Re-enable the actions
This commit is contained in:
parent
0b80ba177f
commit
738e690582
|
@ -21,8 +21,8 @@ function GetDefaultUser() {
|
|||
function AllowUserToConnectToThisMachineUsingSsh()
|
||||
{
|
||||
local userLogin="$1"
|
||||
#dscl . append '/Groups/com.apple.access_ssh' user "${userLogin}"
|
||||
#dscl . append /Groups/com.apple.access_ssh groupmembers $(dscl . read "/Users/${userLogin}" GeneratedUID | cut -d " " -f 2)
|
||||
dscl . append '/Groups/com.apple.access_ssh' user "${userLogin}"
|
||||
dscl . append /Groups/com.apple.access_ssh groupmembers $(dscl . read "/Users/${userLogin}" GeneratedUID | cut -d " " -f 2)
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : Autoriser les accès SSH pour ${userLogin}."
|
||||
}
|
||||
## }}}
|
||||
|
@ -30,7 +30,7 @@ function AllowUserToConnectToThisMachineUsingSsh()
|
|||
## EnsurePingIsAllowed {{{
|
||||
function EnsurePingIsAllowed()
|
||||
{
|
||||
#sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode off
|
||||
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode off
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : Désactivation du mode furtif (ping)."
|
||||
if [ $? != 0 ]; then
|
||||
printf '\e[1;31m%-6s\e[m\n' "ERREUR : La désactivation du mode furtif a échoué"
|
||||
|
@ -42,14 +42,14 @@ function EnsurePingIsAllowed()
|
|||
## EnsureSshdIsRunning {{{
|
||||
function EnsureSshdIsRunning()
|
||||
{
|
||||
#sudo launchctl list | grep 'com.openssh.sshd' &> /dev/null
|
||||
sudo launchctl list | grep 'com.openssh.sshd' &> /dev/null
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : Vérification si sshd est déjà en cours."
|
||||
if [ $? != 0 ]; then
|
||||
# enable 'Remote login' in 'system preferences'
|
||||
sudo launchctl enable system/com.openssh.sshd &> /dev/null
|
||||
sudo launchctl load /System/Library/LaunchDaemons/ssh.plist &> /dev/null
|
||||
fi
|
||||
#sudo launchctl list | grep 'com.openssh.sshd' &> /dev/null
|
||||
sudo launchctl list | grep 'com.openssh.sshd' &> /dev/null
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : Activation du serveur ssh."
|
||||
if [ $? != 0 ]; then
|
||||
printf '\e[1;31m%-6s\e[m\n' "ERREUR : L'activation du serveur ssh a échoué";
|
||||
|
@ -126,17 +126,17 @@ function AddUserBackuppc() {
|
|||
fi
|
||||
|
||||
# Create user
|
||||
#dscl . -create "/Users/$userLogin"
|
||||
#dscl . -create "/Users/$userLogin" UserShell /bin/bash
|
||||
#dscl . -create "/Users/$userLogin" RealName "backuppc"
|
||||
#dscl . -create "/Users/$userLogin" UniqueID "$newid"
|
||||
#dscl . -create "/Users/$userLogin" PrimaryGroupID "$groupId"
|
||||
#dscl . -create "/Users/$userLogin" NFSHomeDirectory "$homeDir"
|
||||
#dscl . -create "/Users/$userLogin" IsHidden 1 # hide from login window
|
||||
dscl . -create "/Users/$userLogin"
|
||||
dscl . -create "/Users/$userLogin" UserShell /bin/bash
|
||||
dscl . -create "/Users/$userLogin" RealName "backuppc"
|
||||
dscl . -create "/Users/$userLogin" UniqueID "$newid"
|
||||
dscl . -create "/Users/$userLogin" PrimaryGroupID "$groupId"
|
||||
dscl . -create "/Users/$userLogin" NFSHomeDirectory "$homeDir"
|
||||
dscl . -create "/Users/$userLogin" IsHidden 1 # hide from login window
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : Création de l'utilisateur ${userLogin}."
|
||||
|
||||
# Homedir permissions
|
||||
#chown -R "$userLogin:$groupId" "$homeDir"
|
||||
chown -R "$userLogin:$groupId" "$homeDir"
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : chown -R $userLogin:$groupId $homeDir"
|
||||
|
||||
AllowUserToConnectToThisMachineUsingSsh "${userLogin}"
|
||||
|
@ -157,11 +157,11 @@ function AllowBackuppcSudo() {
|
|||
return "$ERROR"
|
||||
fi
|
||||
|
||||
#sudo mkdir -p -- "${sudoersDir}"
|
||||
sudo mkdir -p -- "${sudoersDir}"
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : Création du dossier ${sudoersDir}."
|
||||
|
||||
# Allow user to use rsync with sudo
|
||||
#sudo sh -c "echo '${userLogin} ALL=(ALL:ALL) NOEXEC:NOPASSWD: /usr/bin/rsync' > ${sudoersDir}/backuppc_noexec"
|
||||
sudo sh -c "echo '${userLogin} ALL=(ALL:ALL) NOEXEC:NOPASSWD: /usr/bin/rsync' > ${sudoersDir}/backuppc_noexec"
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : ajout de '${userLogin} ALL=(ALL:ALL) NOEXEC:NOPASSWD: /usr/bin/rsync'"
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : dans le fichier ${sudoersDir}/backuppc_noexec."
|
||||
}
|
||||
|
@ -291,11 +291,11 @@ mv -f -- "${filepl}" "${dir1}"
|
|||
printf '\e[1;35m%-6s\e[m\n' "DEBUG : Partie - Création du compte backuppc"
|
||||
homebackuppc='/var/lib/backuppc'
|
||||
AddUserBackuppc "${input_login}" "${homebackuppc}"
|
||||
#mkdir -p -- "${homebackuppc}"/.ssh
|
||||
mkdir -p -- "${homebackuppc}"/.ssh
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : Création du répertoire .ssh de l'utilisateur : ${homebackuppc}/.ssh"
|
||||
#echo "from=\"129.20.203.16\" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIhMc8ixQXfWDACJy4q0v8T877UxahhCjO51PQFzylwVpf88LX3yWeDrWIW0NRu0zoSm396mig918OpD5ggqML/QbYbQsoDdAFUV/tK4JU6UJgEQIl25MOcUBCFepsFBGS09CH/V07xSUqSP/+beeTRLNO2CQzk3S2y3YfkXpM7KmOGfeLgoCaQAcxIkgLXeM3TpCZEzJDlZ8c8k/DjVvsgwCpQktYzNo2b37KHLLfgyW9KSo6N9sReUuNQjS6lu8rjrXfc6+J0pY2D6IxWptTWL/JVrhFCUqe4QQy+xYjoR41wqnAQyl/kOcyBNhSvojMKwQT6vlPwru6pOno16/X backuppc@backuppc.ipr.univ-rennes1.fr" > "${homebackuppc}"/.ssh/authorized_keys
|
||||
echo "from=\"129.20.203.16\" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIhMc8ixQXfWDACJy4q0v8T877UxahhCjO51PQFzylwVpf88LX3yWeDrWIW0NRu0zoSm396mig918OpD5ggqML/QbYbQsoDdAFUV/tK4JU6UJgEQIl25MOcUBCFepsFBGS09CH/V07xSUqSP/+beeTRLNO2CQzk3S2y3YfkXpM7KmOGfeLgoCaQAcxIkgLXeM3TpCZEzJDlZ8c8k/DjVvsgwCpQktYzNo2b37KHLLfgyW9KSo6N9sReUuNQjS6lu8rjrXfc6+J0pY2D6IxWptTWL/JVrhFCUqe4QQy+xYjoR41wqnAQyl/kOcyBNhSvojMKwQT6vlPwru6pOno16/X backuppc@backuppc.ipr.univ-rennes1.fr" > "${homebackuppc}"/.ssh/authorized_keys
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : Ajout de la clef SSH du serveur dans "${homebackuppc}"/.ssh/authorized_keys."
|
||||
#chown -R backuppc "${homebackuppc}"/.ssh/
|
||||
chown -R backuppc "${homebackuppc}"/.ssh/
|
||||
printf '\e[1;33m%-6s\e[m\n' "DEBUG : chown -R backuppc ${homebackuppc}/.ssh/"
|
||||
|
||||
#### END ####
|
||||
|
|
Loading…
Reference in New Issue