+#!/usr/bin/perl
#
-# setup-openssh.pl:
-# Adapts the installed gsi-ssh environment to the current machine,
-# performing actions that originally occurred during the package's
-# 'make install' phase.
+# setup-openssh.pl
#
-# Large parts adapted from 'fixpath', a tool found in openssh-3.0.2p1.
+# Adapts the installed gsi-ssh environment to the current machine,
+# performing actions that originally occurred during the package's
+# 'make install' phase.
+#
+# Parts adapted from 'fixpath', a tool found in openssh-3.0.2p1.
#
# Send comments/fixes/suggestions to:
# Chase Phillips <cphillip@ncsa.uiuc.edu>
#
+printf("setup-openssh.pl: Configuring gsi-openssh package\n");
+
+#
+# Get user's GPT_LOCATION since we may be installing this using a new(er)
+# version of GPT.
+#
+
+$gptpath = $ENV{GPT_LOCATION};
+
+#
+# And the old standby..
+#
+
$gpath = $ENV{GLOBUS_LOCATION};
if (!defined($gpath))
{
# do so
#
-@INC = (@INC, "$gpath/lib/perl");
+if (defined($gptpath))
+{
+ @INC = (@INC, "$gptpath/lib/perl", "$gpath/lib/perl");
+}
+else
+{
+ @INC = (@INC, "$gpath/lib/perl");
+}
require Grid::GPT::Setup;
my $setupdir = "$globusdir/setup/globus";
my $myname = "setup-openssh.pl";
-print "$myname: Configuring package 'gsi_openssh'...\n";
-
#
# Set up path prefixes for use in the path translations
#
$prefix = ${globusdir};
$exec_prefix = "${prefix}";
$bindir = "${exec_prefix}/bin";
+$sbindir = "${exec_prefix}/sbin";
$mandir = "${prefix}/man";
$mansubdir = "man";
$libexecdir = "${exec_prefix}/libexec";
-$sysconfdir = "${prefix}/etc";
+$sysconfdir = "/etc/ssh";
$piddir = "/var/run";
$xauth_path = "/usr/bin/X11/xauth";
+#
+# Backup-related variables
+#
+
+$curr_time = time();
+$backupdir = "/etc/ssh/globus_backup_${curr_time}";
+
+#
+# Check that we are running as root
+#
+
+$uid = $>;
+
+if ($uid != 0)
+{
+ print "--> NOTE: You must be root to run this script! <--\n";
+ exit 0;
+}
+
+#
+# We need to make sure it's okay to copy our setup files (if some files are already
+# present). If we do copy any files, we backup the old files so the user can (possibly)
+# reverse any damage.
+#
+
+sub test_dirs
+{
+ print "\nPreparatory: Checking for existence of critical directories..\n";
+
+ #
+ # Remember to put in check for /etc
+ #
+
+ #
+ # Test for /etc/ssh
+ #
+
+ if ( ! -d "$sysconfdir" )
+ {
+ print "Could not find directory: '${sysconfdir}'.. creating.\n";
+ mkdir($sysconfdir, 16877);
+ # 16877 should be 755, or drwxr-xr-x
+ }
+
+ #
+ # Test for /etc/ssh/globus_backup_<curr>
+ #
+
+ if ( ! -d "${backupdir}" )
+ {
+ print "Could not find directory: '${backupdir}'.. creating.\n";
+ mkdir($backupdir, 16877);
+ }
+
+ return 0;
+}
+
+sub backup_files
+{
+ print "\nStage 1: Backing up configuration files to '${backupdir}/'..\n";
+
+ if ( -e "${sysconfdir}/ssh_config" )
+ {
+ action("cp ${sysconfdir}/ssh_config ${backupdir}/ssh_config");
+ }
+ else
+ {
+ print "${sysconfdir}/ssh_config does not exist.\n";
+ }
+
+ if ( -e "${sysconfdir}/sshd_config" )
+ {
+ action("cp ${sysconfdir}/sshd_config ${backupdir}/sshd_config");
+ }
+ else
+ {
+ print "${sysconfdir}/sshd_config does not exist.\n";
+ }
+
+ if ( -e "${sysconfdir}/moduli" )
+ {
+ action("cp ${sysconfdir}/moduli ${backupdir}/moduli");
+ }
+ else
+ {
+ print "${sysconfdir}/moduli does not exist.\n";
+ }
+}
+
+sub copy_setup_files
+{
+ my $response;
+
+ print "\nStage 2: Copying configuration files into '${sysconfdir}'..\n";
+
+ action("cp ${globusdir}/setup/globus/ssh_config ${sysconfdir}/ssh_config");
+ action("cp ${globusdir}/setup/globus/sshd_config ${sysconfdir}/sshd_config");
+ action("cp ${globusdir}/setup/globus/moduli ${sysconfdir}/moduli");
+}
+
+sub runkeygen
+{
+ print "\nStage 3: Generating ssh host keys..\n";
+
+ if ( ! -d "${sysconfdir}" )
+ {
+ print "Could not find ${sysconfdir} directory... creating\n";
+ mkdir($sysconfdir, 16877);
+ # 16877 should be 755, or drwxr-xr-x
+ }
+
+ if ( -e "${sysconfdir}/ssh_host_key" )
+ {
+ print "${sysconfdir}/ssh_host_key already exists, skipping.\n";
+ }
+ else
+ {
+ # if $sysconfdir/ssh_host_key doesn't exist..
+ action("$bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N \"\"");
+ }
+
+ if ( -e "${sysconfdir}/ssh_host_dsa_key" )
+ {
+ print "${sysconfdir}/ssh_host_dsa_key already exists, skipping.\n";
+ }
+ else
+ {
+ # if $sysconfdir/ssh_host_dsa_key doesn't exist..
+ action("$bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N \"\"");
+ }
+
+ if ( -e "${sysconfdir}/ssh_host_rsa_key" )
+ {
+ print "${sysconfdir}/ssh_host_rsa_key already exists, skipping.\n";
+ }
+ else
+ {
+ # if $sysconfdir/ssh_host_rsa_key doesn't exist..
+ action("$bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N \"\"");
+ }
+
+ return 0;
+}
+
sub fixpaths
{
+ my $g, $h;
+
+ print "\nStage 4: Translating strings in config and man files..\n";
+
#
# Set up path translations for the installation files
#
"/etc/sshrc" => "${sysconfdir}/sshrc",
"/usr/X11R6/bin/xauth" => "${xauth_path}",
"/usr/bin:/bin:/usr/sbin:/sbin" => "/usr/bin:/bin:/usr/sbin:/sbin:${bindir}",
- "/path/to/scp.real" => "${bindir}/scp.real",
- "/path/to/ssh" => "${bindir}/ssh",
);
#
#
@files = (
- "${bindir}/scp",
"${sysconfdir}/ssh_config",
"${sysconfdir}/sshd_config",
"${sysconfdir}/moduli",
"${mandir}/${mansubdir}1/sftp.1",
);
- print "Translating strings in config/man files...\n";
- for $f (@files)
+ for my $f (@files)
{
$f =~ /(.*\/)*(.*)$/;
$g = "$f.tmp";
+ #
+ # What is $f's filename? (taken from the qualified path)
+ #
+
+ $h = $f;
+ $h =~ s#^.*/##;
+
#
# Grab the current mode/uid/gid for use later
#
$uid = (stat($f))[4];
$gid = (stat($f))[5];
- $result = system("mv $f $g");
- if ($result != 0)
+ #
+ # Move $f into a .tmp file for the translation step
+ #
+
+ $result = system("mv $f $g 2>&1");
+ if ($result or $?)
{
- die "Failed to copy $f to $g!\n";
+ die "ERROR: Unable to execute command: $!\n";
}
open(IN, "<$g") || die ("$0: input file $g missing!\n");
close(OUT);
close(IN);
- $result = system("rm $g");
- if ($result != 0)
+ #
+ # Remove the old .tmp file
+ #
+
+ $result = system("rm $g 2>&1");
+
+ if ($result or $?)
{
- die "Failed to remove $g\n";
+ die "ERROR: Unable to execute command: $!\n";
}
#
chmod($mode, $f);
chown($uid, $gid, $f);
+
+ print "$h\n";
} # for $f
return 0;
}
-sub runkeygen
+sub fixGlobusLocation
{
- print "Generating ssh keys (if necessary)...\n";
- if ( -e "${sysconfdir}/ssh_host_key" )
- {
- print "${sysconfdir}/ssh_host_key already exists, skipping.\n";
- }
- else
+ $data = readFile($initfile);
+ $data =~ s|@GLOBUS_LOCATION@|$gpath|g;
+ writeFile($data);
+}
+
+### readFile( $filename )
+#
+# reads and returns $filename's contents
+#
+
+sub readFile
+{
+ my ($filename) = @_;
+ my $data;
+
+ open (IN, "$filename") || die "Can't open '$filename': $!";
+ $/ = undef;
+ $data = <IN>;
+ $/ = "\n";
+ close(IN);
+
+ return $data;
+}
+
+### writeFile( $filename, $fileinput )
+#
+# create the inputs to the ssl program at $filename, appending the common name to the
+# stream in the process
+#
+
+sub writeFile
+{
+ my ($filename, $fileinput) = @_;
+
+ #
+ # test for a valid $filename
+ #
+
+ if ( !defined($filename) || (length($filename) lt 1) )
{
- # if $sysconfdir/ssh_host_key doesn't exist..
- system("$bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N \"\"");
+ die "Filename is undefined";
}
- if ( -e "${sysconfdir}/ssh_host_dsa_key" )
+ if ( ( -e "$filename" ) && ( ! -w "$filename" ) )
{
- print "${sysconfdir}/ssh_host_dsa_key already exists, skipping.\n";
+ die "Cannot write to filename '$filename'";
}
- else
+
+ #
+ # write the output to $filename
+ #
+
+ open(OUT, ">$filename");
+ print OUT "$fileinput";
+ close(OUT);
+}
+
+print "---------------------------------------------------------------\n";
+print "Hi, I'm the setup script for the gsi_openssh package! There\n";
+print "are some last minute details that I've got to set straight\n";
+print "in the config and man files, along with generating the ssh keys\n";
+print "for this machine (if it doesn't already have them).\n";
+print "\n";
+print "I like to install my config-related files in:\n";
+print " ${sysconfdir}/\n";
+print "\n";
+print "These files may overwrite your previously existing configuration\n";
+print "files. If you choose to continue, you will find a backup of\n";
+print "those original files in:\n";
+print " ${backupdir}/\n";
+print "\n";
+print "Your host keys will remain untouched if they are already present.\n";
+print "If they aren't present, this script will generate them for you.\n";
+print "\n";
+
+$response = query_boolean("Do you wish to continue with the setup package?","y");
+
+if ($response eq "n")
+{
+ print "\n";
+ print "Okay.. exiting gsi_openssh setup.\n";
+
+ exit 0;
+}
+
+test_dirs();
+backup_files();
+copy_setup_files();
+runkeygen();
+fixpaths();
+
+my $metadata = new Grid::GPT::Setup(package_name => "gsi_openssh_setup");
+
+$metadata->finish();
+
+print "\n";
+print "$myname: Finished configuring package 'gsi_openssh'.\n";
+print "\n";
+print "I see that you have your GLOBUS_LOCATION environmental variable\n";
+print "set to:\n";
+print " $gpath\n";
+print "\n";
+print "Remember to keep this variable set (correctly) when you want\n";
+print "to use the executables that came with this package.\n";
+print "\n";
+print "Additionally, you may need to set LD_LIBRARY_PATH to point to\n";
+print "the location in which your globus libraries reside. For example:\n";
+print "\n";
+print " export LD_LIBRARY_PATH=\"$gpath/lib\"\n";
+print "\n";
+print "---------------------------------------------------------------\n";
+
+#
+# Just need a minimal action() subroutine for now..
+#
+
+sub action
+{
+ my ($command) = @_;
+
+ printf "$command\n";
+
+ my $result = system("$command 2>&1");
+
+ if (($result or $?) and $command !~ m!patch!)
{
- # if $sysconfdir/ssh_host_dsa_key doesn't exist..
- system("$bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N \"\"");
+ die "ERROR: Unable to execute command: $!\n";
}
+}
- if ( -e "${sysconfdir}/ssh_host_rsa_key" )
+sub query_boolean
+{
+ my ($query_text, $default) = @_;
+ my $nondefault, $foo, $bar;
+
+ #
+ # Set $nondefault to the boolean opposite of $default.
+ #
+
+ if ($default eq "n")
{
- print "${sysconfdir}/ssh_host_rsa_key already exists, skipping.\n";
+ $nondefault = "y";
}
else
{
- # if $sysconfdir/ssh_host_rsa_key doesn't exist..
- system("$bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N \"\"");
+ $nondefault = "n";
}
- return 0;
-}
+ print "${query_text} ";
+ print "[$default] ";
-fixpaths();
-runkeygen();
+ $foo = <STDIN>;
+ ($bar) = split //, $foo;
-my $metadata = new Grid::GPT::Setup(package_name => "gsi_openssh_setup");
+ if ( grep(/\s/, $bar) )
+ {
+ # this is debatable. all whitespace means 'default'
-$metadata->finish();
+ $bar = $default;
+ }
+ elsif ($bar ne $default)
+ {
+ # everything else means 'nondefault'.
-print "$myname: Finished configuring package 'gsi_openssh'.\n";
+ $bar = $nondefault;
+ }
+ else
+ {
+ # extraneous step. to get here, $bar should be eq to $default anyway.
+
+ $bar = $default;
+ }
+
+ return $bar;
+}
andersk / gssapi-openssh.git / blobdiff