# -*- coding: utf-8 -*-
import os
import sys
import yaml
import re
import getpass
from yunohost import YunoHostError, YunoHostLDAP, validate, colorize, get_required_args, win_msg
def tools_ldapinit(args, connections):
"""
Initialize YunoHost LDAP scheme
Keyword arguments:
args
connections
Returns:
dict
"""
yldap = connections['ldap']
with open('ldap_scheme.yml') as f:
ldap_map = yaml.load(f)
for rdn, attr_dict in ldap_map['parents'].items():
yldap.add(rdn, attr_dict)
for rdn, attr_dict in ldap_map['childs'].items():
yldap.add(rdn, attr_dict)
validate({ args['domain'] : r'^([a-zA-Z0-9]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)(\.[a-zA-Z0-9]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)*(\.[a-zA-Z]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)$' })
domain_dict = {
'objectClass' : ['mailDomain', 'top'],
'virtualdomain' : args['domain']
}
yldap.add('virtualdomain=' + args['domain'] + ',ou=domains', domain_dict)
admin_dict = {
'cn': 'admin',
'uid': 'admin',
'description': 'LDAP Administrator',
'gidNumber': '1007',
'uidNumber': '1007',
'homeDirectory': '/home/admin',
'loginShell': '/bin/bash',
'objectClass': ['organizationalRole', 'posixAccount', 'simpleSecurityObject']
}
yldap.update('cn=admin', admin_dict)
win_msg(_("LDAP has been successfully initialized"))
def tools_adminpw(args):
"""
Change admin password
Keyword arguments:
args
Returns:
dict
"""
if not 'old' in args:
args['old'] = getpass.getpass(colorize('Actual admin password: ', 'cyan'))
if not 'new' in args:
args['new'] = getpass.getpass(colorize('New admin password: ', 'cyan'))
pwd2 = getpass.getpass(colorize('Retype new password: ', 'cyan'))
if args['new'] != pwd2:
raise YunoHostError(22, _("Passwords doesn't match"))
# Validate password length
if len(args['new']) < 4:
raise YunoHostError(22, _("Password is too short"))
result = os.system('ldappasswd -h localhost -D cn=admin,dc=yunohost,dc=org -w "'+ args['old'] +'" -a "'+ args['old'] +'" -s "' + args['new'] + '"')
if result == 0:
win_msg(_("Admin password has been changed"))
else:
raise YunoHostError(22, _("Invalid password"))
def tools_maindomain(args):
"""
Change admin password
Keyword arguments:
args
Returns:
dict
"""
args = get_required_args(args, {'new_domain' : _('New main domain name')})
if not args['old_domain']:
with open('/usr/share/yunohost/yunohost-config/others/current_host', 'r') as f:
args['old_domain'] = f.readline().rstrip()
validate({
args['new_domain'] : r'^([a-zA-Z0-9]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)(\.[a-zA-Z0-9]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)*(\.[a-zA-Z]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)$',
args['old_domain'] : r'^([a-zA-Z0-9]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)(\.[a-zA-Z0-9]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)*(\.[a-zA-Z]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)$'
})
config_files = [
'/etc/postfix/main.cf',
'/etc/dovecot/dovecot.conf',
'/etc/mailname',
'/etc/ejabberd/ejabberd.cfg',
'/etc/lemonldap-ng/lemonldap-ng.ini',
'/etc/hosts',
]
config_dir = [
'/var/lib/lemonldap-ng/conf',
'/etc/apache2/sites-available',
]
for dir in config_dir:
for file in os.listdir(dir):
config_files.append(dir + '/' + file)
for file in config_files:
with open(file, "r") as sources:
lines = sources.readlines()
with open(file, "w") as sources:
for line in lines:
sources.write(re.sub(r''+ args['old_domain'] +'', args['new_domain'], line))
os.system('/etc/init.d/hostname.sh')
# Regenerate certificate
tmp = '/usr/share/yunohost/yunohost-config'
a = os.system('echo "01" > '+ tmp +'/ssl/yunoCA/serial')
b = os.system('rm '+ tmp +'/ssl/yunoCA/index.txt')
c = os.system('touch '+ tmp +'/ssl/yunoCA/index.txt')
d = os.system('sed -i "s/' + args['old_domain'] + '/' + args['new_domain'] + '/g" '+ tmp +'/ssl/yunoCA/openssl.cnf')
e = os.system('openssl req -x509 -new -config '+ tmp +'/ssl/yunoCA/openssl.cnf -days 3650 -out '+ tmp +'/ssl/yunoCA/ca/cacert.pem -keyout '+ tmp +'/ssl/yunoCA/ca/cakey.pem -nodes -batch')
f = os.system('openssl req -new -config '+ tmp +'/ssl/yunoCA/openssl.cnf -days 730 -out '+ tmp +'/ssl/yunoCA/certs/yunohost_csr.pem -keyout '+ tmp +'/ssl/yunoCA/certs/yunohost_key.pem -nodes -batch')
g = os.system('openssl ca -config '+ tmp +'/ssl/yunoCA/openssl.cnf -days 730 -in '+ tmp +'/ssl/yunoCA/certs/yunohost_csr.pem -out '+ tmp +'/ssl/yunoCA/certs/yunohost_crt.pem -batch')
h = os.system('cp '+ tmp +'/ssl/yunoCA/ca/cacert.pem /etc/ssl/certs/ca-yunohost_crt.pem')
i = os.system('cp '+ tmp +'/ssl/yunoCA/certs/yunohost_key.pem /etc/ssl/private/')
j = os.system('cp '+ tmp +'/ssl/yunoCA/newcerts/01.pem /etc/ssl/certs/yunohost_crt.pem')
k = os.system('cp '+ tmp +'/ssl/yunoCA/newcerts/01.pem /etc/ejabberd/ejabberd.pem')
l = os.system('echo '+ args['new_domain'] +' > /usr/share/yunohost/yunohost-config/others/current_host')
# Restart services
m = os.system('/etc/init.d/apache2 restart')
n = os.system('/etc/init.d/postfix restart')
o = os.system('/etc/init.d/ejabberd restart')
if a == b == c == d == e == f == g == h == i == j == k == l == m == n == o:
win_msg(_("YunoHost main domain has been successfully changed"))
else:
raise YunoHostError(17, _("There were a problem during domain changing"))
def tools_postinstall(args):
"""
Post-install configuration
Keyword arguments:
args
connection
Returns:
dict
"""
connections = { 'ldap' : YunoHostLDAP(password='yunohost') }
try:
with open('/usr/share/yunohost/yunohost-config/others/installed') as f: pass
except IOError:
print('Installing YunoHost')
else:
raise YunoHostError(17, _("YunoHost is already installed"))
args = get_required_args(args, {'domain' : _('Main domain name'), 'password' : _('New admin password') }, True)
# New domain config
tools_maindomain({ 'old_domain' : 'yunohost.org', 'new_domain' : args['domain']})
# Initialize YunoHost LDAP base
tools_ldapinit(args, connections)
# Change LDAP admin password
tools_adminpw({ 'old' : 'yunohost', 'new' : args['password']})
os.system('touch /usr/share/yunohost/yunohost-config/others/installed')
win_msg(_("YunoHost has been successfully configured"))