Merge load limiting and rebalancing changes from deleuze
[hcoop/zz_old/config/exim4-hopper.git] / get-token
1 #!/bin/bash
2 # Get an AFS token for the given user.
3 #
4 # This is used to deliver mail with the appropriate credentials.
5 #
6 # Usage:
7 #
8 # get-token $USER
9 # - If user is root, call this script as $USER
10 #
11 # get-token $USER norecurse
12 # - Don't recursively call this script, even if user if root
13
14 REALUSER=$(whoami)
15 USER=$1
16 LOGFILE=/tmp/exim4/weird-error.log
17
18 if test "$REALUSER" = "root"; then
19 if test "$2" = "norecurse"; then
20 echo "Error: running as root even after trying to change to $USER" \
21 >> $LOGFILE
22 exit 1
23 fi
24
25 # Decide whether the user exists: getent returns 0 error code if so
26 getent passwd "$USER" >/dev/null
27 if test $? -ne 0; then
28 echo "$USER is not a local user, so ignoring them" \
29 >> $LOGFILE
30 exit 1
31 else
32 USER=$(getent passwd "$1" | cut -d':' -f 1)
33 exec su $USER -c "$0 $1 norecurse"
34 fi
35 fi
36
37 # Make sure USER exists, and resolve UIDs to a login name
38 USER=$(getent passwd "$USER" | cut -d':' -f 1)
39 LOGFILE=/tmp/exim4/get-token-log.$USER
40
41 if test -z "$USER"; then
42 echo "$USER is not a local user, so ignoring them" \
43 >> /tmp/exim4/weird-error.log
44 exit 1
45 fi
46
47 # fuse stdin and stderr
48 exec 2>&1
49
50 # all future output goes to this file
51 exec >& $LOGFILE
52
53 # print name of user
54 echo "Running as user $REALUSER"
55
56 # debugging output
57 if test "$2" = "debug"; then
58 shift; shift
59 echo "Debugging output: $*"
60 fi
61
62 # set the credentials cache
63 export KRB5CCNAME=FILE:/tmp/exim4/krb5cc_$USER.email
64
65 # eliminate any previous tokens
66 kdestroy
67 unlog
68 KEYTAB=/etc/keytabs/user.daemon/$USER
69
70 # display command-to-be-invoked as a sanity check
71 echo kinit -kt $KEYTAB $USER/daemon@HCOOP.NET
72
73 kinit -kt $KEYTAB $USER/daemon@HCOOP.NET
74 aklog
75
76 # list tokens, for the sake of debugging
77 #tokens