X-Git-Url: http://andersk.mit.edu/gitweb/gssapi-openssh.git/blobdiff_plain/9ef2f43943ae66cff4804a8419b614323a0ef9fe..5327d9224ea125ed2ca81a1196eea76a13358859:/setup/setup-openssh.pl

diff --git a/setup/setup-openssh.pl b/setup/setup-openssh.pl
index 3ed7df0..c3bb316 100644
--- a/setup/setup-openssh.pl
+++ b/setup/setup-openssh.pl
@@ -29,8 +29,6 @@ my $globusdir = $gpath;
 my $setupdir = "$globusdir/setup/globus";
 my $myname = "setup-openssh.pl";
 
-print "$myname: Configuring package 'gsi_openssh'...\n";
-
 #
 # Set up path prefixes for use in the path translations
 #
@@ -38,15 +36,195 @@ print "$myname: Configuring package 'gsi_openssh'...\n";
 $prefix = ${globusdir};
 $exec_prefix = "${prefix}";
 $bindir = "${exec_prefix}/bin";
+$sbindir = "${exec_prefix}/sbin";
 $mandir = "${prefix}/man";
 $mansubdir = "man";
 $libexecdir = "${exec_prefix}/libexec";
-$sysconfdir = "${prefix}/etc";
+$sysconfdir = "/etc/ssh";
 $piddir = "/var/run";
 $xauth_path = "/usr/bin/X11/xauth";
 
+#
+# Backup-related variables
+#
+
+$curr_time = time();
+$backupdir = "globus_backup_${curr_time}";
+$confbackupdir = "$backupdir/s1_conf";
+$transbackupdir = "$backupdir/s3_trans";
+
+#
+# We need to make sure it's okay to copy our setup files (if some files are already
+# present).  If we do copy any files, we backup the old files so the user can (possibly)
+# reverse any damage.
+#
+
+sub test_dirs
+{
+    my $composite;
+
+    print "\nPreparatory: checking for existence of critical directories\n";
+
+    #
+    # Remember to put in check for /etc
+    #
+
+    #
+    # Test for /etc/ssh
+    #
+
+    $composite = $sysconfdir;
+    if ( ! -d "$composite" )
+    {
+        print "Could not find directory: '${composite}'.. creating.\n";
+        mkdir($composite, 16877);
+        # 16877 should be 755, or drwxr-xr-x
+    }
+
+    #
+    # Test for /etc/ssh/globus_backup_<curr>
+    #
+
+    $composite = "$sysconfdir/$backupdir";
+    if ( ! -d "${composite}" )
+    {
+        print "Could not find directory: '${composite}'.. creating.\n";
+        mkdir($composite, 16877);
+    }
+
+    #
+    # Test for /etc/ssh/globus_backup_<curr>/s1_conf
+    #
+
+    $composite = "$sysconfdir/$confbackupdir";
+    if ( ! -d "${composite}" )
+    {
+        print "Could not find directory: '${composite}'.. creating.\n";
+        mkdir($composite, 16877);
+    }
+
+    #
+    # Test for /etc/ssh/globus_backup_<curr>/s2_trans
+    #
+
+    $composite = "$sysconfdir/$transbackupdir";
+    if ( ! -d "${composite}" )
+    {
+        print "Could not find directory: '${composite}'.. creating.\n";
+        mkdir($composite, 16877);
+    }
+
+    return 0;
+}
+
+sub copy_setup_files
+{
+    my $response;
+
+    print "\nStage 1: Copying configuration files into '${sysconfdir}'..\n";
+
+    $response = "y";
+    if ( -e "${sysconfdir}/ssh_config" )
+    {
+        $response = query_boolean("${sysconfdir}/ssh_config already exists.  Overwrite?", "n");
+        if ($response eq "y")
+        {
+            action("cp ${sysconfdir}/ssh_config ${sysconfdir}/${confbackupdir}/ssh_config");
+        }
+    }
+
+    if ($response eq "y")
+    {
+        action("cp ${globusdir}/setup/globus/ssh_config ${sysconfdir}/ssh_config");
+    }
+
+    #
+    # Reset response for our new query
+    #
+
+    $response = "y";
+    if ( -e "${sysconfdir}/sshd_config" )
+    {
+        $response = query_boolean("${sysconfdir}/sshd_config already exists.  Overwrite?", "n");
+        if ($response eq "y")
+        {
+            action("cp ${sysconfdir}/sshd_config ${sysconfdir}/${confbackupdir}/sshd_config");
+        }
+    }
+
+    if ($response eq "y")
+    {
+        action("cp ${globusdir}/setup/globus/sshd_config ${sysconfdir}/sshd_config");
+    }
+
+    #
+    # Reset response for our new query
+    #
+
+    $response = "y";
+    if ( -e "${sysconfdir}/moduli" )
+    {
+        $response = query_boolean("${sysconfdir}/moduli already exists.  Overwrite?", "n");
+        if ($response eq "y")
+        {
+            action("cp ${sysconfdir}/moduli ${sysconfdir}/${confbackupdir}/moduli");
+        }
+    }
+
+    if ($response eq "y")
+    {
+        action("cp ${globusdir}/setup/globus/moduli ${sysconfdir}/moduli");
+    }
+}
+
+sub runkeygen
+{
+    print "\nStage 2: Generating ssh host keys..\n";
+
+    if ( ! -d "${sysconfdir}" )
+    {
+        print "Could not find ${sysconfdir} directory... creating\n";
+        mkdir($sysconfdir, 16877);
+        # 16877 should be 755, or drwxr-xr-x
+    }
+
+    if ( -e "${sysconfdir}/ssh_host_key" )
+    {
+        print "${sysconfdir}/ssh_host_key already exists, skipping.\n";
+    }
+    else
+    {
+        # if $sysconfdir/ssh_host_key doesn't exist..
+        action("$bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N \"\"");
+    }
+
+    if ( -e "${sysconfdir}/ssh_host_dsa_key" )
+    {
+        print "${sysconfdir}/ssh_host_dsa_key already exists, skipping.\n";
+    }
+    else
+    {
+        # if $sysconfdir/ssh_host_dsa_key doesn't exist..
+        action("$bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N \"\"");
+    }
+
+    if ( -e "${sysconfdir}/ssh_host_rsa_key" )
+    {
+        print "${sysconfdir}/ssh_host_rsa_key already exists, skipping.\n";
+    }
+    else
+    {
+        # if $sysconfdir/ssh_host_rsa_key doesn't exist..
+        action("$bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N \"\"");
+    }
+
+    return 0;
+}
+
 sub fixpaths
 {
+    my $g, $h;
+
     #
     # Set up path translations for the installation files
     #
@@ -65,32 +243,30 @@ sub fixpaths
         "/etc/sshrc" => "${sysconfdir}/sshrc",
         "/usr/X11R6/bin/xauth" => "${xauth_path}",
         "/usr/bin:/bin:/usr/sbin:/sbin" => "/usr/bin:/bin:/usr/sbin:/sbin:${bindir}",
-        "/path/to/scp.real" => "${bindir}/scp.real",
-        "/path/to/ssh" => "${bindir}/ssh",
         );
 
     #
     # Files on which to perform path translations
     #
 
-    @files = (
-        "${bindir}/scp",
-        "${sysconfdir}/ssh_config",
-        "${sysconfdir}/sshd_config",
-        "${sysconfdir}/moduli",
-        "${mandir}/${mansubdir}1/scp.1",
-        "${mandir}/${mansubdir}1/ssh-add.1",
-        "${mandir}/${mansubdir}1/ssh-agent.1",
-        "${mandir}/${mansubdir}1/ssh-keygen.1",
-        "${mandir}/${mansubdir}1/ssh-keyscan.1",
-        "${mandir}/${mansubdir}1/ssh.1",
-        "${mandir}/${mansubdir}8/sshd.8",
-        "${mandir}/${mansubdir}8/sftp-server.8",
-        "${mandir}/${mansubdir}1/sftp.1",
+    %files = (
+        "${sysconfdir}/ssh_config" => 1,
+        "${sysconfdir}/sshd_config" => 1,
+        "${sysconfdir}/moduli" => 1,
+        "${mandir}/${mansubdir}1/scp.1" => 0,
+        "${mandir}/${mansubdir}1/ssh-add.1" => 0,
+        "${mandir}/${mansubdir}1/ssh-agent.1" => 0,
+        "${mandir}/${mansubdir}1/ssh-keygen.1" => 0,
+        "${mandir}/${mansubdir}1/ssh-keyscan.1" => 0,
+        "${mandir}/${mansubdir}1/ssh.1" => 0,
+        "${mandir}/${mansubdir}8/sshd.8" => 0,
+        "${mandir}/${mansubdir}8/sftp-server.8" => 0,
+        "${mandir}/${mansubdir}1/sftp.1" => 0,
         );
 
-    print "Translating strings in config/man files...\n";
-    for $f (@files)
+    print "\nStage 3: Translating strings in config and man files...\n";
+
+    for my $f (keys %files)
     {
         $f =~ /(.*\/)*(.*)$/;
 
@@ -101,6 +277,13 @@ sub fixpaths
 
         $g = "$f.tmp";
 
+        #
+        # get the filename for $f and place it in $h.
+        #
+
+        $h = $f;
+        $h =~ s#^.*/##;
+
         #
         # Grab the current mode/uid/gid for use later
         #
@@ -109,10 +292,28 @@ sub fixpaths
         $uid = (stat($f))[4];
         $gid = (stat($f))[5];
 
-        $result = system("mv $f $g");
-        if ($result != 0)
+        #
+        # Move $f into a .tmp file for the translation step
+        #
+
+        $result = system("mv $f $g 2>&1");
+        if ($result or $?)
         {
-            die "Failed to copy $f to $g!\n";
+            die "ERROR: Unable to execute command: $!\n";
+        }
+
+        #
+        # Create a backup of this file if it's flagged
+        #
+
+        if ($files{$f} == 1)
+        {
+            $result = system("cp $g ${sysconfdir}/${transbackupdir}/$h 2>&1");
+
+            if ($result or $?)
+            {
+                die "ERROR: Unable to execute command: $!\n";
+            }
         }
 
         open(IN, "<$g") || die ("$0: input file $g missing!\n");
@@ -130,10 +331,15 @@ sub fixpaths
         close(OUT);
         close(IN);
 
-        $result = system("rm $g");
-        if ($result != 0)
+        #
+        # Remove the old .tmp file
+        #
+
+        $result = system("rm $g 2>&1");
+
+        if ($result or $?)
         {
-            die "Failed to remove $g\n";
+            die "ERROR: Unable to execute command: $!\n";
         }
 
         #
@@ -145,50 +351,86 @@ sub fixpaths
         chown($uid, $gid, $f);
     } # for $f
 
+    print "complete.\n";
+
     return 0;
 }
 
-sub runkeygen
+print "---------------------------------------------------------------\n";
+print "$myname: Configuring package 'gsi_openssh'..\n";
+print "\n";
+print "--> NOTE: Run this as root for the intended effect. <--\n";
+
+test_dirs();
+copy_setup_files();
+runkeygen();
+fixpaths();
+
+my $metadata = new Grid::GPT::Setup(package_name => "gsi_openssh_setup");
+
+$metadata->finish();
+
+print "\n";
+print "$myname: Finished configuring package 'gsi_openssh'.\n";
+print "\n";
+print "You are required to set the following variables in your environment\n";
+print "to ensure that the gsi_ssh package works correctly:\n";
+print "\n";
+print "\$GSI_SCP_LOC = \"${bindir}/scp.real\"\n";
+print "\$GSI_SFTP_LOC = \"${bindir}/sftp.real\"\n";
+print "\$GSI_SSH_LOC = \"${bindir}/ssh\"\n";
+print "\$GSI_SSHD_LOC = \"${sbindir}/sshd.real\"\n";
+print "\$GSI_SSH_CONFIG_LOC = \"${sysconfdir}/ssh_config\"\n";
+print "\$GSI_SSHD_CONFIG_LOC = \"${sysconfdir}/sshd_config\"\n";
+print "---------------------------------------------------------------\n";
+
+#
+# Just need a minimal action() subroutine for now..
+#
+
+sub action
 {
-    print "Generating ssh keys (if necessary)...\n";
-    if ( -e "${sysconfdir}/ssh_host_key" )
-    {
-        print "${sysconfdir}/ssh_host_key already exists, skipping.\n";
-    }
-    else
-    {
-        # if $sysconfdir/ssh_host_key doesn't exist..
-        system("$bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N \"\"");
-    }
+    my ($command) = @_;
 
-    if ( -e "${sysconfdir}/ssh_host_dsa_key" )
-    {
-        print "${sysconfdir}/ssh_host_dsa_key already exists, skipping.\n";
-    }
-    else
+    printf "$command\n";
+
+    my $result = system("$command 2>&1");
+
+    if (($result or $?) and $command !~ m!patch!)
     {
-        # if $sysconfdir/ssh_host_dsa_key doesn't exist..
-        system("$bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N \"\"");
+        die "ERROR: Unable to execute command: $!\n";
     }
+}
 
-    if ( -e "${sysconfdir}/ssh_host_rsa_key" )
+sub query_boolean
+{
+    my ($query_text, $default) = @_;
+    my $nondefault, $foo, $bar;
+
+    #
+    # Set $nondefault to the boolean opposite of $default.
+    #
+
+    if ($default eq "n")
     {
-        print "${sysconfdir}/ssh_host_rsa_key already exists, skipping.\n";
+        $nondefault = "y";
     }
     else
     {
-        # if $sysconfdir/ssh_host_rsa_key doesn't exist..
-        system("$bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N \"\"");
+        $nondefault = "n";
     }
 
-    return 0;
-}
+    print "${query_text} ";
+    print "[$default] ";
 
-fixpaths();
-runkeygen();
+    $foo = <STDIN>;
+    ($bar) = split //, $foo;
 
-my $metadata = new Grid::GPT::Setup(package_name => "gsi_openssh_setup");
+    if ($bar ne $nondefault)
+    {
+        $bar = $default;
+    }
 
-$metadata->finish();
+    return $bar;
+}
 
-print "$myname: Finished configuring package 'gsi_openssh'.\n";