source: fedkit/combo.pl @ bc0b21b

axis_examplecompt_changesinfo-opsversion-3.01version-3.02
Last change on this file since bc0b21b was bc0b21b, checked in by Ted Faber <faber@…>, 14 years ago

enforce pubkey permissions

  • Property mode set to 100644
File size: 3.6 KB
RevLine 
[2edec46]1#!/usr/bin/perl
2
3use strict;
4
5use gateway_lib;
6
7use IO::File;
8
9use Getopt::Long;
10
11my $ssh_pubkey;
12my $ssh_privkey;
[8d4e4fb]13my $active;
[2edec46]14my $tunnelip;
15my $peer;
16my $fedkit_dir= "/usr/local/federation";
17my $perl = "/usr/bin/perl";
[8d4e4fb]18my $iface_file = "/var/emulab/boot/ifmap";
[2edec46]19my $ssh = "/usr/bin/ssh";
[9b3627e]20my $seer;
[f8fa72b]21my $ssh_port = 22;
[2edec46]22my @ports;
[8d4e4fb]23my $use_file;
[2edec46]24
[8d4e4fb]25my %opts = (
[2edec46]26    'ssh_pubkey=s' => \$ssh_pubkey,
27    'ssh_privkey=s' => \$ssh_privkey,
28    'tunnelip' => \$tunnelip,
29    'peer=s' => \$peer,
30    'fedkit=s' => \$fedkit_dir,
31    'perl=s' => \$perl,
32    'interfaces=s' => \$iface_file,
33    'ssh=s' => \$ssh,
[8d4e4fb]34    'port=s' => \@ports,
35    'active' => \$active, 
[f8fa72b]36    'ssh_port=s' => \$ssh_port,
[8d4e4fb]37    'use_file' => \$use_file,
[9b3627e]38    'seer' => \$seer,
[2edec46]39);
40
[8d4e4fb]41exit(20) unless GetOptions(%opts);
[2edec46]42
[f8fa72b]43if ($use_file) {
44    gateway_lib::read_config(gateway_lib::config_filename(), \%opts)
45}
[2edec46]46
[8d4e4fb]47my $tunnelparam = $tunnelip ? '--tunnelip' : '';
[bc0b21b]48
49# Private keys need to have restrictive permissions
50chmod(0600, $ssh_privkey);
[8d4e4fb]51if ($active) {
52    my $portparam = join(" --port=", @ports);
53
54    # join doesn't prefix the first one
55    $portparam="--port=$portparam" if $portparam;
56
57    system("$perl -I$fedkit_dir/lib $fedkit_dir/bin/active_config.pl " .
58        "--peer=$peer --ssh_pubkey=$ssh_pubkey --ssh_privkey=$ssh_privkey " .
59        " $tunnelparam --fedkit=$fedkit_dir --perl=$perl " .
[f8fa72b]60        "--ssh_port=$ssh_port --ssh=$ssh --interfaces=$iface_file");
[8d4e4fb]61    exit(20) if $?;
62
63    system("$perl -I$fedkit_dir/lib $fedkit_dir/bin/port_forward.pl " .
64        "--peer=$peer --ssh_pubkey=$ssh_pubkey --ssh_privkey=$ssh_privkey " .
65        " $tunnelparam --fedkit=$fedkit_dir --perl=$perl " .
[73e0a61]66        "--ssh=$ssh --ssh_port=$ssh_port $portparam");
[8d4e4fb]67    exit(20) if $?;
[9b3627e]68
69    if ($seer ) {
70        system("$perl -I$fedkit_dir/lib $fedkit_dir/bin/start_seer.pl " .
71            "--peer=$peer --seer --fedkit=$fedkit_dir --perl=$perl " .
72            "--ssh=$ssh --ssh_privkey=$ssh_privkey");
73        exit(20) if $?;
74    }
75
[8d4e4fb]76}
77else {
78    system("$perl -I$fedkit_dir/lib $fedkit_dir/bin/prep_gateway.pl " . 
79        "--peer=$peer --ssh_pubkey=$ssh_pubkey $tunnelparam");
80    exit(20) if $?;
81}
[2b35261]82
83=pod
84
85=head1 NAME
86
87B<combo_active.pl> - Do both the active configuration of a connectiveity gateway and service port forwarding.
88
89=head1 OPTIONS
90
91=over 8
92
93=item B<fedkit=>I<install_dir>
94
95Directory in which this software is installed.  Generally not needed.
96
97=item B<interfaces=>I<interface table>
98
99A list of interfaces to forward data on of the form:
100
101=begin text
102
103iface ip_addr
104
105=end text
106
107The interface is the operating system name of the interface and the IP address
108is given in standard dotted decimal notation.  Other characters on a line are
109ignored.
110
111=item B<peer=>I<hostname>
112
113The other gateway providing forwarding.
114
115=item B<perl=>I<perl_binary>
116 
117Location of the perl binary.  Usually unneeded.
118
119=item B<port=>I<port_spec>
120
121Forward the given port.  The port is specified as
122for B<port_forward.pl>
123
124=item B<ssh=>I<ssh_binary>
125
126The pathname of the ssh binary.  Unusally unnecessary.
127
128=item B<ssh_pubkey=>I<keyfile>
129
130A public to install as authorized.
131
132=item B<ssh_privkey=>I<identity_file>
133
134The identity to use for remote access
135
136=item B<tunnelip>
137
138True if the testbed uses the DETER tunnelip extension to provide external
139connectivity information
140
[8d4e4fb]141=item B<use_file>
142
143If given read additional parameters from the file in
144/proj/I<project>/exp/I<experiment/tmp/I<hostname>.gw/conf where those are the
145current testbed project and experiment and the hostname is before the first
146dot.  The file is option: value.
147
[2b35261]148=back
149
150=head1 SYNOPSIS
151
152Call B<active_config.pl> and B<port_forward.pl> with the relevant parameters.
153
154
155=head1 AUTHORS
156
157Ted Faber <faber@isi.edu>
158
159=cut
Note: See TracBrowser for help on using the repository browser.