--- loncom/init.d/loncontrol	2003/02/03 18:03:52	1.10
+++ loncom/init.d/loncontrol	2007/05/31 05:20:06	1.30
@@ -1,17 +1,38 @@
 #!/usr/bin/perl
 #
+# $Id: loncontrol,v 1.30 2007/05/31 05:20:06 albertel Exp $
+#
 # The LearningOnline Network with CAPA
 #
+# Copyright Michigan State University Board of Trustees
+#
+# This file is part of the LearningOnline Network with CAPA (LON-CAPA).
+#
+# LON-CAPA is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# LON-CAPA is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with LON-CAPA; if not, write to the Free Software
+# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+#
+# /home/httpd/html/adm/gpl.txt
+#
+# http://www.lon-capa.org/
+#
 # Startup script for the LON-CAPA network processes
 #
-# YEAR=2000
-# YEAR=2001
-# YEAR=2002
 
 # chkconfig: 345 95 5
-# description: LON-CAPA is a "network of knowledge".  It is used to
+# description: LON-CAPA is a "network of knowledge".  It is used to \
 # distribute knowledge resources and instructional management.
-# processnames: lonc, lond, lonsql
+# processnames: lonc, lond, lonsql, lonmaxima
 # pidfiles: /home/httpd/perl/logs/lon*.pid
 # config: /etc/httpd/conf/loncapa.conf
 # config: /home/httpd/lonTabs/hosts.tab
@@ -22,34 +43,175 @@ $command=$ARGV[0]; $command=~s/[^a-z]//g
 $ENV{'PATH'}="/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/root/bin";
 $ENV{'BASH_ENV'}="";
 
-if (($command eq "restart") or ($command eq "reload")) {
+{ # Firewall variable scoping
+    # Firewall code is based on the code in FC2 /etc/init.d/ntpd
+    my $fw_chain = 'RH-Firewall-1-INPUT';
+    my $iptables = '/sbin/iptables';
+    if (! -e $iptables) {
+	$iptables = '/usr/sbin/iptables';
+	if (! -e $iptables) {
+	    print("Unable to find iptables command\n");
+	}
+    }
+    my $lond_port = 5663;
+    my $lonhttpd_port = 8080;
+
+sub firewall_open_port {
+    return if (! &firewall_is_active);
+    if (! `$iptables -L -n 2>/dev/null | grep $fw_chain | wc -l`) { return; }
+    # iptables is running with our chain
+    #
+    # We could restrict the servers allowed to attempt to communicate
+    # here, but the logistics of updating the /home/httpd/lonTabs/host.tab
+    # file are likely to be a problem
+    foreach my $port ($lond_port,$lonhttpd_port) {
+        print "Opening firewall access on port $port.\n";
+
+        my $firewall_command = 
+            "$iptables -I $fw_chain -p tcp -d 0/0 --dport $port -j ACCEPT";
+        system($firewall_command);
+        my $return_status = $?>>8;
+        if ($return_status == 1) {
+            # Error
+            print "Error opening port.\n";
+        } elsif ($return_status == 2) {
+            # Bad command
+            print "Bad command error opening port.  Command was\n".
+                "  ".$firewall_command."\n";
+        }
+    }
+    
+}
+
+sub firewall_is_port_open {
+    # returns 1 if the firewall port is open, 0 if not.
+    #
+    # check if firewall is active or installed
+    return if (! &firewall_is_active);
+    if (`$iptables -L -n 2>/dev/null | grep "tcp dpt:$port"`) { 
+        return 1;
+    } else {
+        return 0;
+    }
+}
+
+sub firewall_is_active {
+    if (-e '/proc/net/ip_tables_names') {
+        return 1;
+    } else {
+        return 0;
+    }
+}
+
+sub firewall_close_port {
+    return if (! &firewall_is_active);
+    foreach my $port ($lond_port,$lonhttpd_port) {
+        print "Closing firewall access on port $port.\n";
+        my $firewall_command = 
+            "$iptables -D $fw_chain -p tcp -d 0/0 --dport $port -j ACCEPT";
+        system($firewall_command);
+        my $return_status = $?>>8;
+        if ($return_status == 1) {
+            # Error
+            print "Error closing port.\n";
+        } elsif ($return_status == 2) {
+            # Bad command
+            print "Bad command error closing port.  Command was\n".
+                "  ".$firewall_command."\n";
+        }
+    }
+}
+
+} # End firewall variable scope
+
+sub stop_daemon {
+    my ($daemon,$killallname)=@_;
+    my $pidfile="/home/httpd/perl/logs/$daemon.pid";
+    
+    printf("%-15s ",$daemon);
+    if (-e $pidfile) {
+	open(PIDFILE,$pidfile);
+	my $daemonpid=<PIDFILE>;
+	chomp($daemonpid);
+	kill TERM => $daemonpid;
+	sleep 1;
+	if (kill 0 => $daemonpid) {
+	    kill KILL => $daemonpid;
+	    sleep 1;
+	    if (kill 0 => $daemonpid) {
+		print("failed to kill");
+	    } else {
+		print("killed");
+	    }
+	} else {
+	    print("stopped");
+	}
+    } else {
+	print("not running");
+    }
+    system("killall -q -0 $killallname");
+    if ($? == 0) {
+	system("killall -q $killallname");
+	print(", killed off extraneous processes");
+    }
+    unlink($pidfile);
+    print("\n");
+}
+
+sub clean_sockets {
+    opendir(SOCKETS,"/home/httpd/sockets/");
+    while (my $fname=readdir(SOCKETS)) {
+	next if (-d $fname
+		 || $fname=~/(mysqlsock|maximasock|\Q$perlvar{'lonSockDir'}\E)/);
+	unlink("/home/httpd/sockets/$fname");
+    }
+}
+
+if ($command eq "restart") {
     print 'Restarting LON-CAPA'."\n";
     print 'Ending LON-CAPA client and daemon processes'."\n";
-    print `su -c '/bin/kill \`/bin/cat /home/httpd/perl/logs/*.pid\`' www`;
+    foreach my $daemon ('lonsql','lond','lonc','lonhttpd','lonmemcached','lonmaxima') {
+	my $killallname=$daemon;
+	if ($daemon eq 'lonc') { $killallname='loncnew'; }
+	&stop_daemon($daemon,$killallname);
+    }
     print 'Starting LON-CAPA client and daemon processes (please be patient)'.
 	"\n";
-    system("su -c '/home/httpd/perl/loncron' www");
-}
-elsif ($command eq "stop") {
+    system("su www -c '/home/httpd/perl/loncron --justcheckdaemons'");
+} elsif ($command eq "stop") {
     print 'Stopping LON-CAPA'."\n";
-    print `su -c '/bin/kill \`/bin/cat /home/httpd/perl/logs/*.pid\`' www`;
-}
-elsif ($command eq "start") {
+    foreach my $daemon ('lonsql','lond','lonc','lonhttpd','lonmemcached','lonmaxima') {
+	my $killallname=$daemon;
+	if ($daemon eq 'lonc') { $killallname='loncnew'; }
+	&stop_daemon($daemon,$killallname);
+    }
+    &firewall_close_port();
+    &clean_sockets();
+} elsif ($command eq "start") {
+    &firewall_open_port();
     print 'Starting LON-CAPA'."\n";
     print 'Starting LON-CAPA client and daemon processes (please be patient)'.
 	"\n"; 
-    system("su -c '/home/httpd/perl/loncron' www");
-}
-elsif ($command eq "status") {
+    system("su www -c '/home/httpd/perl/loncron --justcheckdaemons'");
+} elsif ($command eq "reload") {
+    print 'Reload LON-CAPA config files'."\n";
+    system("su www -c '/home/httpd/perl/loncron --justreload'");
+} elsif ($command eq "status") {
     $response=`/bin/cat /home/httpd/perl/logs/*.pid 2>&1`;
     if ($response=~/No such file or directory/) {
 	print 'LON-CAPA is not running.'."\n";
-    }
-    else {
+    } else {
 	print 'LON-CAPA is running.'."\n";
+	system("su www -c '/home/httpd/perl/loncron --justcheckconnections'");
     }
-}
-else {
-    print 'You need to specify restart|stop|start|status on the command line'.
-	' argument.'."\n";
+    if (! &firewall_is_active) {
+        print 'The iptables firewall is not active'."\n";
+    }
+    if (&firewall_is_port_open()) {
+        print 'The LON-CAPA port is open in firewall.'."\n";
+    } elsif (&firewall_is_active) {
+        print 'The LON-CAPA port is NOT open in running firewall!'."\n";
+    }
+} else {
+    print 'You need to specify one of restart|stop|start|status on the command line.'."\n";
 }