mirror of
https://github.com/YunoHost/moulinette.git
synced 2024-09-03 20:06:31 +02:00
194 lines
6.7 KiB
Python
194 lines
6.7 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
import os
|
|
import sys
|
|
import yaml
|
|
import re
|
|
import getpass
|
|
from yunohost import YunoHostError, YunoHostLDAP, validate, colorize, get_required_args, win_msg
|
|
from yunohost_domain import domain_add
|
|
|
|
def tools_ldapinit(domain):
|
|
"""
|
|
Initialize YunoHost LDAP scheme
|
|
|
|
Keyword arguments:
|
|
domain -- Main domain name for initialization
|
|
|
|
Returns:
|
|
dict
|
|
|
|
"""
|
|
with YunoHostLDAP() as yldap:
|
|
|
|
with open('ldap_scheme.yml') as f:
|
|
ldap_map = yaml.load(f)
|
|
|
|
for rdn, attr_dict in ldap_map['parents'].items():
|
|
yldap.add(rdn, attr_dict)
|
|
|
|
for rdn, attr_dict in ldap_map['childs'].items():
|
|
yldap.add(rdn, attr_dict)
|
|
|
|
domain_add([domain])
|
|
|
|
admin_dict = {
|
|
'cn': 'admin',
|
|
'uid': 'admin',
|
|
'description': 'LDAP Administrator',
|
|
'gidNumber': '1007',
|
|
'uidNumber': '1007',
|
|
'homeDirectory': '/home/admin',
|
|
'loginShell': '/bin/bash',
|
|
'objectClass': ['organizationalRole', 'posixAccount', 'simpleSecurityObject']
|
|
}
|
|
|
|
yldap.update('cn=admin', admin_dict)
|
|
|
|
win_msg(_("LDAP has been successfully initialized"))
|
|
|
|
|
|
def tools_adminpw(old_password, new_password):
|
|
"""
|
|
Change admin password
|
|
|
|
Keyword arguments:
|
|
old_password
|
|
new_password
|
|
|
|
Returns:
|
|
dict
|
|
|
|
"""
|
|
# Validate password length
|
|
if len(new_password) < 4:
|
|
raise YunoHostError(22, _("Password is too short"))
|
|
|
|
result = os.system('ldappasswd -h localhost -D cn=admin,dc=yunohost,dc=org -w "'+ old_password +'" -a "'+ old_password +'" -s "' + new_password + '"')
|
|
|
|
if result == 0:
|
|
win_msg(_("Admin password has been changed"))
|
|
else:
|
|
raise YunoHostError(22, _("Invalid password"))
|
|
|
|
|
|
def tools_maindomain(old_domain, new_domain):
|
|
"""
|
|
Change admin password
|
|
|
|
Keyword arguments:
|
|
old_domain
|
|
new_domain
|
|
|
|
Returns:
|
|
dict
|
|
|
|
"""
|
|
if not old_domain:
|
|
with open('/usr/share/yunohost/yunohost-config/others/current_host', 'r') as f:
|
|
old_domain = f.readline().rstrip()
|
|
|
|
validate(r'^([a-zA-Z0-9]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)(\.[a-zA-Z0-9]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)*(\.[a-zA-Z]{1}([a-zA-Z0-9\-]*[a-zA-Z0-9])*)$', old_domain)
|
|
|
|
config_files = [
|
|
'/etc/postfix/main.cf',
|
|
'/etc/dovecot/dovecot.conf',
|
|
'/etc/ejabberd/ejabberd.cfg',
|
|
'/etc/lemonldap-ng/lemonldap-ng.ini',
|
|
'/etc/hosts',
|
|
]
|
|
|
|
config_dir = [
|
|
'/var/lib/lemonldap-ng/conf', # TODO: Use lemon perl script instead
|
|
'/etc/apache2/sites-available',
|
|
]
|
|
|
|
for dir in config_dir:
|
|
for file in os.listdir(dir):
|
|
config_files.append(dir + '/' + file)
|
|
|
|
for file in config_files:
|
|
with open(file, "r") as sources:
|
|
lines = sources.readlines()
|
|
with open(file, "w") as sources:
|
|
for line in lines:
|
|
sources.write(re.sub(r''+ old_domain +'', new_domain, line))
|
|
|
|
lemon_tmp_conf = '/tmp/tmplemonconf'
|
|
if os.path.exists(lemon_tmp_conf): os.remove(lemon_tmp_conf)
|
|
|
|
lemon_conf_lines = [
|
|
"delete $tmp->{'locationRules'}->{'"+ old_domain +"'}->{'^/sso/'};", # Remove SSO access rule from old domain
|
|
"$tmp->{'domain'} = '"+ old_domain +"';", # Replace Lemon domain
|
|
"$tmp->{'ldapBase'} = 'dc=yunohost,dc=org';", # Set ldap basedn
|
|
"$tmp->{'portal'} = 'https://"+ new_domain +"/sso/';", # Set SSO url
|
|
"$tmp->{'locationRules'}->{'"+ new_domain +"'}->{'^/sso/'} = 'unprotect';" # Add SSO access rule to new domain
|
|
]
|
|
|
|
with open(lemon_tmp_conf,'a') as lemon_conf:
|
|
for line in lemon_conf_lines:
|
|
lemon_conf.write(line + '\n')
|
|
|
|
os.system('rm /etc/yunohost/apache/domains/' + old_domain + '.d/*.sso.conf') # remove SSO apache conf dir from old domain conf
|
|
os.system('cp /etc/yunohost/apache/templates/fixed.sso.conf /etc/yunohost/apache/domains/' + new_domain + '.d/fixed.sso.conf') # add SSO apache conf dir to new domain conf
|
|
|
|
os.system('/etc/init.d/hostname.sh')
|
|
|
|
# Regenerate certificate
|
|
tmp = '/usr/share/yunohost/yunohost-config'
|
|
a = os.system('echo "01" > '+ tmp +'/ssl/yunoCA/serial')
|
|
b = os.system('rm '+ tmp +'/ssl/yunoCA/index.txt')
|
|
c = os.system('touch '+ tmp +'/ssl/yunoCA/index.txt')
|
|
d = os.system('sed -i "s/' + old_domain + '/' + new_domain + '/g" '+ tmp +'/ssl/yunoCA/openssl.cnf')
|
|
e = os.system('openssl req -x509 -new -config '+ tmp +'/ssl/yunoCA/openssl.cnf -days 3650 -out '+ tmp +'/ssl/yunoCA/ca/cacert.pem -keyout '+ tmp +'/ssl/yunoCA/ca/cakey.pem -nodes -batch')
|
|
f = os.system('openssl req -new -config '+ tmp +'/ssl/yunoCA/openssl.cnf -days 730 -out '+ tmp +'/ssl/yunoCA/certs/yunohost_csr.pem -keyout '+ tmp +'/ssl/yunoCA/certs/yunohost_key.pem -nodes -batch')
|
|
g = os.system('openssl ca -config '+ tmp +'/ssl/yunoCA/openssl.cnf -days 730 -in '+ tmp +'/ssl/yunoCA/certs/yunohost_csr.pem -out '+ tmp +'/ssl/yunoCA/certs/yunohost_crt.pem -batch')
|
|
h = os.system('cp '+ tmp +'/ssl/yunoCA/ca/cacert.pem /etc/ssl/certs/ca-yunohost_crt.pem')
|
|
i = os.system('cp '+ tmp +'/ssl/yunoCA/certs/yunohost_key.pem /etc/ssl/private/')
|
|
j = os.system('cp '+ tmp +'/ssl/yunoCA/newcerts/01.pem /etc/ssl/certs/yunohost_crt.pem')
|
|
k = os.system('cp '+ tmp +'/ssl/yunoCA/newcerts/01.pem /etc/ejabberd/ejabberd.pem')
|
|
l = os.system('echo '+ new_domain +' > /usr/share/yunohost/yunohost-config/others/current_host')
|
|
|
|
# Restart services
|
|
m = os.system('service apache2 restart')
|
|
n = os.system('service postfix restart')
|
|
o = os.system('service ejabberd restart')
|
|
|
|
if a == b == c == d == e == f == g == h == i == j == k == l == m == n == o == 0:
|
|
win_msg(_("YunoHost main domain has been successfully changed"))
|
|
else:
|
|
raise YunoHostError(17, _("There were a problem during domain changing"))
|
|
|
|
|
|
def tools_postinstall(domain, password):
|
|
"""
|
|
Post-install configuration
|
|
|
|
Keyword arguments:
|
|
domain -- Main domain
|
|
password -- New admin password
|
|
|
|
Returns:
|
|
dict
|
|
|
|
"""
|
|
with YunoHostLDAP(password='yunohost') as yldap:
|
|
try:
|
|
with open('/usr/share/yunohost/yunohost-config/others/installed') as f: pass
|
|
except IOError:
|
|
print('Installing YunoHost')
|
|
else:
|
|
raise YunoHostError(17, _("YunoHost is already installed"))
|
|
|
|
# New domain config
|
|
tools_maindomain(old_domain='yunohost.org', new_domain=domain)
|
|
|
|
# Initialize YunoHost LDAP base
|
|
tools_ldapinit(domain=domain)
|
|
|
|
# Change LDAP admin password
|
|
tools_adminpw(old_password='yunohost', new_password=password)
|
|
|
|
os.system('touch /usr/share/yunohost/yunohost-config/others/installed')
|
|
|
|
win_msg(_("YunoHost has been successfully configured"))
|