Subversion Repositories ALCASAR

Rev

Rev 2009 | Rev 2016 | Go to most recent revision | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 2009 Rev 2013
Line 1... Line 1...
1
#!/bin/bash
1
#!/bin/bash
2
#  $Id: alcasar.sh 2009 2016-07-25 15:31:27Z raphael.pion $ 
2
#  $Id: alcasar.sh 2013 2016-07-28 15:51:12Z raphael.pion $ 
3
 
3
 
4
# alcasar.sh
4
# alcasar.sh
5
 
5
 
6
# ALCASAR Install script -  CopyLeft ALCASAR Team [Rexy + 3abtux + Steweb + Crox + ...] 
6
# ALCASAR Install script -  CopyLeft ALCASAR Team [Rexy + 3abtux + Steweb + Crox + ...] 
7
# Ce programme est un logiciel libre ; This software is free and open source
7
# Ce programme est un logiciel libre ; This software is free and open source
Line 1191... Line 1191...
1191
include		$DIR_DEST_ETC/alcasar-uamallowed
1191
include		$DIR_DEST_ETC/alcasar-uamallowed
1192
include		$DIR_DEST_ETC/alcasar-uamdomain
1192
include		$DIR_DEST_ETC/alcasar-uamdomain
1193
#dhcpgateway		none
1193
#dhcpgateway		none
1194
#dhcprelayagent		none
1194
#dhcprelayagent		none
1195
#dhcpgatewayport	none
1195
#dhcpgatewayport	none
-
 
1196
#dhcpopt		none
1196
EOF
1197
EOF
1197
# create file for DHCP static ip. Reserve the second IP address for INTIF (the first one is for tun0)
1198
# create file for DHCP static ip. Reserve the second IP address for INTIF (the first one is for tun0)
1198
	echo "$PRIVATE_MAC $PRIVATE_SECOND_IP" > $DIR_DEST_ETC/alcasar-ethers
1199
	echo "$PRIVATE_MAC $PRIVATE_SECOND_IP" > $DIR_DEST_ETC/alcasar-ethers
1199
# create files for trusted domains and urls
1200
# create files for trusted domains and urls
1200
	touch $DIR_DEST_ETC/alcasar-uamallowed $DIR_DEST_ETC/alcasar-uamdomain
1201
	touch $DIR_DEST_ETC/alcasar-uamallowed $DIR_DEST_ETC/alcasar-uamdomain
Line 1867... Line 1868...
1867
# sshd autorise les connections root par certificat
1868
# sshd autorise les connections root par certificat
1868
	$SED "s?^PermitRootLogin.*?PermitRootLogin without-password?g" /etc/ssh/sshd_config
1869
	$SED "s?^PermitRootLogin.*?PermitRootLogin without-password?g" /etc/ssh/sshd_config
1869
	# Put the default values in conf file
1870
	# Put the default values in conf file
1870
	echo "SSH=on" >> $CONF_FILE
1871
	echo "SSH=on" >> $CONF_FILE
1871
	echo "SSH_ADMIN_FROM=0.0.0.0/0.0.0.0" >> $CONF_FILE
1872
	echo "SSH_ADMIN_FROM=0.0.0.0/0.0.0.0" >> $CONF_FILE
-
 
1873
	echo "CHILLI_NTP_ENABLED=off" >> $CONF_FILE
-
 
1874
	echo "CHILLI_NTP_IP=none" >> $CONF_FILE
1872
	echo "LDAP=off" >> $CONF_FILE
1875
	echo "LDAP=off" >> $CONF_FILE
1873
	echo "LDAP_IP=0.0.0.0/0.0.0.0" >> $CONF_FILE
1876
	echo "LDAP_IP=0.0.0.0/0.0.0.0" >> $CONF_FILE
1874
	echo "MULTIWAN=off" >> $CONF_FILE
1877
	echo "MULTIWAN=off" >> $CONF_FILE
1875
	echo "FAILOVER=30" >> $CONF_FILE
1878
	echo "FAILOVER=30" >> $CONF_FILE
1876
	echo "## WANx=active,@IPx/mask,GWx,Weight,MTUx" >> $CONF_FILE
1879
	echo "## WANx=active,@IPx/mask,GWx,Weight,MTUx" >> $CONF_FILE