| /alcasar.sh |
|---|
| 1396,22 → 1396,39 |
| cd $DIR_INSTALL |
| echo "" |
| echo "#############################################################################" |
| echo "# Fin d'installation d'ALCASAR #" |
| echo "# #" |
| echo "# Application Libre pour le Contrôle Authentifié et Sécurisé #" |
| echo "# des Accès au Réseau ( ALCASAR ) #" |
| echo "# #" |
| echo "#############################################################################" |
| echo |
| echo "- ALCASAR sera fonctionnel après redémarrage du système" |
| echo |
| echo "- Lisez attentivement la documentation d'exploitation" |
| echo |
| echo "- L'interface de gestion est consultable à partir de n'importe quel poste" |
| echo " situé sur le réseau de consultation à l'URL http://alcasar" |
| echo |
| echo " Appuyez sur 'Entrée' pour continuer" |
| read a |
| if [ $Lang == "fr" ] |
| then |
| echo "# Fin d'installation d'ALCASAR #" |
| echo "# #" |
| echo "# Application Libre pour le Contrôle Authentifié et Sécurisé #" |
| echo "# des Accès au Réseau ( ALCASAR ) #" |
| echo "# #" |
| echo "#############################################################################" |
| echo |
| echo "- ALCASAR sera fonctionnel après redémarrage du système" |
| echo |
| echo "- Lisez attentivement la documentation d'exploitation" |
| echo |
| echo "- Le centre de controle d'ALCASAR (ACC) est à l'adresse http://alcasar" |
| echo |
| echo " Appuyez sur 'Entrée' pour continuer" |
| else |
| echo "# Enf of ALCASAR install process #" |
| echo "# #" |
| echo "# Application Libre pour le Contrôle Authentifié et Sécurisé #" |
| echo "# des Accès au Réseau ( ALCASAR ) #" |
| echo "# #" |
| echo "#############################################################################" |
| echo |
| echo "- The system will be rebooted in order to operate ALCASAR" |
| echo |
| echo "- Read the exploitation documentation" |
| echo |
| echo "- The ALCASAR Control Center (ACC) is at http://alcasar" |
| echo |
| echo " Hit 'Enter' to continue" |
| fi |
| read a |
| # On applique les règles de filtrage (et on les sauvegarde) |
| sh $DIR_DEST_BIN/alcasar-iptables.sh |
| sleep 2 |
| /conf/rpms/rpm-build-howto |
|---|
| 23,12 → 23,11 |
| - créer le fichier patch unifié en lançant "diff -u makefile.am makefile.am.patch > mon_patch.diff |
| - copié ce fichier sous rpmbuild/SOURCES avec le nom spécifié dans le .spec |
| - se positionner dans rpmbuild/SPEC et lancer la génération du RPM (rpmbuild -ba coova-chilli.spec) |
| ### fin pour version antérieur à 1.2.5 de coova ### |
| ### pour version 1.2.6 de coova #### |
| ### pour version supérieures ou égales à 1.2.6 de coova #### |
| - copier .spec redhat du répertoire "distro" de l'archive décompressée dans ~rpmbuild/SPEC et l'adapter (version, packager, commentaires, etc.) |
| - ajouter en première ligne "%define _disable_ld_no_undefined 1" |
| - ajouter 2 lignes intégrant le répertoire "lib64" lors de la suppression des binaires statiques (rm -rf $RPM_BUILD_ROOT/usr/lib/*.la) |
| - se positionner dans rpmbuild/SPEC et lancer la génération du RPM en supprimant le support ssl (rpmbuild -ba coova-chilli.spec --without ssl) |
| ### fin pour version 1.2.6 de coova #### |
| **** HAVP **** |
| - récupérer le tarball de la dernière version d'HAVP. Le décompresser dans un répertoire et tester la compilation traditionnelle (./configure + make) |
| /conf/rpms/i586/libchilli0-1.2.5-0mdv2010.1.i586.rpm |
|---|
| Cannot display: file marked as a binary type. |
| svn:mime-type = application/octet-stream |
| Property changes: |
| Deleted: svn:mime-type |
| -application/octet-stream |
| \ No newline at end of property |
| /conf/rpms/i586/coova-chilli-1.2.5-0mdv2010.1.i586.rpm |
|---|
| Cannot display: file marked as a binary type. |
| svn:mime-type = application/octet-stream |
| Property changes: |
| Deleted: svn:mime-type |
| -application/octet-stream |
| \ No newline at end of property |
| /conf/rpms/i586/python-coova-chilli-1.2.5-0mdv2010.1.i586.rpm |
|---|
| Cannot display: file marked as a binary type. |
| svn:mime-type = application/octet-stream |
| Property changes: |
| Deleted: svn:mime-type |
| -application/octet-stream |
| \ No newline at end of property |
| /conf/rpms/i586/coova-chilli-1.2.7-1.i586.rpm |
|---|
| Cannot display: file marked as a binary type. |
| svn:mime-type = application/octet-stream |
| Property changes: |
| Added: svn:mime-type |
| +application/octet-stream |
| \ No newline at end of property |
| /conf/rpms/x86_64/lib64chilli0-1.2.5-0mdv2010.1.x86_64.rpm |
|---|
| Cannot display: file marked as a binary type. |
| svn:mime-type = application/octet-stream |
| Property changes: |
| Deleted: svn:mime-type |
| -application/octet-stream |
| \ No newline at end of property |
| /conf/rpms/x86_64/coova-chilli-1.2.5-0mdv2010.1.x86_64.rpm |
|---|
| Cannot display: file marked as a binary type. |
| svn:mime-type = application/octet-stream |
| Property changes: |
| Deleted: svn:mime-type |
| -application/octet-stream |
| \ No newline at end of property |
| /conf/rpms/x86_64/python-coova-chilli-1.2.5-0mdv2010.1.x86_64.rpm |
|---|
| Cannot display: file marked as a binary type. |
| svn:mime-type = application/octet-stream |
| Property changes: |
| Deleted: svn:mime-type |
| -application/octet-stream |
| \ No newline at end of property |
| /conf/rpms/x86_64/coova-chilli-1.2.7-1.x86_64.rpm |
|---|
| Cannot display: file marked as a binary type. |
| svn:mime-type = application/octet-stream |
| Property changes: |
| Added: svn:executable |
| +* |
| \ No newline at end of property |
| Added: svn:mime-type |
| +application/octet-stream |
| \ No newline at end of property |
| /CHANGELOG |
|---|
| 1,6 → 1,8 |
| # $Id$ |
| ************ CHANGELOG *********** |
| ---- 2.2 ---- |
| - IP parameters can be change in central conf. Apply then with the script "alcasar-conf.sh -apply" |
| - 'alcasar-nf.sh' and 'alcasar-bl.sh' scripts now use the global parameters file (alcasar.conf) |
| - allow LDAP/AD connections both on WAN and LAN servers |
| - close all accounting session when the system goes down ou up |
| /scripts/alcasar-conf.sh |
|---|
| 82,13 → 82,17 |
| rm -f $DIR_UPDATE/etc/alcasar-dns-name # changement de format |
| rm -f $DIR_UPDATE/etc/alcasar-macallowed # ajout d'un commentaire par @MAC |
| rm -rf $DIR_UPDATE/etc/digest # hostname=alcasar |
| uamallowed=`cat $DIR_UPDATE/etc/alcasar-uamallowed` |
| if [ $uamallowed == "uamallowed=\"\"" ] |
| then rm -f $DIR_UPDATE/etc/alcasar-uamallowed # un uamallowed 'vide' perturbe coova |
| if [ -e $DIR_UPDATE/etc/alcasar-uamallowed ]; then |
| uamallowed=`cat $DIR_UPDATE/etc/alcasar-uamallowed` |
| if [ $uamallowed == "uamallowed=\"\"" ] |
| then rm -f $DIR_UPDATE/etc/alcasar-uamallowed # un uamallowed 'vide' perturbe coova |
| fi |
| fi |
| uamdomain=`cat $DIR_UPDATE/etc/alcasar-uamdomain` |
| if [ $uamdomain == "uamdomain=\"\"" ] |
| then rm -f $DIR_UPDATE/etc/alcasar-uamdomain # un uamdomain 'vide' perturbe coova |
| if [ -e $DIR_UPDATE/etc/alcasar-uamdomain ]; then |
| uamdomain=`cat $DIR_UPDATE/etc/alcasar-uamdomain` |
| if [ $uamdomain == "uamdomain=\"\"" ] |
| then rm -f $DIR_UPDATE/etc/alcasar-uamdomain # un uamdomain 'vide' perturbe coova |
| fi |
| fi |
| else |
| # si version >= 2.1 : sauvegarde des certificats (serveur et CA) |
| 147,14 → 151,14 |
| fi |
| PROTOCOLS_FILTERING=`grep ^FILTERING /usr/local/bin/alcasar-iptables.sh | cut -d"=" -f2` |
| PROTOCOLS_FILTERING=${PROTOCOLS_FILTERING:="no"} |
| if [ $PROTOCOLS_FILTERING="no" ]; then |
| if [ $PROTOCOLS_FILTERING = "no" ]; then |
| echo "PROTOCOLS_FILTERING=off" >> $CONF_FILE |
| else |
| echo "PROTOCOLS_FILTERING=on" >> $CONF_FILE |
| fi |
| WEB_FILTERING=`grep ^reportinglevel /etc/dansguardian/dansguardian.conf | cut -d"=" -f2 | tr -d " "` |
| DNS_FILTERING=`grep ^reportinglevel /etc/dansguardian/dansguardian.conf | cut -d"=" -f2 | tr -d " "` |
| DNS_FILTERING=${DNS_FILTERING:="-1"} |
| if [ $DNS_FILTERING="-1" ]; then |
| if [ $DNS_FILTERING -eq "-1" ]; then |
| echo "DNS_FILTERING=off" >> $CONF_FILE |
| else |
| echo "DNS_FILTERING=on" >> $CONF_FILE |
| /scripts/alcasar-urpmi.sh |
|---|
| 120,7 → 120,7 |
| # update with cached RPM |
| urpmi --auto $PACKAGES |
| # On supprime les paquetages inutiles |
| for rm_rpm in shorewall dhcp-server c-icap-server cyrus-sasl distcache-server avahi mandi radeontool |
| for rm_rpm in shorewall dhcp-server c-icap-server cyrus-sasl distcache-server avahi mandi radeontool coova-chilli python-coova-chilli |
| do |
| /usr/sbin/urpme --auto $rm_rpm --auto-orphans 2>/dev/null |
| echo -n "." |
| 128,7 → 128,7 |
| # On installe les RPMs spécifiques à la version |
| urpmi --no-verify --auto conf/rpms/$ARCH/*.rpm |
| # On empêche les mises à jour de coova-chilli et freeradius par le biais des dépôts |
| for rpmskip in coova freeradius |
| for rpmskip in coova-chilli freeradius |
| do |
| echo -n "/^$rpmskip/" >> /etc/urpmi/skip.list |
| done |