-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathreplica_sudos.sh
188 lines (169 loc) · 5.25 KB
/
replica_sudos.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
#!/bin/bash
#===============================================================================
#
# FILE: replica_sudos.sh
#
# USAGE: ./replica_sudos.sh
#
# DESCRIPTION:
#
# OPTIONS: ---
# REQUIREMENTS: ---
# BUGS: ---
# NOTES: ---
# AUTHOR: krbu (), [email protected]
# COMPANY: BU
# VERSION: 1.0
# CREATED: 06/9/2016 16:47:23 PM CEST
# REVISION: ---
#===============================================================================
#set -x
function usage() {
bold=$(tput bold)
none=$(tput sgr0)
echo ""
echo "${bold}Usage: ${0} [OPTIONS...]${none}"
echo ""
echo "${bold}Change Types:${none}"
echo ""
echo "${bold}-u${none} USER User with admin privileges."
echo "${bold}-S${none} SERVERS file with the servers to apply."
echo "${bold}-s${none} SUDOS Comma separated sudo groups list. If this parameter is not specified all files located on /etc/sudoers.d will be processed"
echo ""
echo "${bold}Examples:${none}"
echo ""
echo ""
echo "${bold} ${0} -u user -S servers_list.txt ${none}"
echo ""
echo ""
echo "${bold} ${0} -u user -S servers_list.txt -s monteam,dbateam,unixteam${none}"
echo ""
}
function errors_in_log () {
local LOGFILE=$1
grep -i error ${LOGFILE}
if [[ $? -eq 0 ]]
then
echo $(tput bold) "S'han produït ERRORS en la execució, reviseu el log ${LOGFILE}" $(tput sgr0)
fi
}
function create_tar_file () {
local SUDOS="$@"
if [[ $EUID -ne 0 ]]
then
SUDO="sudo"
fi
for sudo_file in ${SUDOS[@]}
do
${SUDO} tar -rPvf /tmp/sudoers_file.tar /etc/sudoers.d/${sudo_file}
done
${SUDO} chmod 666 /tmp/sudoers_file.tar
if [[ $? -eq 0 ]]; then return 0; else return 1;fi
}
function copy_tar_file () {
scp /tmp/sudoers_file.tar ${USER}@${SERVER}:/tmp/.
if [[ $? -eq 0 ]]; then return 0; else return 1;fi
}
function extract_tar () {
${SUDO} /bin/tar -xPvf /tmp/sudoers_file.tar
if [[ $? -eq 0 ]]; then return 0; else return 1;fi
${SUDO} /bin/rm /tmp/sudoers_file.tar
sudo -l
if [[ $? -eq 0 ]]; then return 0; else return 1;fi
}
function ssh_extract_tar () {
local USER=$1
local SERVER=$2
local SUDO=$3
if EXTRACT=$(ssh -ttt ${USER}@${SERVER} "$(declare -p SUDO; declare -f extract_tar); extract_tar");
then
return 0
else
return 1
fi
}
while getopts ":u:S:s:" option; do
case ${option} in
u)
if [ -n "${OPTARG}" ] && [[ ${OPTARG} != -? ]]
then
USER="${OPTARG}"
else
echo "${PROGRAM}: -${option} needs a valid argument"
usage
exit 1
fi
;;
S)
if [ -n "${OPTARG}" ] && [[ ${OPTARG} != -? ]]
then
SERVERS="${OPTARG}"
else
echo "${PROGRAM}: -${option} needs a valid argument"
usage
exit 1
fi
;;
s)
if [ -n "${OPTARG}" ] && [[ ${OPTARG} != -? ]]
then
SUDOS=( $(echo "${OPTARG}" | tr "," " ") )
else
echo "${PROGRAM}: -${option} needs a valid argument"
usage
exit 1
fi
;;
\?)
echo "${PROGRAM}: Invalid option: -${OPTARG}" >&2
usage
exit 1
;;
:)
echo "${PROGRAM}: Option -${OPTARG} requires an argument." >&2
usage
exit 1
;;
esac
done
if [[ -z "${USER}" || -z "${SERVERS}" ]]
then
usage
exit 1
fi
# si l'usuari no es root carreguem la variable sudo
if [[ $EUID -ne 0 ]]
then
SUDO="sudo"
fi
if [[ -z "${SUDOS}" ]]
then
SUDOS=$(${SUDO} ls /etc/sudoers.d)
fi
DATE=$(date +"%Y-%m-%d-%H%M%S")
LOGFILE=$0.${DATE}.log
echo ${USER}
echo ${SERVERS}
echo ${SUDOS[*]}
create_tar_file "${SUDOS[*]}"
for SERVER in $(cat ${SERVERS})
do
echo "######################################### ${SERVER} ######################################" >> ${LOGFILE}
if copy_tar_file ${USER} ${SERVER}
then
echo "tar file copied on ${SERVER}" >> ${LOGFILE}
else
echo "${bold}ERROR${none}copying tar file on ${SERVER}" >> ${LOGFILE}
errors_in_log ${LOGFILE}
fi
if ssh_extract_tar ${USER} ${SERVER} ${SUDO}
then
echo "tar file extracted succesfully on ${SERVER}" >> ${LOGFILE}
else
echo "${bold}ERROR${none} extracting tar file on ${SERVER}" >> ${LOGFILE}
errors_in_log ${LOGFILE}
exit 1
fi
done
#esborra
${SUDO} rm /tmp/sudoers_file.tar