git.treefish.org Git - fex.git/blob

1 #!/usr/bin/perl -w

3 use 5.006;

4 use Getopt::Std;

5 use File::Basename;

6 use Socket;

7 use IO::Socket::INET;

8 use Digest::MD5 'md5_hex';

10 our (@local_rdomains,@local_rhosts);

12 $ENV{PATH} .= ':/sbin:/usr/sbin';

14 $usage = "usage: $0 [-p port] [IP-address]\n";

15 $xinetd = '/etc/xinetd.d/fex';

17 umask 022;

19 if ($<) {

20 die "you must be root to install F*EX\n";

21 }

23 $fex = 'fex.rus.uni-stuttgart.de';

24 if (system("host $fex >/dev/null") != 0) {

25 die "host $fex is not resolvable - check /etc/resolv.conf\n";

26 }

28 # $fexupdate = '/root/bin/fexupdate';

29 # die "found $fexupdate\n" if -x $fexupdate;

31 $opt_p = 80;

33 if (open $xinetd,$xinetd) {

34 while (<$xinetd>) {

35 if (/^\s*port\s*=\s*(\d+)/) {

36 $opt_p = $fexport = $1;

37 }

38 if (/^\s*bind\s*=\s*([\d.]+)$/) {

39 $fexip = $ip = $1;

40 }

41 }

42 close $xinetd;

43 }

45 goto INSTALL if $0 =~ /upgrade$/;

47 if (`uname` =~ /^SunOS/) {

48 die "Solaris is currently not supported. "

49 ."Please contact framstag\@rus.uni-stuttgart.de for details.\n";

50 }

52 getopts('p:') or die $usage;

54 $arg = shift;

55 if ($arg and -f "locale/$arg/lib/fup.pl") {

56 exec 'locale/translate',$arg;

57 } else {

58 $ip = $arg || $fexip || 0;

59 }

61 # if (not $ip and open P,"ifconfig 2>/dev/null |") {

62 if (not $ip and open P,'host $(hostname)|') {

63 $guessed_ip = 0;

64 while (<P>) {

65 if (/(\d+\.\d+\.\d+\.\d+)/) {

66 $guessed_ip = $1;

67 last;

68 }

69 }

70 close P;

71 unless (-f $xinetd) {

72 print "Your IP [$guessed_ip] : ";

73 chomp($ip = <STDIN>);

74 }

75 $ip ||= $guessed_ip;

76 }

79 ($hostname) = gethostbyaddr(gethostbyname($ip),AF_INET);

80 die "cannot find hostname for IP $ip\n" unless $hostname;

82 print "checking prerequisites\n";

84 if (`which xinetd` =~ m{^/}) {

85 print "found xinetd\n";

86 } else {

87 print "xinetd executable NOT found\n";

88 $premiss++;

89 }

91 foreach (qw'/usr/lib/sendmail /usr/sbin/sendmail') {

92 if (-x) {

93 $sendmail = $_;

94 print "found $sendmail\n";

95 last;

96 }

97 }

98 unless ($sendmail) {

99 print "sendmail NOT found\n";

100 $premiss++;

101 }

102

103 if ($premiss) {

104 print "installation aborted, nothing has been touched yet\n";

105 print "what now? ==> see doc/installation\n";

106 exit 1;

107 }

108

109 unless ($fexport) {

110

111 $SH = IO::Socket::INET->new(

112 PeerAddr => $ip,

113 PeerPort => $opt_p,

114 Proto => 'tcp',

115 );

116

117 if ($SH) {

118 print "There is already a tcp-service running on $ip:$opt_p !\n";

119 print "Select another port for F*EX by running $0 -p OTHERPORT $ip\n";

120 print "or an alternative IP-address by running $0 OTHERADDRESS\n";

121 exit 5;

122 }

123 }

124

125 print "prerequisites checked, ok\n";

126

127 unless (getpwnam('fex')) {

128 print "creating user fex\n";

129 system 'groupadd --system fex 2>/dev/null || groupadd fex';

130 my @g = getgrnam('fex') or die "$0: cannot groupadd fex\n";

131 my $gid = $g[2];

132 if (getpwuid($gid)) {

133 system "useradd -s /bin/bash -c 'File EXchange' -g $gid -m fex"

134 } else {

135 system "useradd -s /bin/bash -c 'File EXchange' -u $gid -g $gid -m fex"

136 }

137 exit $? if $?;

138 }

139

140 if (open F,'/etc/passwd') {

141 while (<F>) {

142 $fexbash = $_ if /^fex:.*\/bash/;

143 }

144 close F;

145 }

146 unless ($fexbash) {

147 die "no bash login shell for user fex\n";

148 }

149

150 INSTALL:

151

152 umask 077;

153

154 @FEX = getpwnam('fex') or die "no user fex\n";

155 $FEXHOME = $FEX[7];

156 $ENV{HOME} = $FEXHOME; # needed for later eval fex.ph

157

158 die "no HOME directory for user fex\n" unless -d $FEXHOME;

159 if ($FEXHOME !~ /fex/) {

160 print "HOME=$FEXHOME for user fex does not contain \"fex\"\n";

161 print "REALLY continue?! ";

162 $_ = <STDIN>;

163 exit unless /^y/i;

164 }

165

166 print "Installing:\n";

167

168 $pecl = "$FEXHOME/perl/Encode/ConfigLocal.pm";

169 unless (-f $pecl) {

170 mkdir "$FEXHOME/perl";

171 mkdir "$FEXHOME/perl/Encode";

172 open $pecl,'>',$pecl or die "$0: cannot write $pecl - $!\n";

173 print {$pecl}

174 "# hack for broken Perl in SuSe and Solaris, used via \@INC in fexsrv\n",

175 "1;\n";

176 close $pecl;

177 print $pecl,"\n";

178 chownr('fex:root',"$FEXHOME/perl");

179 }

180

181 @save = (

182 "lib/fex.ph",

183 "lib/fup.pl",

184 "lib/reactivation.txt",

185 "etc/mime.types",

186 "htdocs/index.html",

187 "htdocs/robots.txt",

188 "htdocs/FAQ/local.faq",

189 );

190

191 foreach $s (@save) {

192 $f = "$FEXHOME/$s";

193 if (-e $f) {

194 $fs = $f.'_save';

195 rename $f,$fs and print "$f --> $fs\n";

196 }

197 }

198

199 cpav(qw'bin cgi-bin lib etc htdocs doc',$FEXHOME);

200 unlink "$FEXHOME/doc/License";

201 unlink "$FEXHOME/htdocs/License";

202

203 $hl = "$FEXHOME/htdocs/locale";

204 unless (-d $hl) { mkdir $hl or die "$0: cannot mkdir $hl - $!\n" }

205

206 foreach $s (@save) {

207 $f = "$FEXHOME/$s";

208 $fs = $f.'_save';

209 $fn = $f.'_new';

210 if (-e $fs) {

211 unlink $fn;

212 rename $f,$fn and print "$f --> $fn\n";

213 rename $fs,$f and print "$fs --> $f\n";

214 }

215 }

216

217 if (-d "$FEXHOME/spool") {

218 warn "checking $FEXHOME/spool ...\n";

219 &convert_spool;

220 } else {

221 $newinstall = $FEXHOME;

222 chmod 0700,$FEXHOME;

223 mkdir "$FEXHOME/spool",0700 or die "cannot mkdir $FEXHOME/spool - $!\n";

224 mkdir "$FEXHOME/spool/.error",0700;

225 }

226 foreach my $dir (qw'.dkeys .ukeys .akeys .skeys .gkeys .xkeys .locks') {

227 mkdir "$FEXHOME/spool/$dir",0700;

228 }

229

230 chownr('fex',"$FEXHOME/spool/.");

231

232 # fex-VM?

233 if (open my $setup,'/root/bin/setup') {

234 while (<$setup>) {

235 exit if /#.*X-VM/;

236 }

237 close $setup;

238 }

239

240 system(qw'perl -p -i -e',

241 's:href="/?FAQ.html":href="/FAQ/FAQ.html":',

242 "$FEXHOME/lib/fup.pl"

243 );

244

245 $fph = "$FEXHOME/lib/fex.ph";

246 open $fph,$fph or die "cannot read $fph - $!\n";

247 while (<$fph>) {

248 s/'MYHOSTNAME.MYDOMAIN'/'$hostname'/;

249 $conf .= $_;

250 }

251 close $fph;

252

253 eval $conf;

254

255 # die "no \$spooldir in $fph\n" unless $spooldir;

256 $spooldir ||= '/home/fex/spool';

257 die "\$spooldir=$spooldir is not a directory, see $fph\n" unless -d $spooldir;

258 symlink $spooldir,"$FEXHOME/spool" unless -e "$FEXHOME/spool";

259 @sds1 = stat "$spooldir/.";

260 @sds2 = stat "$FEXHOME/spool/.";

261 if ("@sds1" ne "@sds2") {

262 die "$FEXHOME/spool is not a symbolic link to \$spooldir=$spooldir\n";

263 }

264

265 $fid = "$FEXHOME/.fex/id";

266 $aa = "$spooldir/$admin/@";

267

268 if ($newinstall or not -s $aa) {

269 print "\n";

270 for (;;) {

271 print "Server hostname [$hostname] : ";

272 $_ = <STDIN>;

273 s/\s//g;

274 $hostname = $_ if $_;

275 last if gethostbyname($hostname);

276 print "No DNS for $hostname\n";

277 }

278 for (;;) {

279 print "F*EX admin [$admin] : ";

280 $_ = <STDIN>;

281 s/\s//g;

282 $admin = $_ if $_;

283 last if $admin =~ /.\@./;

284 print "admin must be a valid email address!\n";

285 }

286 $aa = "$spooldir/$admin/@";

287 while (not $admin_pw) {

288 print "F*EX admin password: ";

289 $admin_pw = <STDIN>;

290 $admin_pw =~ s/\s//g;

291 }

292 mkfid();

293 print "(admin password is in $aa)\n";

294 $conf =~ s/^\s*\$hostname\s*=.*/\$hostname = '$hostname';/m;

295 $conf =~ s/^\s*\$admin\s*=.*/\$admin = '$admin';/m;

296 } else {

297 if ($admin_pw) {

298 print "\nFound old \$admin_pw in $fph !\n";

299 print "This is no longer supported for security reason.\n";

300 if (open $aa,$aa) {

301 $_ = <$aa>||'';

302 chomp;

303 close $aa;

304 if ($_ ne $admin_pw) {

305 print "\nYou have to delete \$admin_pw in $fph and run\n";

306 print "$FEXHOME/bin/fac -u $admin $admin_pw\n";

307 print "\nThen rerun $0\n";

308 exit 2;

309 }

310 }

311 mkfid();

312 print "\$admin_pw is transfered to auth-ID in $aa\n\n";

313 $conf =~ s/^\s*(\$admin_pw)\s*=.*/# $1 is now auth_ID of user \$admin/m;

314 }

315 }

316

317 open $fph,">$fph.new" or die "$0: cannot write $fph.new - $!\n";

318 print {$fph} $conf;

319 close $fph;

320 system "chown fex $fph.new";

321 rename "$fph.new",$fph or die "$0: cannot rename $fph.new to $fph - $!\n";

322

323 do $fph or die "$0: error in new $fph - $!\n";

324

325 if (@locales = glob "locale/*/lib/fup.pl") {

326 foreach (@locales) {

327 m{locale/(.+?)/} and $locale = $1;

328 if (-f "$FEXHOME/$_") {

329 system 'locale/translate',$locale;

330 chownr('fex',"$FEXHOME/locale/$locale");

331 $hl = "$FEXHOME/htdocs/locale/$locale";

332 symlink "$FEXHOME/locale/$locale/htdocs",$hl unless -l $hl;

333 chownr('fex',"$FEXHOME/htdocs/locale/$locale");

334 } else {

335 push @nlocales,"./install $1\n";

336 }

337 }

338 if (@nlocales) {

339 if (glob "$FEXHOME/locale/*/lib/fup.pl") {

340 print "\nTo install another localized version, type:\n";

341 } else {

342 print "\nTo install a localized version, type:\n";

343 }

344 print @nlocales;

345 }

346 }

347

348 $fph = "$FEXHOME/lib/fex.ph";

349 do $fph;

350

351 unless (-f $xinetd) {

352 my $xc = '/etc/xinetd.conf';

353 if (open $xc,$xc) {

354 while (<$xc>) {

355 if (/^\s*only_from/) {

356 print "WARNING: found \"only_from\" in $xc : fexsrv is restricted!\n";

357 }

358 }

359 close $xc;

360 }

361 if (-d '/etc/xinetd.d') {

362 unless (-f $xinetd) {

363 open $xinetd,">$xinetd" or die "cannot write $xinetd - $!\n";

364 open F,'etc/xinetd_fex' or die "cannot read etc/xinetd_fex - $!\n";

365 while (<F>) {

366 s/FEXHOME/$FEXHOME/;

367 s/PORT/$opt_p/;

368 s/ADDRESS/$ip/;

369 print {$xinetd} $_;

370 }

371 close F;

372 close $xinetd;

373 system qw'/etc/init.d/xinetd restart';

374 print "WARNING: cannot restart xinetd\n" if $?;

375 }

376 } else {

377 print "WARNING: No /etc/xinetd.d found.\n";

378 print "WARNING: You have to install etc/xinetd_fex manually.\n";

379 }

380

381 $crontab = `crontab -u fex -l 2>/dev/null`;

382 if ($crontab !~ /fex_cleanup/) {

383 open $crontab,">fex.cron" or die "cannot create fex.cron - $!\n";

384 print {$crontab} $crontab,"\n";

385 print {$crontab} " 3 2 * * * exec $FEXHOME/bin/backup\n";

386 print {$crontab} " 3 3 * * * exec $FEXHOME/bin/fex_cleanup\n";

387 close $crontab;

388 system qw'crontab -u fex fex.cron';

389 }

390

391 chownr('fex:root',$FEXHOME,"$FEXHOME/spool/.","$FEXHOME/htdocs/.");

392 chmodr('go-r',"$FEXHOME/lib","$FEXHOME/cgi-bin","$FEXHOME/spool/.");

393

394 print "\n";

395 print "Now check configuration file $FEXHOME/lib/fex.ph and run\n";

396 print "$FEXHOME/bin/fac for further configuration and user management.\n";

397 print "(You can do this as user \"fex\")\n";

398 } else {

399

400 chmodr('go-r',"$FEXHOME/lib","$FEXHOME/cgi-bin");

401

402 print "\n";

403 print "F*EX update installed.\n";

404 print "You can inform your users about the new features with:\n";

405 print "$FEXHOME/bin/fexwall 'new F*EX features on $hostname' ".

406 "< $FEXHOME/doc/newfeatures\n";

407 }

408

409 chmod 0755,"$FEXHOME/htdocs/locale";

410 chmod 0755,glob("$FEXHOME/locale/*/htdocs");

411

412 if (@local_rdomains and not @local_rhosts) {

413 print "\nWARNING:\n";

414 print "In $fph you have \@local_rdomains but not \@local_rhosts!\n";

415 print "Selfregistrating of external users will not work!\n";

416 print "See ${fph}_new/\n";

417 }

418

419 if (`$sendmail -h 2>&1 </dev/null` =~ /exim/ and

420 `grep trusted_users /etc/exim4/exim4.conf 2>/dev/null` !~ /\bfex\b/) {

421 print "\nWARNING:\n";

422 print "$sendmail is exim\n";

423 print "You MUST set in your exim4.conf:\n";

424 print "trusted_users = mail : uucp : fex\n";

425 }

426

427 exit;

428

429 sub mkfid {

430 my $ad = dirname($aa);

431 mkdir $ad;

432 open $aa,'>',$aa or die "$0: cannot create $aa - $!\n";

433 print {$aa} "$admin_pw\n";

434 close $aa;

435 my $fd = dirname($fid);

436 mkdir $fd;

437 rename $fid,$fid.'_save';

438 open $fid,'>',$fid or die "$0: cannot create $fid - $!\n";

439 print {$fid} "$hostname:$opt_p\n";

440 print {$fid} "$admin\n";

441 print {$fid} "$admin_pw\n";

442 close $fid;

443 chownr('fex',$ad,$fd);

444 chmod 0700,$ad,$fd;

445 }

446

447 sub chownr {

448 my $user = shift;

449 local $_;

450 foreach (@_) {

451 if (m:^/*(lib|usr|home)?/*$:) {

452 die "ERROR: short path in chownr $user @_\n";

453 }

454 }

455 system qw'chown -R',$user,@_;

456 }

457

458 sub chmodr {

459 my $mod = shift;

460 local $_;

461 foreach (@_) {

462 if (m:^/*(lib|usr|home)?/*$:) {

463 die "ERROR: short path in chmodr $mod @_\n";

464 }

465 }

466 system qw'chmod -R',$mod,@_;

467 }

468

469 sub convert_spool {

470 my ($f,$d,$to,$from,$link);

471

472 local $) = $FEX[3];

473 local $> = $FEX[2];

474

475 our ($spooldir,$skeydir,$gkeydir);

476 $ENV{FEXLIB} = $FEXLIB = "$FEXHOME/lib";

477 require "$FEXLIB/fex.pp" or die "$0: cannot load $FEXLIB/fex.pp - $!\n";

478 die "no \$spooldir in $FEXLIB/fex.pp\n" unless $spooldir;

479 die "\$spooldir=$spooldir/" if $spooldir =~ m:^/*(root)?$:;

480

481 # User --> user@maildomain

482 if ($mdomain) {

483 foreach $f (glob "$spooldir/.dkeys/*") {

484 if ($link = readlink $f) {

485 (undef,$to,$from,$file) = split('/',$link);

486 if ($file) {

487 $to .= '@'.$mdomain if $to !~ /@/;

488 $from .= '@'.$mdomain if $from !~ /@/;

489 if ($link ne "../$to/$from/$file") {

490 symlink "../$to/$from/$file",$f;

491 }

492 }

493 }

494 }

495 }

496

497 # fix spool layout: FROM and TO must have domains and must be lower case

498 foreach $d ((glob "$spooldir/*/*"),(glob "$spooldir/*")) {

499 if (not -l $d and -d $d and $d =~ m:(.+)/(.+):) {

500 $p = $1;

501 $b = $2;

502 if ($b !~ /^@/ and $b !~ /^[A-Z_-]+$/) {

503 if ($mdomain and $b !~ /@/) {

504 rename $d,sprintf("%s/%s@%s",$p,lc($b),$mdomain);

505 } elsif ($b ne lc($b)) {

506 rename $d,sprintf("%s/%s",$p,lc($b));

507 }

508 }

509 }

510 }

511

512 # split auth-ID and subuser file: @ --> @ @SUBUSER

513 foreach my $u (glob "$spooldir/*@*") {

514 next if -f "$u/\@SUBUSER";

515 open my $idf,"$u/\@" or next;

516 $id = <$idf>;

517 if (defined ($su = <$idf>) and $su =~ /\w/

518 and open my $suf,">$u/\@SUBUSER") {

519 print {$suf} $su;

520 while (defined ($su = <$idf>)) { print {$suf} $su }

521 close $suf;

522 close $idf;

523 if (open my $idf,">$u/\@") {

524 print {$idf} $id;

525 close $idf;

526 }

527 }

528 }

529

530 # create new SKEYs

531 foreach my $sf (glob "$spooldir/*/\@SUBUSER") {

532 $user = (split '/',$sf)[-2];

533 if (open $sf,$sf) {

534 while (<$sf>) {

535 s/#.*//;

536 if (/(.+\@.+):(.+)/) {

537 ($subuser,$id) = ($1,$2);

538 next if $subuser =~ /\*/;

539 $skey = md5_hex("$user:$subuser:$id");

540 if (open $skey,'>',"$skeydir/$skey") {

541 print {$skey} "from=$subuser\n",

542 "to=$user\n",

543 "id=$id\n";

544 close $skey;

545 }

546 mkdirp("$spooldir/$subuser/\@MAINUSER");

547 symlink $skey,"$spooldir/$subuser/\@MAINUSER/$user";

548 }

549 }

550 }

551 close $sf;

552 }

553

554 # create new GKEYs

555 foreach my $gf (glob "$spooldir/*/\@GROUP/*") {

556 next unless -f $gf;

557 # normalize group name

558 if ($gf =~ m:(.+)/(.+):) {

559 my $gd = $1;

560 my $g1 = $2;

561 my $g2 = $2;

562 $g2 =~ s/[^\w\*%^+=:,.!-]/_/g;

563 if ($g1 ne $g2) {

564 rename "$gd/$g1","$gd/$g2" and $gf = "$gd/$g2";

565 }

566 }

567 $group = (split '/',$gf)[-1];

568 $user = (split '/',$gf)[-3];

569 if (open $gf,$gf) {

570 while (<$gf>) {

571 s/#.*//;

572 if (/(.+\@.+):(.+)/) {

573 ($gm,$id) = ($1,$2);

574 $gkey = md5_hex("$user:$group:$gm:$id");

575 if (open $gkey,'>',"$gkeydir/$gkey") {

576 print {$gkey} "from=$gm\n",

577 "to=\@$group\n",

578 "user=$user\n",

579 "id=$id\n";

580 close $gkey;

581 }

582 mkdirp("$spooldir/$gm/\@GROUP");

583 symlink "../../$user/\@GROUP/$group","$spooldir/$gm/\@GROUP/$group";

584 }

585 }

586 }

587 close $gf;

588 }

589 }

590

591 sub cpav {

592 my $dd = pop @_;

593 local *P;

594

595 die "cpav: $dd is not a directory" unless -d $dd;

596 open P,"tar cf - @_ | su -c 'cd $dd; umask 022; tar xvf - 2>&1' fex |"

597 or die "cpav: cannot tar - $!\n";

598 while (<P>) {

599 chomp;

600 print "$_ --> $dd/$_\n" unless /\/$/;

601 }

602 close P;

603 }