ca-sign: Add instructions for generating CA key and cert to header.
[hcoop/scripts.git] / apache-sync-logs
1 #!/bin/bash
2
3 # invoke this as root on mire
4
5 exec 2>&1
6
7 # drop any tokens; use only users' cgi tokens
8 kdestroy > /dev/null 2>&1
9 unlog
10
11 #VERBOSE=true
12 VERBOSE=false
13
14 LOCAL_LOG_DIR=/var/log/apache2/user
15 KEYTAB_DIR=/etc/keytabs/user.daemon
16 AFS_USER_DIR=/afs/hcoop.net/user
17 ERROR=no
18
19 # Sanify permissions so that we can safely create tmp directories and
20 # run rsync.
21 chmod -R u=rwX,g=rX,o=X $LOCAL_LOG_DIR
22
23 # Iterate through logs for each user
24 for A in $(find $LOCAL_LOG_DIR -mindepth 3 -maxdepth 3 -print); do
25 USER=`basename $A`
26 PATHBITS=`echo $USER | head -c 1`/`echo $USER | head -c 2`/$USER
27 USER_HOME=$AFS_USER_DIR/$PATHBITS
28 LOG_SRC=$A/apache/log
29 LOG_DEST=$USER_HOME/.logs/apache/
30 TMP_DEST=$LOG_SRC.tmp
31
32 # Skip deleted or empty log directories
33 if test ! -d "$LOG_SRC" || ! ls "$LOG_SRC"/*/*/*.log >/dev/null 2>&1; then
34 continue
35 fi
36
37 # Skip people who have unreadable log subdirectories
38 if test -d "$USER_HOME/.logs" && \
39 ! ls "$USER_HOME/.logs" >/dev/null 2>&1; then
40 continue
41 fi
42
43 # Skip people who do not have keytabs
44 if test ! -f "$KEYTAB_DIR/$USER"; then
45 continue
46 fi
47
48 if test "$VERBOSE" = "true"; then
49 echo
50 echo "=============================================================================="
51 echo "syncing logs for $USER from $A"
52 echo " to $LOG_DEST ..."
53 fi
54
55 if test ! -d "$LOG_DEST"; then
56 # echo "Error: $LOG_DEST does not exist, please make it"
57 # ERROR=yes
58 # We will assume that people know what they are doing when they
59 # delete their ~/.logs/apache directory ....
60 continue
61 else
62 rm -fr $TMP_DEST
63 cp -r $LOG_SRC $TMP_DEST
64 chown -R $USER:nogroup $TMP_DEST
65 chmod -R u=rwX,go=X $TMP_DEST
66 k5start -qtU -f $KEYTAB_DIR/$USER \
67 -- sudo -u $USER rsync -a $TMP_DEST/ $LOG_DEST/
68 rm -fr $TMP_DEST
69 test "$VERBOSE" = "true" && echo " done."
70 fi
71 done
72
73 if test "$ERROR" = "yes"; then
74 exit 1
75 else
76 exit 0
77 fi
78