--- doc/loncapafiles/updatequery.piml	2003/05/19 18:35:50	1.27
+++ doc/loncapafiles/updatequery.piml	2004/06/28 16:40:18	1.32
@@ -1,6 +1,6 @@
 <!-- updatequery.piml -->
 
-<!-- $Id: updatequery.piml,v 1.27 2003/05/19 18:35:50 albertel Exp $ -->
+<!-- $Id: updatequery.piml,v 1.32 2004/06/28 16:40:18 raeburn Exp $ -->
 
 <!--
 
@@ -57,17 +57,19 @@ unless (-l "<TARGET />") {
   print(&lt;&lt;END);
 
 ===============================================================================
-What hosts.tab and domain.tab would you like to have installed?
-(hosts.tab is a listing of all other internet machines
-that a server system considers to be valid server systems
-on the LON-CAPA network
-domain.tab is a description of the internal LON-CAPA domains)
-
-1) PRODUCTION - you want to deliver courses today or sometime very soon
-                on this machine
+Which cluster option would you like to have installed?
+IMPORTANT: to take advantage of the cluster options 1) and 3),
+you must contact lon-capa\@lon-capa.org.
+
+1) PRODUCTION - you want to eventually connect this machine to the
+                LON-CAPA content sharing network. This setting is for
+                schools, colleges, and universities, that currently
+                are running - or in the future will run - courses
 2) STAND-ALONE - you want this machine to run in 'stand-alone' mode and
                  not be connected to other LON-CAPA machines for now
-3) DEVELOPMENT - you want to play with or explore LON-CAPA
+3) DEVELOPMENT - you want to do software (not content!) development with
+                 this workstation and eventually link it with the
+                 workstations of other LON-CAPA software developers.
 4) PRESERVE the existing hosts.tab and domain.tab
                 (/home/httpd/lonTabs/hosts.tab and
                  /home/httpd/lonTabs/domain.tab)
@@ -126,12 +128,13 @@ END
 <perlscript mode='fg'>
 $|=1;
 my $domainDescription;
+my $domainTabExtras;
 unless (-e "<TARGET />") {
   print(&lt;&lt;END);
            WELCOME TO LON-CAPA!
 
 If you have questions, please visit http://install.lon-capa.org
-or contact sharrison\@mail.lon-capa.org.
+or contact helpdesk\@lon-capa.org.
 
 ===============================================================================
 The following 4 values are needed to configure LON-CAPA:
@@ -139,6 +142,13 @@ The following 4 values are needed to con
 * LON-CAPA Domain Name
 * LON-CAPA Machine ID Name, and
 * System Administration E-mail Address.
+===============================================================================
+
+In addition, a Support E-mail Address can also be included. If
+an address is included then one of the options in the LON-CAPA 
+help menu will be a link to a form that a user will complete to
+request LON-CAPA help.  
+
 END
 
 open(OUT,'&gt;/tmp/loncapa_updatequery.out');
@@ -325,7 +335,7 @@ END
   }
 }
 
-# get e-mail address
+# get admin e-mail address
 # accept if valid, if not valid, tell user and repeat
 $flag=0;
 my $lonAdmEMail;
@@ -335,7 +345,7 @@ while (!$flag) {
 **** System Administrator's E-mail ****
 E-mail address of the person who will manage this machine
 [should be in the form somebody\@somewhere]
-ENTER E-MAIL ADDRESS:
+ENTER ADMIN E-MAIL ADDRESS:
 END
 
   my $choice=&lt;&gt;;
@@ -352,6 +362,40 @@ END
   }
 }
 
+
+# get support e-mail address
+# accept if valid, if not valid, tell user and repeat
+$flag=0;
+my $lonSupportEMail;
+while (!$flag) {
+  print(&lt;&lt;END);
+
+**** Support E-mail ****
+E-mail address of the person who will receive 
+help requests from LON-CAPA users who access 
+the system via this server. If the address is left blank,
+then a help support form will not be displayed 
+as part of the help menu.
+[should be in the form somebody\@somewhere]
+ENTER SUPPORT E-MAIL ADDRESS:
+END
+
+  my $choice=&lt;&gt;;
+  chomp($choice);
+  $choice =~ s/\s//g;
+  if ( ($choice=~/\@/) || $choice eq '') ) {
+    open(OUT,'&gt;&gt;/tmp/loncapa_updatequery.out');
+    print(OUT 'lonSupportEMail'."\t".$choice."\n");
+    close(OUT);
+    $lonSupportEMail=$choice;
+    $flag=1;
+  }
+  else {
+    print "Invalid input (this either needs to be blank, or look like an e-mail address!).\n";
+  }
+}
+
+
 # update loncapa.conf
 my $confdir='/etc/httpd/conf/';
 #my $confdir='';
@@ -371,6 +415,7 @@ my %perlvar;
     $perlvar{'lonHostID'}=$lonHostID;
     $perlvar{'lonDefDomain'}=$lonDefDomain;
     $perlvar{'lonAdmEMail'}=$lonAdmEMail;
+    $perlvar{'lonSupportEMail'}=$lonSupportEMail;
     $perlvar{'lonRole'}=$lonRole;
     unless ($perlvar{'lonLoadLim'} and $perlvar{'lonLoadLim'}!~/\{\[\[\[\[/) {
        $perlvar{'lonLoadLim'}='2.00';
@@ -405,10 +450,26 @@ END
 <file>
 <target dist='default'>/</target>
 <perlscript mode='fg'>
+sub securesetting {
+    my (%perlvar)=@_;
+    my $securestatus='unknown';
+    my $securenum='';
+    if      ( $perlvar{'loncAllowInsecure'}&&  $perlvar{'londAllowInsecure'}) {
+	$securestatus='no';                  $securenum='4';
+    } elsif ( $perlvar{'loncAllowInsecure'}&& !$perlvar{'londAllowInsecure'}) {
+	$securestatus='lond';                $securenum='3';
+    } elsif (!$perlvar{'loncAllowInsecure'}&&  $perlvar{'londAllowInsecure'}) {
+	$securestatus='lonc';                $securenum='2';
+    } elsif (!$perlvar{'loncAllowInsecure'}&& !$perlvar{'londAllowInsecure'}) {
+	$securestatus='yes (lond and lonc)'; $securenum='1';
+    }
+    return ($securestatus,$securenum);
+}
 # read values from loncapa.conf
 my $confdir='/etc/httpd/conf/';
 my $filename='loncapa.conf';
 my %perlvar;
+my ($securestatus,$securenum);
     if (-e "$confdir$filename") {
 	open(CONFIG,'&lt;'.$confdir.$filename) or 
           die("Can't read $confdir$filename");
@@ -430,6 +491,13 @@ my %perlvar;
     unless ($perlvar{'lonExpire'} and $perlvar{'lonExpire'}!~/\{\[\[\[\[/) {
        $perlvar{'lonExpire'}='86400';
     }
+    unless ($perlvar{'londAllowInsecure'} and $perlvar{'londAllowInsecure'}!~/\{\[\[\[\[/) {
+       $perlvar{'londAllowInsecure'}='1';
+    }
+    unless ($perlvar{'loncAllowInsecure'} and $perlvar{'loncAllowInsecure'}!~/\{\[\[\[\[/) {
+       $perlvar{'loncAllowInsecure'}='1';
+    }
+    ($securestatus,$securenum)=&securesetting(%perlvar);
     unless ($perlvar{'lonReceipt'} and $perlvar{'lonReceipt'}!~/\{\[\[\[\[/) {
        my $lonReceipt='';
        srand(time ^ $$ ^ unpack "%L*", `ps axww | gzip`);
@@ -456,8 +524,9 @@ my %perlvarstatic;
        open(IN,'&lt;../'.$lonCluster.'_domain.tab');
        while(&lt;IN&gt;) {
           if (/^$perlvar{'lonDefDomain'}\:/) {
-	     (undef,$domainDescription)=split(/:/,$_);
+	     (undef,$domainDescription,$domainTabExtras)=split(/:/,$_,3);
 	     chomp($domainDescription);
+	     chomp($domainTabExtras);
              last;
           }
        }
@@ -467,8 +536,9 @@ my %perlvarstatic;
        open(IN,'&lt;/home/httpd/lonTabs/domain.tab');
        while(&lt;IN&gt;) {
           if (/^$perlvar{'lonDefDomain'}\:/) {
-	     (undef,$domainDescription)=split(/:/,$_);
+	     (undef,$domainDescription,$domainTabExtras)=split(/:/,$_,3);
 	     chomp($domainDescription);
+	     chomp($domainTabExtras);
              last;
           }
        }
@@ -485,15 +555,17 @@ while (!$flag) {
 
 ===============================================================================
 This is now the current configuration of your machine.
-1) Domain Name: $perlvar{'lonDefDomain'}
-2) Domain Description: $domainDescription
-3) Machine Name: $perlvar{'lonHostID'}
-4) System Administrator's E-mail Address: $perlvar{'lonAdmEMail'}
-5) Role: $perlvar{'lonRole'}
-6) Cache Expiration Time: $perlvar{'lonExpire'}
-7) Server Load: $perlvar{'lonLoadLim'}
-8) User Load: $perlvar{'lonUserLoadLim'}
-9) Everything is correct up above
+ 1) Domain Name: $perlvar{'lonDefDomain'}
+ 2) Domain Description: $domainDescription
+ 3) Machine Name: $perlvar{'lonHostID'}
+ 4) System Administrator's E-mail Address: $perlvar{'lonAdmEMail'}
+ 5) Support E-mail Address: $perlvar{'lonSupportEmail'}
+ 6) Role: $perlvar{'lonRole'}
+ 7) Cache Expiration Time: $perlvar{'lonExpire'}
+ 8) Server Load: $perlvar{'lonLoadLim'}
+ 9) User Load: $perlvar{'lonUserLoadLim'}
+10) Allow only secure connections: $securestatus 
+11) Everything is correct up above
 END
 my $hbug=-1;
 my $dbug=-1;
@@ -520,7 +592,7 @@ if ($dbug) {
 }
 
   print(&lt;&lt;END);
-ENTER A CHOICE OF 1-8 TO CHANGE, otherwise ENTER 9:
+ENTER A CHOICE OF 1-10 TO CHANGE, otherwise ENTER 11:
 END
 my $choice=&lt;&gt;;
 chomp($choice);
@@ -569,7 +641,16 @@ END
   }
   elsif ($choice==5) {
   print(&lt;&lt;END);
-5) Role: $perlvar{'lonRole'}
+5) Support E-mail Address: $perlvar{'lonSupportEMail'}
+ENTER NEW VALUE:
+END
+    my $choice2=&lt;&gt;;
+    chomp($choice2);
+    $perlvar{'lonSupportEMail'}=$choice2;
+  }
+  elsif ($choice==6) {
+  print(&lt;&lt;END);
+6) Role: $perlvar{'lonRole'}
 ENTER NEW VALUE (this should be either 'access' or 'library' 
                  if in doubt select 'library'):
 END
@@ -577,27 +658,27 @@ END
     chomp($choice2);
     $perlvar{'lonRole'}=$choice2;
   }
-  elsif ($choice==6) {
+  elsif ($choice==7) {
   print(&lt;&lt;END);
-6) Cache Expiration Time: $perlvar{'lonExpire'}
+7) Cache Expiration Time: $perlvar{'lonExpire'}
 ENTER NEW VALUE (in seconds, 86400 is a reasonable value):
 END
     my $choice2=&lt;&gt;;
     chomp($choice2);
     $perlvar{'lonExpire'}=$choice2;
   }
-  elsif ($choice==7) {
+  elsif ($choice==8) {
   print(&lt;&lt;END);
-7) Server Load: $perlvar{'lonLoadLim'}
+8) Server Load: $perlvar{'lonLoadLim'}
 ENTER NEW VALUE:
 END
     my $choice2=&lt;&gt;;
     chomp($choice2);
     $perlvar{'lonLoadLim'}=$choice2;
   }
-  elsif ($choice==8) {
+  elsif ($choice==9) {
   print(&lt;&lt;END);
-8) User Load: $perlvar{'lonUserLoadLim'}
+9) User Load: $perlvar{'lonUserLoadLim'}
 Numer of users that can login before machine is 'overloaded'
 ENTER NEW VALUE (integer value, 0 means there is no limit):
 END
@@ -605,7 +686,36 @@ END
     chomp($choice2);
     $perlvar{'lonUserLoadLim'}=$choice2;
   }
-  elsif ($choice==9) {
+  elsif ($choice==10) {
+  print(&lt;&lt;END);
+10) Allow only secure connections: $securestatus 
+The Lon-CAPA communication daemons lonc and lond can be configured to
+allow only secure connections by default.
+
+POSSIBLE CHOICES:
+1) allow only secure connections and don't connect to machines that
+    can not be connected to securely
+2) allow only secure connections but allow this machine to connect to 
+    machines that don't support secure connections
+3) allow insecure connections to this machine but only allow connections
+    to machines that support secure connections
+4) allow insecure connections
+ENTER NEW VALUE (currenly $securenum):
+END
+    my $choice2=&lt;&gt;;
+    chomp($choice2);
+    if      ($choice2 eq '1') {
+	$perlvar{'loncAllowInsecure'}=0;$perlvar{'londAllowInsecure'}=0;
+    } elsif ($choice2 eq '2') {
+	$perlvar{'loncAllowInsecure'}=0;$perlvar{'londAllowInsecure'}=1;
+    } elsif ($choice2 eq '3') {
+	$perlvar{'loncAllowInsecure'}=1;$perlvar{'londAllowInsecure'}=0;
+    } elsif ($choice2 eq '4') {
+	$perlvar{'loncAllowInsecure'}=1;$perlvar{'londAllowInsecure'}=1;
+    }
+    ($securestatus,$securenum)=&securesetting(%perlvar);
+  }
+  elsif ($choice==11) {
     $flag=1;
   }
   else {
@@ -638,7 +748,7 @@ unless (-l "<TARGET />") {
   $line2insert=&lt;&lt;END;
 $perlvar{'lonHostID'}:$perlvar{'lonDefDomain'}:$perlvar{'lonRole'}:$hostname:$hostaddress
 END
-  $domaininsert="$perlvar{'lonDefDomain'}:$domainDescription\n";
+  $domaininsert="$perlvar{'lonDefDomain'}:$domainDescription:$domainTabExtras\n";
   if ($lonCluster eq 'standalone') {
     open(OUT,'&gt;../'.$lonCluster.'_hosts.tab') or
       die('file generation error');
@@ -676,7 +786,7 @@ END
        close(OUT);
       `ln -s new_${lonCluster}_hosts.tab ../hosts.tab`;
       # email appropriate message
-      system('ping -c 1 www.lon-capa.org > /dev/null || ping -c 1 www.msu.edu > /dev/null || ping -c 1 www.mit.edu > /dev/null');
+      system('ping -c 1 -W 5 www.lon-capa.org > /dev/null || ping -c 1 -W 5 www.msu.edu > /dev/null || ping -c 1 -W 5 www.mit.edu > /dev/null');
       `echo "REPLACE:$lonCluster:$lonHostID:$date:$line2insert" | mail -s "REPLACE:$lonCluster:$lonHostID:$date" installrecord\@mail.lon-capa.org` unless $?;
     }
     elsif ($hostidexistflag and $lineexistflag) {
@@ -729,7 +839,7 @@ END
        close(OUT);
       `ln -s new_${lonCluster}_domain.tab ../domain.tab`;
       # email appropriate message
-      system('ping -c 1 www.lon-capa.org > /dev/null || ping -c 1 www.msu.edu > /dev/null || ping -c 1 www.mit.edu > /dev/null');
+      system('ping -c 1 -W 5 www.lon-capa.org > /dev/null || ping -c 1 -W 5 www.msu.edu > /dev/null || ping -c 1 -W 5 www.mit.edu > /dev/null');
       `echo "REPLACEdom:$lonCluster:$lonHostID:$date:$domaninsert" | mail -s "REPLACEdom:$lonCluster:$lonHostID:$date" installrecord\@mail.lon-capa.org` unless $?;
     }
     elsif ($domainexistflag and $lineexistflag) {