Return to loncontrol CVS log

Up to [LON-CAPA] / loncom / init.d

- Support Certificate Revocation List checking when using SSL channel
  for key exchange during negotiation of connection to remote lond.

    1: #!/usr/bin/perl
    2: #
    3: # $Id: loncontrol,v 1.45 2018/08/07 17:12:17 raeburn Exp $
    4: #
    5: # The LearningOnline Network with CAPA
    6: #
    7: # Copyright Michigan State University Board of Trustees
    8: #
    9: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
   10: #
   11: # LON-CAPA is free software; you can redistribute it and/or modify
   12: # it under the terms of the GNU General Public License as published by
   13: # the Free Software Foundation; either version 2 of the License, or
   14: # (at your option) any later version.
   15: #
   16: # LON-CAPA is distributed in the hope that it will be useful,
   17: # but WITHOUT ANY WARRANTY; without even the implied warranty of
   18: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   19: # GNU General Public License for more details.
   20: #
   21: # You should have received a copy of the GNU General Public License
   22: # along with LON-CAPA; if not, write to the Free Software
   23: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
   24: #
   25: # /home/httpd/html/adm/gpl.txt
   26: #
   27: # http://www.lon-capa.org/
   28: #
   29: # Startup script for the LON-CAPA network processes
   30: #
   31: 
   32: # chkconfig: 345 95 5
   33: # description: LON-CAPA is a "network of knowledge".  It is used to \
   34: # distribute knowledge resources and instructional management.
   35: # processnames: lonc, lond, lonsql, lonmaxima, lonr
   36: # pidfiles: /home/httpd/perl/logs/lon*.pid
   37: # config: /etc/httpd/conf/loncapa.conf
   38: # config: /home/httpd/lonTabs/hosts.tab
   39: # config: /home/httpd/lonTabs/spare.tab
   40: # SuSE chkconfig/insserv info
   41: ### BEGIN INIT INFO
   42: # Provides:       loncapa
   43: # Required-Start: SuSEfirewall2_setup mysql apache2 $network $remote_fs
   44: # Should-Start:   $ALL
   45: # Required-Stop:
   46: # Default-Start:  3 5
   47: # Default-Stop:
   48: # Description:    Starts the LON-CAPA services
   49: ### END INIT INFO
   50: 
   51: use strict;
   52: use lib '/home/httpd/lib/perl/';
   53: use LONCAPA::Configuration;
   54: use LONCAPA::Firewall;
   55: use Apache::lonnet;
   56: 
   57: my $command=$ARGV[0]; $command=~s/[^a-z]//g;
   58: 
   59: $ENV{'PATH'}="/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/root/bin";
   60: $ENV{'BASH_ENV'}="";
   61: 
   62: sub stop_daemon {
   63:     my ($daemon,$killallname)=@_;
   64:     my $pidfile="/home/httpd/perl/logs/$daemon.pid";
   65:     
   66:     printf("%-15s ",$daemon);
   67:     if (-e $pidfile) {
   68: 	open(PIDFILE,$pidfile);
   69: 	my $daemonpid=<PIDFILE>;
   70: 	chomp($daemonpid);
   71: 	kill TERM => $daemonpid;
   72: 	my $count=0;
   73: 	while ($count++ < 5 && kill(0 => $daemonpid)) {
   74: 	    sleep 1;
   75: 	}
   76: 	if (kill 0 => $daemonpid) {
   77: 	    kill KILL => $daemonpid;
   78: 	    sleep 1;
   79: 	    if (kill 0 => $daemonpid) {
   80: 		print("failed to kill");
   81: 	    } else {
   82: 		print("killed");
   83: 	    }
   84: 	} else {
   85: 	    print("stopped");
   86: 	}
   87:     } else {
   88: 	print("not running");
   89:     }
   90:     system("killall -q -0 $killallname");
   91:     if ($? == 0) {
   92: 	system("killall -q $killallname");
   93: 	print(", killed off extraneous processes");
   94:     }
   95:     unlink($pidfile);
   96:     if ($killallname eq 'loncnew') {
   97:         &clean_nossl_loncpids();
   98:     }
   99:     print("\n");
  100: }
  101: 
  102: sub clean_sockets {
  103:     opendir(SOCKETS,"/home/httpd/sockets/");
  104:     my $perlvarref=&LONCAPA::Configuration::read_conf();
  105:     return if (ref($perlvarref) ne 'HASH');
  106:     while (my $fname=readdir(SOCKETS)) {
  107: 	next if (-d $fname
  108: 		 || $fname=~/(mysqlsock|maximasock|\Q$perlvarref->{'lonSockDir'}\E)/);
  109: 	unlink("/home/httpd/sockets/$fname");
  110:     }
  111: }
  112: 
  113: sub clean_nossl_loncpids {
  114:     my $childpiddir = '/home/httpd/perl/logs/loncpids';
  115:     my $nossldir = '/home/httpd/sockets/nosslverify';
  116:     foreach my $dir ($childpiddir,$nossldir) {
  117:         if (-d $dir) {
  118:             if (opendir(my $dh,$dir)) {
  119:                 while (my $fname=readdir($dh)) {
  120:                     next if ($fname =~ /^\./);
  121:                     unlink("$dir/$fname");
  122:                 }
  123:                 closedir($dh);
  124:             }
  125:         }
  126:     }
  127: }
  128: 
  129: if (($command eq "restart") || ($command eq 'stop') || 
  130:     ($command eq 'start') || ($command eq "status")) {
  131:     my $iptables = &LONCAPA::Firewall::get_pathto_iptables();
  132:     my @fw_chains = &LONCAPA::Firewall::get_fw_chains($iptables);
  133:     my $lond_port = &LONCAPA::Firewall::get_lond_port();
  134:     my %iphost;
  135:     if ($command eq 'restart') {
  136:         print 'Restarting LON-CAPA'."\n";
  137:         print 'Ending LON-CAPA client and daemon processes'."\n";
  138:         foreach my $daemon ('lonsql','lond','lonc','lonmemcached','lonmaxima','lonr') {
  139:             my $killallname=$daemon;
  140:             if ($daemon eq 'lonc') { $killallname='loncnew'; }
  141:             &stop_daemon($daemon,$killallname);
  142:         }
  143:         %iphost = &Apache::lonnet::get_iphost('',1);
  144:         my $firewall_result =
  145:             &LONCAPA::Firewall::firewall_close_port($iptables,\@fw_chains,
  146:                                              $lond_port,\%iphost,[$lond_port]);
  147:         if ($firewall_result) {
  148:             print "$firewall_result\n";
  149:         }
  150:         $firewall_result =
  151:             &LONCAPA::Firewall::firewall_open_port($iptables,\@fw_chains,
  152:                                             $lond_port, \%iphost,[$lond_port]);
  153:         if (($firewall_result eq 'ok') || ($firewall_result eq 'inactive firewall')) {
  154:             if ($firewall_result eq 'inactive firewall') {
  155:                 print "WARNING: iptables firewall is currently inactive\n";
  156:             }
  157:         } elsif ($firewall_result) {
  158:             print "$firewall_result\n";
  159:         }
  160:         print 'Starting LON-CAPA client and daemon processes (please be patient)'.
  161:               "\n";
  162:         system("su www -c '/home/httpd/perl/loncron --justcheckdaemons'");
  163:     } elsif ($command eq 'stop') {
  164:         print 'Stopping LON-CAPA'."\n";
  165:         foreach my $daemon ('lonsql','lond','lonc','lonmemcached','lonmaxima','lonr') {
  166: 	    my $killallname=$daemon;
  167: 	    if ($daemon eq 'lonc') { $killallname='loncnew'; }
  168: 	    &stop_daemon($daemon,$killallname);
  169:         }
  170:         my $firewall_result = 
  171:             &LONCAPA::Firewall::firewall_close_port($iptables,\@fw_chains,$lond_port,\%iphost,[$lond_port]);
  172:         if ($firewall_result) {
  173:             print "$firewall_result\n";
  174:         }
  175:         &clean_sockets();
  176:     } elsif ($command eq "start") {
  177:         %iphost = &Apache::lonnet::get_iphost('',1);
  178:         my $firewall_result = 
  179:             &LONCAPA::Firewall::firewall_open_port($iptables,\@fw_chains,$lond_port,\%iphost,[$lond_port]);
  180:         if (($firewall_result eq 'ok') || ($firewall_result eq 'inactive firewall')) {
  181:             if ($firewall_result eq 'inactive firewall') {
  182:                 print "WARNING: iptables firewall is currently inactive\n";
  183:             }
  184:             print 'Starting LON-CAPA'."\n";
  185:             print 'Starting LON-CAPA client and daemon processes (please be patient)'.
  186: 	          "\n";
  187:             system("su www -c '/home/httpd/perl/loncron --justcheckdaemons'");
  188:         } else {
  189:             print "Not starting LON-CAPA\n";
  190:             if ($firewall_result eq 'port number unknown') {
  191:                 print "Could not check for status of LON-CAPA port in running firewall - port number unknown.  \n";
  192:             } elsif ($firewall_result) {
  193:                 print "$firewall_result\n";
  194:             }
  195:         }
  196:     } elsif ($command eq "status") {
  197:         %iphost = &Apache::lonnet::get_iphost();
  198:         my $response=`/bin/cat /home/httpd/perl/logs/*.pid 2>&1`;
  199:         if ($response=~/No such file or directory/) {
  200: 	    print 'LON-CAPA is not running.'."\n";
  201:         } else {
  202: 	    print 'LON-CAPA is running.'."\n";
  203: 	    system("su www -c '/home/httpd/perl/loncron --justcheckconnections'");
  204:         }
  205:         if (! &LONCAPA::Firewall::firewall_is_active()) {
  206:             print 'The iptables firewall is not active'."\n";
  207:         }
  208:         if ($lond_port) {
  209:             my $londopen;
  210:             foreach my $fw_chain (@fw_chains) { 
  211:                 my $numopen = &LONCAPA::Firewall::firewall_is_port_open($iptables,$fw_chain,$lond_port,$lond_port,\%iphost);
  212:                 $londopen += $numopen; 
  213:             }
  214:             if ($londopen) {
  215:                 print "The LON-CAPA port ($lond_port) is open in firewall.\n";
  216:             } elsif (&LONCAPA::Firewall::firewall_is_active) {
  217:                 print "The LON-CAPA port ($lond_port) is NOT open in running firewall!\n";
  218:             }
  219:         } else {
  220:             if (&LONCAPA::Firewall::firewall_is_active()) {
  221:                 print "Could not check for status of LON-CAPA port in running firewall - port number unknown.\n";
  222:             } else {
  223:                 print "LON-CAPA port number is unknown, and firewall is not running.\n";
  224:             }
  225:         }
  226:     }
  227: } elsif ($command eq "reload") {
  228:     print 'Reload LON-CAPA config files'."\n";
  229:     system("su www -c '/home/httpd/perl/loncron --justreload'");
  230: } else {
  231:     print "You need to specify one of reload|restart|stop|start|status on the command line.\n";
  232: }