X-Git-Url: https://git.stderr.nl/gitweb?a=blobdiff_plain;f=handlers%2Fldap.in;h=6ef9948cf2f7dc5dd6851ce568d8658c67f731fa;hb=4215d06b05dbfef0adf053f67c7839b6ae343810;hp=4d9a3354e117a50759ce961847965908a59685c4;hpb=9def982904afab2afd2514b466893cebb0467569;p=matthijs%2Fupstream%2Fbackupninja-vserver.git diff --git a/handlers/ldap.in b/handlers/ldap.in index 4d9a335..6ef9948 100644 --- a/handlers/ldap.in +++ b/handlers/ldap.in @@ -13,94 +13,142 @@ getconf method ldapsearch getconf passwordfile getconf binddn getconf ldaphost -getconf tls yes +getconf ssl yes +getconf tls no +getconf vsnames -if [ $tls = 'yes' ]; then +if [ $ssl = 'yes' ]; then URLBASE="ldaps" else URLBASE="ldap" fi -status="ok" +### VServers +# If vservers are configured, check that the ones listed in $vsnames do exist. +local usevserver=no +if [ $vservers_are_available = yes ]; then + if [ "$vsnames" = all ]; then + vsnames="$found_vservers" + else + if ! vservers_exist "$vsnames" ; then + fatal "At least one of the vservers listed in vsnames ($vsnames) does not exist." + fi + fi + info "Using vservers '$vsnames'" + usevserver=yes +else + [ -z "$vsnames" ] || warning 'vservers support disabled in backupninja.conf, vsnames configuration line will be ignored' +fi + +[ "$restart" = yes -a "$method" = ldapsearch ] && warning 'restart option should not be used with the ldapsearch method.' -[ -f $conf ] || fatal "slapd config file ($conf) not found" -[ -d $backupdir ] || mkdir -p $backupdir -[ -d $backupdir ] || fatal "Backup directory '$backupdir'" +status="ok" -dbsuffixes=(`@AWK@ 'BEGIN {OFS=":"} /[:space:]*^database[:space:]*\w*/ {db=$2}; /^[:space:]*suffix[:space:]*\w*/ {if (db=="bdb"||db=="ldbm") print db,$2}' $conf|@SED@ -e 's/[" ]//g'`) +make_backup() { + vsname=$1 + if [ -z "$vsname" ]; then + info "Running on host" + vdir="" + vexec="" + else + info "Running on vserver $vsname" + vdir="$VROOTDIR/$vsname" + vexec="$VSERVER $vsname exec" + fi -## LDIF DUMP + dumpdir=`interpolate "$backupdir" "$vsname"` + info "Backing up to dir '$dumpdir'" -if [ "$ldif" == "yes" ]; then - dumpdir="$backupdir" + [ -f $vdir$conf ] || fatal "slapd config file ($conf) not found" [ -d $dumpdir ] || mkdir -p $dumpdir - - if [ "$databases" == 'all' ]; then - dbcount=`grep '^database' $conf | wc -l` - let "dbcount = dbcount - 1" - databases=`seq 0 $dbcount`; - fi - - for db in $databases; do - if [ `expr index "$dbnum" "="` == "0" ]; then - # db is a number, get the suffix. - dbsuffix=${dbsuffixes[$db]/*:/} - else - dbsuffix=$db - fi - # some databases don't have suffix (like monitor), skip these - if [ "$dbsuffix" == "" ]; then - continue; - fi + [ -d $dumpdir ] || fatal "Backup directory '$dumpdir'" + + dbsuffixes=(`@AWK@ 'BEGIN {OFS=":"} /[:space:]*^database[:space:]*\w*/ {db=$2}; /^[:space:]*suffix[:space:]*\w*/ {if (db=="bdb"||db=="hdb"||db="ldbm") print db,$2}' $vdir$conf|@SED@ -e 's/[" ]//g'`) + + ## LDIF DUMP + + if [ "$ldif" == "yes" ]; then + if [ "$databases" == 'all' ]; then + dbcount=`grep '^database' $vdir$conf | wc -l` + let "dbcount = dbcount - 1" + databases=`seq 0 $dbcount`; + fi - if [ "$method" == "slapcat" ]; then - execstr="$SLAPCAT -f $conf -b $dbsuffix" - else - if [ -n "$ldaphost" ]; then - execstr="$LDAPSEARCH -H $URLBASE://$ldaphost -x -L -b ""$dbsuffix"" -D ""$binddn"" -y $passwordfile" + for db in $databases; do + if [ `expr index "$db" "="` == "0" ]; then + # db is a number, get the suffix. + dbsuffix=${dbsuffixes[$db]/*:/} else - execstr="$LDAPSEARCH -x -L -b ""$dbsuffix"" -D ""$binddn"" -y $passwordfile" + dbsuffix=$db fi - [ -f "$passwordfile" ] || fatal "Password file $passwordfile not found. When method is set to ldapsearch, you must also specify a password file." - debug "$execstr" - fi - if [ ! $test ]; then - if [ "$restart" == "yes" ]; then - debug "Shutting down ldap server..." - /etc/init.d/slapd stop + # some databases don't have suffix (like monitor), skip these + if [ "$dbsuffix" == "" ]; then + continue; fi - ext= - if [ "$compress" == "yes" ]; then - ext=".gz" - fi - touch $dumpdir/$dbsuffix.ldif$ext - if [ ! -f $dumpdir/$dbsuffix.ldif$ext ]; then - fatal "Couldn't create ldif dump file: $dumpdir/$dbsuffix.ldif$ext" - fi - - if [ "$compress" == "yes" ]; then - execstr="$execstr | $GZIP > $dumpdir/$dbsuffix.ldif.gz" - else - execstr="$execstr > $dumpdir/$dbsuffix.ldif" - fi - debug "$execstr" - output=`su root -c "$execstr" 2>&1` - code=$? - if [ "$code" == "0" ]; then - debug $output - info "Successfully finished ldif export of $dbsuffix" + if [ "$method" == "slapcat" ]; then + execstr="$SLAPCAT -f $conf -b $dbsuffix" else - warning $output - warning "Failed ldif export of $dbsuffix" + LDAPARGS="" + if [ "$tls" == "yes" ]; then + LDAPARGS="-ZZ" + fi + if [ -n "$ldaphost" ]; then + execstr="$LDAPSEARCH $LDAPARGS -H $URLBASE://$ldaphost -x -L -b ""$dbsuffix"" -D ""$binddn"" -y $passwordfile" + else + execstr="$LDAPSEARCH -H $URLBASE://$ldaphost -x -L -b ""$dbsuffix"" -D ""$binddn"" -y $passwordfile" + fi + [ -f "$vdir$passwordfile" ] || fatal "Password file $vdir$passwordfile not found. When method is set to ldapsearch, you must also specify a password file." + debug "$execstr" fi - - if [ "$restart" == "yes" ]; then - debug "Starting ldap server..." - /etc/init.d/slapd start + if [ ! $test ]; then + if [ "$restart" == "yes" ]; then + debug "Shutting down ldap server..." + $vexec /etc/init.d/slapd stop + fi + + ext= + if [ "$compress" == "yes" ]; then + ext=".gz" + fi + touch $dumpdir/$dbsuffix.ldif$ext + if [ ! -f $dumpdir/$dbsuffix.ldif$ext ]; then + fatal "Couldn't create ldif dump file: $dumpdir/$dbsuffix.ldif$ext" + fi + + if [ "$compress" == "yes" ]; then + execstr="$execstr | $GZIP > $dumpdir/$dbsuffix.ldif.gz" + else + execstr="$execstr > $dumpdir/$dbsuffix.ldif" + fi + # Run inside the vserver if needed + execstr="$vexec $execstr" + debug "$execstr" + output=`su root -c "$execstr" 2>&1` + code=$? + if [ "$code" == "0" ]; then + debug $output + info "Successfully finished ldif export of $dbsuffix" + else + warning $output + warning "Failed ldif export of $dbsuffix" + fi + + if [ "$restart" == "yes" ]; then + debug "Starting ldap server..." + $vexec /etc/init.d/slapd start + fi fi - fi - done + done + fi +} + +if [ $usevserver = yes ]; then + for vserver in $vsnames; do + make_backup $vserver + done +else + make_backup "" fi return 0