[packages] sshtunnel: changed default retry time
[openwrt/svn-archive/archive.git] / net / sshtunnel / files / initd_sshtunnel
1 #!/bin/sh /etc/rc.common
2
3 START=99
4 STOP=01
5
6 PIDFILE="/tmp/run/sshtunnel"
7
8
9 append_params() {
10 local p; local v; local args;
11 for p in $*; do
12 eval "v=\$$p"
13 [ -n "$v" ] && args="$args -o $p=$v"
14 done
15
16 ARGS_options="${args# *}"
17 }
18
19 append_string() {
20 local varname="$1"; local add="$2"; local separator="${3:- }"; local actual
21 eval "actual=\$$varname"
22
23 new="${actual:+$actual$separator}$add"
24 eval "$varname=\$new"
25 }
26
27 load_tunnelR() {
28 config_get section_server $1 server
29 [ "$server" = "$section_server" ] || return 0 # continue to read next section if this is not for the current server
30 let count++ # count nr of valid sections to make sure there are at least one
31
32 config_get remoteaddress $1 remoteaddress "*"
33 config_get remoteport $1 remoteport
34 config_get localaddress $1 localaddress
35 config_get localport $1 localport
36
37 [ "$remoteport" -gt 0 ] || append_string "error" "[tunnelR: $1]remoteport must be a positive integer" "; "
38 [ "$localport" -gt 0 ] || append_string "error" "[tunnelR: $1]localport must be a positive integer" "; "
39 [ -n "$error" ] && return 1
40
41 append_string "ARGS_tunnels" "-R $remoteaddress:$remoteport:$localaddress:$localport"
42 }
43
44 load_tunnelL() {
45 config_get section_server $1 server
46 [ "$server" = "$section_server" ] || return 0 # continue to read next section if this is not for the current server
47 let count++ # count nr of valid sections to make sure there are at least one
48
49 config_get localaddress $1 localaddress "*"
50 config_get localport $1 localport
51 config_get remoteaddress $1 remoteaddress
52 config_get remoteport $1 remoteport
53
54 [ "$remoteport" -gt 0 ] || append_string "error" "[tunnelL: $1]remoteport must be a positive integer" "; "
55 [ "$localport" -gt 0 ] || append_string "error" "[tunnelL: $1]localport must be a positive integer" "; "
56 [ -n "$error" ] && return 1
57
58 append_string "ARGS_tunnels" "-L $localaddress:$localport:$remoteaddress:$remoteport"
59 }
60
61 load_tunnelD() {
62 config_get section_server $1 server
63 [ "$server" = "$section_server" ] || return 0 # continue to read next section if this is not for the current server
64 let count++ # count nr of valid sections to make sure there are at least one
65
66 config_get localaddress $1 localaddress "*"
67 config_get localport $1 localport
68
69 [ "$remoteport" -gt 0 ] || append_string "error" "[tunnelD: $1]remoteport must be a positive integer" "; "
70 [ "$localport" -gt 0 ] || append_string "error" "[tunnelD: $1]localport must be a positive integer" "; "
71 [ -n "$error" ] && return 1
72
73 append_string "ARGS_tunnels" "-D $localaddress:$localport"
74 }
75
76 load_server() {
77 server="$1"
78
79 config_get user $1 user
80 config_get hostname $1 hostname
81 config_get retrydelay $1 retrydelay "60"
82 config_get PKCS11Provider $1 PKCS11Provider
83 config_get CheckHostIP $1 CheckHostIP
84 config_get Compression $1 Compression
85 config_get CompressionLevel $1 CompressionLevel
86 config_get IdentityFile $1 IdentityFile
87 config_get LogLevel $1 LogLevel
88 config_get ServerAliveCountMax $1 ServerAliveCountMax
89 config_get ServerAliveInterval $1 ServerAliveInterval
90 config_get StrictHostKeyChecking $1 StrictHostKeyChecking
91 config_get TCPKeepAlive $1 TCPKeepAlive
92 config_get VerifyHostKeyDNS $1 VerifyHostKeyDNS
93
94 error=""
95 [ -n "$user" ] \
96 || append_string "error" "user is not set" "; "
97 [ -n "$hostname" ] \
98 || append_string "error" "hostname is not set" "; "
99 [ "$retrydelay" -ge 1 ] \
100 || append_string "error" "retrydelay must be a positive integer" "; "
101 [ -z "$PKCS11Provider" -o -f "$PKCS11Provider" ] \
102 || append_string "error" "PKCS11Provider must be a pkcs11 shared library accessible" "; "
103 [ -z "$CheckHostIP" -o "$CheckHostIP"="yes" -o "$CheckHostIP"="no" ] \
104 || append_string "error" "CheckHostIP must be 'yes' or 'no'" "; "
105 [ -z "$Compression" -o "$Compression"="yes" -o "$Compression"="no" ] \
106 || append_string "error" "Compression must be 'yes' or 'no'" "; "
107 [ -z "$CompressionLevel" ] || [ "$CompressionLevel" -ge 1 -a "$CompressionLevel" -le 9 ] \
108 || append_string "error" "CompressionLevel must be between 1 and 9" "; "
109 [ -z "$IdentityFile" -o -f "$IdentityFile" ] \
110 || append_string "error" "IdentityFile $IdentityFile not accessible" "; "
111 [ -z "$LogLevel" -o "$LogLevel" = "QUIET" -o "$LogLevel" = "FATAL" -o "$LogLevel" = "ERROR" -o \
112 "$LogLevel" = "INFO" -o "$LogLevel" = "VERBOSE" -o "$LogLevel" = "DEBUG" -o \
113 "$LogLevel" = "DEBUG1" -o "$LogLevel" = "DEBUG2" -o "$LogLevel" = "DEBUG3" ] \
114 || append_string "error" "LogLevel is invalid" "; "
115 [ -z "$ServerAliveCountMax" ] || [ "$ServerAliveCountMax" -ge 1 ] \
116 || append_string "error" "ServerAliveCountMax must be greater or equal than 1" "; "
117 [ -z "$ServerAliveInterval" ] || [ "$ServerAliveInterval" -ge 0 ] \
118 || append_string "error" "ServerAliveInterval must be greater or equal than 0" "; "
119 [ -z "$StrictHostKeyChecking" -o "$StrictHostKeyChecking" = "yes" -o "$StrictHostKeyChecking" = "ask" -o "$StrictHostKeyChecking" = "no" ] \
120 || append_string "error" "StrictHostKeyChecking must be 'yes', 'ask' or 'no'" "; "
121 [ -z "$TCPKeepAlive" -o "$TCPKeepAlive" = "yes" -o "$TCPKeepAlive" = "no" ] \
122 || append_string "error" "TCPKeepAlive must be 'yes' or 'no'" "; "
123 [ -z "$VerifyHostKeyDNS" -o "$VerifyHostKeyDNS" = "yes" -o "$VerifyHostKeyDNS" = "no" ] \
124 || append_string "error" "VerifyHostKeyDNS must be 'yes' or 'no'" "; "
125
126 [ -n "$error" ] && { logger -p user.err -t "sshtunnel" "tunnels to $server not started - $error"; return; }
127
128
129 ARGS=""
130 ARGS_options=""
131 ARGS_tunnels=""
132
133 count=0
134 config_foreach load_tunnelR tunnelR && config_foreach load_tunnelL tunnelL && config_foreach load_tunnelD tunnelD
135 [ -n "$error" ] && { logger -p user.err -t "sshtunnel" "tunnels to $server not started - $error"; return; }
136 [ "$count" -eq 0 ] && { logger -p user.err -t "sshtunnel" "tunnels to $server not started - no tunnels defined"; return; }
137
138 append_params CheckHostIP Compression CompressionLevel IdentityFile LogLevel PKCS11Provider ServerAliveCountMax ServerAliveInterval StrictHostKeyChecking TCPKeepAlive VerifyHostKeyDNS
139 ARGS="$ARGS_options -o ExitOnForwardFailure=yes -o BatchMode=yes -nN $ARGS_tunnels $user@$hostname"
140
141 /usr/bin/sshtunnel.sh "$ARGS" "$retrydelay" "$server" &
142 echo $! >> "${PIDFILE}.pids"
143 logger -p user.info -t "sshtunnel" "started tunnels to $server (pid=$!;retrydelay=$retrydelay)"
144 }
145
146 stop() {
147 if [ -f "$PIDFILE".pids ]
148 then
149 logger -p user.info -t "sshtunnel" "stopping all tunnels"
150
151 while read pid
152 do
153 kill "$pid" # kill mother process first
154
155 [ -f "${PIDFILE}_${pid}.pid" ] && { # if ssh was running, kill it also (mother process could be in retry wait)
156 start-stop-daemon -K -p "${PIDFILE}_${pid}.pid"
157 rm "${PIDFILE}_${pid}.pid"
158 }
159
160 logger -p daemon.info -t "sshtunnel[$pid]" "tunnel stopped"
161
162 done < "${PIDFILE}.pids"
163
164 rm "${PIDFILE}.pids"
165
166 logger -p user.info -t "sshtunnel" "all tunnels stopped"
167 else
168 logger -p user.info -t "sshtunnel" "no tunnels running"
169 fi
170 }
171
172 start() {
173 [ -f "${PIDFILE}.pids" ] && stop
174
175 config_load sshtunnel
176 if [ -n "$(uci show sshtunnel.@server[0])" ] # at least one server section exists
177 then
178 logger -p user.info -t "sshtunnel" "starting all tunnels"
179 config_foreach load_server server
180 logger -p user.info -t "sshtunnel" "all tunnels started"
181 else
182 logger -p user.info -t "sshtunnel" "no servers defined"
183 fi
184 }