Difference between revisions of "Dirty Tools"
Unnilennium (talk | contribs) |
|||
(20 intermediate revisions by 4 users not shown) | |||
Line 1: | Line 1: | ||
− | |||
=== Maintainer === | === Maintainer === | ||
Michael Weinberger | Michael Weinberger | ||
+ | ===Version=== | ||
+ | {{#smeversion: smeserver-dirty-tools }} | ||
=== Introduction === | === Introduction === | ||
− | This | + | {{Warning box|This package contains a collection of scripts allowing the experienced admin to do things which usually should not be done in that way. Only use them if you know what you are doing. Run a backup before using them.}} |
These scripts work well for the author, but may not on your system. You may need to modify them to fulfill your requirements. | These scripts work well for the author, but may not on your system. You may need to modify them to fulfill your requirements. | ||
− | === Download === | + | === Download and Installation === |
− | + | /usr/bin/yum install --enablerepo=smecontribs smeserver-dirty-tools | |
=== Scripts=== | === Scripts=== | ||
==== dt-rename-account ==== | ==== dt-rename-account ==== | ||
+ | '''Synopsis'''<br> | ||
+ | <code>dt-rename-account OLD_ACCCOUNT NEW_ACCOUNT</code><br> | ||
+ | |||
+ | '''Description'''<br> | ||
+ | The script does the following: | ||
+ | # checks the new account name for maximum length and bad characters | ||
+ | # checks whether the new account already exists | ||
+ | # renames the account record key in the accounts database | ||
+ | # renames all occurrences of account name in pseudonym und group records in the accounts database | ||
+ | # renames the account in /etc/samba/smbpasswd | ||
+ | # renames the account in /etc/passwd and /etc/shadow | ||
+ | # renames the home directory path in /etc/passwd | ||
+ | # renames the account in /etc/group | ||
+ | # renames the home directory | ||
+ | |||
+ | |||
==== dt-passwords-sync ==== | ==== dt-passwords-sync ==== | ||
− | ==== dt- | + | '''Synopsis'''<br> |
+ | <code>dt-passwords-sync [--dry-run] --all SOURCESERVER</code><br> | ||
+ | <code>dt-passwords-sync [--dry-run] SOURCESERVER ACCOUNT</code><br> | ||
+ | <code>dt-passwords-sync [--dry-run] --ibays --all SOURCESERVER</code><br> | ||
+ | <code>dt-passwords-sync [--dry-run] --ibays SOURCESERVER IBAY</code><br> | ||
+ | |||
+ | '''Description'''<br> | ||
+ | The script sets the encrypted password string in /etc/shadow and the NT-Hash and Lanman-Hash in /etc/samba/smbpasswd with the values retrieved from server SOURCESERVER. For ibays only the encrypted password string in /etc/shadow is set. | ||
+ | The 'PasswordSet' property of the account/ibay record is set to 'no', if the encrypted password string start with two exclamation marks. | ||
+ | |||
+ | |||
+ | ==== dt-data-sync ==== | ||
+ | '''Synopsis'''<br> | ||
+ | <code>dt-data-sync [--dry-run] [--compress] SOURCESERVER ACCOUNT</code><br> | ||
+ | <code>dt-data-sync [--dry-run] [--compress] --ibay SOURCESERVER IBAY</code><br> | ||
+ | |||
+ | '''Description'''<br> | ||
+ | Synchronizes the data of ACCOUNT or IBAY with the SOURCESERVER.<br> | ||
+ | Path synchronized for accounts: /home/e-smith/files/users/ACCOUNT<br> | ||
+ | Path synchronized for ibays: /home/e-smith/files/ibays/IBAY | ||
+ | {{Warning box|dt-data-sync synchronize the destination with the source. That means, files on the destination will be <b>deleted</b> if they doesn't exist on the source! }} | ||
+ | dt-data-sync does not create or delete accounts or ibays. | ||
+ | |||
+ | |||
+ | ==== dt-data-copy==== | ||
+ | '''Synopsis'''<br> | ||
+ | <code>dt-data-copy [--dry-run] [--compress] SOURCESERVER ACCOUNT</code><br> | ||
+ | <code>dt-data-copy [--dry-run] [--compress] --ibay SOURCESERVER IBAY</code><br> | ||
+ | |||
+ | '''Description'''<br> | ||
+ | Similar to dt-data-sync, but does not delete files on the destination and does not overwrites files if their modification times are newer than the source files. | ||
+ | {{Warning box|Clocks on source and destination server must be synchronisized. }} | ||
+ | |||
+ | |||
+ | ==== dt-unlock-account / dt-lock-account ==== | ||
+ | '''Synopsis'''<br> | ||
+ | <code>dt-unlock-account ACCOUNT</code><br> | ||
+ | <code>dt-lock-account ACCOUNT</code><br> | ||
+ | |||
+ | '''Description'''<br> | ||
+ | dt-lock-account operates identically as the 'Lock account' link in the server-manager. | ||
+ | dt-unlock-account is the reverse of the lock account command. It re-enables the latest set user password. | ||
+ | |||
+ | |||
==== dt-send-key ==== | ==== dt-send-key ==== | ||
− | [[Category: | + | '''Synopsis'''<br> |
+ | <code>dt-send-key [--port=PORT] REMOTEHOST</code><br> | ||
+ | <code>dt-send-key [--revoke] [--port=PORT] REMOTEHOST</code><br> | ||
+ | |||
+ | '''Description'''<br> | ||
+ | Sends the public DSA key to REMOTEHOST. | ||
+ | |||
+ | |||
+ | ==== dt-dovecot-indexfiles-delete ==== | ||
+ | '''Synopsis'''<br> | ||
+ | dt-dovecot-indexfiles-delete | ||
+ | |||
+ | '''Description'''<br> | ||
+ | Sometimes Dovecot index files are corrupted after a restore. It is safe to delete them all. Dovecot will rebuild them when the mailbox is accessed. | ||
+ | |||
+ | ==== dt-pw-generate ==== | ||
+ | '''Synopsis'''<br> | ||
+ | dt-pw-generate [--number=C][--length=N] [--mixed-case] [--add-consonants] | ||
+ | |||
+ | '''Description'''<br> | ||
+ | Generates an easy to remember password that passes the SME password strength check and prints it on STDOUT. | ||
+ | Defaults: --number=1 --length=8 | ||
+ | |||
+ | |||
+ | === Uninstall === | ||
+ | This removes the installed Dirty-Tools package. | ||
+ | /usr/bin/yum erase smeserver-dirty-tools | ||
+ | |||
+ | ===Bugs=== | ||
+ | Please raise bugs under the SME-Contribs section in [http://bugs.contribs.org/enter_bug.cgi bugzilla] | ||
+ | and select the smeserver-dirty-tools component or use {{BugzillaFileBug|product=SME%20Contribs|component=smeserver-dirty-tools|title=this link}} | ||
+ | {{#bugzilla:columns=id,product,version,status,summary |sort=id |order=desc |component=smeserver-dirty-tools |noresultsmessage="No open bugs found."}} | ||
+ | ===Changelog=== | ||
+ | Only released version in smecontrib are listed here. | ||
+ | |||
+ | {{#smechangelog: smeserver-dirty-tools}} | ||
+ | |||
+ | |||
+ | [[Category: Contrib]] | ||
+ | [[Category: Administration]] | ||
---- | ---- |
Latest revision as of 14:54, 4 June 2021
Maintainer
Michael Weinberger
Version
Introduction
These scripts work well for the author, but may not on your system. You may need to modify them to fulfill your requirements.
Download and Installation
/usr/bin/yum install --enablerepo=smecontribs smeserver-dirty-tools
Scripts
dt-rename-account
Synopsis
dt-rename-account OLD_ACCCOUNT NEW_ACCOUNT
Description
The script does the following:
- checks the new account name for maximum length and bad characters
- checks whether the new account already exists
- renames the account record key in the accounts database
- renames all occurrences of account name in pseudonym und group records in the accounts database
- renames the account in /etc/samba/smbpasswd
- renames the account in /etc/passwd and /etc/shadow
- renames the home directory path in /etc/passwd
- renames the account in /etc/group
- renames the home directory
dt-passwords-sync
Synopsis
dt-passwords-sync [--dry-run] --all SOURCESERVER
dt-passwords-sync [--dry-run] SOURCESERVER ACCOUNT
dt-passwords-sync [--dry-run] --ibays --all SOURCESERVER
dt-passwords-sync [--dry-run] --ibays SOURCESERVER IBAY
Description
The script sets the encrypted password string in /etc/shadow and the NT-Hash and Lanman-Hash in /etc/samba/smbpasswd with the values retrieved from server SOURCESERVER. For ibays only the encrypted password string in /etc/shadow is set.
The 'PasswordSet' property of the account/ibay record is set to 'no', if the encrypted password string start with two exclamation marks.
dt-data-sync
Synopsis
dt-data-sync [--dry-run] [--compress] SOURCESERVER ACCOUNT
dt-data-sync [--dry-run] [--compress] --ibay SOURCESERVER IBAY
Description
Synchronizes the data of ACCOUNT or IBAY with the SOURCESERVER.
Path synchronized for accounts: /home/e-smith/files/users/ACCOUNT
Path synchronized for ibays: /home/e-smith/files/ibays/IBAY
dt-data-sync does not create or delete accounts or ibays.
dt-data-copy
Synopsis
dt-data-copy [--dry-run] [--compress] SOURCESERVER ACCOUNT
dt-data-copy [--dry-run] [--compress] --ibay SOURCESERVER IBAY
Description
Similar to dt-data-sync, but does not delete files on the destination and does not overwrites files if their modification times are newer than the source files.
dt-unlock-account / dt-lock-account
Synopsis
dt-unlock-account ACCOUNT
dt-lock-account ACCOUNT
Description
dt-lock-account operates identically as the 'Lock account' link in the server-manager.
dt-unlock-account is the reverse of the lock account command. It re-enables the latest set user password.
dt-send-key
Synopsis
dt-send-key [--port=PORT] REMOTEHOST
dt-send-key [--revoke] [--port=PORT] REMOTEHOST
Description
Sends the public DSA key to REMOTEHOST.
dt-dovecot-indexfiles-delete
Synopsis
dt-dovecot-indexfiles-delete
Description
Sometimes Dovecot index files are corrupted after a restore. It is safe to delete them all. Dovecot will rebuild them when the mailbox is accessed.
dt-pw-generate
Synopsis
dt-pw-generate [--number=C][--length=N] [--mixed-case] [--add-consonants]
Description
Generates an easy to remember password that passes the SME password strength check and prints it on STDOUT.
Defaults: --number=1 --length=8
Uninstall
This removes the installed Dirty-Tools package.
/usr/bin/yum erase smeserver-dirty-tools
Bugs
Please raise bugs under the SME-Contribs section in bugzilla and select the smeserver-dirty-tools component or use this link
ID | Product | Version | Status | Summary |
---|---|---|---|---|
11621 | SME Contribs | 10.0rc | IN_PROGRESS | Initial Import to SME10 tree [smeserver-dirty-tools] |
Changelog
Only released version in smecontrib are listed here.