Store a mac with confirmed sudo passwords, so that they cannot be modified by editing...
[mirror/userdir-ldap.git] / ud-replicate
1 #! /bin/bash
2
3 #   Copyright (c) 1999-2001  Jason Gunthorpe <jgg@debian.org>
4 #   Copyright (c) 2002-2003,2006  Ryan Murray <rmurray@debian.org>
5 #   Copyright (c) 2004-2005  Joey Schulze <joey@infodrom.org>
6 #   Copyright (c) 2008 Peter Palfrader <peter@palfrader.org>
7 #   Copyright (c) 2008 Stephen Gran <sgran@debian.org>
8 #
9 #   This program is free software; you can redistribute it and/or modify
10 #   it under the terms of the GNU General Public License as published by
11 #   the Free Software Foundation; either version 2 of the License, or
12 #   (at your option) any later version.
13 #
14 #   This program is distributed in the hope that it will be useful,
15 #   but WITHOUT ANY WARRANTY; without even the implied warranty of
16 #   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17 #   GNU General Public License for more details.
18 #
19 #   You should have received a copy of the GNU General Public License
20 #   along with this program; if not, write to the Free Software
21 #   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
22
23 set -e
24
25 # Without effect on the commandline
26 if [ -z "$TERM" -o "$TERM" = "dumb" ]
27 then
28     exec > /dev/null 2>&1
29     sleep $(( $RANDOM % 120 ))
30 else
31     verbose=-v
32 fi
33
34 tempdir=''
35
36 cleanup ()
37 {
38   rm -f lock
39   rm -rf $tempdir
40 }
41
42 PATH=/sbin:/usr/sbin:/bin:/usr/bin
43 export PATH
44 HOST=`hostname -f`
45 SYNCHOST=`ud-config synchost`;
46 LOCALSYNCON=`ud-config localsyncon`;
47 EMAILAPPEND=`ud-config emailappend`;
48 cd /tmp/
49 cd /var/lib/misc || cd /var/state/glibc/ || cd /var/db/
50 lockfile -r 1 -l 3600 lock
51 trap cleanup exit
52
53 case $HOST in
54 $LOCALSYNCON)
55     udhost=
56     ;;
57 *)
58     udhost="sshdist@$SYNCHOST:"
59     ;;
60 esac
61
62 rsync ${verbose} -e 'ssh -i /etc/ssh/ssh_host_rsa_key -o PreferredAuthentications=publickey' -rp "${udhost}/var/cache/userdir-ldap/hosts/$HOST" .
63
64 makedb "$HOST/passwd.tdb" -o passwd.db.t
65 if [ -s "$HOST/shadow.tdb" ]
66 then
67     (umask 027 && makedb "$HOST/shadow.tdb" -o shadow.db.t)
68     chown root.shadow shadow.db.t
69     chmod 0640 shadow.db.t
70     mv -f shadow.db.t shadow.db
71 fi
72 makedb "$HOST/group.tdb" -o group.db.t
73 mv -f passwd.db.t passwd.db
74 mv -f group.db.t group.db
75 for a in $HOST/ssh-rsa-shadow $HOST/ssh_known_hosts; do
76         ln -sf $a .
77 done
78 ln -sf `pwd -P`/ssh-rsa-shadow /etc/ssh
79 ln -sf `pwd -P`/ssh_known_hosts /etc/ssh
80
81 if [ -e ${HOST}/ssh-keys.tar.gz ]; then
82   export TMPDIR='/tmp/'
83   tempdir=$(mktemp -d)
84   tar -C "$tempdir" -xf ${HOST}/ssh-keys.tar.gz
85   mkdir -p userkeys
86   chmod 755 $tempdir
87   rsync -a --delete-after $tempdir/ userkeys/
88 fi
89
90 CHROOTS=""
91 if [ -x /usr/bin/dchroot ]; then
92         CHROOTS=`dchroot --listpaths`
93 elif [ -x /usr/bin/dchroot-dsa ]; then
94         CHROOTS=$(dchroot-dsa -i | grep Location | awk '{print $2}')
95 fi
96 if [ -n "$CHROOTS" ]; then
97         for c in $CHROOTS; do
98                 if [ -x "$c/usr/bin/makedb" ]
99                 then
100
101                         test ! -d "$c/var/lib/misc/$HOST" || mkdir -p "$c/var/lib/misc/$HOST"
102
103                         rsync -a ${verbose} $HOST/group.tdb $HOST/passwd.tdb $HOST/ssh* "$c/var/lib/misc/$HOST"
104
105                         test ! -f "$c/var/lib/misc/$HOST/shadow.tdb" || rm -f "$c/var/lib/misc/$HOST/shadow.tdb"
106                         test ! -f "$c/var/lib/misc/shadow.db" || rm -f "$c/var/lib/misc/shadow.db"
107
108                         chroot "$c" makedb "/var/lib/misc/$HOST/passwd.tdb" -o /var/lib/misc/passwd.db.t
109                         chroot "$c" makedb "/var/lib/misc/$HOST/group.tdb" -o /var/lib/misc/group.db.t
110                         mv -f "$c/var/lib/misc/passwd.db.t" "$c/var/lib/misc/passwd.db"
111                         mv -f "$c/var/lib/misc/group.db.t" "$c/var/lib/misc/group.db"
112                         ln -sf "$HOST/ssh_known_hosts" "$c/var/lib/misc/"
113                         ln -sf ../../var/lib/misc/ssh_known_hosts "$c/etc/ssh"
114                 fi
115         done
116 fi
117
118 if [ -d "/etc/exim4" -a -e "$HOST/bsmtp" ]; then
119         if perl -e 'exit !((stat "/etc/exim4/bsmtp")[9] < time()-3600)'; then
120                 cp "$HOST/bsmtp" /etc/exim4/bsmtp
121         fi
122 fi
123 if [ -d "/etc/postfix" -a -f "$HOST/forward-alias" ]; then
124         sed -e "s/:/@$EMAILAPPEND/" $HOST/forward-alias > /etc/postfix/debian
125         /usr/sbin/postmap hash:/etc/postfix/debian < /etc/postfix/debian || true
126 fi