X-Git-Url: http://git.hcoop.net/clinton/scripts.git/blobdiff_plain/d2462e94b7505964ab7d08c84fd1745341fc64a3..b21836017713cfa90e8e90a82718242fc61d0f43:/apache-sync-logs diff --git a/apache-sync-logs b/apache-sync-logs dissimilarity index 81% index 9a1f65d..f56b08a 100755 --- a/apache-sync-logs +++ b/apache-sync-logs @@ -1,27 +1,60 @@ -#!/bin/bash - -# invoke this as root on mire - -exec 2>&1 - -# drop any tokens; use only users' cgi tokens -kdestroy -unlog - -LOCAL_LOG_DIR=/var/log/apache - -for A in $LOCAL_LOG_DIR/user/?/??/*; do \ - USER=`basename $A` - PATHBITS=`echo $USER | head -c 1`/`echo $USER | head -c 2`/$USER - LOG_DEST=/afs/hcoop.net/user/$PATHBITS/logs/apache/ - - echo - echo "==============================================================================" - echo "syncing logs for $USER from $A to $LOG_DEST ..." - - chown -R $USER:www-data $A - chmod -R ug+rw $A - - k5start -tU -f /etc/keytabs/cgi/$USER \ - -- su $USER -c "rsync -a $A/ $LOG_DEST/" -done +#!/bin/bash + +# invoke this as root on mire + +exec 2>&1 + +# drop any tokens; use only users' cgi tokens +kdestroy > /dev/null 2>&1 +unlog + +#VERBOSE=true +VERBOSE=false + +LOCAL_LOG_DIR=/var/log/apache2 +KEYTAB_DIR=/etc/keytabs/user.daemon +AFS_USER_DIR=/afs/hcoop.net/user +ERROR=no + +for A in $(find $LOCAL_LOG_DIR/user -mindepth 3 -maxdepth 3 -print); do + USER=`basename $A` + PATHBITS=`echo $USER | head -c 1`/`echo $USER | head -c 2`/$USER + LOG_SRC=$A/apache/log + LOG_DEST=$AFS_USER_DIR/$PATHBITS/.logs/apache/ + TMP_DEST=$LOG_SRC.tmp + + if [ "$VERBOSE" = "true" ]; then + echo + echo "==============================================================================" + echo "syncing logs for $USER from $A" + echo " to $LOG_DEST ..." + fi + + if [ ! -d "$LOG_DEST" ]; then + echo "Error: $LOG_DEST does not exist, please make it" + ERROR=yes + else + rm -fr $TMP_DEST + cp -r $LOG_SRC $TMP_DEST + chmod -R u=rwX,go=X $TMP_DEST + # There is an issue here. With nocelic and magnus, doing su + # $USER will cause rsync to not be able to read $LOG_DEST, + # even if it is first chown'ed to $USER. So we have to just + # be root, and not change ownership or group when copying the + # files. This makes group be root on AFS, but that shouldn't + # matter for anything important. Perhaps some PAM issue is + # related to this, since even read/write to local filesystem + # is screwed up. + k5start -qtU -f $KEYTAB_DIR/$USER \ + -- rsync -a --no-o --no-g $TMP_DEST/ $LOG_DEST/ + rm -fr $TMP_DEST + [ "$VERBOSE" = "true" ] && echo " done." + fi +done + +if [ "$ERROR" = "yes" ]; then + exit 1 +else + exit 0 +fi +