Annotation of loncom/init.d/loncontrol, revision 1.32

1.1       harris41    1: #!/usr/bin/perl
1.2       harris41    2: #
1.32    ! albertel    3: # $Id: loncontrol,v 1.31 2007/06/02 03:40:02 albertel Exp $
1.23      matthew     4: #
1.6       harris41    5: # The LearningOnline Network with CAPA
                      6: #
1.21      matthew     7: # Copyright Michigan State University Board of Trustees
                      8: #
                      9: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
                     10: #
                     11: # LON-CAPA is free software; you can redistribute it and/or modify
                     12: # it under the terms of the GNU General Public License as published by
                     13: # the Free Software Foundation; either version 2 of the License, or
                     14: # (at your option) any later version.
                     15: #
                     16: # LON-CAPA is distributed in the hope that it will be useful,
                     17: # but WITHOUT ANY WARRANTY; without even the implied warranty of
                     18: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
                     19: # GNU General Public License for more details.
                     20: #
                     21: # You should have received a copy of the GNU General Public License
                     22: # along with LON-CAPA; if not, write to the Free Software
                     23: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
                     24: #
                     25: # /home/httpd/html/adm/gpl.txt
                     26: #
                     27: # http://www.lon-capa.org/
                     28: #
1.2       harris41   29: # Startup script for the LON-CAPA network processes
1.6       harris41   30: #
1.7       harris41   31: 
1.3       harris41   32: # chkconfig: 345 95 5
1.21      matthew    33: # description: LON-CAPA is a "network of knowledge".  It is used to \
1.6       harris41   34: # distribute knowledge resources and instructional management.
1.28      raeburn    35: # processnames: lonc, lond, lonsql, lonmaxima
1.2       harris41   36: # pidfiles: /home/httpd/perl/logs/lon*.pid
1.7       harris41   37: # config: /etc/httpd/conf/loncapa.conf
1.2       harris41   38: # config: /home/httpd/lonTabs/hosts.tab
                     39: # config: /home/httpd/lonTabs/spare.tab
1.31      albertel   40: # SuSE chkconfig/insserv info
                     41: ### BEGIN INIT INFO
                     42: # Provides:       loncapa
                     43: # Required-Start: mysql apache2 $network $remote_fs
                     44: # Required-Stop:
                     45: # Default-Start:  3 4 5
                     46: # Default-Stop:
                     47: # Description:    Starts the LON-CAPA services
                     48: ### END INIT INFO
                     49: 
1.2       harris41   50: 
1.1       harris41   51: $command=$ARGV[0]; $command=~s/[^a-z]//g;
                     52: 
                     53: $ENV{'PATH'}="/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/root/bin";
                     54: $ENV{'BASH_ENV'}="";
                     55: 
1.20      matthew    56: { # Firewall variable scoping
                     57:     # Firewall code is based on the code in FC2 /etc/init.d/ntpd
                     58:     my $fw_chain = 'RH-Firewall-1-INPUT';
                     59:     my $iptables = '/sbin/iptables';
1.27      albertel   60:     if (! -e $iptables) {
                     61: 	$iptables = '/usr/sbin/iptables';
                     62: 	if (! -e $iptables) {
                     63: 	    print("Unable to find iptables command\n");
                     64: 	}
                     65:     }
1.22      matthew    66:     my $lond_port = 5663;
                     67:     my $lonhttpd_port = 8080;
1.20      matthew    68: 
                     69: sub firewall_open_port {
                     70:     return if (! &firewall_is_active);
                     71:     if (! `$iptables -L -n 2>/dev/null | grep $fw_chain | wc -l`) { return; }
                     72:     # iptables is running with our chain
                     73:     #
                     74:     # We could restrict the servers allowed to attempt to communicate
                     75:     # here, but the logistics of updating the /home/httpd/lonTabs/host.tab
                     76:     # file are likely to be a problem
1.22      matthew    77:     foreach my $port ($lond_port,$lonhttpd_port) {
                     78:         print "Opening firewall access on port $port.\n";
                     79: 
                     80:         my $firewall_command = 
                     81:             "$iptables -I $fw_chain -p tcp -d 0/0 --dport $port -j ACCEPT";
                     82:         system($firewall_command);
                     83:         my $return_status = $?>>8;
                     84:         if ($return_status == 1) {
                     85:             # Error
                     86:             print "Error opening port.\n";
                     87:         } elsif ($return_status == 2) {
                     88:             # Bad command
                     89:             print "Bad command error opening port.  Command was\n".
                     90:                 "  ".$firewall_command."\n";
                     91:         }
1.20      matthew    92:     }
1.22      matthew    93:     
1.20      matthew    94: }
                     95: 
                     96: sub firewall_is_port_open {
                     97:     # returns 1 if the firewall port is open, 0 if not.
                     98:     #
                     99:     # check if firewall is active or installed
                    100:     return if (! &firewall_is_active);
                    101:     if (`$iptables -L -n 2>/dev/null | grep "tcp dpt:$port"`) { 
                    102:         return 1;
                    103:     } else {
                    104:         return 0;
                    105:     }
                    106: }
                    107: 
                    108: sub firewall_is_active {
                    109:     if (-e '/proc/net/ip_tables_names') {
                    110:         return 1;
                    111:     } else {
                    112:         return 0;
                    113:     }
                    114: }
                    115: 
                    116: sub firewall_close_port {
                    117:     return if (! &firewall_is_active);
1.22      matthew   118:     foreach my $port ($lond_port,$lonhttpd_port) {
                    119:         print "Closing firewall access on port $port.\n";
                    120:         my $firewall_command = 
                    121:             "$iptables -D $fw_chain -p tcp -d 0/0 --dport $port -j ACCEPT";
                    122:         system($firewall_command);
                    123:         my $return_status = $?>>8;
                    124:         if ($return_status == 1) {
                    125:             # Error
                    126:             print "Error closing port.\n";
                    127:         } elsif ($return_status == 2) {
                    128:             # Bad command
                    129:             print "Bad command error closing port.  Command was\n".
                    130:                 "  ".$firewall_command."\n";
                    131:         }
1.20      matthew   132:     }
                    133: }
                    134: 
                    135: } # End firewall variable scope
                    136: 
1.11      albertel  137: sub stop_daemon {
1.19      albertel  138:     my ($daemon,$killallname)=@_;
1.11      albertel  139:     my $pidfile="/home/httpd/perl/logs/$daemon.pid";
                    140:     
1.24      albertel  141:     printf("%-15s ",$daemon);
1.11      albertel  142:     if (-e $pidfile) {
                    143: 	open(PIDFILE,$pidfile);
                    144: 	my $daemonpid=<PIDFILE>;
                    145: 	chomp($daemonpid);
                    146: 	kill TERM => $daemonpid;
1.32    ! albertel  147: 	my $count=0;
        !           148: 	while ($count++ < 5 && kill(0 => $daemonpid)) {
        !           149: 	    sleep 1;
        !           150: 	}
1.11      albertel  151: 	if (kill 0 => $daemonpid) {
                    152: 	    kill KILL => $daemonpid;
1.26      albertel  153: 	    sleep 1;
1.11      albertel  154: 	    if (kill 0 => $daemonpid) {
1.19      albertel  155: 		print("failed to kill");
1.11      albertel  156: 	    } else {
1.19      albertel  157: 		print("killed");
1.11      albertel  158: 	    }
                    159: 	} else {
1.19      albertel  160: 	    print("stopped");
1.11      albertel  161: 	}
1.19      albertel  162:     } else {
                    163: 	print("not running");
                    164:     }
                    165:     system("killall -q -0 $killallname");
                    166:     if ($? == 0) {
                    167: 	system("killall -q $killallname");
                    168: 	print(", killed off extraneous processes");
1.11      albertel  169:     }
1.24      albertel  170:     unlink($pidfile);
1.19      albertel  171:     print("\n");
1.11      albertel  172: }
                    173: 
1.30      albertel  174: sub clean_sockets {
                    175:     opendir(SOCKETS,"/home/httpd/sockets/");
                    176:     while (my $fname=readdir(SOCKETS)) {
                    177: 	next if (-d $fname
                    178: 		 || $fname=~/(mysqlsock|maximasock|\Q$perlvar{'lonSockDir'}\E)/);
                    179: 	unlink("/home/httpd/sockets/$fname");
                    180:     }
                    181: }
1.20      matthew   182: 
1.29      albertel  183: if ($command eq "restart") {
1.12      albertel  184:     print 'Restarting LON-CAPA'."\n";
                    185:     print 'Ending LON-CAPA client and daemon processes'."\n";
1.28      raeburn   186:     foreach my $daemon ('lonsql','lond','lonc','lonhttpd','lonmemcached','lonmaxima') {
1.19      albertel  187: 	my $killallname=$daemon;
                    188: 	if ($daemon eq 'lonc') { $killallname='loncnew'; }
                    189: 	&stop_daemon($daemon,$killallname);
1.12      albertel  190:     }
                    191:     print 'Starting LON-CAPA client and daemon processes (please be patient)'.
                    192: 	"\n";
1.18      albertel  193:     system("su www -c '/home/httpd/perl/loncron --justcheckdaemons'");
1.16      albertel  194: } elsif ($command eq "stop") {
1.6       harris41  195:     print 'Stopping LON-CAPA'."\n";
1.28      raeburn   196:     foreach my $daemon ('lonsql','lond','lonc','lonhttpd','lonmemcached','lonmaxima') {
1.19      albertel  197: 	my $killallname=$daemon;
                    198: 	if ($daemon eq 'lonc') { $killallname='loncnew'; }
                    199: 	&stop_daemon($daemon,$killallname);
1.11      albertel  200:     }
1.20      matthew   201:     &firewall_close_port();
1.30      albertel  202:     &clean_sockets();
1.16      albertel  203: } elsif ($command eq "start") {
1.20      matthew   204:     &firewall_open_port();
1.12      albertel  205:     print 'Starting LON-CAPA'."\n";
                    206:     print 'Starting LON-CAPA client and daemon processes (please be patient)'.
                    207: 	"\n"; 
1.18      albertel  208:     system("su www -c '/home/httpd/perl/loncron --justcheckdaemons'");
1.25      albertel  209: } elsif ($command eq "reload") {
                    210:     print 'Reload LON-CAPA config files'."\n";
                    211:     system("su www -c '/home/httpd/perl/loncron --justreload'");
1.16      albertel  212: } elsif ($command eq "status") {
1.1       harris41  213:     $response=`/bin/cat /home/httpd/perl/logs/*.pid 2>&1`;
                    214:     if ($response=~/No such file or directory/) {
1.6       harris41  215: 	print 'LON-CAPA is not running.'."\n";
1.18      albertel  216:     } else {
1.6       harris41  217: 	print 'LON-CAPA is running.'."\n";
1.18      albertel  218: 	system("su www -c '/home/httpd/perl/loncron --justcheckconnections'");
1.1       harris41  219:     }
1.20      matthew   220:     if (! &firewall_is_active) {
                    221:         print 'The iptables firewall is not active'."\n";
                    222:     }
                    223:     if (&firewall_is_port_open()) {
                    224:         print 'The LON-CAPA port is open in firewall.'."\n";
                    225:     } elsif (&firewall_is_active) {
                    226:         print 'The LON-CAPA port is NOT open in running firewall!'."\n";
                    227:     }
1.16      albertel  228: } else {
1.18      albertel  229:     print 'You need to specify one of restart|stop|start|status on the command line.'."\n";
1.1       harris41  230: }

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>