| 1 | #! /usr/bin/perl
|
|---|
| 2 |
|
|---|
| 3 | # Copyright (c) 2007 Riccardo Murri <riccardo.murri@gmail.com>
|
|---|
| 4 | #
|
|---|
| 5 | # License Information:
|
|---|
| 6 | # This program is free software; you can redistribute it and/or modify
|
|---|
| 7 | # it under the terms of the GNU General Public License as published by
|
|---|
| 8 | # the Free Software Foundation; either version 2 of the License, or
|
|---|
| 9 | # (at your option) any later version.
|
|---|
| 10 | #
|
|---|
| 11 | # This program is distributed in the hope that it will be useful,
|
|---|
| 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|---|
| 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|---|
| 14 | # GNU General Public License for more details.
|
|---|
| 15 | #
|
|---|
| 16 | # You should have received a copy of the GNU General Public License
|
|---|
| 17 | # along with this program; if not, write to the Free Software
|
|---|
| 18 | # Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|---|
| 19 | #
|
|---|
| 20 |
|
|---|
| 21 | use warnings;
|
|---|
| 22 | use strict;
|
|---|
| 23 | use Getopt::Long;
|
|---|
| 24 | use File::Basename;
|
|---|
| 25 | use File::Copy;
|
|---|
| 26 | use File::Temp qw/ tempfile /;
|
|---|
| 27 | use IO::File;
|
|---|
| 28 |
|
|---|
| 29 | # Do I/O to the data file in binary mode (so it
|
|---|
| 30 | # wouldn't complain about invalid UTF-8 characters).
|
|---|
| 31 | use bytes;
|
|---|
| 32 |
|
|---|
| 33 | File::Temp->safe_level( File::Temp::HIGH );
|
|---|
| 34 |
|
|---|
| 35 | my %opts = ();
|
|---|
| 36 | my $outfile;
|
|---|
| 37 | my $verbose;
|
|---|
| 38 | my $base = basename($0);
|
|---|
| 39 |
|
|---|
| 40 | #my $cfgfile = "yulerc";
|
|---|
| 41 | #my $yule = "./yule";
|
|---|
| 42 | #my $gpg = "/usr/bin/gpg";
|
|---|
| 43 |
|
|---|
| 44 | my $cfgfile = "@myconffile@";
|
|---|
| 45 | my $yule = "@sbindir@/@install_name@";
|
|---|
| 46 | my $gpg = "@mygpg@";
|
|---|
| 47 |
|
|---|
| 48 | $cfgfile =~ s/^REQ_FROM_SERVER//;
|
|---|
| 49 |
|
|---|
| 50 | $gpg = "gpg" if ($gpg eq "");
|
|---|
| 51 |
|
|---|
| 52 | sub usage() {
|
|---|
| 53 | print <<__END_OF_TEXT__
|
|---|
| 54 | Usage:
|
|---|
| 55 | $base { -a | --add } [options] HOSTNAME [PASSWORD]
|
|---|
| 56 | Add client HOSTNAME to configuration file. If PASSWORD is
|
|---|
| 57 | omitted, it is read from stdin. If HOSTNAME already exists
|
|---|
| 58 | in the configuration file, an error is given.
|
|---|
| 59 |
|
|---|
| 60 | $base { -d | --delete } [options] HOSTNAME
|
|---|
| 61 | Remove client HOSTNAME from configuration file.
|
|---|
| 62 |
|
|---|
| 63 | $base { -l | --list } [options]
|
|---|
| 64 | List clients in the yule configuration file.
|
|---|
| 65 |
|
|---|
| 66 | $base { -r | --replace } [options] HOSTNAME [PASSWORD]
|
|---|
| 67 | Replace password of existing client HOSTNAME in configuration file.
|
|---|
| 68 | If PASSWORD is omitted, it is read from stdin. If HOSTNAME does not
|
|---|
| 69 | already exist in the configuration file, an error is given.
|
|---|
| 70 |
|
|---|
| 71 | $base { -u | --update } [options] HOSTNAME [PASSWORD]
|
|---|
| 72 | Add client HOSTNAME to config file or replace its password with a new one.
|
|---|
| 73 | If PASSWORD is omitted, it is read from stdin.
|
|---|
| 74 |
|
|---|
| 75 | Options:
|
|---|
| 76 | -c CFGFILE --cfgfile CFGFILE
|
|---|
| 77 | Select an alternate configuration file. (default: $cfgfile)
|
|---|
| 78 |
|
|---|
| 79 | -o OUTFILE --output OUTFILE
|
|---|
| 80 | Write modified configuration to OUTFILE. If this option is
|
|---|
| 81 | omitted, $base will rename the original configuration file
|
|---|
| 82 | to '$cfgfile.BAK' and overwrite it with the modified content.
|
|---|
| 83 |
|
|---|
| 84 | -Y YULECMD --yule YULECMD
|
|---|
| 85 | Use command YULECMD to generate the client key from the password.
|
|---|
| 86 | (default: $yule)
|
|---|
| 87 |
|
|---|
| 88 | -v --verbose
|
|---|
| 89 | Verbose output.
|
|---|
| 90 |
|
|---|
| 91 | __END_OF_TEXT__
|
|---|
| 92 | ;
|
|---|
| 93 | return;
|
|---|
| 94 | }
|
|---|
| 95 |
|
|---|
| 96 |
|
|---|
| 97 | ## subroutines
|
|---|
| 98 |
|
|---|
| 99 | sub read_clients ($) {
|
|---|
| 100 | my $cfgfile = shift || '-';
|
|---|
| 101 | my %clients;
|
|---|
| 102 |
|
|---|
| 103 | open INPUT, "<$cfgfile"
|
|---|
| 104 | or die ("Cannot read configuration file '$cfgfile'. Aborting");
|
|---|
| 105 |
|
|---|
| 106 | my $section;
|
|---|
| 107 | while (<INPUT>) {
|
|---|
| 108 | # skip comment and blank lines
|
|---|
| 109 | next if m{^\s*#};
|
|---|
| 110 | next if m{^\s*$};
|
|---|
| 111 |
|
|---|
| 112 | # match section headers
|
|---|
| 113 | $section = $1 if m{^\s*\[([a-z0-9 ]+)\]}i;
|
|---|
| 114 |
|
|---|
| 115 | # ok, list matching lines
|
|---|
| 116 | if ($section =~ m/Clients/) {
|
|---|
| 117 | if (m{^\s*Client=}i) {
|
|---|
| 118 | chomp;
|
|---|
| 119 | s{^\s*Client=}{}i;
|
|---|
| 120 | my ($client, $key) = split /@/,$_,2;
|
|---|
| 121 |
|
|---|
| 122 | $clients{lc($client)} = $key;
|
|---|
| 123 | }
|
|---|
| 124 | }
|
|---|
| 125 | }
|
|---|
| 126 |
|
|---|
| 127 | close INPUT;
|
|---|
| 128 | return \%clients;
|
|---|
| 129 | }
|
|---|
| 130 |
|
|---|
| 131 |
|
|---|
| 132 | sub write_clients ($$$) {
|
|---|
| 133 | my $cfgfile_in = shift || '-';
|
|---|
| 134 | my $cfgfile_out = shift || $cfgfile_in;
|
|---|
| 135 | my $clients = shift;
|
|---|
| 136 |
|
|---|
| 137 | my @lines;
|
|---|
| 138 | my $in_clients_section;
|
|---|
| 139 |
|
|---|
| 140 | # copy-pass input file
|
|---|
| 141 | my $section = '';
|
|---|
| 142 | open INPUT, "<$cfgfile_in"
|
|---|
| 143 | or die ("Cannot read configuration file '$cfgfile_in'. Aborting");
|
|---|
| 144 | while (<INPUT>) {
|
|---|
| 145 | # match section headers
|
|---|
| 146 | if (m{^\s*\[([a-z0-9 ]+)\]}i) {
|
|---|
| 147 | if ($in_clients_section and ($section ne $1)) {
|
|---|
| 148 | # exiting [Clients] section, output remaining ones
|
|---|
| 149 | foreach my $hostname (keys %{$clients}) {
|
|---|
| 150 | push @lines,
|
|---|
| 151 | 'Client=' . $hostname . '@'
|
|---|
| 152 | . $clients->{lc($hostname)} . "\n";
|
|---|
| 153 | delete $clients->{lc($hostname)};
|
|---|
| 154 | }
|
|---|
| 155 | }
|
|---|
| 156 | # update section title
|
|---|
| 157 | $section = $1;
|
|---|
| 158 | if ($section =~ m/Clients/i) {
|
|---|
| 159 | $in_clients_section = 1;
|
|---|
| 160 | } else {
|
|---|
| 161 | $in_clients_section = 0;
|
|---|
| 162 | }
|
|---|
| 163 | }
|
|---|
| 164 |
|
|---|
| 165 | # process entries in [Clients] section
|
|---|
| 166 | if ($in_clients_section) {
|
|---|
| 167 | if (m{^\s*Client=}i) {
|
|---|
| 168 | my ($hostname, undef) = split /@/,$_,2;
|
|---|
| 169 | $hostname =~ s{^\s*Client=}{}i;
|
|---|
| 170 | if (defined($clients->{lc($hostname)})) {
|
|---|
| 171 | # output (possibly) modified key
|
|---|
| 172 | $_ = 'Client=' . $hostname . '@' . $clients->{lc($hostname)} . "\n";
|
|---|
| 173 | delete $clients->{lc($hostname)};
|
|---|
| 174 | }
|
|---|
| 175 | else {
|
|---|
| 176 | # client deleted, skip this line from output
|
|---|
| 177 | $_ = '';
|
|---|
| 178 | }
|
|---|
| 179 | }
|
|---|
| 180 | }
|
|---|
| 181 |
|
|---|
| 182 | # copy input to output
|
|---|
| 183 | push @lines, $_;
|
|---|
| 184 | }
|
|---|
| 185 | close INPUT;
|
|---|
| 186 |
|
|---|
| 187 | # if end-of-file reached within [Clients] section, output remaining ones
|
|---|
| 188 | if ($in_clients_section) {
|
|---|
| 189 | foreach my $hostname (keys %{$clients}) {
|
|---|
| 190 | push @lines, 'Client=' . $hostname . '@'
|
|---|
| 191 | . $clients->{lc($hostname)} . "\n";
|
|---|
| 192 | }
|
|---|
| 193 | }
|
|---|
| 194 |
|
|---|
| 195 | # if necessary, replace input file with output file
|
|---|
| 196 | if ($cfgfile_in eq $cfgfile_out) {
|
|---|
| 197 | copy($cfgfile_in, $cfgfile_in . '.BAK')
|
|---|
| 198 | or die("Cannot backup config file '$cfgfile_in'. Aborting");
|
|---|
| 199 | }
|
|---|
| 200 | open OUTPUT, ">$cfgfile_out"
|
|---|
| 201 | or die ("Cannot write to file '$cfgfile_out'. Aborting");
|
|---|
| 202 | # overwrite config file line by line
|
|---|
| 203 | foreach my $line (@lines) { print OUTPUT $line; }
|
|---|
| 204 | close OUTPUT;
|
|---|
| 205 | }
|
|---|
| 206 |
|
|---|
| 207 |
|
|---|
| 208 | sub new_client_key ($) {
|
|---|
| 209 | my $password = shift;
|
|---|
| 210 | my $yulecmd = shift || $yule;
|
|---|
| 211 |
|
|---|
| 212 | my (undef, $key) = split /@/, `$yulecmd -P $password`, 2;
|
|---|
| 213 | chomp $key;
|
|---|
| 214 | return $key;
|
|---|
| 215 | }
|
|---|
| 216 |
|
|---|
| 217 |
|
|---|
| 218 | ## main
|
|---|
| 219 |
|
|---|
| 220 | Getopt::Long::Configure ("posix_default");
|
|---|
| 221 | Getopt::Long::Configure ("bundling");
|
|---|
| 222 | # Getopt::Long::Configure ("debug");
|
|---|
| 223 |
|
|---|
| 224 | GetOptions (\%opts,
|
|---|
| 225 | 'Y|yule=s',
|
|---|
| 226 | 'a|add',
|
|---|
| 227 | 'c|cfgfile=s',
|
|---|
| 228 | 'd|delete',
|
|---|
| 229 | 'h|help',
|
|---|
| 230 | 'l|list',
|
|---|
| 231 | 'o|output=s',
|
|---|
| 232 | 'r|replace',
|
|---|
| 233 | 'u|update',
|
|---|
| 234 | 'v|verbose',
|
|---|
| 235 | );
|
|---|
| 236 |
|
|---|
| 237 | if (defined ($opts{'h'})) {
|
|---|
| 238 | usage();
|
|---|
| 239 | exit;
|
|---|
| 240 | }
|
|---|
| 241 |
|
|---|
| 242 | if (defined($opts{'c'})) {
|
|---|
| 243 | $cfgfile = $opts{'c'};
|
|---|
| 244 | $outfile = $cfgfile unless defined($outfile);
|
|---|
| 245 | }
|
|---|
| 246 | if (defined($opts{'Y'})) {
|
|---|
| 247 | $yule = $opts{'Y'};
|
|---|
| 248 | }
|
|---|
| 249 | if (defined($opts{'v'})) {
|
|---|
| 250 | $verbose = 1;
|
|---|
| 251 | }
|
|---|
| 252 | if (defined($opts{'o'})) {
|
|---|
| 253 | $outfile = $opts{'o'};
|
|---|
| 254 | }
|
|---|
| 255 |
|
|---|
| 256 | if (defined($opts{'l'})) {
|
|---|
| 257 | # list contents
|
|---|
| 258 | my $clients = read_clients($cfgfile);
|
|---|
| 259 |
|
|---|
| 260 | foreach my $client (keys %{$clients}) {
|
|---|
| 261 | print "$client";
|
|---|
| 262 | print " ${$clients}{$client}" if $verbose;
|
|---|
| 263 | print "\n";
|
|---|
| 264 | }
|
|---|
| 265 | }
|
|---|
| 266 | elsif (defined($opts{'a'})
|
|---|
| 267 | or defined($opts{'u'})
|
|---|
| 268 | or defined($opts{'r'})) {
|
|---|
| 269 | # add HOSTNAME
|
|---|
| 270 | my $hostname = $ARGV[0]
|
|---|
| 271 | or die("Actions --add/--replace/--update require at least argument HOSTNAME. Aborting");
|
|---|
| 272 |
|
|---|
| 273 | my $password;
|
|---|
| 274 | if (defined($ARGV[1])) {
|
|---|
| 275 | $password = uc($ARGV[1]);
|
|---|
| 276 | } else {
|
|---|
| 277 | $password = uc(<STDIN>);
|
|---|
| 278 | # remove leading and trailing space
|
|---|
| 279 | $password =~ s{\s*}{}g;
|
|---|
| 280 | }
|
|---|
| 281 | # sanity check
|
|---|
| 282 | die ("Argument PASSWORD must be a 16-digit hexadecimal string. Aborting")
|
|---|
| 283 | unless ($password =~ m/[[:xdigit:]]{16}/);
|
|---|
| 284 |
|
|---|
| 285 | my $add = defined($opts{'a'});
|
|---|
| 286 | my $replace = defined($opts{'r'});
|
|---|
| 287 |
|
|---|
| 288 | my $clients = read_clients($cfgfile);
|
|---|
| 289 | die ("Client '$hostname' already present in config file - cannot add. Aborting")
|
|---|
| 290 | if ($add and defined(${$clients}{$hostname}));
|
|---|
| 291 | die ("Client '$hostname' not already present in config file - cannot replace. Aborting")
|
|---|
| 292 | if ($replace and not defined(${$clients}{$hostname}));
|
|---|
| 293 |
|
|---|
| 294 | $clients->{$hostname} = new_client_key($password)
|
|---|
| 295 | or die ("Cannot get key for the given password. Aborting");
|
|---|
| 296 | write_clients($cfgfile, $outfile, $clients);
|
|---|
| 297 | }
|
|---|
| 298 | elsif (defined($opts{'d'})) {
|
|---|
| 299 | # remove HOSTNAME
|
|---|
| 300 | my $hostname = $ARGV[0]
|
|---|
| 301 | or die("Action --delete requires one argument HOSTNAME. Aborting");
|
|---|
| 302 |
|
|---|
| 303 | my $clients = read_clients($cfgfile);
|
|---|
| 304 | delete ${$clients}{$hostname};
|
|---|
| 305 | write_clients($cfgfile, $outfile, $clients);
|
|---|
| 306 | }
|
|---|
| 307 | else {
|
|---|
| 308 | usage();
|
|---|
| 309 | die ("You must specify one of --list, --add or --remove options. Aborting");
|
|---|
| 310 | }
|
|---|
