# -*- coding: utf-8 -*- import os import sys import yaml import re import getpass from yunohost import YunoHostError, YunoHostLDAP, validate, colorize, get_required_args, win_msg from yunohost_domain import domain_add def tools_ldapinit(domain): """ Initialize YunoHost LDAP scheme Keyword arguments: domain -- Main domain name for initialization Returns: dict """ with YunoHostLDAP() as yldap: with open('ldap_scheme.yml') as f: ldap_map = yaml.load(f) for rdn, attr_dict in ldap_map['parents'].items(): yldap.add(rdn, attr_dict) for rdn, attr_dict in ldap_map['childs'].items(): yldap.add(rdn, attr_dict) domain_add([domain]) admin_dict = { 'cn': 'admin', 'uid': 'admin', 'description': 'LDAP Administrator', 'gidNumber': '1007', 'uidNumber': '1007', 'homeDirectory': '/home/admin', 'loginShell': '/bin/bash', 'objectClass': ['organizationalRole', 'posixAccount', 'simpleSecurityObject'] } yldap.update('cn=admin', admin_dict) win_msg(_("LDAP has been successfully initialized")) def tools_adminpw(old_password, new_password): """ Change admin password Keyword arguments: old_password new_password Returns: dict """ # Validate password length if len(new_password) < 4: raise YunoHostError(22, _("Password is too short")) result = os.system('ldappasswd -h localhost -D cn=admin,dc=yunohost,dc=org -w "'+ old_password +'" -a "'+ old_password +'" -s "' + new_password + '"') if result == 0: win_msg(_("Admin password has been changed")) else: raise YunoHostError(22, _("Invalid password")) def tools_maindomain(old_domain, new_domain): """ Change admin password Keyword arguments: old_domain new_domain Returns: dict """ if not old_domain: with open('/usr/share/yunohost/yunohost-config/others/current_host', 'r') as f: old_domain = f.readline().rstrip() validate(r'^([a-zA-Z0-9]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)(\.[a-zA-Z0-9]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)*(\.[a-zA-Z]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)$', old_domain) config_files = [ '/etc/postfix/main.cf', '/etc/dovecot/dovecot.conf', '/etc/lemonldap-ng/lemonldap-ng.ini', '/etc/hosts', ] config_dir = [ '/var/lib/lemonldap-ng/conf', # TODO: Use lemon perl script instead '/etc/apache2/sites-available', ] for dir in config_dir: for file in os.listdir(dir): config_files.append(dir + '/' + file) for file in config_files: with open(file, "r") as sources: lines = sources.readlines() with open(file, "w") as sources: for line in lines: sources.write(re.sub(r''+ old_domain +'', new_domain, line)) lemon_tmp_conf = '/tmp/tmplemonconf' if os.path.exists(lemon_tmp_conf): os.remove(lemon_tmp_conf) lemon_conf_lines = [ "delete $tmp->{'locationRules'}->{'"+ old_domain +"'}->{'^/sso/'};", # Remove SSO access rule from old domain "$tmp->{'domain'} = '"+ old_domain +"';", # Replace Lemon domain "$tmp->{'ldapBase'} = 'dc=yunohost,dc=org';", # Set ldap basedn "$tmp->{'portal'} = 'https://"+ new_domain +"/sso/';", # Set SSO url "$tmp->{'locationRules'}->{'"+ new_domain +"'}->{'^/sso/'} = 'unprotect';" # Add SSO access rule to new domain ] with open(lemon_tmp_conf,'a') as lemon_conf: for line in lemon_conf_lines: lemon_conf.write(line + '\n') os.system('rm /etc/yunohost/apache/domains/' + old_domain + '.d/*.sso.conf') # remove SSO apache conf dir from old domain conf os.system('cp /etc/yunohost/apache/templates/fixed.sso.conf /etc/yunohost/apache/domains/' + new_domain + '.d/fixed.sso.conf') # add SSO apache conf dir to new domain conf os.system('/etc/init.d/hostname.sh') # Regenerate certificate tmp = '/usr/share/yunohost/yunohost-config' a = os.system('echo "01" > '+ tmp +'/ssl/yunoCA/serial') b = os.system('rm '+ tmp +'/ssl/yunoCA/index.txt') c = os.system('touch '+ tmp +'/ssl/yunoCA/index.txt') d = os.system('sed -i "s/' + old_domain + '/' + new_domain + '/g" '+ tmp +'/ssl/yunoCA/openssl.cnf') e = os.system('openssl req -x509 -new -config '+ tmp +'/ssl/yunoCA/openssl.cnf -days 3650 -out '+ tmp +'/ssl/yunoCA/ca/cacert.pem -keyout '+ tmp +'/ssl/yunoCA/ca/cakey.pem -nodes -batch') f = os.system('openssl req -new -config '+ tmp +'/ssl/yunoCA/openssl.cnf -days 730 -out '+ tmp +'/ssl/yunoCA/certs/yunohost_csr.pem -keyout '+ tmp +'/ssl/yunoCA/certs/yunohost_key.pem -nodes -batch') g = os.system('openssl ca -config '+ tmp +'/ssl/yunoCA/openssl.cnf -days 730 -in '+ tmp +'/ssl/yunoCA/certs/yunohost_csr.pem -out '+ tmp +'/ssl/yunoCA/certs/yunohost_crt.pem -batch') h = os.system('cp '+ tmp +'/ssl/yunoCA/ca/cacert.pem /etc/ssl/certs/ca-yunohost_crt.pem') i = os.system('cp '+ tmp +'/ssl/yunoCA/certs/yunohost_key.pem /etc/ssl/private/') j = os.system('cp '+ tmp +'/ssl/yunoCA/newcerts/01.pem /etc/ssl/certs/yunohost_crt.pem') k = os.system('echo '+ new_domain +' > /usr/share/yunohost/yunohost-config/others/current_host') # Restart services l = os.system('service apache2 restart') m = os.system('service postfix restart') if a == b == c == d == e == f == g == h == i == j == k == l == m == 0: win_msg(_("YunoHost main domain has been successfully changed")) else: raise YunoHostError(17, _("There were a problem during domain changing")) def tools_postinstall(domain, password): """ Post-install configuration Keyword arguments: domain -- Main domain password -- New admin password Returns: dict """ with YunoHostLDAP(password='yunohost') as yldap: try: with open('/usr/share/yunohost/yunohost-config/others/installed') as f: pass except IOError: print('Installing YunoHost') else: raise YunoHostError(17, _("YunoHost is already installed")) # New domain config tools_maindomain(old_domain='yunohost.org', new_domain=domain) # Initialize YunoHost LDAP base tools_ldapinit(domain=domain) # Change LDAP admin password tools_adminpw(old_password='yunohost', new_password=password) os.system('touch /usr/share/yunohost/yunohost-config/others/installed') win_msg(_("YunoHost has been successfully configured"))