| Line 1... |
Line 1... |
| 1 |
#/bin/bash
|
1 |
#/bin/bash
|
| 2 |
# $Id: alcasar-conf.sh 1060 2013-03-31 18:10:30Z richard $
|
2 |
# $Id: alcasar-conf.sh 1062 2013-04-01 21:20:12Z richard $
|
| 3 |
|
3 |
|
| 4 |
# alcasar-conf.sh
|
4 |
# alcasar-conf.sh
|
| 5 |
# by REXY
|
5 |
# by REXY
|
| 6 |
# This script is distributed under the Gnu General Public License (GPL)
|
6 |
# This script is distributed under the Gnu General Public License (GPL)
|
| 7 |
|
7 |
|
| Line 32... |
Line 32... |
| 32 |
SED="/bin/sed -i"
|
32 |
SED="/bin/sed -i"
|
| 33 |
RUNNING_VERSION=`cat $VERSION|cut -d" " -f1`
|
33 |
RUNNING_VERSION=`cat $VERSION|cut -d" " -f1`
|
| 34 |
MAJ_RUNNING_VERSION=`echo $RUNNING_VERSION|cut -d"." -f1`
|
34 |
MAJ_RUNNING_VERSION=`echo $RUNNING_VERSION|cut -d"." -f1`
|
| 35 |
MIN_RUNNING_VERSION=`echo $RUNNING_VERSION|cut -d"." -f2|cut -c1`
|
35 |
MIN_RUNNING_VERSION=`echo $RUNNING_VERSION|cut -d"." -f2|cut -c1`
|
| 36 |
UPD_RUNNING_VERSION=`echo $RUNNING_VERSION|cut -d"." -f3`
|
36 |
UPD_RUNNING_VERSION=`echo $RUNNING_VERSION|cut -d"." -f3`
|
| 37 |
DOMAIN=`grep DOMAIN $CONF_FILE|cut -d"=" -f2`
|
37 |
DOMAIN=`grep DOMAIN $CONF_FILE|cut -d"=" -f2` 2>/dev/null # Error if (Version < 2.2) (no conf file)
|
| 38 |
DOMAIN=${DOMAIN:=localdomain}
|
38 |
DOMAIN=${DOMAIN:=localdomain}
|
| 39 |
DATE=`date '+%d %B %Y - %Hh%M'`
|
39 |
DATE=`date '+%d %B %Y - %Hh%M'`
|
| 40 |
private_network_calc ()
|
40 |
private_network_calc ()
|
| 41 |
{
|
41 |
{
|
| 42 |
PRIVATE_PREFIX=`/bin/ipcalc -p $PRIVATE_IP $PRIVATE_NETMASK |cut -d"=" -f2` # prefixe du réseau (ex. 24)
|
42 |
PRIVATE_PREFIX=`/bin/ipcalc -p $PRIVATE_IP $PRIVATE_NETMASK |cut -d"=" -f2` # prefixe du réseau (ex. 24)
|
| Line 67... |
Line 67... |
| 67 |
;;
|
67 |
;;
|
| 68 |
--create|-create)
|
68 |
--create|-create)
|
| 69 |
[ -d $DIR_UPDATE ] && rm -rf $DIR_UPDATE
|
69 |
[ -d $DIR_UPDATE ] && rm -rf $DIR_UPDATE
|
| 70 |
mkdir $DIR_UPDATE
|
70 |
mkdir $DIR_UPDATE
|
| 71 |
# Sauvegarde de la base des usagers
|
71 |
# Sauvegarde de la base des usagers
|
| 72 |
/usr/local/sbin/alcasar-mysql.sh -dump
|
72 |
$DIR_SBIN/alcasar-mysql.sh -dump
|
| 73 |
cp /var/Save/base/`ls /var/Save/base|tail -1` $DIR_UPDATE
|
73 |
cp /var/Save/base/`ls /var/Save/base|tail -1` $DIR_UPDATE
|
| 74 |
# Sauvegarde du logo
|
74 |
# Sauvegarde du logo
|
| 75 |
cp -f $DIR_WEB/images/organisme.png $DIR_UPDATE
|
75 |
cp -f $DIR_WEB/images/organisme.png $DIR_UPDATE
|
| 76 |
# Sauvegarde des fichiers exploités par dansguardian
|
76 |
# Sauvegarde des fichiers exploités par dansguardian
|
| 77 |
cp -f /etc/dansguardian/lists/exceptioniplist $DIR_UPDATE
|
77 |
cp -f /etc/dansguardian/lists/exceptioniplist $DIR_UPDATE
|
| Line 158... |
Line 158... |
| 158 |
if [ -r /var/run/sshd.pid ]; then
|
158 |
if [ -r /var/run/sshd.pid ]; then
|
| 159 |
echo "SSH=on" >> $CONF_FILE
|
159 |
echo "SSH=on" >> $CONF_FILE
|
| 160 |
else
|
160 |
else
|
| 161 |
echo "SSH=off" >> $CONF_FILE
|
161 |
echo "SSH=off" >> $CONF_FILE
|
| 162 |
fi
|
162 |
fi
|
| - |
|
163 |
echo "SSH_ADMIN_FROM=0.0.0.0/0.0.0.0" >> $CONF_FILE
|
| 163 |
echo "QOS=off" >> $CONF_FILE
|
164 |
echo "QOS=off" >> $CONF_FILE
|
| 164 |
echo "WEB_ANTIVIRUS=on" >> $CONF_FILE
|
165 |
echo "WEB_ANTIVIRUS=on" >> $CONF_FILE
|
| 165 |
if [ `grep ^ldap /etc/raddb/sites-available/alcasar | wc -l` -eq "0" ]; then
|
166 |
if [ `grep ^ldap /etc/raddb/sites-available/alcasar | wc -l` -eq "0" ]; then
|
| 166 |
echo "LDAP=off" >> $CONF_FILE
|
167 |
echo "LDAP=off" >> $CONF_FILE
|
| 167 |
else
|
168 |
else
|
| 168 |
echo "LDAP=on" >> $CONF_FILE
|
169 |
echo "LDAP=on" >> $CONF_FILE
|
| 169 |
fi
|
170 |
fi
|
| - |
|
171 |
echo "LDAP_IP=0.0.0.0/0.0.0.0" >> $CONF_FILE
|
| 170 |
PROTOCOLS_FILTERING=`grep ^PROTO_FILTERING /usr/local/bin/alcasar-iptables.sh | cut -d"=" -f2`
|
172 |
PROTOCOLS_FILTERING=`grep ^PROTO_FILTERING /usr/local/bin/alcasar-iptables.sh | cut -d"=" -f2`
|
| 171 |
PROTOCOLS_FILTERING=${PROTOCOLS_FILTERING:="no"}
|
173 |
PROTOCOLS_FILTERING=${PROTOCOLS_FILTERING:="no"}
|
| 172 |
if [ $PROTOCOLS_FILTERING = "no" ]; then
|
174 |
if [ $PROTOCOLS_FILTERING = "no" ]; then
|
| 173 |
echo "PROTOCOLS_FILTERING=off" >> $CONF_FILE
|
175 |
echo "PROTOCOLS_FILTERING=off" >> $CONF_FILE
|
| 174 |
else
|
176 |
else
|
| Line 181... |
Line 183... |
| 181 |
else
|
183 |
else
|
| 182 |
echo "DNS_FILTERING=on" >> $CONF_FILE
|
184 |
echo "DNS_FILTERING=on" >> $CONF_FILE
|
| 183 |
fi
|
185 |
fi
|
| 184 |
fi
|
186 |
fi
|
| 185 |
# since V2.6
|
187 |
# since V2.6
|
| - |
|
188 |
# SSH_ADMIN_FROM is redefined
|
| - |
|
189 |
$SED "s?^Admin_from_IP=.*?SSH_ADMIN_FROM=0.0.0.0/0.0.0.0?" $CONF_FILE
|
| 186 |
# macallowed is replaced with macauth
|
190 |
# macallowed is replaced with macauth
|
| 187 |
rm -f $DIR_UPDATE/etc/alcasar-macallowed
|
191 |
rm -f $DIR_UPDATE/etc/alcasar-macallowed
|
| 188 |
# DHCP mode can be "off/half/full"
|
192 |
# DHCP mode can be "off/half/full"
|
| 189 |
DHCP_mode=`cat $CONF_FILE|grep DHCP=|cut -d"=" -f2`
|
193 |
DHCP_mode=`cat $CONF_FILE|grep DHCP=|cut -d"=" -f2`
|
| 190 |
if [ $DHCP_mode = "on" ]; then
|
194 |
if [ $DHCP_mode = "on" ]; then
|