X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=ud-replicate;h=f148bf6096a4127b35a5d979d53d8aa98ab2f9c7;hb=432f864af2347050e3dce2ff7002f04176468206;hp=143984703a19d2cc060606fdc6abf80780544483;hpb=51f98437460dd3adac2cacd9510551dd2f3d54a7;p=mirror%2Fuserdir-ldap.git diff --git a/ud-replicate b/ud-replicate index 1439847..f148bf6 100755 --- a/ud-replicate +++ b/ud-replicate @@ -1,13 +1,127 @@ -#! /bin/sh -# The rsync source host needs to be customized.. +#! /bin/bash + +# Copyright (c) 1999-2001 Jason Gunthorpe +# Copyright (c) 2002-2003,2006 Ryan Murray +# Copyright (c) 2004-2005 Joey Schulze +# Copyright (c) 2008 Peter Palfrader +# Copyright (c) 2008 Stephen Gran +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 2 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, write to the Free Software +# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + set -e +# Without effect on the commandline +if [ -z "$TERM" -o "$TERM" = "dumb" ] +then + exec > /dev/null 2>&1 + sleep $(( $RANDOM % 120 )) +else + verbose=-v +fi + +tempdir='' + +cleanup () +{ + rm -f lock + rm -rf $tempdir +} + +PATH=/sbin:/usr/sbin:/bin:/usr/bin +export PATH HOST=`hostname -f` +SYNCHOST=`ud-config synchost`; +LOCALSYNCON=`ud-config localsyncon`; cd /tmp/ -cd /var/lib/misc > /dev/null 2>&1 || cd /var/state/glibc/ > /dev/null 2>&1 || cd /var/db/ > /dev/null 2>&1 +cd /var/lib/misc || cd /var/state/glibc/ || cd /var/db/ lockfile -r 1 -l 3600 lock -trap "rm -f lock > /dev/null 2>&1" exit -rsync -e ssh -rp sshdist@samosa:/var/cache/userdir-ldap/hosts/$HOST . > /dev/null 2>&1 -makedb $HOST/passwd.tdb -o passwd.db > /dev/null 2>&1 -makedb $HOST/shadow.tdb -o shadow.db > /dev/null 2>&1 -makedb $HOST/group.tdb -o group.db > /dev/null 2>&1 +trap cleanup exit + +case $HOST in +$LOCALSYNCON) + udhost= + ;; +*) + udhost="sshdist@$SYNCHOST:" + ;; +esac + +rsync ${verbose} -e 'ssh -i /etc/ssh/ssh_host_rsa_key -o PreferredAuthentications=publickey' -rp "${udhost}/var/cache/userdir-ldap/hosts/$HOST" . + +makedb "$HOST/passwd.tdb" -o passwd.db.t +if [ -s "$HOST/shadow.tdb" ] +then + (umask 027 && makedb "$HOST/shadow.tdb" -o shadow.db.t) + chown root.shadow shadow.db.t + chmod 0640 shadow.db.t + mv -f shadow.db.t shadow.db +fi +makedb "$HOST/group.tdb" -o group.db.t +mv -f passwd.db.t passwd.db +mv -f group.db.t group.db +for a in $HOST/ssh-rsa-shadow $HOST/ssh_known_hosts; do + ln -sf $a . +done +ln -sf `pwd -P`/ssh-rsa-shadow /etc/ssh +ln -sf `pwd -P`/ssh_known_hosts /etc/ssh + +if [ -e ${HOST}/ssh-keys.tar.gz ]; then + export TMPDIR='/tmp/' + tempdir=$(mktemp -d) + old=$(pwd -P) + cd $tempdir && tar -xf ${old}/${HOST}/ssh-keys.tar.gz + cd $old + mkdir userkeys 2> /dev/null || true + chmod 755 $tempdir + rsync -a --delete-after $tempdir/ userkeys/ +fi + +CHROOTS="" +if [ -x /usr/bin/dchroot ]; then + CHROOTS=`dchroot --listpaths` +elif [ -x /usr/bin/dchroot-dsa ]; then + CHROOTS=$(dchroot-dsa -i | grep Location | awk '{print $2}') +fi +if [ -n "$CHROOTS" ]; then + for c in $CHROOTS; do + if [ -x "$c/usr/bin/makedb" ] + then + + test ! -d "$c/var/lib/misc/$HOST" || mkdir -p "$c/var/lib/misc/$HOST" + + rsync -a ${verbose} $HOST/group.tdb $HOST/passwd.tdb $HOST/ssh* "$c/var/lib/misc/$HOST" + + test ! -f "$c/var/lib/misc/$HOST/shadow.tdb" || rm -f "$c/var/lib/misc/$HOST/shadow.tdb" + test ! -f "$c/var/lib/misc/shadow.db" || rm -f "$c/var/lib/misc/shadow.db" + + chroot "$c" makedb "/var/lib/misc/$HOST/passwd.tdb" -o /var/lib/misc/passwd.db.t + chroot "$c" makedb "/var/lib/misc/$HOST/group.tdb" -o /var/lib/misc/group.db.t + mv -f "$c/var/lib/misc/passwd.db.t" "$c/var/lib/misc/passwd.db" + mv -f "$c/var/lib/misc/group.db.t" "$c/var/lib/misc/group.db" + ln -sf "$HOST/ssh_known_hosts" "$c/var/lib/misc/" + ln -sf ../../var/lib/misc/ssh_known_hosts "$c/etc/ssh" + fi + done +fi + +if [ -d "/etc/exim4" -a -e "$HOST/bsmtp" ]; then + if perl -e 'exit !((stat "/etc/exim4/bsmtp")[9] < time()-3600)'; then + cp "$HOST/bsmtp" /etc/exim4/bsmtp + fi +fi +if [ -d "/etc/postfix" -a -f "$HOST/forward-alias" ]; then + sed -e 's/:/@debian.org/' $HOST/forward-alias > /etc/postfix/debian + /usr/sbin/postmap hash:/etc/postfix/debian < /etc/postfix/debian || true +fi