Mercurial > notdcc

comparison misc/newwebuser.in @ 0:c7f6b056b673

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
First import of vendor version
author Peter Gervai <grin@grin.hu>
date Tue, 10 Mar 2009 13:49:58 +0100
parents
children
comparison
equal deleted inserted replaced
-1:000000000000 0:c7f6b056b673
1 #! /bin/sh -e
2
3 # create a per-user whitelist target directory, password, and so forth.
4
5 # This script creates the directories needed for per-addressee white
6 # lists and log directories. It also runs htpasswd to create an entry
7 # in the Apache password file for the userdirs directory.
8
9 # The files and directories must be writable by both the httpd and dccm
10 # processes. That is assumed to be arranged by having the processes share
11 # a group such as "www" and using a umask of 007.
12 # The dccm log directories and files should not be globally readable
13 # to protect the privacy of mail.
14 # If dccm is run by a "user" such as "dcc", you might be able to
15 # use suEXEC. You might need to make a symbolic of ~dcc/public_html"
16 # to ~dcc/userdirs.
17
18 # The web "usernames" are related the per-user white list directory names
19 # see in DCC log files. The white list and log directory in
20 # "userdirs/local/xxx" is accessed with the user name "xxx".
21 # "userdirs/esmtp/xxx@example.com" uses the user name "esmtp/xxx@example.com
22
23 # One additional directory named @prefix@/userdirs/tmp is created for the
24 # CGI scripts that manage the per-user white lists and logs.
25
26
27 # Copyright (c) 2008 by Rhyolite Software, LLC
28 #
29 # This agreement is not applicable to any entity which sells anti-spam
30 # solutions to others or provides an anti-spam solution as part of a
31 # security solution sold to other entities, or to a private network
32 # which employs the DCC or uses data provided by operation of the DCC
33 # but does not provide corresponding data to other users.
34 #
35 # Permission to use, copy, modify, and distribute this software without
36 # changes for any purpose with or without fee is hereby granted, provided
37 # that the above copyright notice and this permission notice appear in all
38 # copies and any distributed versions or copies are either unchanged
39 # or not called anything similar to "DCC" or "Distributed Checksum
40 # Clearinghouse".
41 #
42 # Parties not eligible to receive a license under this agreement can
43 # obtain a commercial license to use DCC by contacting Rhyolite Software
44 # at sales@rhyolite.com.
45 #
46 # A commercial license would be for Distributed Checksum and Reputation
47 # Clearinghouse software. That software includes additional features. This
48 # free license for Distributed ChecksumClearinghouse Software does not in any
49 # way grant permision to use Distributed Checksum and Reputation Clearinghouse
50 # software
51 #
52 # THE SOFTWARE IS PROVIDED "AS IS" AND RHYOLITE SOFTWARE, LLC DISCLAIMS ALL
53 # WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
54 # OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL RHYOLITE SOFTWARE, LLC
55 # BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES
56 # OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
57 # WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
58 # ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
59 # SOFTWARE.
60 # Rhyolite Software DCC 1.3.103-1.11 $Revision$
61 # @configure_input@
62
63
64 exec 1>&2 </dev/null
65
66 # Since the CGI scripts cannot accept args and so must rely on the
67 # DCC parameter file in the built-in homedir, do the same here.
68 DCC_HOMEDIR=@prefix@
69 . $DCC_HOMEDIR/dcc_conf
70
71 USAGE="`basename $0`: [-x] [-p htpasswd-pgm] [-g group] [-P whitelist-prototype] username"
72 HTPASSWD=@HTPASSWD@
73 GROUP=www
74 while getopts "xp:g:P:" c; do
75 case $c in
76 x) set -x;;
77 p) HTPASSWD=$OPTARG;;
78 g) GROUP="$OPTARG";; #GID shared with httpd
79 P) PROTO="$OPTARG";;
80 *) echo "$USAGE" 1>&2; exit 1;;
81 esac
82 done
83 shift `expr $OPTIND - 1 || true`
84 if test "$#" -ne 1 -o -z "$1"; then
85 echo "$USAGE" 1>&2
86 exit 1
87 fi
88 USER=$1
89
90 if test -z "$DCCM_USERDIRS"; then
91 cat <<EOF 1>&2
92 Per-user white lists require DCCM_USERDIRS defined in$DCC_HOMEDIR/dcc_conf.
93 Please consider installing a new version of dcc_conf.
94 EOF
95 exit 1
96 fi
97
98 if test ! -r $DCC_HOMEDIR/ids; then
99 if test -n "$DCCUID"; then
100 echo "`basename $0: must be run by root or $DCCUID" 1>&2
101 else
102 echo "`basename $0: must be run by root" 1>&2
103 fi
104 exit 1
105 fi
106
107
108 USERDIRS=$DCC_HOMEDIR/$DCCM_USERDIRS
109 WEBUSERS=$USERDIRS/webusers
110 TMP_DIR=$USERDIRS/tmp
111 USER=`expr "$USER" : "$DCCM_USERDIRS/\(.*\)" \| "$USER"`
112 LOCAL_DIR=`expr "$USER" : '\(..*\)/..*' || true`
113 if test -z "$LOCAL_DIR"; then
114 LOCAL_DIR="$USERDIRS/local"
115 PER_USER="$USERDIRS/local/$USER"
116 else
117 USER=`expr "$USER" : 'local/\(.*\)' \| "$USER"`
118 LOCAL_DIR="$USERDIRS/$LOCAL_DIR"
119 PER_USER="$USERDIRS/$USER"
120 fi
121
122 # create the directories
123 # (some systems don't have `mkdir -p`)
124 for nm in "$USERDIRS" "$TMP_DIR" "$LOCAL_DIR" "$PER_USER" "$PER_USER/log"; do
125 if test ! -d "$nm"; then
126 mkdir "$nm"
127 fi
128 done
129
130 # create the initial whiteclnt file
131 # copy the prototype
132 if test ! -s $PER_USER/whiteclnt; then
133 date "+# white list for $USER%n#%n#%n#webuser created %x %X %Z%n" \
134 > "$PER_USER/whiteclnt"
135 if test "$PROTO" != ""; then
136 cat "$PROTO" >> "$PER_USER/whiteclnt"
137 fi
138 fi
139
140 # Add the username and password to the htpasswd file
141 # Create the htpasswd file for the first user.
142 if test ! -f $WEBUSERS; then
143 $HTPASSWD -c $WEBUSERS "$USER"
144 else
145 $HTPASSWD $WEBUSERS "$USER"
146 fi
147
148 # set permissions of existing files and directories in case they're wrong
149 chgrp $GROUP "$USERDIRS" "$TMP_DIR" "$PER_USER" "$PER_USER/log"
150 chgrp $GROUP "$PER_USER/whiteclnt" $WEBUSERS
151 if test -n "$DCCUID"; then
152 chown $DCCUID $WEBUSERS "$USERDIRS" "$TMP_DIR" "$LOCAL_DIR"
153 chown $DCCUID "$PER_USER" "$PER_USER/log" "$PER_USER/whiteclnt"
154 fi
155 chmod g=rwx "$USERDIRS" "$TMP_DIR" "$PER_USER" "$PER_USER/log"
156 chmod g=rw "$PER_USER/whiteclnt" $WEBUSERS
157 chmod o= "$PER_USER/log" $WEBUSERS