diff --git a/install_backuppc_mac.sh b/install_backuppc_mac.sh index d4a42b2..6d41200 100755 --- a/install_backuppc_mac.sh +++ b/install_backuppc_mac.sh @@ -21,8 +21,8 @@ function GetDefaultUser() { function AllowUserToConnectToThisMachineUsingSsh() { local userLogin="$1" - #dscl . append '/Groups/com.apple.access_ssh' user "${userLogin}" - #dscl . append /Groups/com.apple.access_ssh groupmembers $(dscl . read "/Users/${userLogin}" GeneratedUID | cut -d " " -f 2) + dscl . append '/Groups/com.apple.access_ssh' user "${userLogin}" + dscl . append /Groups/com.apple.access_ssh groupmembers $(dscl . read "/Users/${userLogin}" GeneratedUID | cut -d " " -f 2) printf '\e[1;33m%-6s\e[m\n' "DEBUG : Autoriser les accès SSH pour ${userLogin}." } ## }}} @@ -30,7 +30,7 @@ function AllowUserToConnectToThisMachineUsingSsh() ## EnsurePingIsAllowed {{{ function EnsurePingIsAllowed() { - #sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode off + sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode off printf '\e[1;33m%-6s\e[m\n' "DEBUG : Désactivation du mode furtif (ping)." if [ $? != 0 ]; then printf '\e[1;31m%-6s\e[m\n' "ERREUR : La désactivation du mode furtif a échoué" @@ -42,14 +42,14 @@ function EnsurePingIsAllowed() ## EnsureSshdIsRunning {{{ function EnsureSshdIsRunning() { - #sudo launchctl list | grep 'com.openssh.sshd' &> /dev/null + sudo launchctl list | grep 'com.openssh.sshd' &> /dev/null printf '\e[1;33m%-6s\e[m\n' "DEBUG : Vérification si sshd est déjà en cours." if [ $? != 0 ]; then # enable 'Remote login' in 'system preferences' sudo launchctl enable system/com.openssh.sshd &> /dev/null sudo launchctl load /System/Library/LaunchDaemons/ssh.plist &> /dev/null fi - #sudo launchctl list | grep 'com.openssh.sshd' &> /dev/null + sudo launchctl list | grep 'com.openssh.sshd' &> /dev/null printf '\e[1;33m%-6s\e[m\n' "DEBUG : Activation du serveur ssh." if [ $? != 0 ]; then printf '\e[1;31m%-6s\e[m\n' "ERREUR : L'activation du serveur ssh a échoué"; @@ -126,17 +126,17 @@ function AddUserBackuppc() { fi # Create user - #dscl . -create "/Users/$userLogin" - #dscl . -create "/Users/$userLogin" UserShell /bin/bash - #dscl . -create "/Users/$userLogin" RealName "backuppc" - #dscl . -create "/Users/$userLogin" UniqueID "$newid" - #dscl . -create "/Users/$userLogin" PrimaryGroupID "$groupId" - #dscl . -create "/Users/$userLogin" NFSHomeDirectory "$homeDir" - #dscl . -create "/Users/$userLogin" IsHidden 1 # hide from login window + dscl . -create "/Users/$userLogin" + dscl . -create "/Users/$userLogin" UserShell /bin/bash + dscl . -create "/Users/$userLogin" RealName "backuppc" + dscl . -create "/Users/$userLogin" UniqueID "$newid" + dscl . -create "/Users/$userLogin" PrimaryGroupID "$groupId" + dscl . -create "/Users/$userLogin" NFSHomeDirectory "$homeDir" + dscl . -create "/Users/$userLogin" IsHidden 1 # hide from login window printf '\e[1;33m%-6s\e[m\n' "DEBUG : Création de l'utilisateur ${userLogin}." # Homedir permissions - #chown -R "$userLogin:$groupId" "$homeDir" + chown -R "$userLogin:$groupId" "$homeDir" printf '\e[1;33m%-6s\e[m\n' "DEBUG : chown -R $userLogin:$groupId $homeDir" AllowUserToConnectToThisMachineUsingSsh "${userLogin}" @@ -157,11 +157,11 @@ function AllowBackuppcSudo() { return "$ERROR" fi - #sudo mkdir -p -- "${sudoersDir}" + sudo mkdir -p -- "${sudoersDir}" printf '\e[1;33m%-6s\e[m\n' "DEBUG : Création du dossier ${sudoersDir}." # Allow user to use rsync with sudo - #sudo sh -c "echo '${userLogin} ALL=(ALL:ALL) NOEXEC:NOPASSWD: /usr/bin/rsync' > ${sudoersDir}/backuppc_noexec" + sudo sh -c "echo '${userLogin} ALL=(ALL:ALL) NOEXEC:NOPASSWD: /usr/bin/rsync' > ${sudoersDir}/backuppc_noexec" printf '\e[1;33m%-6s\e[m\n' "DEBUG : ajout de '${userLogin} ALL=(ALL:ALL) NOEXEC:NOPASSWD: /usr/bin/rsync'" printf '\e[1;33m%-6s\e[m\n' "DEBUG : dans le fichier ${sudoersDir}/backuppc_noexec." } @@ -291,11 +291,11 @@ mv -f -- "${filepl}" "${dir1}" printf '\e[1;35m%-6s\e[m\n' "DEBUG : Partie - Création du compte backuppc" homebackuppc='/var/lib/backuppc' AddUserBackuppc "${input_login}" "${homebackuppc}" -#mkdir -p -- "${homebackuppc}"/.ssh +mkdir -p -- "${homebackuppc}"/.ssh printf '\e[1;33m%-6s\e[m\n' "DEBUG : Création du répertoire .ssh de l'utilisateur : ${homebackuppc}/.ssh" -#echo "from=\"129.20.203.16\" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIhMc8ixQXfWDACJy4q0v8T877UxahhCjO51PQFzylwVpf88LX3yWeDrWIW0NRu0zoSm396mig918OpD5ggqML/QbYbQsoDdAFUV/tK4JU6UJgEQIl25MOcUBCFepsFBGS09CH/V07xSUqSP/+beeTRLNO2CQzk3S2y3YfkXpM7KmOGfeLgoCaQAcxIkgLXeM3TpCZEzJDlZ8c8k/DjVvsgwCpQktYzNo2b37KHLLfgyW9KSo6N9sReUuNQjS6lu8rjrXfc6+J0pY2D6IxWptTWL/JVrhFCUqe4QQy+xYjoR41wqnAQyl/kOcyBNhSvojMKwQT6vlPwru6pOno16/X backuppc@backuppc.ipr.univ-rennes1.fr" > "${homebackuppc}"/.ssh/authorized_keys +echo "from=\"129.20.203.16\" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIhMc8ixQXfWDACJy4q0v8T877UxahhCjO51PQFzylwVpf88LX3yWeDrWIW0NRu0zoSm396mig918OpD5ggqML/QbYbQsoDdAFUV/tK4JU6UJgEQIl25MOcUBCFepsFBGS09CH/V07xSUqSP/+beeTRLNO2CQzk3S2y3YfkXpM7KmOGfeLgoCaQAcxIkgLXeM3TpCZEzJDlZ8c8k/DjVvsgwCpQktYzNo2b37KHLLfgyW9KSo6N9sReUuNQjS6lu8rjrXfc6+J0pY2D6IxWptTWL/JVrhFCUqe4QQy+xYjoR41wqnAQyl/kOcyBNhSvojMKwQT6vlPwru6pOno16/X backuppc@backuppc.ipr.univ-rennes1.fr" > "${homebackuppc}"/.ssh/authorized_keys printf '\e[1;33m%-6s\e[m\n' "DEBUG : Ajout de la clef SSH du serveur dans "${homebackuppc}"/.ssh/authorized_keys." -#chown -R backuppc "${homebackuppc}"/.ssh/ +chown -R backuppc "${homebackuppc}"/.ssh/ printf '\e[1;33m%-6s\e[m\n' "DEBUG : chown -R backuppc ${homebackuppc}/.ssh/" #### END ####