X-Git-Url: http://git.hcoop.net/clinton/scripts.git/blobdiff_plain/d890ae7b249b59b66da1481e9bc35f0c1fc53804..94b41ac47e6d16d309e4b37b2dcba95060ab737e:/create-user diff --git a/create-user b/create-user index 8d2b5a1..b401d00 100755 --- a/create-user +++ b/create-user @@ -42,7 +42,18 @@ fi # needed. function mire_and_deleuze() { $* - ssh mire.hcoop.net $* + ssh -K mire.hcoop.net $* +} + +function execute_on_fritz () { + ssh -K fritz.hcoop.net $* +} + +function execute_on_all_machines () { + $* + ssh -K mire.hcoop.net $* + ssh -K hopper.hcoop.net $* + ssh -K fritz.hcoop.net $* } # @@ -79,10 +90,6 @@ ID_DAEMON=`pts examine $USER.daemon | head -n1 | sed 's_.*, id: *__' | sed 's_,. PATHBITS=`echo $USER | head -c 1`/`echo $USER | head -c 2`/$USER HOMEPATH=/afs/hcoop.net/user/$PATHBITS MAILPATH=/afs/hcoop.net/common/email/$PATHBITS -DBPATH=/afs/hcoop.net/common/.databases/$PATHBITS -PGDIR=$DBPATH/postgres -MYSQLDIR=$DBPATH/mysql - # # Create LDAP entries. (With the whole libnss-ptdb, I kind of @@ -146,18 +153,26 @@ test -e /etc/keytabs/user.daemon/$USER || \ sudo chown $USER:www-data /etc/keytabs/user.daemon/$USER sudo chmod 440 /etc/keytabs/user.daemon/$USER -# rsync keytabs to mire +# rsync keytabs (cd /etc/keytabs sudo tar clpf - user.daemon/$USER | \ ssh mire.hcoop.net cd /etc/keytabs\; sudo tar xlpf -) +(cd /etc/keytabs + sudo tar clpf - user.daemon/$USER | \ + ssh hopper.hcoop.net cd /etc/keytabs\; sudo tar xlpf -) # # Create/mount/set-perms on user's volumes (home, mail, databases, logs) # # HOME VOLUME +if vos examine user.$USER.d 2>/dev/null; then + echo "Reactivating old volume (user.$USER.d)" + vos rename user.$USER.d user.$USER +fi vos examine user.$USER 2>/dev/null || \ - vos create deleuze.hcoop.net /vicepa user.$USER -maxquota 400000 + vos create fritz.hcoop.net /vicepa user.$USER -maxquota 400000 + mkdir -p `dirname $HOMEPATH` fs ls $HOMEPATH || test -L $HOMEPATH || fs mkm $HOMEPATH user.$USER chown $USER:nogroup $HOMEPATH @@ -175,9 +190,11 @@ fs sa $HOMEPATH/.logs/mail $USER.daemon rlwidk chown $USER:nogroup $HOMEPATH/.logs/mail # public_html -mkdir -p $HOMEPATH/public_html -chown $USER:nogroup $HOMEPATH/public_html -fs sa $HOMEPATH/public_html system:anyuser rl +test -e $HOMEPATH/public_html || \ + (mkdir -p $HOMEPATH/public_html; \ + chown $USER:nogroup $HOMEPATH/public_html; \ + fs sa $HOMEPATH/public_html system:anyuser none; \ + fs sa $HOMEPATH/public_html $USER.daemon rl) # .procmail.d mkdir -p $HOMEPATH/.procmail.d @@ -194,15 +211,20 @@ mkdir -p $HOMEPATH/.public/.domtool chown $USER:nogroup $HOMEPATH/.public/.domtool test -e $HOMEPATH/.domtool || \ test -L $HOMEPATH/.domtool || \ - ln -s $HOMEPATH/.public/.domtool $HOMEPATH/.domtool + sudo -u $USER ln -s $HOMEPATH/.public/.domtool $HOMEPATH/.domtool # Gitweb hosting test -L /var/cache/git/$USER || \ sudo ln -s $HOMEPATH/.hcoop-git /var/cache/git/$USER # MAIL VOLUME +if vos examine mail.$USER.d 2>/dev/null; then + echo "Reactivating old volume (mail.$USER.d)" + vos rename mail.$USER.d mail.$USER +fi vos examine mail.$USER 2>/dev/null || \ - vos create deleuze.hcoop.net /vicepa mail.$USER -maxquota 400000 + vos create fritz.hcoop.net /vicepa mail.$USER -maxquota 400000 + mkdir -p `dirname $MAILPATH` fs ls $MAILPATH || fs mkm $MAILPATH mail.$USER fs ls $HOMEPATH/Maildir || fs mkm $HOMEPATH/Maildir mail.$USER @@ -210,6 +232,16 @@ chown $USER:nogroup $MAILPATH chown $USER:nogroup $HOMEPATH/Maildir fs sa $MAILPATH $USER all fs sa $MAILPATH $USER.daemon all +if test ! -e $MAILPATH/new; then + mkdir -p $MAILPATH/cur $MAILPATH/new $MAILPATH/tmp + echo -e "This email account is provided as a service for HCoop members." \ + "\n\nTo learn how to use it, please visit the page" \ + "\n on our website."| \ + mail -s "Welcome to your HCoop email store" \ + -e -a "From: postmaster@hcoop.net" \ + real-$USER +fi +chown $USER:nogroup $MAILPATH/cur $MAILPATH/new $MAILPATH/tmp # Set up shared SpamAssassin folder if test -f $HOMEPATH/Maildir/shared-maildirs; then @@ -221,58 +253,13 @@ if test -f $HOMEPATH/Maildir/shared-maildirs; then 's!^(SpamAssassin )/home/spamd!\1/var/local/lib/spamd!1' \ $file fi - -# This does not yet seem to be needed, and it triggers an AFS issue, -# so I've commented it out --mwolson. -# -# NOTIFY=no -# for dir in $HOMEPATH/Maildir/shared-folders/SpamAssassin/*; do -# if ! test -d $dir; then -# NOTIFY=yes -# else -# dest=/var/local/lib/spamd/Maildir/.$(basename $dir) -# if test "$(readlink $dir/shared)" != "$dest"; then -# ln -sf $dest $dir/shared -# fi -# fi -# done -# if test $NOTIFY = yes; then -# # This is probably going overboard, but oh well -# echo "$USER needs assistance on their shared spam dir" | \ -# pagsh -c mail -s "[create-user] $USER needs assistance" \ -# -e -a "From: admins@deleuze.hcoop.net" mwolson_admin -# fi - else maildirmake --add SpamAssassin=/var/local/lib/spamd/Maildir \ $HOMEPATH/Maildir fi -# DATABASE VOLUME -if ! vos examine db.$USER >/dev/null 2>/dev/null; then - mkdir -p `dirname /afs/.hcoop.net/common/.databases/$PATHBITS` - vos create -server afs -partition a -name db.$USER -maxquota 400000 - fs mkmount -dir /afs/.hcoop.net/common/.databases/$PATHBITS -vol db.$USER -rw - vos release common.databases - fs sa -dir $DBPATH -acl system:postgres l - fs sa -dir $DBPATH -acl system:mysql l - fs sa -dir $DBPATH -acl system:backup rl -fi - -# Create postgres user and tablespace placeholder within volume -if ! test -d $PGDIR; then - mkdir -p $PGDIR - chown postgres:postgres $PGDIR - fs sa -dir $PGDIR -acl system:postgres write - - sudo -u postgres psql -c "CREATE TABLESPACE user_$USER OWNER postgres LOCATION '$PGDIR'" template1 -fi - -# Create mysql user and databases placeholder within volume -mkdir -p $MYSQLDIR -chown mysql:mysql $MYSQLDIR -fs sa -dir $MYSQLDIR -acl system:mysql write - +# Create database tablespaces +execute_on_fritz /afs/hcoop.net/common/etc/scripts/create-user-database $USER # # Mount points for backup volumes @@ -287,11 +274,11 @@ fs ls /afs/hcoop.net/.old/mail/$PATHBITS || \ vos release old # technically this might not be necessary, but for good measure... -vos syncserv deleuze -vos syncvldb deleuze +vos syncserv fritz +vos syncvldb fritz # refresh volume location cache (takes ~2hrs otherwise) -mire_and_deleuze fs checkvolumes +execute_on_all_machines fs checkvolumes # # Non-AFS files and directories @@ -308,3 +295,9 @@ mire_and_deleuze sudo chmod ug=rwx,o= /var/lock/apache2/dav/$USER # domtool-adduser $USER + +# +# Subscribe user to our mailing lists. +# +echo $USER@hcoop.net | sudo -u list \ + /var/lib/mailman/bin/add_members -r - hcoop-announce