Subversion Repositories ALCASAR

Rev

Rev 343 | Rev 346 | Go to most recent revision | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 343 Rev 344
Line 1... Line 1...
1
#!/bin/sh
1
#!/bin/sh
2
#  $Id: alcasar.sh 343 2010-11-25 22:24:08Z richard $ 
2
#  $Id: alcasar.sh 344 2010-11-26 14:32:35Z richard $ 
3
 
3
 
4
# alcasar.sh
4
# alcasar.sh
5
# by Franck BOUIJOUX, Pascal LEVANT and Richard REY
5
# by Franck BOUIJOUX, Pascal LEVANT and Richard REY
6
# This script is distributed under the Gnu General Public License (GPL)
6
# This script is distributed under the Gnu General Public License (GPL)
7
 
7
 
Line 549... Line 549...
549
	AuthName $HOSTNAME
549
	AuthName $HOSTNAME
550
	BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On
550
	BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On
551
	AuthUserFile $DIR_ACC/digest/key_admin
551
	AuthUserFile $DIR_ACC/digest/key_admin
552
	ErrorDocument 404 https://$PRIVATE_IP/
552
	ErrorDocument 404 https://$PRIVATE_IP/
553
</Directory>
553
</Directory>
554
<Directory $DIR_ACC/manager/htdocs>
-
 
555
	SSLRequireSSL
-
 
556
	AllowOverride None
-
 
557
	Order deny,allow
-
 
558
	Deny from all
-
 
559
	Allow from 127.0.0.1
-
 
560
	Allow from $PRIVATE_NETWORK_MASK
-
 
561
	require valid-user
-
 
562
	AuthType digest
-
 
563
	AuthName $HOSTNAME
-
 
564
	BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On
-
 
565
	AuthUserFile $DIR_ACC/digest/key_manager
-
 
566
	ErrorDocument 404 https://$PRIVATE_IP/
-
 
567
</Directory>
-
 
568
<Directory $DIR_ACC/manager/html>
554
<Directory $DIR_ACC/manager>
569
	SSLRequireSSL
555
	SSLRequireSSL
570
	AllowOverride None
556
	AllowOverride None
571
	Order deny,allow
557
	Order deny,allow
572
	Deny from all
558
	Deny from all
573
	Allow from 127.0.0.1
559
	Allow from 127.0.0.1
Line 730... Line 716...
730
##########################################################################
716
##########################################################################
731
param_web_radius ()
717
param_web_radius ()
732
{
718
{
733
# copie de l'interface d'origine dans la structure Alcasar
719
# copie de l'interface d'origine dans la structure Alcasar
734
	[ -d /usr/share/freeradius-web ] && cp -rf /usr/share/freeradius-web/* $DIR_ACC/manager/
720
	[ -d /usr/share/freeradius-web ] && cp -rf /usr/share/freeradius-web/* $DIR_ACC/manager/
735
# copie des fichiers modifiés et suppression des fichiers inutiles
-
 
736
	cp -rf $DIR_INSTALL/web/acc/manager/* $DIR_ACC/manager/
-
 
737
	rm -f $DIR_ACC/manager/index.html $DIR_ACC/manager/readme 
721
	rm -f $DIR_ACC/manager/index.html $DIR_ACC/manager/readme 
738
	rm -f $DIR_ACC/manager/htdocs/about.html $DIR_ACC/manager/htdocs/index.html $DIR_ACC/manager/htdocs/content.html
722
	rm -f $DIR_ACC/manager/htdocs/about.html $DIR_ACC/manager/htdocs/index.html $DIR_ACC/manager/htdocs/content.html
-
 
723
# copie des fichiers modifiés
-
 
724
	cp -rf $DIR_INSTALL/web/acc/manager/* $DIR_ACC/manager/
739
	chown -R apache:apache $DIR_ACC/manager/
725
	chown -R apache:apache $DIR_ACC/manager/
740
# Modification du fichier de configuration
726
# Modification des fichiers de configuration
741
	[ -e /etc/freeradius-web/admin.conf.default ] || cp /etc/freeradius-web/admin.conf /etc/freeradius-web/admin.conf.default
727
	[ -e /etc/freeradius-web/admin.conf.default ] || cp /etc/freeradius-web/admin.conf /etc/freeradius-web/admin.conf.default
742
	$SED "s?^general_domain:.*?general_domain: $ORGANISME.$DOMAIN?g" /etc/freeradius-web/admin.conf
728
	$SED "s?^general_domain:.*?general_domain: $ORGANISME.$DOMAIN?g" /etc/freeradius-web/admin.conf
743
	$SED "s?^sql_username:.*?sql_username: $DB_USER?g" /etc/freeradius-web/admin.conf
729
	$SED "s?^sql_username:.*?sql_username: $DB_USER?g" /etc/freeradius-web/admin.conf
744
	$SED "s?^sql_password:.*?sql_password: $radiuspwd?g" /etc/freeradius-web/admin.conf
730
	$SED "s?^sql_password:.*?sql_password: $radiuspwd?g" /etc/freeradius-web/admin.conf
745
	$SED "s?^sql_debug:.*?sql_debug: false?g" /etc/freeradius-web/admin.conf
731
	$SED "s?^sql_debug:.*?sql_debug: false?g" /etc/freeradius-web/admin.conf
746
	$SED "s?^sql_usergroup_table: .*?sql_usergroup_table: radusergroup?g" /etc/freeradius-web/admin.conf
732
	$SED "s?^sql_usergroup_table: .*?sql_usergroup_table: radusergroup?g" /etc/freeradius-web/admin.conf
747
	$SED "s?^sql_password_attribute:.*?sql_password_attribute: Crypt-Password?g" /etc/freeradius-web/admin.conf
733
	$SED "s?^sql_password_attribute:.*?sql_password_attribute: Crypt-Password?g" /etc/freeradius-web/admin.conf
748
	$SED "s?^general_finger_type.*?# general_finger_type: snmp?g" /etc/freeradius-web/admin.conf
734
	$SED "s?^general_finger_type.*?# general_finger_type: snmp?g" /etc/freeradius-web/admin.conf
749
	$SED "s?^general_stats_use_totacct.*?general_stats_use_totacct: yes?g" /etc/freeradius-web/admin.conf
735
	$SED "s?^general_stats_use_totacct.*?general_stats_use_totacct: yes?g" /etc/freeradius-web/admin.conf
-
 
736
	[ -e /etc/freeradius-web/config.php.default ] || cp /etc/freeradius-web/config.php /etc/freeradius-web/config.php.default
-
 
737
	cp -f $DIR_CONF/freeradiusweb-config.php /etc/freeradius-web/config.php
750
	cat <<EOF > /etc/freeradius-web/naslist.conf
738
	cat <<EOF > /etc/freeradius-web/naslist.conf
751
nas1_name: alcasar.%{general_domain}
739
nas1_name: alcasar.%{general_domain}
752
nas1_model: Portail captif
740
nas1_model: Portail captif
753
nas1_ip: $PRIVATE_IP
741
nas1_ip: $PRIVATE_IP
754
nas1_port_num: 0
742
nas1_port_num: 0
Line 765... Line 753...
765
	$SED "s?^NASIPAddress.*?NASIPAddress\tNas IP Address\tno?g" /etc/freeradius-web/sql.attrs
753
	$SED "s?^NASIPAddress.*?NASIPAddress\tNas IP Address\tno?g" /etc/freeradius-web/sql.attrs
766
	$SED "s?^NASPortId.*?NASPortId\tNas Port\tno?g" /etc/freeradius-web/sql.attrs
754
	$SED "s?^NASPortId.*?NASPortId\tNas Port\tno?g" /etc/freeradius-web/sql.attrs
767
	chown -R apache:apache /etc/freeradius-web
755
	chown -R apache:apache /etc/freeradius-web
768
# Ajout de l'alias vers la page de "changement de mot de passe usager"
756
# Ajout de l'alias vers la page de "changement de mot de passe usager"
769
	cat <<EOF >> /etc/httpd/conf/webapps.d/alcasar.conf
757
	cat <<EOF >> /etc/httpd/conf/webapps.d/alcasar.conf
770
Alias /pass/ "$DIR_ACC/manager/pass/"
-
 
771
<Directory $DIR_ACC/manager/pass>
758
<Directory $DIR_WEB/pass>
772
	SSLRequireSSL
759
	SSLRequireSSL
773
	AllowOverride None
760
	AllowOverride None
774
	Order deny,allow
761
	Order deny,allow
775
	Deny from all
762
	Deny from all
776
	Allow from 127.0.0.1
763
	Allow from 127.0.0.1
Line 1007... Line 994...
1007
	$SED "s?^LogFile=.*?LogFile=\"/var/log/squid/access.log\"?g" /etc/awstats/awstats.conf
994
	$SED "s?^LogFile=.*?LogFile=\"/var/log/squid/access.log\"?g" /etc/awstats/awstats.conf
1008
	$SED "s?^LogFormat=.*?LogFormat=4?g" /etc/awstats/awstats.conf
995
	$SED "s?^LogFormat=.*?LogFormat=4?g" /etc/awstats/awstats.conf
1009
	$SED "s?^SiteDomain=.*?SiteDomain=\"$HOSTNAME\"?g" /etc/awstats/awstats.conf
996
	$SED "s?^SiteDomain=.*?SiteDomain=\"$HOSTNAME\"?g" /etc/awstats/awstats.conf
1010
	$SED "s?^HostAliases=.*?HostAliases=\"$PRIVATE_IP\"?g" /etc/awstats/awstats.conf
997
	$SED "s?^HostAliases=.*?HostAliases=\"$PRIVATE_IP\"?g" /etc/awstats/awstats.conf
1011
	$SED "s?^DNSLookup=.*?DNSLookup=0?g" /etc/awstats/awstats.conf
998
	$SED "s?^DNSLookup=.*?DNSLookup=0?g" /etc/awstats/awstats.conf
1012
	$SED "s?^DirData=.*?DirData=\"/var/lib/awstats\"?g" /etc/awstats/awstats.conf	# corrige le fichier de config awstats natif ...
999
	$SED "s?^DirData=.*?DirData=\"/var/lib/awstats\"?g" /etc/awstats/awstats.conf
-
 
1000
	$SED "s?^DirIcons=.*?DirIcons=\"/acc/awstats/icon\"?g" /etc/awstats/awstats.conf
1013
	$SED "s?^StyleSheet=.*?StyleSheet=\"/css/style.css\"?g" /etc/awstats/awstats.conf
1001
	$SED "s?^StyleSheet=.*?StyleSheet=\"/css/style.css\"?g" /etc/awstats/awstats.conf
1014
	$SED "s?^BuildReportFormat=.*?BuildReportFormat=xhtml?g" /etc/awstats/awstats.conf
1002
	$SED "s?^BuildReportFormat=.*?BuildReportFormat=xhtml?g" /etc/awstats/awstats.conf
1015
	$SED "s?^UseFramesWhenCGI=.*?UseFramesWhenCGI=0?g" /etc/awstats/awstats.conf
1003
	$SED "s?^UseFramesWhenCGI=.*?UseFramesWhenCGI=0?g" /etc/awstats/awstats.conf
1016
	cat <<EOF >> /etc/httpd/conf/webapps.d/alcasar.conf
1004
	cat <<EOF >> /etc/httpd/conf/webapps.d/alcasar.conf
1017
<Directory $DIR_ACC/awstats>
1005
<Directory $DIR_ACC/awstats>
Line 1375... Line 1363...
1375
		fi
1363
		fi
1376
		for func in init network gestion AC init_db param_radius param_web_radius param_chilli param_squid param_dansguardian antivirus firewall param_awstats param_dnsmasq BL cron post_install
1364
		for func in init network gestion AC init_db param_radius param_web_radius param_chilli param_squid param_dansguardian antivirus firewall param_awstats param_dnsmasq BL cron post_install
1377
 
1365
 
1378
		do
1366
		do
1379
			$func
1367
			$func
1380
# echo "*** 'debug' : end of function $func ***"; read a
1368
 echo "*** 'debug' : end of function $func ***"; read a
1381
		done
1369
		done
1382
		;;
1370
		;;
1383
	-u | --uninstall)
1371
	-u | --uninstall)
1384
		if [ ! -e $DIR_DEST_SBIN/alcasar-uninstall.sh ]
1372
		if [ ! -e $DIR_DEST_SBIN/alcasar-uninstall.sh ]
1385
		then
1373
		then