crans/crans_bcfg2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Ajout de la possibilité de trigger le déclenchement de generate par ssh depuis le réseau adm par le groupe adm

Browse source
This commit is contained in:
Valentin Samir 2014-02-21 14:25:53 +01:00
parent be0e7c33df
commit f0f7def929
8 changed files with 48 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
Python/etc/crans/secrets/trigger-generate Normal file
View file

@ -0,0 +1,4 @@
info["perms"] = 0440
info["owner"] = "root"
info["group"] = "adm"
print file("/etc/crans/secrets/trigger-generate").read()

4
Python/etc/crans/secrets/trigger-generate.pub Normal file
View file

@ -0,0 +1,4 @@
info["perms"] = 0444
info["owner"] = "root"
info["group"] = "adm"
print file("/etc/crans/secrets/trigger-generate.pub").read()

2
Python/etc/sudoers
View file

@ -90,6 +90,8 @@ if has("users"):
monit_path = '/usr/%sbin/monit' % ('' if has('wheezy') else 's')
print "%%respbats ALL=(ALL) NOPASSWD: %s summary, %s status" % (monit_path, monit_path)
if has('generate'):
print "rpcssh ALL=(ALL) NOPASSWD: /usr/scripts/gestion/gen_confs/generate.py"
if has('arpwatch'):
@# arpwatch
print "arpwatch ALL=(arpwatch%s) NOPASSWD:/usr/scripts/surveillance/arpwatch_sendmail.py" % (addit)

12
Python/var/local/rpcssh/.ssh/authorized_keys Normal file
View file

@ -0,0 +1,12 @@
# -*- mode: python; encoding: utf-8 -*-
info["owner"] = "rpcssh"
info["group"] = "users"
info["perms"] = 0644
comment_start = "#"
header("Clef pour lancer des commandes en temps réel sur les serveurs")
if has("generate"):
print 'command="sudo /usr/scripts/gestion/gen_confs/generate.py",from="10.231.136.0/24,2a01:240:fe3d:c804::/64",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding %s' % open('/etc/crans/secrets/trigger-generate.pub').read()