Annotation of loncom/init.d/loncontrol, revision 1.29

1.1       harris41    1: #!/usr/bin/perl
1.2       harris41    2: #
1.29    ! albertel    3: # $Id: loncontrol,v 1.28 2007/02/02 12:59:15 raeburn Exp $
1.23      matthew     4: #
1.6       harris41    5: # The LearningOnline Network with CAPA
                      6: #
1.21      matthew     7: # Copyright Michigan State University Board of Trustees
                      8: #
                      9: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
                     10: #
                     11: # LON-CAPA is free software; you can redistribute it and/or modify
                     12: # it under the terms of the GNU General Public License as published by
                     13: # the Free Software Foundation; either version 2 of the License, or
                     14: # (at your option) any later version.
                     15: #
                     16: # LON-CAPA is distributed in the hope that it will be useful,
                     17: # but WITHOUT ANY WARRANTY; without even the implied warranty of
                     18: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
                     19: # GNU General Public License for more details.
                     20: #
                     21: # You should have received a copy of the GNU General Public License
                     22: # along with LON-CAPA; if not, write to the Free Software
                     23: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
                     24: #
                     25: # /home/httpd/html/adm/gpl.txt
                     26: #
                     27: # http://www.lon-capa.org/
                     28: #
1.2       harris41   29: # Startup script for the LON-CAPA network processes
1.6       harris41   30: #
1.7       harris41   31: 
1.3       harris41   32: # chkconfig: 345 95 5
1.21      matthew    33: # description: LON-CAPA is a "network of knowledge".  It is used to \
1.6       harris41   34: # distribute knowledge resources and instructional management.
1.28      raeburn    35: # processnames: lonc, lond, lonsql, lonmaxima
1.2       harris41   36: # pidfiles: /home/httpd/perl/logs/lon*.pid
1.7       harris41   37: # config: /etc/httpd/conf/loncapa.conf
1.2       harris41   38: # config: /home/httpd/lonTabs/hosts.tab
                     39: # config: /home/httpd/lonTabs/spare.tab
                     40: 
1.1       harris41   41: $command=$ARGV[0]; $command=~s/[^a-z]//g;
                     42: 
                     43: $ENV{'PATH'}="/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/root/bin";
                     44: $ENV{'BASH_ENV'}="";
                     45: 
1.20      matthew    46: { # Firewall variable scoping
                     47:     # Firewall code is based on the code in FC2 /etc/init.d/ntpd
                     48:     my $fw_chain = 'RH-Firewall-1-INPUT';
                     49:     my $iptables = '/sbin/iptables';
1.27      albertel   50:     if (! -e $iptables) {
                     51: 	$iptables = '/usr/sbin/iptables';
                     52: 	if (! -e $iptables) {
                     53: 	    print("Unable to find iptables command\n");
                     54: 	}
                     55:     }
1.22      matthew    56:     my $lond_port = 5663;
                     57:     my $lonhttpd_port = 8080;
1.20      matthew    58: 
                     59: sub firewall_open_port {
                     60:     return if (! &firewall_is_active);
                     61:     if (! `$iptables -L -n 2>/dev/null | grep $fw_chain | wc -l`) { return; }
                     62:     # iptables is running with our chain
                     63:     #
                     64:     # We could restrict the servers allowed to attempt to communicate
                     65:     # here, but the logistics of updating the /home/httpd/lonTabs/host.tab
                     66:     # file are likely to be a problem
1.22      matthew    67:     foreach my $port ($lond_port,$lonhttpd_port) {
                     68:         print "Opening firewall access on port $port.\n";
                     69: 
                     70:         my $firewall_command = 
                     71:             "$iptables -I $fw_chain -p tcp -d 0/0 --dport $port -j ACCEPT";
                     72:         system($firewall_command);
                     73:         my $return_status = $?>>8;
                     74:         if ($return_status == 1) {
                     75:             # Error
                     76:             print "Error opening port.\n";
                     77:         } elsif ($return_status == 2) {
                     78:             # Bad command
                     79:             print "Bad command error opening port.  Command was\n".
                     80:                 "  ".$firewall_command."\n";
                     81:         }
1.20      matthew    82:     }
1.22      matthew    83:     
1.20      matthew    84: }
                     85: 
                     86: sub firewall_is_port_open {
                     87:     # returns 1 if the firewall port is open, 0 if not.
                     88:     #
                     89:     # check if firewall is active or installed
                     90:     return if (! &firewall_is_active);
                     91:     if (`$iptables -L -n 2>/dev/null | grep "tcp dpt:$port"`) { 
                     92:         return 1;
                     93:     } else {
                     94:         return 0;
                     95:     }
                     96: }
                     97: 
                     98: sub firewall_is_active {
                     99:     if (-e '/proc/net/ip_tables_names') {
                    100:         return 1;
                    101:     } else {
                    102:         return 0;
                    103:     }
                    104: }
                    105: 
                    106: sub firewall_close_port {
                    107:     return if (! &firewall_is_active);
1.22      matthew   108:     foreach my $port ($lond_port,$lonhttpd_port) {
                    109:         print "Closing firewall access on port $port.\n";
                    110:         my $firewall_command = 
                    111:             "$iptables -D $fw_chain -p tcp -d 0/0 --dport $port -j ACCEPT";
                    112:         system($firewall_command);
                    113:         my $return_status = $?>>8;
                    114:         if ($return_status == 1) {
                    115:             # Error
                    116:             print "Error closing port.\n";
                    117:         } elsif ($return_status == 2) {
                    118:             # Bad command
                    119:             print "Bad command error closing port.  Command was\n".
                    120:                 "  ".$firewall_command."\n";
                    121:         }
1.20      matthew   122:     }
                    123: }
                    124: 
                    125: } # End firewall variable scope
                    126: 
1.11      albertel  127: sub stop_daemon {
1.19      albertel  128:     my ($daemon,$killallname)=@_;
1.11      albertel  129:     my $pidfile="/home/httpd/perl/logs/$daemon.pid";
                    130:     
1.24      albertel  131:     printf("%-15s ",$daemon);
1.11      albertel  132:     if (-e $pidfile) {
                    133: 	open(PIDFILE,$pidfile);
                    134: 	my $daemonpid=<PIDFILE>;
                    135: 	chomp($daemonpid);
                    136: 	kill TERM => $daemonpid;
1.26      albertel  137: 	sleep 1;
1.11      albertel  138: 	if (kill 0 => $daemonpid) {
                    139: 	    kill KILL => $daemonpid;
1.26      albertel  140: 	    sleep 1;
1.11      albertel  141: 	    if (kill 0 => $daemonpid) {
1.19      albertel  142: 		print("failed to kill");
1.11      albertel  143: 	    } else {
1.19      albertel  144: 		print("killed");
1.11      albertel  145: 	    }
                    146: 	} else {
1.19      albertel  147: 	    print("stopped");
1.11      albertel  148: 	}
1.19      albertel  149:     } else {
                    150: 	print("not running");
                    151:     }
                    152:     system("killall -q -0 $killallname");
                    153:     if ($? == 0) {
                    154: 	system("killall -q $killallname");
                    155: 	print(", killed off extraneous processes");
1.11      albertel  156:     }
1.24      albertel  157:     unlink($pidfile);
1.19      albertel  158:     print("\n");
1.11      albertel  159: }
                    160: 
1.20      matthew   161: 
1.29    ! albertel  162: if ($command eq "restart") {
1.12      albertel  163:     print 'Restarting LON-CAPA'."\n";
                    164:     print 'Ending LON-CAPA client and daemon processes'."\n";
1.28      raeburn   165:     foreach my $daemon ('lonsql','lond','lonc','lonhttpd','lonmemcached','lonmaxima') {
1.19      albertel  166: 	my $killallname=$daemon;
                    167: 	if ($daemon eq 'lonc') { $killallname='loncnew'; }
                    168: 	&stop_daemon($daemon,$killallname);
1.12      albertel  169:     }
                    170:     print 'Starting LON-CAPA client and daemon processes (please be patient)'.
                    171: 	"\n";
1.18      albertel  172:     system("su www -c '/home/httpd/perl/loncron --justcheckdaemons'");
1.16      albertel  173: } elsif ($command eq "stop") {
1.6       harris41  174:     print 'Stopping LON-CAPA'."\n";
1.28      raeburn   175:     foreach my $daemon ('lonsql','lond','lonc','lonhttpd','lonmemcached','lonmaxima') {
1.19      albertel  176: 	my $killallname=$daemon;
                    177: 	if ($daemon eq 'lonc') { $killallname='loncnew'; }
                    178: 	&stop_daemon($daemon,$killallname);
1.11      albertel  179:     }
1.20      matthew   180:     &firewall_close_port();
1.16      albertel  181: } elsif ($command eq "start") {
1.20      matthew   182:     &firewall_open_port();
1.12      albertel  183:     print 'Starting LON-CAPA'."\n";
                    184:     print 'Starting LON-CAPA client and daemon processes (please be patient)'.
                    185: 	"\n"; 
1.18      albertel  186:     system("su www -c '/home/httpd/perl/loncron --justcheckdaemons'");
1.25      albertel  187: } elsif ($command eq "reload") {
                    188:     print 'Reload LON-CAPA config files'."\n";
                    189:     system("su www -c '/home/httpd/perl/loncron --justreload'");
1.16      albertel  190: } elsif ($command eq "status") {
1.1       harris41  191:     $response=`/bin/cat /home/httpd/perl/logs/*.pid 2>&1`;
                    192:     if ($response=~/No such file or directory/) {
1.6       harris41  193: 	print 'LON-CAPA is not running.'."\n";
1.18      albertel  194:     } else {
1.6       harris41  195: 	print 'LON-CAPA is running.'."\n";
1.18      albertel  196: 	system("su www -c '/home/httpd/perl/loncron --justcheckconnections'");
1.1       harris41  197:     }
1.20      matthew   198:     if (! &firewall_is_active) {
                    199:         print 'The iptables firewall is not active'."\n";
                    200:     }
                    201:     if (&firewall_is_port_open()) {
                    202:         print 'The LON-CAPA port is open in firewall.'."\n";
                    203:     } elsif (&firewall_is_active) {
                    204:         print 'The LON-CAPA port is NOT open in running firewall!'."\n";
                    205:     }
1.16      albertel  206: } else {
1.18      albertel  207:     print 'You need to specify one of restart|stop|start|status on the command line.'."\n";
1.1       harris41  208: }

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>