my $setupdir = "$globusdir/setup/globus";
my $myname = "setup-openssh.pl";
-print "$myname: Configuring package 'gsi_openssh'...\n";
-
#
# Set up path prefixes for use in the path translations
#
$prefix = ${globusdir};
$exec_prefix = "${prefix}";
$bindir = "${exec_prefix}/bin";
+$sbindir = "${exec_prefix}/sbin";
$mandir = "${prefix}/man";
$mansubdir = "man";
$libexecdir = "${exec_prefix}/libexec";
-$sysconfdir = "${prefix}/etc";
+$sysconfdir = "/etc/ssh";
$piddir = "/var/run";
$xauth_path = "/usr/bin/X11/xauth";
+#
+# Backup-related variables
+#
+
+$curr_time = time();
+$backupdir = "globus_backup_${curr_time}";
+$confbackupdir = "$backupdir/s1_conf";
+$transbackupdir = "$backupdir/s3_trans";
+
+#
+# We need to make sure it's okay to copy our setup files (if some files are already
+# present). If we do copy any files, we backup the old files so the user can (possibly)
+# reverse any damage.
+#
+
+sub test_dirs
+{
+ my $composite;
+
+ print "\nPreparatory: checking for existence of critical directories\n";
+
+ #
+ # Remember to put in check for /etc
+ #
+
+ #
+ # Test for /etc/ssh
+ #
+
+ $composite = $sysconfdir;
+ if ( ! -d "$composite" )
+ {
+ print "Could not find directory: '${composite}'.. creating.\n";
+ mkdir($composite, 16877);
+ # 16877 should be 755, or drwxr-xr-x
+ }
+
+ #
+ # Test for /etc/ssh/globus_backup_<curr>
+ #
+
+ $composite = "$sysconfdir/$backupdir";
+ if ( ! -d "${composite}" )
+ {
+ print "Could not find directory: '${composite}'.. creating.\n";
+ mkdir($composite, 16877);
+ }
+
+ #
+ # Test for /etc/ssh/globus_backup_<curr>/s1_conf
+ #
+
+ $composite = "$sysconfdir/$confbackupdir";
+ if ( ! -d "${composite}" )
+ {
+ print "Could not find directory: '${composite}'.. creating.\n";
+ mkdir($composite, 16877);
+ }
+
+ #
+ # Test for /etc/ssh/globus_backup_<curr>/s2_trans
+ #
+
+ $composite = "$sysconfdir/$transbackupdir";
+ if ( ! -d "${composite}" )
+ {
+ print "Could not find directory: '${composite}'.. creating.\n";
+ mkdir($composite, 16877);
+ }
+
+ return 0;
+}
+
+sub copy_setup_files
+{
+ my $response;
+
+ print "\nStage 1: Copying configuration files into '${sysconfdir}'..\n";
+
+ $response = "y";
+ if ( -e "${sysconfdir}/ssh_config" )
+ {
+ $response = query_boolean("${sysconfdir}/ssh_config already exists. Overwrite?", "n");
+ if ($response eq "y")
+ {
+ action("cp ${sysconfdir}/ssh_config ${sysconfdir}/${confbackupdir}/ssh_config");
+ }
+ }
+
+ if ($response eq "y")
+ {
+ action("cp ${globusdir}/setup/globus/ssh_config ${sysconfdir}/ssh_config");
+ }
+
+ #
+ # Reset response for our new query
+ #
+
+ $response = "y";
+ if ( -e "${sysconfdir}/sshd_config" )
+ {
+ $response = query_boolean("${sysconfdir}/sshd_config already exists. Overwrite?", "n");
+ if ($response eq "y")
+ {
+ action("cp ${sysconfdir}/sshd_config ${sysconfdir}/${confbackupdir}/sshd_config");
+ }
+ }
+
+ if ($response eq "y")
+ {
+ action("cp ${globusdir}/setup/globus/sshd_config ${sysconfdir}/sshd_config");
+ }
+
+ #
+ # Reset response for our new query
+ #
+
+ $response = "y";
+ if ( -e "${sysconfdir}/moduli" )
+ {
+ $response = query_boolean("${sysconfdir}/moduli already exists. Overwrite?", "n");
+ if ($response eq "y")
+ {
+ action("cp ${sysconfdir}/moduli ${sysconfdir}/${confbackupdir}/moduli");
+ }
+ }
+
+ if ($response eq "y")
+ {
+ action("cp ${globusdir}/setup/globus/moduli ${sysconfdir}/moduli");
+ }
+}
+
+sub runkeygen
+{
+ print "\nStage 2: Generating ssh host keys..\n";
+
+ if ( ! -d "${sysconfdir}" )
+ {
+ print "Could not find ${sysconfdir} directory... creating\n";
+ mkdir($sysconfdir, 16877);
+ # 16877 should be 755, or drwxr-xr-x
+ }
+
+ if ( -e "${sysconfdir}/ssh_host_key" )
+ {
+ print "${sysconfdir}/ssh_host_key already exists, skipping.\n";
+ }
+ else
+ {
+ # if $sysconfdir/ssh_host_key doesn't exist..
+ action("$bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N \"\"");
+ }
+
+ if ( -e "${sysconfdir}/ssh_host_dsa_key" )
+ {
+ print "${sysconfdir}/ssh_host_dsa_key already exists, skipping.\n";
+ }
+ else
+ {
+ # if $sysconfdir/ssh_host_dsa_key doesn't exist..
+ action("$bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N \"\"");
+ }
+
+ if ( -e "${sysconfdir}/ssh_host_rsa_key" )
+ {
+ print "${sysconfdir}/ssh_host_rsa_key already exists, skipping.\n";
+ }
+ else
+ {
+ # if $sysconfdir/ssh_host_rsa_key doesn't exist..
+ action("$bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N \"\"");
+ }
+
+ return 0;
+}
+
sub fixpaths
{
+ my $g, $h;
+
#
# Set up path translations for the installation files
#
"/etc/sshrc" => "${sysconfdir}/sshrc",
"/usr/X11R6/bin/xauth" => "${xauth_path}",
"/usr/bin:/bin:/usr/sbin:/sbin" => "/usr/bin:/bin:/usr/sbin:/sbin:${bindir}",
- "/path/to/scp.real" => "${bindir}/scp.real",
- "/path/to/ssh" => "${bindir}/ssh",
);
#
# Files on which to perform path translations
#
- @files = (
- "${bindir}/scp",
- "${sysconfdir}/ssh_config",
- "${sysconfdir}/sshd_config",
- "${sysconfdir}/moduli",
- "${mandir}/${mansubdir}1/scp.1",
- "${mandir}/${mansubdir}1/ssh-add.1",
- "${mandir}/${mansubdir}1/ssh-agent.1",
- "${mandir}/${mansubdir}1/ssh-keygen.1",
- "${mandir}/${mansubdir}1/ssh-keyscan.1",
- "${mandir}/${mansubdir}1/ssh.1",
- "${mandir}/${mansubdir}8/sshd.8",
- "${mandir}/${mansubdir}8/sftp-server.8",
- "${mandir}/${mansubdir}1/sftp.1",
+ %files = (
+ "${sysconfdir}/ssh_config" => 1,
+ "${sysconfdir}/sshd_config" => 1,
+ "${sysconfdir}/moduli" => 1,
+ "${mandir}/${mansubdir}1/scp.1" => 0,
+ "${mandir}/${mansubdir}1/ssh-add.1" => 0,
+ "${mandir}/${mansubdir}1/ssh-agent.1" => 0,
+ "${mandir}/${mansubdir}1/ssh-keygen.1" => 0,
+ "${mandir}/${mansubdir}1/ssh-keyscan.1" => 0,
+ "${mandir}/${mansubdir}1/ssh.1" => 0,
+ "${mandir}/${mansubdir}8/sshd.8" => 0,
+ "${mandir}/${mansubdir}8/sftp-server.8" => 0,
+ "${mandir}/${mansubdir}1/sftp.1" => 0,
);
- print "Translating strings in config/man files...\n";
- for $f (@files)
+ print "\nStage 3: Translating strings in config and man files...\n";
+
+ for my $f (keys %files)
{
$f =~ /(.*\/)*(.*)$/;
$g = "$f.tmp";
+ #
+ # get the filename for $f and place it in $h.
+ #
+
+ $h = $f;
+ $h =~ s#^.*/##;
+
#
# Grab the current mode/uid/gid for use later
#
$uid = (stat($f))[4];
$gid = (stat($f))[5];
- $result = system("mv $f $g");
- if ($result != 0)
+ #
+ # Move $f into a .tmp file for the translation step
+ #
+
+ $result = system("mv $f $g 2>&1");
+ if ($result or $?)
{
- die "Failed to copy $f to $g!\n";
+ die "ERROR: Unable to execute command: $!\n";
+ }
+
+ #
+ # Create a backup of this file if it's flagged
+ #
+
+ if ($files{$f} == 1)
+ {
+ $result = system("cp $g ${sysconfdir}/${transbackupdir}/$h 2>&1");
+
+ if ($result or $?)
+ {
+ die "ERROR: Unable to execute command: $!\n";
+ }
}
open(IN, "<$g") || die ("$0: input file $g missing!\n");
close(OUT);
close(IN);
- $result = system("rm $g");
- if ($result != 0)
+ #
+ # Remove the old .tmp file
+ #
+
+ $result = system("rm $g 2>&1");
+
+ if ($result or $?)
{
- die "Failed to remove $g\n";
+ die "ERROR: Unable to execute command: $!\n";
}
#
chown($uid, $gid, $f);
} # for $f
+ print "complete.\n";
+
return 0;
}
-sub runkeygen
+print "---------------------------------------------------------------\n";
+print "$myname: Configuring package 'gsi_openssh'..\n";
+print "\n";
+print "--> NOTE: Run this as root for the intended effect. <--\n";
+
+test_dirs();
+copy_setup_files();
+runkeygen();
+fixpaths();
+
+my $metadata = new Grid::GPT::Setup(package_name => "gsi_openssh_setup");
+
+$metadata->finish();
+
+print "\n";
+print "$myname: Finished configuring package 'gsi_openssh'.\n";
+print "\n";
+print "You are required to set the following variables in your environment\n";
+print "to ensure that the gsi_ssh package works correctly:\n";
+print "\n";
+print "\$GSI_SCP_LOC = \"${bindir}/scp.real\"\n";
+print "\$GSI_SFTP_LOC = \"${bindir}/sftp.real\"\n";
+print "\$GSI_SSH_LOC = \"${bindir}/ssh\"\n";
+print "\$GSI_SSHD_LOC = \"${sbindir}/sshd.real\"\n";
+print "\$GSI_SSH_CONFIG_LOC = \"${sysconfdir}/ssh_config\"\n";
+print "\$GSI_SSHD_CONFIG_LOC = \"${sysconfdir}/sshd_config\"\n";
+print "---------------------------------------------------------------\n";
+
+#
+# Just need a minimal action() subroutine for now..
+#
+
+sub action
{
- print "Generating ssh keys (if necessary)...\n";
- if ( -e "${sysconfdir}/ssh_host_key" )
- {
- print "${sysconfdir}/ssh_host_key already exists, skipping.\n";
- }
- else
- {
- # if $sysconfdir/ssh_host_key doesn't exist..
- system("$bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N \"\"");
- }
+ my ($command) = @_;
- if ( -e "${sysconfdir}/ssh_host_dsa_key" )
- {
- print "${sysconfdir}/ssh_host_dsa_key already exists, skipping.\n";
- }
- else
+ printf "$command\n";
+
+ my $result = system("$command 2>&1");
+
+ if (($result or $?) and $command !~ m!patch!)
{
- # if $sysconfdir/ssh_host_dsa_key doesn't exist..
- system("$bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N \"\"");
+ die "ERROR: Unable to execute command: $!\n";
}
+}
- if ( -e "${sysconfdir}/ssh_host_rsa_key" )
+sub query_boolean
+{
+ my ($query_text, $default) = @_;
+ my $nondefault, $foo, $bar;
+
+ #
+ # Set $nondefault to the boolean opposite of $default.
+ #
+
+ if ($default eq "n")
{
- print "${sysconfdir}/ssh_host_rsa_key already exists, skipping.\n";
+ $nondefault = "y";
}
else
{
- # if $sysconfdir/ssh_host_rsa_key doesn't exist..
- system("$bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N \"\"");
+ $nondefault = "n";
}
- return 0;
-}
+ print "${query_text} ";
+ print "[$default] ";
-fixpaths();
-runkeygen();
+ $foo = <STDIN>;
+ ($bar) = split //, $foo;
-my $metadata = new Grid::GPT::Setup(package_name => "gsi_openssh_setup");
+ if ($bar ne $nondefault)
+ {
+ $bar = $default;
+ }
-$metadata->finish();
+ return $bar;
+}
-print "$myname: Finished configuring package 'gsi_openssh'.\n";
andersk / gssapi-openssh.git / blobdiff