gitlabFork/ISPConfig3.git - Solinfo Gitblit

Fixed: FS#3624 - SSL cert for postfix not created on OpenSuSE Linux during ...

Till Brehm

2014-08-14 b51c22aecea55a2edb0e5fa712b297465a444b28

commit \| author \| age
20218c	1	<?php
M	2
	3	/*
	4	Copyright (c) 2007, Till Brehm, projektfarm Gmbh
	5	All rights reserved.
	6
	7	Redistribution and use in source and binary forms, with or without modification,
	8	are permitted provided that the following conditions are met:
	9
	10	* Redistributions of source code must retain the above copyright notice,
	11	this list of conditions and the following disclaimer.
	12	* Redistributions in binary form must reproduce the above copyright notice,
	13	this list of conditions and the following disclaimer in the documentation
	14	and/or other materials provided with the distribution.
	15	* Neither the name of ISPConfig nor the names of its contributors
	16	may be used to endorse or promote products derived from this software without
	17	specific prior written permission.
	18
	19	THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
	20	ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
	21	WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
	22	IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
	23	INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
	24	BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
	25	DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
	26	OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
	27	NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
	28	EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
	29	*/
	30
7fe908	31	class installer extends installer_base
cb8c86	32	{
W	33	public function configure_jailkit()
7fe908	34	{
MC	35	global $conf;
	36
cb8c86	37	if (is_dir($conf['jailkit']['config_dir']))
W	38	{
ff1d9a	39	$jkinit_content = $this->get_template_file($conf['jailkit']['jk_init'], true); //* get contents
cb8c86	40	$this->write_config_file($conf['jailkit']['config_dir'] . '/' . $conf['jailkit']['jk_init'], $jkinit_content);
7fe908	41
ff1d9a	42	$jkchroot_content = $this->get_template_file($conf['jailkit']['jk_chrootsh'], true); //* get contents
cb8c86	43	$this->write_config_file($conf['jailkit']['config_dir'] . '/' . $conf['jailkit']['jk_chrootsh'], $jkchroot_content);
W	44	}
7fe908	45
ff1d9a	46	$command = 'chown root:root /var/www';
W	47	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	48	}
MC	49
cb8c86	50	public function configure_postfix($options = '')
7fe908	51	{
b51c22	52	global $conf,$autoinstall;
7fe908	53
MC	54	$cf = $conf['postfix'];
cb8c86	55	$config_dir = $cf['config_dir'];
7fe908	56
cb8c86	57	if(!is_dir($config_dir)){
7fe908	58	$this->error("The postfix configuration directory '$config_dir' does not exist.");
MC	59	}
	60
	61	//* Install virtual mappings
	62	foreach (glob('tpl/mysql-virtual_*.master') as $filename) {
	63	$this->process_postfix_config( basename($filename, '.master') );
	64	}
	65
ff1d9a	66	//* Changing mode and group of the new created config files.
cb8c86	67	caselog('chmod o= '.$config_dir.'/mysql-virtual_.cf &> /dev/null',
7fe908	68	__FILE__, __LINE__, 'chmod on mysql-virtual_.cf', 'chmod on mysql-virtual_.cf failed');
MC	69	caselog('chgrp '.$cf['group'].' '.$config_dir.'/mysql-virtual_.cf &> /dev/null',
	70	__FILE__, __LINE__, 'chgrp on mysql-virtual_.cf', 'chgrp on mysql-virtual_.cf failed');
	71
ff1d9a	72	//* Creating virtual mail user and group
cb8c86	73	$command = 'groupadd -g '.$cf['vmail_groupid'].' '.$cf['vmail_groupname'];
W	74	if (!is_group($cf['vmail_groupname'])) {
	75	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	76	}
20218c	77
cb8c86	78	$command = 'useradd -g '.$cf['vmail_groupname'].' -u '.$cf['vmail_userid'].' '.$cf['vmail_username'].' -d '.$cf['vmail_mailbox_base'].' -m';
W	79	if (!is_user($cf['vmail_username'])) {
7fe908	80	caselog("$command &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
cb8c86	81	}
20218c	82
b67344	83	//* These postconf commands will be executed on installation and update
7fe908	84	$postconf_placeholders = array('{config_dir}' => $config_dir,
MC	85	'{vmail_mailbox_base}' => $cf['vmail_mailbox_base'],
	86	'{vmail_userid}' => $cf['vmail_userid'],
	87	'{vmail_groupid}' => $cf['vmail_groupid'],
	88	'{rbl_list}' => $rbl_list);
	89
	90	$postconf_tpl = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/gentoo_postfix.conf.master', 'tpl/gentoo_postfix.conf.master');
	91	$postconf_tpl = strtr($postconf_tpl, $postconf_placeholders);
	92	$postconf_commands = array_filter(explode("\n", $postconf_tpl)); // read and remove empty lines
	93
b67344	94	//* These postconf commands will be executed on installation only
T	95	if($this->is_update == false) {
7fe908	96	$postconf_commands = array_merge($postconf_commands, array(
MC	97	'myhostname = '.$conf['hostname'],
	98	'mydestination = '.$conf['hostname'].', localhost, localhost.localdomain',
	99	'mynetworks = 127.0.0.0/8 [::1]/128'
	100	));
b67344	101	}
7fe908	102
ff1d9a	103	//* Create the header and body check files
cb8c86	104	touch($config_dir.'/header_checks');
W	105	touch($config_dir.'/mime_header_checks');
	106	touch($config_dir.'/nested_header_checks');
	107	touch($config_dir.'/body_checks');
7fe908	108
MC	109
ff1d9a	110	//* Make a backup copy of the main.cf file
cb8c86	111	copy($config_dir.'/main.cf', $config_dir.'/main.cf~');
7fe908	112
ff1d9a	113	//* Executing the postconf commands
cb8c86	114	foreach($postconf_commands as $cmd) {
W	115	$command = "postconf -e '$cmd'";
ff1d9a	116	caselog($command.' &> /dev/null', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command);
cb8c86	117	}
7fe908	118
ff1d9a	119	//* Create the SSL certificate
7fe908	120	if (!stristr($options, 'dont-create-certs'))
cb8c86	121	{
b04e82	122	if(AUTOINSTALL){
TB	123	$command = 'cd '.$config_dir.'; '
35846d	124	."openssl req -new -subj '/C=".escapeshellcmd($autoinstall['ssl_cert_country'])."/ST=".escapeshellcmd($autoinstall['ssl_cert_state'])."/L=".escapeshellcmd($autoinstall['ssl_cert_locality'])."/O=".escapeshellcmd($autoinstall['ssl_cert_organisation'])."/OU=".escapeshellcmd($autoinstall['ssl_cert_organisation_unit'])."/CN=".escapeshellcmd($autoinstall['ssl_cert_common_name'])."' -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509";
b04e82	125	} else {
TB	126	$command = 'cd '.$config_dir.'; '
35846d	127	.'openssl req -new -outform PEM -out smtpd.cert -newkey rsa:4096 -nodes -keyout smtpd.key -keyform PEM -days 3650 -x509';
b04e82	128	}
b51c22	129	exec($command);
7fe908	130
cb8c86	131	$command = 'chmod o= '.$config_dir.'/smtpd.key';
W	132	caselog($command.' &> /dev/null', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command);
	133	}
7fe908	134
ff1d9a	135	//* We have to change the permissions of the courier authdaemon directory to make it accessible for maildrop.
W	136	$command = 'chmod 755 /var/lib/courier/authdaemon/';
	137	if (is_dir('/var/lib/courier/authdaemon')) {
	138	caselog($command.' &> /dev/null', __FILE__, __LINE__, 'EXECUTED: '.$command, 'Failed to execute the command '.$command);
	139	}
7fe908	140
ff1d9a	141	//* Changing maildrop lines in posfix master.cf
cb8c86	142	$configfile = $config_dir.'/master.cf';
W	143	$content = rf($configfile);
	144
7fe908	145	$content = preg_replace('/^#?maildrop/m', 'maildrop', $content);
MC	146	$content = preg_replace('/^#?(\s+)flags=DRhu user=vmail argv=\/usr\/bin\/maildrop -d/m',
	147	'$1flags=DRhu user=vmail argv=/usr/bin/maildrop -d vmail \${extension} \${recipient} \${user} \${nexthop} \${sender}',
	148	$content);
	149
cb8c86	150	$this->write_config_file($configfile, $content);
7fe908	151
ff1d9a	152	//* Writing the Maildrop mailfilter file
615a0a	153	$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/mailfilter.master', 'tpl/mailfilter.master');
cb8c86	154	$content = str_replace('{dist_postfix_vmail_mailbox_base}', $cf['vmail_mailbox_base'], $content);
7fe908	155
cb8c86	156	$this->write_config_file($cf['vmail_mailbox_base'].'/.mailfilter', $content);
7fe908	157
ff1d9a	158	//* Create the directory for the custom mailfilters
7fe908	159	if (!is_dir($cf['vmail_mailbox_base'].'/mailfilters'))
cb8c86	160	{
W	161	$command = 'mkdir '.$cf['vmail_mailbox_base'].'/mailfilters';
ff1d9a	162	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
cb8c86	163	}
7fe908	164
ff1d9a	165	//* Chmod and chown the .mailfilter file
cb8c86	166	$command = 'chown -R '.$cf['vmail_username'].':'.$cf['vmail_groupname'].' '.$cf['vmail_mailbox_base'].'/.mailfilter';
W	167	caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	168
cb8c86	169	$command = 'chmod -R 600 '.$cf['vmail_mailbox_base'].'/.mailfilter';
W	170	caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	171
cb8c86	172	}
7fe908	173
MC	174	public function configure_saslauthd()
cb8c86	175	{
W	176	global $conf;
7fe908	177
ff1d9a	178	$content = $this->get_template_file('sasl_smtpd.conf', true, true); //* get contents & insert db cred
cb8c86	179	$this->write_config_file($conf['saslauthd']['config_dir'].'/smtpd.conf', $content);
7fe908	180
ff1d9a	181	//* Edit the file saslauthd config file
W	182	$content = rf($conf['saslauthd']['config_file']);
cb8c86	183	$content = preg_replace('/(?<=\n)SASLAUTHD_OPTS="\$\{SASLAUTHD_OPTS\}[^"]+"/', 'SASLAUTHD_OPTS="${SASLAUTHD_OPTS} -a pam -r -c -s 128 -t 30 -n 5"', $content);
7fe908	184
ff1d9a	185	$this->write_config_file($conf['saslauthd']['config_file'], $content);
cb8c86	186	}
7fe908	187
cb8c86	188	public function configure_courier()
7fe908	189	{
MC	190	global $conf;
	191
ff1d9a	192	//* authmysqlrc
W	193	$content = $this->get_template_file('authmysqlrc', true, true); //* get contents & insert db cred
cb8c86	194	$this->write_config_file($conf['courier']['config_dir'].'/authmysqlrc', $content);
7fe908	195
ff1d9a	196	//* authdaemonrc
cb8c86	197	$configfile = $conf['courier']['config_dir'].'/authdaemonrc';
W	198
	199	$content = rf($configfile);
	200	$content = preg_replace('/(?<=\n)authmodulelist="[^"]+"/', "authmodulelist=\"authmysql\"", $content);
	201	$this->write_config_file($configfile, $content);
7fe908	202
ff1d9a	203	//* create certificates
W	204	$command = 'mkimapdcert';
	205	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	206
ff1d9a	207	$command = 'mkpop3dcert';
cb8c86	208	caselog($command." &> /dev/null", __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	209	}
MC	210
	211	public function configure_dovecot()
	212	{
	213	global $conf;
	214
	215	$config_dir = $conf['dovecot']['config_dir'];
	216
	217	$configfile = $conf['postfix']['config_dir'].'/master.cf';
	218
	219	if(is_file($configfile)) {
ff1d9a	220	copy($configfile, $configfile.'~2');
W	221	}
	222	if(is_file($configfile.'~2')) {
	223	chmod($configfile.'~2', 0400);
	224	}
7fe908	225
MC	226	//* Configure master.cf and add a line for deliver
ff1d9a	227	$content = rf($configfile);
7fe908	228
MC	229	if(!stristr($content, 'dovecot/deliver')) {
013ae4	230	$deliver_content = 'dovecot unix - n n - - pipe'."\n".' flags=DROhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${user}@${nexthop}';
7fe908	231	af($conf['postfix']['config_dir'].'/master.cf', $deliver_content);
ff1d9a	232	}
W	233	unset($content);
	234	unset($deliver_content);
	235	unset($configfile);
7fe908	236
ff1d9a	237	//* Reconfigure postfix to use dovecot authentication
W	238	$postconf_commands = array (
7fe908	239	'dovecot_destination_recipient_limit = 1',
MC	240	'virtual_transport = dovecot',
	241	'smtpd_sasl_type = dovecot',
	242	'smtpd_sasl_path = private/auth'
ff1d9a	243	);
7fe908	244
ff1d9a	245	//* Make a backup copy of the main.cf file
7fe908	246	copy($conf['postfix']['config_dir'].'/main.cf', $conf['postfix']['config_dir'].'/main.cf~3');
MC	247
	248	//* Executing the postconf commands
	249	foreach($postconf_commands as $cmd)
ff1d9a	250	{
W	251	$command = "postconf -e '$cmd'";
	252	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	253	}
7fe908	254
ff1d9a	255	//* copy dovecot.conf
W	256	$configfile = $config_dir.'/dovecot.conf';
	257	$content = $this->get_template_file('dovecot.conf', true);
	258	$this->write_config_file($configfile, $content);
7fe908	259
ff1d9a	260	//* dovecot-sql.conf
W	261	$configfile = $config_dir.'/dovecot-sql.conf';
	262	$content = $this->get_template_file('debian_dovecot-sql.conf', true, true);
	263	$this->write_config_file($configfile, $content);
7fe908	264	}
MC	265
cb8c86	266	public function configure_spamassassin()
7fe908	267	{
cb8c86	268	return true;
7fe908	269	}
MC	270
cb8c86	271	public function configure_getmail()
7fe908	272	{
cb8c86	273	global $conf;
7fe908	274
cb8c86	275	$config_dir = $conf['getmail']['config_dir'];
7fe908	276
cb8c86	277	if (!is_dir($config_dir)) {
ff1d9a	278	exec('mkdir -p '.escapeshellcmd($config_dir));
cb8c86	279	}
W	280
	281	$command = "useradd -d $config_dir ".$conf['getmail']['user'];
	282	if (!is_user('getmail')) {
	283	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	284	}
7fe908	285
cb8c86	286	$command = "chown -R getmail $config_dir";
W	287	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	288
cb8c86	289	$command = "chmod -R 700 $config_dir";
W	290	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	291
ff1d9a	292	//* Getmail will be run from cron. In order to have access to cron the getmail user needs to be part of the cron group.
cb8c86	293	$command = "gpasswd -a getmail " . $conf['cron']['group'];
W	294	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	295	}
7fe908	296
MC	297	public function configure_amavis()
	298	{
cb8c86	299	global $conf;
7fe908	300
ff1d9a	301	//* Amavisd-new user config file
cb8c86	302	$conf_file = 'amavisd-ispconfig.conf';
W	303	$conf_path = dirname($conf['amavis']['config_file']) . '/' . $conf_file;
7fe908	304
ff1d9a	305	$content = $this->get_template_file($conf_file, true, true); //* get contents & insert db cred
cb8c86	306	$this->write_config_file($conf_path, $content);
7fe908	307
ff1d9a	308	//* Activate config directory in default file
cb8c86	309	$amavis_conf = rf($conf['amavis']['config_file']);
7fe908	310	if (stripos($amavis_conf, $conf_path) === false)
cb8c86	311	{
ff1d9a	312	$amavis_conf = preg_replace('/^(1;.*)$/m', "include_config_files('$conf_path');\n$1", $amavis_conf);
cb8c86	313	$this->write_config_file($conf['amavis']['config_file'], $amavis_conf);
W	314	}
7fe908	315
ff1d9a	316	//* Adding the amavisd commands to the postfix configuration
cb8c86	317	$postconf_commands = array (
W	318	'content_filter = amavis:[127.0.0.1]:10024',
	319	'receive_override_options = no_address_mappings'
	320	);
7fe908	321
MC	322	foreach($postconf_commands as $cmd) {
cb8c86	323	$command = "postconf -e '$cmd'";
ff1d9a	324	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
cb8c86	325	}
7fe908	326
ff1d9a	327	//* Append the configuration for amavisd to the master.cf file
W	328	$content = rf($conf['postfix']['config_dir'].'/master.cf');
7fe908	329
MC	330	if(!stristr($content, '127.0.0.1:10025')) //* Only add the content if we had not addded it before
	331	{
cb8c86	332	unset($content);
ff1d9a	333	$content = $this->get_template_file('master_cf_amavis', true);
W	334	af($conf['postfix']['config_dir'].'/master.cf', $content);
cb8c86	335	}
W	336	unset($content);
7fe908	337
ff1d9a	338	//* Add the clamav user to the amavis group
cb8c86	339	exec('usermod -a -G amavis clamav');
7fe908	340	}
MC	341
	342	public function configure_pureftpd()
	343	{
cb8c86	344	global $conf;
7fe908	345
cb8c86	346	//* configure pure-ftpd for MySQL authentication against the ispconfig database
ff1d9a	347	$content = $this->get_template_file('pureftpd_mysql.conf', true, true); //* get contents & insert db cred
W	348	$content = str_replace('{server_id}', $conf['server_id'], $content);
7fe908	349
cb8c86	350	$this->write_config_file($conf['pureftpd']['mysql_config_file'], $content, 600, 'root', 'root');
7fe908	351
ff1d9a	352	//* enable pure-ftpd and server settings
cb8c86	353	$content = rf($conf["pureftpd"]["config_file"]);
7fe908	354
cb8c86	355	$content = preg_replace('/#?IS_CONFIGURED="(?:yes\|no)"/', 'IS_CONFIGURED="yes"', $content);
W	356	$content = str_replace('AUTH="-l unix"', 'AUTH="-l mysql:'.$conf['pureftpd']['mysql_config_file'].'"', $content);
7fe908	357
ff1d9a	358	//* Logging defaults to syslog's ftp facility. Override this behaviour for better compatibility with debian/ubuntu
W	359	//* and specify the format.
cb8c86	360	$logdir = '/var/log/pure-ftpd';
W	361	if (!is_dir($logdir)) {
	362	mkdir($logdir, 0755, true);
	363	}
7fe908	364
ff1d9a	365	/**
cb8c86	366	* @link http://download.pureftpd.org/pub/pure-ftpd/doc/README
W	367	* -b brokenclientscompatibility
	368	* -A chrooteveryone
	369	* -E noanonymous
	370	* -O altlog <format>:<log file>
	371	* -Z customerproof (Add safe guards against common customer mistakes ie. like chmod 0 on their own files)
7fe908	372	* -D displaydotfiles
ff1d9a	373	* -H dontresolve
cb8c86	374	*/
7fe908	375
MC	376
ff1d9a	377	$content = preg_replace('/MISC_OTHER="[^"]+"/', 'MISC_OTHER="-b -A -E -Z -D -H -O clf:'.$logdir.'/transfer.log"', $content);
7fe908	378
ff1d9a	379	$this->write_config_file($conf['pureftpd']['config_file'], $content);
7fe908	380	}
MC	381
	382	public function configure_powerdns()
cb8c86	383	{
W	384	global $conf;
7fe908	385
cb8c86	386	//* Create the database
W	387	if(!$this->db->query('CREATE DATABASE IF NOT EXISTS '.$conf['powerdns']['database'].' DEFAULT CHARACTER SET '.$conf['mysql']['charset'])) {
	388	$this->error('Unable to create MySQL database: '.$conf['powerdns']['database'].'.');
	389	}
7fe908	390
cb8c86	391	//* Create the ISPConfig database user in the local database
7fe908	392	$query = 'GRANT ALL ON `'.$conf['powerdns']['database'].'` . * TO \''.$conf['mysql']['ispconfig_user'].'\'@\'localhost\';';
cb8c86	393	if(!$this->db->query($query)) {
W	394	$this->error('Unable to create user for powerdns database Error: '.$this->db->errorMessage);
	395	}
7fe908	396
cb8c86	397	//* Reload database privelages
W	398	$this->db->query('FLUSH PRIVILEGES;');
7fe908	399
cb8c86	400	//* load the powerdns databse dump
W	401	if($conf['mysql']['admin_password'] == '') {
7fe908	402	caselog("mysql --default-character-set=".$conf['mysql']['charset']." -h '".$conf['mysql']['host']."' -u '".$conf['mysql']['admin_user']."' '".$conf['powerdns']['database']."' < '".ISPC_INSTALL_ROOT."/install/sql/powerdns.sql' &> /dev/null",
MC	403	__FILE__, __LINE__, 'read in ispconfig3.sql', 'could not read in powerdns.sql');
cb8c86	404	} else {
7fe908	405	caselog("mysql --default-character-set=".$conf['mysql']['charset']." -h '".$conf['mysql']['host']."' -u '".$conf['mysql']['admin_user']."' -p'".$conf['mysql']['admin_password']."' '".$conf['powerdns']['database']."' < '".ISPC_INSTALL_ROOT."/install/sql/powerdns.sql' &> /dev/null",
MC	406	__FILE__, __LINE__, 'read in ispconfig3.sql', 'could not read in powerdns.sql');
cb8c86	407	}
7fe908	408
cb8c86	409	//* Create the powerdns config file
ff1d9a	410	$content = $this->get_template_file('pdns.local', true, true); //* get contents & insert db cred
cb8c86	411	$content = str_replace('{powerdns_database}', $conf['powerdns']['database'], $content);
7fe908	412
cb8c86	413	$this->write_config_file($conf["powerdns"]["config_dir"].'/'.$conf["powerdns"]["config_file"], $content, 600, 'root', 'root');
W	414
ff1d9a	415	//* Create symlink to init script to start the correct config file
cb8c86	416	if( !is_link($conf['init_scripts'].'/'.$conf['powerdns']['init_script']) ) {
W	417	symlink($conf['init_scripts'].'/pdns', $conf['init_scripts'].'/'.$conf['powerdns']['init_script']);
	418	}
	419	}
7fe908	420
d090db	421	public function configure_bind() {
W	422	global $conf;
	423
7fe908	424	//* Check if the zonefile directory has a slash at the end
MC	425	$content=$conf['bind']['bind_zonefiles_dir'];
	426	if(substr($content, -1, 1) != '/') {
	427	$content .= '/';
d090db	428	}
7fe908	429
d090db	430	//* New default format of named.conf uses views. Check which version the system is using and include our zones file.
W	431	$named_conf = rf($conf['bind']['named_conf_path']);
7fe908	432	if (stripos($named_conf, 'include "'.$conf['bind']['named_conf_local_path'].'";') === false)
d090db	433	{
W	434	preg_match_all("/(?<=\n)view \"(?:public\|internal)\" in \{.*\n\};/Us", $named_conf, $views);
	435	if (count($views[0]) == 2) {
	436	foreach ($views[0] as $view) {
	437	$named_conf = str_replace($view, substr($view, 0, -2)."include \"{$conf['bind']['named_conf_local_path']}\";\n};", $named_conf);
	438	}
7fe908	439
d090db	440	wf($conf['bind']['named_conf_path'], $named_conf);
W	441	}
	442	else {
	443	af($conf['bind']['named_conf_path'], 'include "'.$conf['bind']['named_conf_local_path'].'";');
	444	}
	445	}
	446	}
7fe908	447
cb8c86	448	public function configure_apache()
7fe908	449	{
cb8c86	450	global $conf;
7fe908	451
91324a	452	if($conf['apache']['installed'] == false) return;
ff1d9a	453	//* Create the logging directory for the vhost logfiles
W	454	if (!is_dir($conf['ispconfig_log_dir'].'/httpd')) {
	455	mkdir($conf['ispconfig_log_dir'].'/httpd', 0755, true);
cb8c86	456	}
7fe908	457
MC	458	if (is_file($conf['suphp']['config_file']))
cb8c86	459	{
W	460	$content = rf($conf['suphp']['config_file']);
7fe908	461
ff1d9a	462	if (!preg_match('\|^x-httpd-suphp=php:/usr/bin/php-cgi$\|m', $content))
W	463	{
7fe908	464	$content = preg_replace('/;Handler for php-scripts/', ";Handler for php-scripts\nx-httpd-suphp=php:/usr/bin/php-cgi", $content);
MC	465	$content = preg_replace('/;?umask=\d+/', 'umask=0022', $content);
ff1d9a	466	}
7fe908	467
cb8c86	468	$this->write_config_file($conf['suphp']['config_file'], $content);
W	469	}
7fe908	470
ff1d9a	471	//* Enable ISPConfig default vhost settings
cb8c86	472	$default_vhost_path = $conf['apache']['vhost_conf_dir'].'/'.$conf['apache']['vhost_default'];
7fe908	473	if (is_file($default_vhost_path))
cb8c86	474	{
W	475	$content = rf($default_vhost_path);
7fe908	476
cb8c86	477	$content = preg_replace('/^#?\sNameVirtualHost.$/m', 'NameVirtualHost *:80', $content);
W	478	$content = preg_replace('/<VirtualHost[^>]+>/', '<VirtualHost *:80>', $content);
7fe908	479
cb8c86	480	$this->write_config_file($default_vhost_path, $content);
W	481	}
7fe908	482
ff1d9a	483	//* Generate default ssl certificates
cb8c86	484	if (!is_dir($conf['apache']['ssl_dir'])) {
W	485	mkdir($conf['apache']['ssl_dir']);
	486	}
7fe908	487
MC	488	if ($conf['services']['mail'] == true)
cb8c86	489	{
W	490	copy($conf['postfix']['config_dir']."/smtpd.key", $conf['apache']['ssl_dir']."/server.key");
	491	copy($conf['postfix']['config_dir']."/smtpd.cert", $conf['apache']['ssl_dir']."/server.crt");
	492	}
	493	else
	494	{
	495	if (!is_file($conf['apache']['ssl_dir'] . '/server.crt')) {
	496	exec("openssl req -new -outform PEM -out {$conf['apache']['ssl_dir']}/server.crt -newkey rsa:2048 -nodes -keyout {$conf['apache']['ssl_dir']}/server.key -keyform PEM -days 365 -x509");
	497	}
	498	}
7fe908	499
MC	500
	501
ff1d9a	502	//* Copy the ISPConfig configuration include
ccbf14	503	/*
cb8c86	504	$content = $this->get_template_file('apache_ispconfig.conf', true);
7fe908	505
cb8c86	506	$records = $this->db->queryAllRecords("SELECT * FROM server_ip WHERE server_id = ".$conf["server_id"]." AND virtualhost = 'y'");
7fe908	507	if(is_array($records) && count($records) > 0)
cb8c86	508	{
W	509	foreach($records as $rec) {
	510	$content .= "NameVirtualHost ".$rec["ip_address"].":80\n";
	511	$content .= "NameVirtualHost ".$rec["ip_address"].":443\n";
	512	}
	513	}
7fe908	514
cb8c86	515	$this->write_config_file($conf['apache']['vhost_conf_dir'].'/000-ispconfig.conf', $content);
ccbf14	516	*/
TB	517
	518	$tpl = new tpl('apache_ispconfig.conf.master');
	519	$tpl->setVar('apache_version',getapacheversion());
	520
	521	$records = $this->db->queryAllRecords('SELECT * FROM '.$conf['mysql']['master_database'].'.server_ip WHERE server_id = '.$conf['server_id']." AND virtualhost = 'y'");
	522	$ip_addresses = array();
	523
	524	if(is_array($records) && count($records) > 0) {
	525	foreach($records as $rec) {
	526	if($rec['ip_type'] == 'IPv6') {
	527	$ip_address = '['.$rec['ip_address'].']';
	528	} else {
	529	$ip_address = $rec['ip_address'];
	530	}
	531	$ports = explode(',', $rec['virtualhost_port']);
	532	if(is_array($ports)) {
	533	foreach($ports as $port) {
	534	$port = intval($port);
	535	if($port > 0 && $port < 65536 && $ip_address != '') {
	536	$ip_addresses[] = array('ip_address' => $ip_address, 'port' => $port);
	537	}
	538	}
	539	}
	540	}
	541	}
855547	542
3de838	543	if(count($ip_addresses) > 0) $tpl->setLoop('ip_adresses',$ip_addresses);
ccbf14	544
TB	545	wf($conf['apache']['vhost_conf_dir'].'/000-ispconfig.conf', $tpl->grab());
	546	unset($tpl);
7fe908	547
ff1d9a	548	//* Gentoo by default does not include .vhost files. Add include line to config file.
cb8c86	549	$content = rf($conf['apache']['config_file']);
W	550	if ( strpos($content, 'Include /etc/apache2/vhosts.d/*.vhost') === false ) {
7fe908	551	$content = preg_replace('\|(Include /etc/apache2/vhosts.d/\.conf)\|', "$1\nInclude /etc/apache2/vhosts.d/.vhost", $content);
cb8c86	552	}
7fe908	553
cb8c86	554	$this->write_config_file($conf['apache']['config_file'], $content);
7fe908	555
ff1d9a	556	//* make sure that webalizer finds its config file when it is directly in /etc
7fe908	557	if(is_file('/etc/webalizer.conf') && !is_dir('/etc/webalizer'))
cb8c86	558	{
W	559	mkdir('/etc/webalizer', 0755);
	560	symlink('/etc/webalizer.conf', '/etc/webalizer/webalizer.conf');
	561	}
7fe908	562
MC	563	if(is_file('/etc/webalizer/webalizer.conf')) //* Change webalizer mode to incremental
	564	{
	565	replaceLine('/etc/webalizer/webalizer.conf', '#IncrementalName', 'IncrementalName webalizer.current', 0, 0);
	566	replaceLine('/etc/webalizer/webalizer.conf', '#Incremental', 'Incremental yes', 0, 0);
	567	replaceLine('/etc/webalizer/webalizer.conf', '#HistoryName', 'HistoryName webalizer.hist', 0, 0);
cb8c86	568	}
7fe908	569
ff1d9a	570	//* add a sshusers group
7fe908	571	if (!is_group('sshusers'))
cb8c86	572	{
W	573	$command = 'groupadd sshusers';
	574	caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	575	}
7fe908	576	}
MC	577
	578	public function configure_apps_vhost()
cb8c86	579	{
W	580	global $conf;
7fe908	581
cb8c86	582	//* Create the ispconfig apps vhost user and group
165152	583	if($conf['apache']['installed'] == true){
91324a	584	$apps_vhost_user = escapeshellcmd($conf['web']['apps_vhost_user']);
F	585	$apps_vhost_group = escapeshellcmd($conf['web']['apps_vhost_group']);
	586	$install_dir = escapeshellcmd($conf['web']['website_basedir'].'/apps');
7fe908	587
91324a	588	$command = 'groupadd '.$apps_vhost_user;
F	589	if ( !is_group($apps_vhost_group) ) {
	590	caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	591	}
7fe908	592
91324a	593	$command = "useradd -g '$apps_vhost_group' -d $install_dir $apps_vhost_group";
F	594	if ( !is_user($apps_vhost_user) ) {
	595	caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	596	}
7fe908	597
91324a	598	$command = 'adduser '.$conf['apache']['user'].' '.$apps_vhost_group;
F	599	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	600
99b55b	601	if(!@is_dir($install_dir)){
91324a	602	mkdir($install_dir, 0755, true);
99b55b	603	} else {
F	604	chmod($install_dir, 0755);
91324a	605	}
F	606	chown($install_dir, $apps_vhost_user);
	607	chgrp($install_dir, $apps_vhost_group);
7fe908	608
91324a	609	//* Copy the apps vhost file
F	610	$vhost_conf_dir = $conf['apache']['vhost_conf_dir'];
	611	$vhost_conf_enabled_dir = $conf['apache']['vhost_conf_enabled_dir'];
	612	$apps_vhost_servername = ($conf['web']['apps_vhost_servername'] == '') ? '' : 'ServerName '.$conf['web']['apps_vhost_servername'];
7fe908	613
91324a	614	//* Dont just copy over the virtualhost template but add some custom settings
F	615	$content = $this->get_template_file('apache_apps.vhost', true);
7fe908	616
91324a	617	$content = str_replace('{apps_vhost_ip}', $conf['web']['apps_vhost_ip'], $content);
F	618	$content = str_replace('{apps_vhost_port}', $conf['web']['apps_vhost_port'], $content);
	619	$content = str_replace('{apps_vhost_dir}', $conf['web']['website_basedir'].'/apps', $content);
	620	$content = str_replace('{website_basedir}', $conf['web']['website_basedir'], $content);
	621	$content = str_replace('{apps_vhost_servername}', $apps_vhost_servername, $content);
7fe908	622
91324a	623	//* comment out the listen directive if port is 80 or 443
F	624	if($conf['web']['apps_vhost_ip'] == 80 or $conf['web']['apps_vhost_ip'] == 443) {
	625	$content = str_replace('{vhost_port_listen}', '#', $content);
	626	} else {
	627	$content = str_replace('{vhost_port_listen}', '', $content);
	628	}
7fe908	629
91324a	630	$this->write_config_file("$vhost_conf_dir/apps.vhost", $content);
7fe908	631
MC	632	//if ( !is_file($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter') )
cc6568	633	//{
7fe908	634	$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_apps_fcgi_starter.master', 'tpl/apache_apps_fcgi_starter.master');
MC	635	$content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content);
	636	$content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content);
	637	mkdir($conf['web']['website_basedir'].'/php-fcgi-scripts/apps', 0755, true);
	638	//copy('tpl/apache_apps_fcgi_starter.master',$conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter');
	639	wf($conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter', $content);
	640	exec('chmod +x '.$conf['web']['website_basedir'].'/php-fcgi-scripts/apps/.php-fcgi-starter');
	641	exec('chown -R ispapps:ispapps '.$conf['web']['website_basedir'].'/php-fcgi-scripts/apps');
	642
cc6568	643	//}
91324a	644	}
165152	645	if($conf['nginx']['installed'] == true){
91324a	646	$apps_vhost_user = escapeshellcmd($conf['web']['apps_vhost_user']);
F	647	$apps_vhost_group = escapeshellcmd($conf['web']['apps_vhost_group']);
	648	$install_dir = escapeshellcmd($conf['web']['website_basedir'].'/apps');
	649
	650	$command = 'groupadd '.$apps_vhost_user;
	651	if(!is_group($apps_vhost_group)) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	652
	653	$command = 'useradd -g '.$apps_vhost_group.' -d '.$install_dir.' '.$apps_vhost_group;
	654	if(!is_user($apps_vhost_user)) caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	655
	656
	657	$command = 'adduser '.$conf['nginx']['user'].' '.$apps_vhost_group;
	658	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	659
6e2d48	660	if(!@is_dir($install_dir)){
F	661	mkdir($install_dir, 0755, true);
	662	} else {
	663	chmod($install_dir, 0755);
	664	}
91324a	665	chown($install_dir, $apps_vhost_user);
F	666	chgrp($install_dir, $apps_vhost_group);
	667
	668	//* Copy the apps vhost file
	669	$vhost_conf_dir = $conf['nginx']['vhost_conf_dir'];
	670	$vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir'];
	671	$apps_vhost_servername = ($conf['web']['apps_vhost_servername'] == '')?'_':$conf['web']['apps_vhost_servername'];
	672
	673	// Dont just copy over the virtualhost template but add some custom settings
615a0a	674	$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_apps.vhost.master', 'tpl/nginx_apps.vhost.master');
7fe908	675
91324a	676	if($conf['web']['apps_vhost_ip'] == '_default_'){
F	677	$apps_vhost_ip = '';
	678	} else {
	679	$apps_vhost_ip = $conf['web']['apps_vhost_ip'].':';
	680	}
7fe908	681
ca0b77	682	$socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']);
7fe908	683	if(substr($socket_dir, -1) != '/') $socket_dir .= '/';
ca0b77	684	if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir);
F	685	$fpm_socket = $socket_dir.'apps.sock';
8ab3cd	686	$cgi_socket = escapeshellcmd($conf['nginx']['cgi_socket']);
91324a	687
F	688	$content = str_replace('{apps_vhost_ip}', $apps_vhost_ip, $content);
	689	$content = str_replace('{apps_vhost_port}', $conf['web']['apps_vhost_port'], $content);
	690	$content = str_replace('{apps_vhost_dir}', $conf['web']['website_basedir'].'/apps', $content);
	691	$content = str_replace('{apps_vhost_servername}', $apps_vhost_servername, $content);
ca0b77	692	//$content = str_replace('{fpm_port}', ($conf['nginx']['php_fpm_start_port']+1), $content);
F	693	$content = str_replace('{fpm_socket}', $fpm_socket, $content);
8ab3cd	694	$content = str_replace('{cgi_socket}', $cgi_socket, $content);
91324a	695
F	696	wf($vhost_conf_dir.'/apps.vhost', $content);
7fe908	697
91324a	698	// PHP-FPM
F	699	// Dont just copy over the php-fpm pool template but add some custom settings
615a0a	700	$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apps_php_fpm_pool.conf.master', 'tpl/apps_php_fpm_pool.conf.master');
91324a	701	$content = str_replace('{fpm_pool}', 'apps', $content);
ca0b77	702	//$content = str_replace('{fpm_port}', ($conf['nginx']['php_fpm_start_port']+1), $content);
F	703	$content = str_replace('{fpm_socket}', $fpm_socket, $content);
91324a	704	$content = str_replace('{fpm_user}', $apps_vhost_user, $content);
F	705	$content = str_replace('{fpm_group}', $apps_vhost_group, $content);
	706	wf($conf['nginx']['php_fpm_pool_dir'].'/apps.conf', $content);
	707
	708	//copy('tpl/nginx_ispconfig.vhost.master', "$vhost_conf_dir/ispconfig.vhost");
	709	//* and create the symlink
7e1cfb	710	if(@is_link($vhost_conf_enabled_dir.'/apps.vhost')) unlink($vhost_conf_enabled_dir.'/apps.vhost');
F	711	if(!@is_link($vhost_conf_enabled_dir.'/000-apps.vhost')) {
7fe908	712	symlink($vhost_conf_dir.'/apps.vhost', $vhost_conf_enabled_dir.'/000-apps.vhost');
91324a	713	}
7fe908	714
cb8c86	715	}
W	716	}
7fe908	717
MC	718	public function install_ispconfig()
	719	{
cb8c86	720	global $conf;
7fe908	721
cb8c86	722	$install_dir = $conf['ispconfig_install_dir'];
7fe908	723
MC	724	//* Create the ISPConfig installation directory
	725	if(!is_dir($install_dir))
cb8c86	726	{
W	727	$command = "mkdir $install_dir";
	728	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	729	}
7fe908	730
ff1d9a	731	//* Create a ISPConfig user and group
7fe908	732	if (!is_group('ispconfig'))
cb8c86	733	{
W	734	$command = 'groupadd ispconfig';
	735	caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	736	}
7fe908	737
MC	738	if (!is_user('ispconfig'))
cb8c86	739	{
W	740	$command = "useradd -g ispconfig -d $install_dir ispconfig";
	741	caselog($command.' &> /dev/null 2> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	742	}
7fe908	743
ff1d9a	744	//* copy the ISPConfig interface part
cb8c86	745	$command = "cp -rf ../interface $install_dir";
W	746	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	747
ff1d9a	748	//* copy the ISPConfig server part
cb8c86	749	$command = "cp -rf ../server $install_dir";
W	750	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	751
MC	752
ff1d9a	753	//* Create the config file for ISPConfig interface
cb8c86	754	$configfile = 'config.inc.php';
ff1d9a	755	$content = $this->get_template_file($configfile, true, true); //* get contents & insert db cred
7fe908	756
cb8c86	757	$content = str_replace('{mysql_master_server_ispconfig_user}', $conf['mysql']['master_ispconfig_user'], $content);
W	758	$content = str_replace('{mysql_master_server_ispconfig_password}', $conf['mysql']['master_ispconfig_password'], $content);
	759	$content = str_replace('{mysql_master_server_database}', $conf['mysql']['master_database'], $content);
	760	$content = str_replace('{mysql_master_server_host}', $conf['mysql']['master_host'], $content);
7fe908	761
cb8c86	762	$content = str_replace('{server_id}', $conf['server_id'], $content);
W	763	$content = str_replace('{ispconfig_log_priority}', $conf['ispconfig_log_priority'], $content);
	764	$content = str_replace('{language}', $conf['language'], $content);
8cf78b	765	$content = str_replace('{timezone}', $conf['timezone'], $content);
41eaa8	766	$content = str_replace('{theme}', $conf['theme'], $content);
992797	767	$content = str_replace('{language_file_import_enabled}', ($conf['language_file_import_enabled'] == true)?'true':'false', $content);
7fe908	768
cb8c86	769	$this->write_config_file("$install_dir/interface/lib/$configfile", $content);
7fe908	770
ff1d9a	771	//* Create the config file for ISPConfig server
cb8c86	772	$this->write_config_file("$install_dir/server/lib/$configfile", $content);
7fe908	773
fb3a98	774	//* Create the config file for remote-actions (but only, if it does not exist, because
T	775	// the value is a autoinc-value and so changed by the remoteaction_core_module
ff1d9a	776	if (!file_exists($install_dir.'/server/lib/remote_action.inc.php')) {
W	777	$content = '<?php' . "\n" . '$maxid_remote_action = 0;' . "\n" . '?>';
fb3a98	778	wf($install_dir.'/server/lib/remote_action.inc.php', $content);
ff1d9a	779	}
7fe908	780
MC	781	// Enable the server modules and plugins.
cb8c86	782	// TODO: Implement a selector which modules and plugins shall be enabled.
W	783	$dir = $install_dir.'/server/mods-available/';
	784	if (is_dir($dir)) {
	785	if ($dh = opendir($dir)) {
	786	while (($file = readdir($dh)) !== false) {
7fe908	787	if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') {
MC	788	include_once $install_dir.'/server/mods-available/'.$file;
	789	$module_name = substr($file, 0, -8);
cb8c86	790	$tmp = new $module_name;
W	791	if($tmp->onInstall()) {
ff1d9a	792	if(!@is_link($install_dir.'/server/mods-enabled/'.$file)) {
W	793	@symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-enabled/'.$file);
	794	// @symlink($install_dir.'/server/mods-available/'.$file, '../mods-enabled/'.$file);
	795	}
cb8c86	796	if (strpos($file, '_core_module') !== false) {
ff1d9a	797	if(!@is_link($install_dir.'/server/mods-core/'.$file)) {
W	798	@symlink($install_dir.'/server/mods-available/'.$file, $install_dir.'/server/mods-core/'.$file);
	799	// @symlink($install_dir.'/server/mods-available/'.$file, '../mods-core/'.$file);
	800	}
cb8c86	801	}
W	802	}
	803	unset($tmp);
	804	}
	805	}
	806	closedir($dh);
	807	}
	808	}
ff1d9a	809
cb8c86	810	$dir = $install_dir.'/server/plugins-available/';
W	811	if (is_dir($dir)) {
	812	if ($dh = opendir($dir)) {
	813	while (($file = readdir($dh)) !== false) {
91324a	814	if($conf['apache']['installed'] == true && $file == 'nginx_plugin.inc.php') continue;
F	815	if($conf['nginx']['installed'] == true && $file == 'apache2_plugin.inc.php') continue;
7fe908	816	if($file != '.' && $file != '..' && substr($file, -8, 8) == '.inc.php') {
MC	817	include_once $install_dir.'/server/plugins-available/'.$file;
	818	$plugin_name = substr($file, 0, -8);
cb8c86	819	$tmp = new $plugin_name;
7fe908	820	if(method_exists($tmp, 'onInstall') && $tmp->onInstall()) {
ff1d9a	821	if(!@is_link($install_dir.'/server/plugins-enabled/'.$file)) {
W	822	@symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-enabled/'.$file);
	823	}
cb8c86	824	if (strpos($file, '_core_plugin') !== false) {
ff1d9a	825	if(!@is_link($install_dir.'/server/plugins-core/'.$file)) {
W	826	@symlink($install_dir.'/server/plugins-available/'.$file, $install_dir.'/server/plugins-core/'.$file);
	827	}
cb8c86	828	}
W	829	}
	830	unset($tmp);
	831	}
	832	}
	833	closedir($dh);
	834	}
	835	}
7fe908	836
ff1d9a	837	//* Update the server config
cb8c86	838	$mail_server_enabled = ($conf['services']['mail'])?1:0;
W	839	$web_server_enabled = ($conf['services']['web'])?1:0;
	840	$dns_server_enabled = ($conf['services']['dns'])?1:0;
	841	$file_server_enabled = ($conf['services']['file'])?1:0;
	842	$db_server_enabled = ($conf['services']['db'])?1:0;
	843	$vserver_server_enabled = ($conf['services']['vserver'])?1:0;
7fe908	844
MC	845	$sql = "UPDATE `server` SET mail_server = '$mail_server_enabled', web_server = '$web_server_enabled', dns_server = '$dns_server_enabled', file_server = '$file_server_enabled', db_server = '$db_server_enabled', vserver_server = '$vserver_server_enabled' WHERE server_id = ".intval($conf['server_id']);
	846
cb8c86	847	if($conf['mysql']['master_slave_setup'] == 'y') {
W	848	$this->dbmaster->query($sql);
	849	$this->db->query($sql);
	850	} else {
	851	$this->db->query($sql);
	852	}
7fe908	853
3e0fc8	854	// chown install dir to root and chmod 755
TB	855	$command = 'chown root:root '.$install_dir;
	856	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	857	$command = 'chmod 755 '.$install_dir;
cb8c86	858	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
W	859
fa029b	860	//* Chmod the files and directories in the install dir
3e0fc8	861	$command = 'chmod -R 750 '.$install_dir.'/*';
TB	862	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	863
	864	//* chown the interface files to the ispconfig user and group
	865	$command = 'chown -R ispconfig:ispconfig '.$install_dir.'/interface';
	866	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	867
	868	//* chown the server files to the root user and group
	869	$command = 'chown -R root:root '.$install_dir.'/server';
cb8c86	870	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
fa029b	871
TB	872	//* chown the security files to the root user and group
	873	$command = 'chown -R root:root '.$install_dir.'/security';
	874	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	875
	876	//* chown the security directory and security_settings.ini to root:ispconfig
	877	$command = 'chown root:ispconfig '.$install_dir.'/security/security_settings.ini';
	878	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	879	$command = 'chown root:ispconfig '.$install_dir.'/security';
	880	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	881
ff1d9a	882	//* Make the global language file directory group writable
cb8c86	883	exec("chmod -R 770 $install_dir/interface/lib/lang");
7fe908	884
ff1d9a	885	//* Make the temp directory for language file exports writable
W	886	if(is_dir($install_dir.'/interface/web/temp')) {
	887	exec("chmod -R 770 $install_dir/interface/web/temp");
	888	}
7fe908	889
MC	890	//* Make all interface language file directories group writable
cb8c86	891	$handle = @opendir($install_dir.'/interface/web');
7fe908	892	while ($file = @readdir($handle)) {
MC	893	if ($file != '.' && $file != '..') {
	894	if(@is_dir($install_dir.'/interface/web'.'/'.$file.'/lib/lang')) {
cb8c86	895	$handle2 = opendir($install_dir.'/interface/web'.'/'.$file.'/lib/lang');
7fe908	896	chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang', 0770);
MC	897	while ($lang_file = @readdir($handle2)) {
cb8c86	898	if ($lang_file != '.' && $lang_file != '..') {
7fe908	899	chmod($install_dir.'/interface/web'.'/'.$file.'/lib/lang/'.$lang_file, 0770);
cb8c86	900	}
W	901	}
	902	}
	903	}
	904	}
7fe908	905
477d4e	906	//* Make the APS directories group writable
T	907	exec("chmod -R 770 $install_dir/interface/web/sites/aps_meta_packages");
	908	exec("chmod -R 770 $install_dir/server/aps_packages");
7fe908	909
MC	910	//* make sure that the server config file (not the interface one) is only readable by the root user
bfcdef	911	chmod($install_dir.'/server/lib/config.inc.php', 0600);
T	912	chown($install_dir.'/server/lib/config.inc.php', 'root');
	913	chgrp($install_dir.'/server/lib/config.inc.php', 'root');
7fe908	914
bfcdef	915	//* Make sure thet the interface config file is readable by user ispconfig only
T	916	chmod($install_dir.'/interface/lib/config.inc.php', 0600);
	917	chown($install_dir.'/interface/lib/config.inc.php', 'ispconfig');
	918	chgrp($install_dir.'/interface/lib/config.inc.php', 'ispconfig');
ff1d9a	919
W	920	chmod($install_dir.'/server/lib/remote_action.inc.php', 0600);
	921	chown($install_dir.'/server/lib/remote_action.inc.php', 'root');
	922	chgrp($install_dir.'/server/lib/remote_action.inc.php', 'root');
	923
	924	if(@is_file($install_dir.'/server/lib/mysql_clientdb.conf')) {
	925	chmod($install_dir.'/server/lib/mysql_clientdb.conf', 0600);
	926	chown($install_dir.'/server/lib/mysql_clientdb.conf', 'root');
	927	chgrp($install_dir.'/server/lib/mysql_clientdb.conf', 'root');
cb8c86	928	}
7fe908	929
8cf78b	930	if(is_dir($install_dir.'/interface/invoices')) {
e94a9f	931	exec('chmod -R 770 '.escapeshellarg($install_dir.'/interface/invoices'));
T	932	exec('chown -R ispconfig:ispconfig '.escapeshellarg($install_dir.'/interface/invoices'));
edf806	933	}
7fe908	934
cb8c86	935	// TODO: FIXME: add the www-data user to the ispconfig group. This is just for testing
W	936	// and must be fixed as this will allow the apache user to read the ispconfig files.
	937	// Later this must run as own apache server or via suexec!
63b369	938	if($conf['apache']['installed'] == true){
F	939	$command = 'usermod -a -G ispconfig '.$conf['apache']['user'];
	940	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
272aec	941	if(is_group('ispapps')){
F	942	$command = 'usermod -a -G ispapps '.$conf['apache']['user'];
	943	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	944	}
63b369	945	}
F	946	if($conf['nginx']['installed'] == true){
	947	$command = 'usermod -a -G ispconfig '.$conf['nginx']['user'];
	948	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
272aec	949	if(is_group('ispapps')){
F	950	$command = 'usermod -a -G ispapps '.$conf['nginx']['user'];
	951	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
	952	}
63b369	953	}
7fe908	954
ff1d9a	955	//* Make the shell scripts executable
cb8c86	956	$command = "chmod +x $install_dir/server/scripts/*.sh";
W	957	caselog($command.' &> /dev/null', __FILE__, __LINE__, "EXECUTED: $command", "Failed to execute the command $command");
7fe908	958
7e1cfb	959	if($conf['apache']['installed'] == true && $this->install_ispconfig_interface == true){
91324a	960	//* Copy the ISPConfig vhost for the controlpanel
F	961	$content = $this->get_template_file("apache_ispconfig.vhost", true);
	962	$content = str_replace('{vhost_port}', $conf['apache']['vhost_port'], $content);
7fe908	963
91324a	964	//* comment out the listen directive if port is 80 or 443
F	965	if ($conf['apache']['vhost_port'] == 80 or $conf['apache']['vhost_port'] == 443) {
	966	$content = str_replace('{vhost_port_listen}', '#', $content);
	967	} else {
	968	$content = str_replace('{vhost_port_listen}', '', $content);
	969	}
7fe908	970
91324a	971	if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) {
F	972	$content = str_replace('{ssl_comment}', '', $content);
	973	} else {
	974	$content = str_replace('{ssl_comment}', '#', $content);
	975	}
10b4c8	976	if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key') && is_file($install_dir.'/interface/ssl/ispserver.bundle')) {
T	977	$content = str_replace('{ssl_bundle_comment}', '', $content);
	978	} else {
	979	$content = str_replace('{ssl_bundle_comment}', '#', $content);
	980	}
7fe908	981
91324a	982	$vhost_path = $conf['apache']['vhost_conf_dir'].'/ispconfig.vhost';
F	983	$this->write_config_file($vhost_path, $content);
7fe908	984
526b99	985	if(!is_file('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter')) {
615a0a	986	$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/apache_ispconfig_fcgi_starter.master', 'tpl/apache_ispconfig_fcgi_starter.master');
526b99	987	$content = str_replace('{fastcgi_bin}', $conf['fastcgi']['fastcgi_bin'], $content);
T	988	$content = str_replace('{fastcgi_phpini_path}', $conf['fastcgi']['fastcgi_phpini_path'], $content);
cc6568	989	@mkdir('/var/www/php-fcgi-scripts/ispconfig', 0755, true);
526b99	990	wf('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', $content);
91324a	991	exec('chmod +x /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter');
F	992	chmod('/var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter', 0755);
7fe908	993	@symlink($install_dir.'/interface/web', '/var/www/ispconfig');
91324a	994	exec('chown -R ispconfig:ispconfig /var/www/php-fcgi-scripts/ispconfig');
F	995	}
cb8c86	996	}
91324a	997
7e1cfb	998	if($conf['nginx']['installed'] == true && $this->install_ispconfig_interface == true){
91324a	999	//* Copy the ISPConfig vhost for the controlpanel
F	1000	$vhost_conf_dir = $conf['nginx']['vhost_conf_dir'];
	1001	$vhost_conf_enabled_dir = $conf['nginx']['vhost_conf_enabled_dir'];
	1002
	1003	// Dont just copy over the virtualhost template but add some custom settings
615a0a	1004	$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/nginx_ispconfig.vhost.master', 'tpl/nginx_ispconfig.vhost.master');
91324a	1005	$content = str_replace('{vhost_port}', $conf['nginx']['vhost_port'], $content);
7fe908	1006
91324a	1007	if(is_file($install_dir.'/interface/ssl/ispserver.crt') && is_file($install_dir.'/interface/ssl/ispserver.key')) {
10b4c8	1008	$content = str_replace('{ssl_on}', ' on', $content);
91324a	1009	$content = str_replace('{ssl_comment}', '', $content);
F	1010	$content = str_replace('{fastcgi_ssl}', 'on', $content);
	1011	} else {
10b4c8	1012	$content = str_replace('{ssl_on}', ' off', $content);
91324a	1013	$content = str_replace('{ssl_comment}', '#', $content);
F	1014	$content = str_replace('{fastcgi_ssl}', 'off', $content);
	1015	}
7fe908	1016
ca0b77	1017	$socket_dir = escapeshellcmd($conf['nginx']['php_fpm_socket_dir']);
7fe908	1018	if(substr($socket_dir, -1) != '/') $socket_dir .= '/';
ca0b77	1019	if(!is_dir($socket_dir)) exec('mkdir -p '.$socket_dir);
F	1020	$fpm_socket = $socket_dir.'ispconfig.sock';
7fe908	1021
ca0b77	1022	//$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content);
F	1023	$content = str_replace('{fpm_socket}', $fpm_socket, $content);
91324a	1024
F	1025	wf($vhost_conf_dir.'/ispconfig.vhost', $content);
7fe908	1026
91324a	1027	unset($content);
7fe908	1028
91324a	1029	// PHP-FPM
F	1030	// Dont just copy over the php-fpm pool template but add some custom settings
615a0a	1031	$content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/php_fpm_pool.conf.master', 'tpl/php_fpm_pool.conf.master');
91324a	1032	$content = str_replace('{fpm_pool}', 'ispconfig', $content);
ca0b77	1033	//$content = str_replace('{fpm_port}', $conf['nginx']['php_fpm_start_port'], $content);
F	1034	$content = str_replace('{fpm_socket}', $fpm_socket, $content);
91324a	1035	$content = str_replace('{fpm_user}', 'ispconfig', $content);
F	1036	$content = str_replace('{fpm_group}', 'ispconfig', $content);
	1037	wf($conf['nginx']['php_fpm_pool_dir'].'/ispconfig.conf', $content);
	1038
	1039	//copy('tpl/nginx_ispconfig.vhost.master', $vhost_conf_dir.'/ispconfig.vhost');
	1040	//* and create the symlink
7e1cfb	1041	if($this->is_update == false) {
91324a	1042	if(@is_link($vhost_conf_enabled_dir.'/ispconfig.vhost')) unlink($vhost_conf_enabled_dir.'/ispconfig.vhost');
F	1043	if(!@is_link($vhost_conf_enabled_dir.'/000-ispconfig.vhost')) {
7fe908	1044	symlink($vhost_conf_dir.'/ispconfig.vhost', $vhost_conf_enabled_dir.'/000-ispconfig.vhost');
91324a	1045	}
F	1046	}
cb8c86	1047	}
7fe908	1048
ff1d9a	1049	//* Install the update script
b34f99	1050	if (is_file('/usr/local/bin/ispconfig_update_from_dev.sh')) {
MC	1051	unlink('/usr/local/bin/ispconfig_update_from_dev.sh');
cb8c86	1052	}
7fe908	1053
b34f99	1054	chown($install_dir.'/server/scripts/update_from_dev.sh', 'root');
MC	1055	chmod($install_dir.'/server/scripts/update_from_dev.sh', 0700);
ff1d9a	1056	chown($install_dir.'/server/scripts/update_from_tgz.sh', 'root');
W	1057	chmod($install_dir.'/server/scripts/update_from_tgz.sh', 0700);
	1058	chown($install_dir.'/server/scripts/ispconfig_update.sh', 'root');
	1059	chmod($install_dir.'/server/scripts/ispconfig_update.sh', 0700);
7fe908	1060
b34f99	1061	if (!is_link('/usr/local/bin/ispconfig_update_from_dev.sh')) {
MC	1062	symlink($install_dir.'/server/scripts/ispconfig_update.sh', '/usr/local/bin/ispconfig_update_from_dev.sh');
cb8c86	1063	}
7fe908	1064
cb8c86	1065	if (!is_link('/usr/local/bin/ispconfig_update.sh')) {
ff1d9a	1066	symlink($install_dir.'/server/scripts/ispconfig_update.sh', '/usr/local/bin/ispconfig_update.sh');
cb8c86	1067	}
7fe908	1068
ff1d9a	1069	//* Make the logs readable for the ispconfig user
cb8c86	1070	if (is_file('/var/log/maillog')) {
W	1071	exec('chmod +r /var/log/maillog');
	1072	}
	1073	if (is_file('/var/log/messages')) {
	1074	exec('chmod +r /var/log/messages');
	1075	}
	1076	if (is_file('/var/log/clamav/clamav.log')) {
	1077	exec('chmod +r /var/log/clamav/clamav.log');
	1078	}
	1079	if (is_file('/var/log/clamav/freshclam.log')) {
	1080	exec('chmod +r /var/log/clamav/freshclam.log');
	1081	}
7fe908	1082
ff1d9a	1083	//* Create the ispconfig log directory
e38d14	1084	if (!is_dir($conf['ispconfig_log_dir'])) {
J	1085	mkdir($conf['ispconfig_log_dir']);
cb8c86	1086	}
e38d14	1087	if (!is_file($conf['ispconfig_log_dir'].'/ispconfig.log')) {
ff1d9a	1088	touch($conf['ispconfig_log_dir'].'/ispconfig.log');
cb8c86	1089	}
7fe908	1090
0799f8	1091	//* Create the ispconfig auth log file and set uid/gid
T	1092	if(!is_file($conf['ispconfig_log_dir'].'/auth.log')) {
	1093	touch($conf['ispconfig_log_dir'].'/auth.log');
	1094	}
	1095	exec('chown ispconfig:ispconfig '. $conf['ispconfig_log_dir'].'/auth.log');
	1096	exec('chmod 660 '. $conf['ispconfig_log_dir'].'/auth.log');
7fe908	1097
ff1d9a	1098	rename($install_dir.'/server/scripts/run-getmail.sh', '/usr/local/bin/run-getmail.sh');
7fe908	1099
ff1d9a	1100	if (is_user('getmail')) {
W	1101	chown('/usr/local/bin/run-getmail.sh', 'getmail');
	1102	}
	1103	chmod('/usr/local/bin/run-getmail.sh', 0744);
7fe908	1104
d71bae	1105	//* Remove Domain module as its functions are available in the client module now
T	1106	if(@is_dir('/usr/local/ispconfig/interface/web/domain')) exec('rm -rf /usr/local/ispconfig/interface/web/domain');
021aec	1107
TB	1108	// Add symlink for patch tool
	1109	if(!is_link('/usr/local/bin/ispconfig_patch')) exec('ln -s /usr/local/ispconfig/server/scripts/ispconfig_patch /usr/local/bin/ispconfig_patch');
7fe908	1110
MC	1111	}
	1112
20218c	1113	}
M	1114
e38d14	1115	?>