server Load: $perlvar{'lonLoadLim'}
 ENTER NEW VALUE:
 END
     my $choice2=&lt;&gt;;
     chomp($choice2);
     $perlvar{'lonLoadLim'}=$choice2;
   }
-  elsif ($choice==7) {
+  elsif ($choice==13) {
+  print(&lt;&lt;END);
+13) User Load: $perlvar{'lonUserLoadLim'}
+Numer of users that can login before machine is 'overloaded'
+ENTER NEW VALUE (integer value, 0 means there is no limit):
+END
+    my $choice2=&lt;&gt;;
+    chomp($choice2);
+    $perlvar{'lonUserLoadLim'}=$choice2;
+  }
+  elsif ($choice==14) {
+  print(&lt;&lt;END);
+14) Allow only secure connections: $securestatus 
+The Lon-CAPA communication daemons lonc and lond can be configured to
+allow only secure connections by default.
+
+POSSIBLE CHOICES:
+1) allow only secure connections and don't connect to machines that
+    can not be connected to securely
+2) allow only secure connections but allow this machine to connect to 
+    machines that don't support secure connections
+3) allow insecure connections to this machine but only allow connections
+    to machines that support secure connections
+4) allow insecure connections
+ENTER NEW VALUE (currently $securenum):
+END
+    my $choice2=&lt;&gt;;
+    chomp($choice2);
+    if      ($choice2 eq '1') {
+	$perlvar{'loncAllowInsecure'}=0;$perlvar{'londAllowInsecure'}=0;
+    } elsif ($choice2 eq '2') {
+	$perlvar{'loncAllowInsecure'}=0;$perlvar{'londAllowInsecure'}=1;
+    } elsif ($choice2 eq '3') {
+	$perlvar{'loncAllowInsecure'}=1;$perlvar{'londAllowInsecure'}=0;
+    } elsif ($choice2 eq '4') {
+	$perlvar{'loncAllowInsecure'}=1;$perlvar{'londAllowInsecure'}=1;
+    }
+    ($securestatus,$securenum)=&securesetting(%perlvar);
+  }
+  elsif (($choice==15) && (!@error)) {
     $flag=1;
   }
   else {
-
+    print "Invalid input.\n";
   }
 }
+
     open(OUT,"&gt;$confdir$filename") or
       die("Cannot output to $confdir$filename\n");
     foreach my $key (keys %perlvar) {
       my $value=$perlvar{$key};
+      my $line = "PerlSetVar     $key      $value";
+      if ($value eq '') {
+          $line = '#'.$line;
+      }
       print(OUT &lt;&lt;END) unless $perlvarstatic{$key};
-PerlSetVar     $key      $value
+$line
 END
     }
     close(OUT);
@@ -436,79 +1106,51 @@ END
 <target dist='default'>loncom/hosts.tab</target>
 <perlscript mode='fg'>
 unless (-l "<TARGET />") {
-  print(&lt;&lt;END);
-
-===============================================================================
-What hosts.tab would you like to have installed?
-(hosts.tab is a listing of all other internet machines
-that a server system considers to be valid server systems
-on the LON-CAPA network)
-
-1) PRODUCTION - you want to deliver courses today or sometime very soon
-                on this machine
-2) STAND-ALONE - you want this machine to run in 'stand-alone' mode and
-                 not be connected to other LON-CAPA machines for now
-3) DEVELOPMENT - you want to play with or explore LON-CAPA
-4) PRESERVE the existing hosts.tab (/home/httpd/lonTabs/hosts.tab)
-
-END
-# Option number 26 will install rawhide_hosts.tab, but
-# the typical user does not want to be part of an intensive
-# machine test cluster.
-
-# get input
-# if valid then process, otherwise loop
-my $hostname=`hostname`;chomp($hostname);
-my $hostaddress=`hostname -i $hostname`;chomp($hostaddress);
-$flag=0;
-while (!$flag) {
-  print "ENTER 1, 2, 3, or 4:\n";
-  my $choice=&lt;&gt;;
-  chomp($choice);
-  $line2insert=&lt;&lt;END;
-$perlvar{'lonHostID'}:$perlvar{'lonDefDomain'}:$perlvar{'lonRole'}:$hostname:$hostaddress
+  if ($desiredhostname eq '') { 
+      my $hostname=`hostname -f`;chomp($hostname);
+      $desiredhostname = $hostname;
+  }
+  my $date=`date -I`; chomp($date);
+  my $lonHostID=$perlvar{'lonHostID'};
+  $lonHostID=~s/[^\w\-.]//g;
+  my $lineexistflag=0;
+  my $hostidexistflag=0;
+  my $line2insert=&lt;&lt;END;
+$perlvar{'lonHostID'}:$perlvar{'lonDefDomain'}:$perlvar{'lonRole'}:$desiredhostname:$protocol:$intdom
 END
-  $date=`date -I`; chomp($date);
-  $lonHostID=$perlvar{'lonHostID'};
-  $lonHostID=~s/\W//g;
-  $lineexistflag=0;
-  $hostidexistflag=0;
-  if ($choice==1) {
-    $lonCluster='production'; $flag=1;
+  if (!$domainTabExtras) {
+	$domainTabExtras=':::::';
   }
-  elsif ($choice==2) {
-    $lonCluster='standalone'; $flag=1;
+  my $domaininsert="$perlvar{'lonDefDomain'}:$domainDescription:$domainTabExtras:$primaryLibServer\n";
+  if ($lonCluster eq 'standalone') {
     open(OUT,'&gt;../'.$lonCluster.'_hosts.tab') or
       die('file generation error');
       print(OUT $line2insert);
+      print OUT ("^$desiredhostname:$protocol\n");
+    close(OUT);
+    open(OUT,'&gt;../'.$lonCluster.'_dns_hosts.tab') or
+      die('file generation error');
+      print(OUT $line2insert);
+    close(OUT);
+    open(OUT,'&gt;../'.$lonCluster.'_domain.tab') or
+      die('file generation error');
+      print(OUT $domaininsert);
+    close(OUT);
+    open(OUT,'&gt;../'.$lonCluster.'_dns_domain.tab') or
+      die('file generation error');
+      print(OUT $domaininsert);
     close(OUT);
-  }
-  elsif ($choice==3) {
-    $lonCluster='development'; $flag=1;
-  }
-  elsif ($choice==4) {
-    $lonCluster='existing'; $flag=1;
-    if (-e '/home/httpd/lonTabs/hosts.tab') {
-      `cp /home/httpd/lonTabs/hosts.tab ../existing_hosts.tab`;
-    }
-    else {
-      print &lt;&lt;END;
-There is no existing /home/httpd/lonTabs/hosts.tab
-END
-      die('');
-    }
-  }
-  elsif ($choice==26) {
-    $lonCluster='rawhide'; $flag=1;
   }
   if ($flag==1) {
     `rm -f ../hosts.tab`;
-    open(IN,'&lt;../'.$lonCluster.'_hosts.tab');
-    while(&lt;IN&gt;) {
-      if (/^$line2insert$/) {
+    `rm -f ../dns_hosts.tab`;
+    `ln -s ${lonCluster}_dns_hosts.tab ../dns_hosts.tab`;
+    open(IN,'&lt;../'.$lonCluster.'_dns_hosts.tab');
+    while(my $line = &lt;IN&gt;) {
+      if ($line =~ /^\Q$line2insert\E$/) {
         $lineexistflag=1;
       }
-      if (/^$lonHostID\:/) {
+      if ($line =~ /^\Q$lonHostID\E\:/) {
         $hostidexistflag=1;
       }
     }
@@ -516,9 +1158,9 @@ END
     if ($hostidexistflag and !$lineexistflag) {
       print &lt;&lt;END;
 WARNING: $lonHostID already exists inside
-loncapa/loncom/${lonCluster}_hosts.tab.  The entry inside
-${lonCluster}_hosts.tab does not match your settings.
-The entry inside ${lonCluster}_hosts.tab is being replaced
+loncapa/loncom/${lonCluster}_dns_hosts.tab.  The entry inside
+${lonCluster}_dns_hosts.tab does not match your settings.
+An entry inside ${lonCluster}_hosts.tab will be made
 with your new values.
 END
       `grep -v "$lonHostID:" ../${lonCluster}_hosts.tab &gt; ../new_${lonCluster}_hosts.tab`;
@@ -528,32 +1170,95 @@ END
        close(OUT);
       `ln -s new_${lonCluster}_hosts.tab ../hosts.tab`;
       # email appropriate message
-      `echo "REPLACE:$lonCluster:$lonHostID:$date:$line2insert" | mail -s "REPLACE:$lonCluster:$lonHostID:$date" installrecord\@mail.lon-capa.org`;
+      `echo "REPLACE:$lonCluster:$lonHostID:$date:$line2insert" | mail -s "REPLACE:$lonCluster:$lonHostID:$protocol:$intdom:$date" installrecord\@mail.lon-capa.org`;
     }
     elsif ($hostidexistflag and $lineexistflag) {
       print &lt;&lt;END;
-Entry exists in ${lonCluster}_hosts.tab.
+Entry exists in ${lonCluster}_dns_hosts.tab. Making duplicate entry in ${lonCluster}_hosts.tab
 END
-      `ln -s ${lonCluster}_hosts.tab ../hosts.tab`;
+      `grep -v "$lonHostID:" ../${lonCluster}_hosts.tab &gt; ../new_${lonCluster}_hosts.tab`;
+       open(OUT,'&gt;&gt;../new_'.$lonCluster.'_hosts.tab') or
+         die("cannot open loncom/${lonCluster}_hosts.tab for output\n");
+         print(OUT $line2insert);
+       close(OUT);
+      `ln -s new_${lonCluster}_hosts.tab ../hosts.tab`;
       # email appropriate message
-      `echo "STABLEUPDATE:$lonCluster:$lonHostID:$date:$line2insert" | mail -s "STABLEUPDATE:$lonCluster:$lonHostID:$date" installrecord\@mail.lon-capa.org`;
+      `echo "STABLEUPDATE:$lonCluster:$lonHostID:$date:$line2insert" | mail -s "STABLEUPDATE:$lonCluster:$lonHostID:$protocol:$intdom:$date" installrecord\@mail.lon-capa.org`;
     }
     elsif (!$hostidexistflag and !$lineexistflag) {
       print &lt;&lt;END;
 New entry for $lonCluster.
 END
       `cat ../${lonCluster}_hosts.tab &gt; ../new_${lonCluster}_hosts.tab`;
-       open(OUT,'&gt;../new_'.$lonCluster.'_hosts.tab') or
-         die("cannot open loncom/${lonCluster}_hosts.tab for output\n");
+       open(OUT,'&gt;&gt;../new_'.$lonCluster.'_hosts.tab') or
+         die("cannot open loncom/new_${lonCluster}_hosts.tab for output\n");
          print(OUT $line2insert);
        close(OUT);
       `ln -s new_${lonCluster}_hosts.tab ../hosts.tab`;
       # email appropriate message
-      `echo "INSERT:$lonCluster:$lonHostID:$date:$line2insert" | mail -s "INSERT:$lonCluster:$lonHostID:$date" installrecord\@mail.lon-capa.org`;
+      `echo "INSERT:$lonCluster:$lonHostID:$date:$line2insert" | mail -s "INSERT:$lonCluster:$lonHostID:$protocol:$intdom:$date" installrecord\@mail.lon-capa.org`;
+    }
+  }
+  $lineexistflag=0;
+  my $domainexistflag=0;
+  if ($flag==1) {
+    `rm -f ../domain.tab`;
+    `rm -f ../dns_domain.tab`;
+    `ln -s ${lonCluster}_dns_domain.tab ../dns_domain.tab`;
+    open(IN,'&lt;../'.$lonCluster.'_dns_domain.tab');
+    while(my $line = &lt;IN&gt;) {
+      if ($line =~/^\Q$domaininsert\E$/) {
+        $lineexistflag=1;
+      }
+      if ($line =~/^\Q$perlvar{'lonDefDomain'}\E\:/) {
+        $domainexistflag=1;
+      }
+    }
+    close(IN);
+    if ($domainexistflag and !$lineexistflag) {
+      print &lt;&lt;END;
+WARNING: $perlvar{'lonDefDomain'} already exists inside
+loncapa/loncom/${lonCluster}_dns_domain.tab.  The entry inside
+${lonCluster}_dns_domain.tab does not match your settings.
+An entry will be made in inside ${lonCluster}_domain.tab
+with your new values.
+END
+      `grep -v "$perlvar{'lonDefDomain'}:" ../${lonCluster}_domain.tab &gt; ../new_${lonCluster}_domain.tab`;
+       open(OUT,'&gt;&gt;../new_'.$lonCluster.'_domain.tab') or
+         die("cannot open loncom/${lonCluster}_domain.tab for output\n");
+         print(OUT $domaininsert);
+       close(OUT);
+      `ln -s new_${lonCluster}_domain.tab ../domain.tab`;
+      # email appropriate message
+      `echo "REPLACEdom:$lonCluster:$lonHostID:$date:$domaininsert" | mail -s "REPLACEdom:$lonCluster:$lonHostID:$date" installrecord\@mail.lon-capa.org`;
+    }
+    elsif ($domainexistflag and $lineexistflag) {
+      `grep -v "$perlvar{'lonDefDomain'}:" ../${lonCluster}_domain.tab &gt; ../new_${lonCluster}_domain.tab`;
+       open(OUT,'&gt;&gt;../new_'.$lonCluster.'_domain.tab') or
+         die("cannot open loncom/${lonCluster}_domain.tab for output\n");
+         print(OUT $domaininsert);
+       close(OUT);
+      print &lt;&lt;END;
+Entry exists in ${lonCluster}_dns_domain.tab. Making duplicate entry in ${lonCluster}_domain.tab
+END
+      `ln -s new_${lonCluster}_domain.tab ../domain.tab`;
+      # email appropriate message
+      `echo "STABLEUPDATEdom:$lonCluster:$lonHostID:$date:$domaininsert" | mail -s "STABLEUPDATEdom:$lonCluster:$lonHostID:$date" installrecord\@mail.lon-capa.org`;
+    }
+    elsif (!$domainexistflag and !$lineexistflag) {
+      print &lt;&lt;END;
+New entry for $lonCluster.
+END
+      `cat ../${lonCluster}_domain.tab &gt; ../new_${lonCluster}_domain.tab`;
+       open(OUT,'&gt;&gt;../new_'.$lonCluster.'_domain.tab') or
+         die("cannot open loncom/new_${lonCluster}_domain.tab for output\n");
+         print(OUT $domaininsert);
+       close(OUT);
+      `ln -s new_${lonCluster}_domain.tab ../domain.tab`;
+      # email appropriate message
+      `echo "INSERTdom:$lonCluster:$lonHostID:$date:$domaininsert" | mail -s "INSERTdom:$lonCluster:$lonHostID:$date" installrecord\@mail.lon-capa.org`;
     }
   }
-}
-
 }
 </perlscript>
 </file>