Koozali.org: home of the SME Server
  1. Koozali.org: home of the SME Server
  2. Contribs.org Forums
  3. General Discussion
  4. Topic: simple web page to restart some sme services
« previous next »
Pages: [1]   Go Down

simple web page to restart some sme services

  • 5 Replies
  • 2465 Views

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
simple web page to restart some sme services
« on: September 01, 2012, 12:02:34 PM »
We're change ERP software and new guys ask for root access to MY server... no way.
So I discovered they need to restart Postgre, Java and other daemons after update their software.

I think I should create a web page to do that... so I google for it and came to something like this in cgi-bin of one password protected ibay (or even on primary if security is not a concern):
Code: [Select]
[root@guepardo cgi-bin]# cat rs.cgi
#!/bin/bash
echo "Content-type: text/html"
echo ""
echo "<html><head><title>Interface ERP guys"
echo "</title></head><body>"
echo "<h1>Interface @ server $(hostname -s)</h1>"
echo ""
echo "<h1><a href="renicia-bd.cgi">restart BD Postgres</a></h1>"
echo ""
echo "<h1><a href="reinicia-apache.cgi">restart Apache</a></h1>"
echo ""
echo "<h1><a href="reinicia-apache.cgi">restart JAVA</a></h1>"
echo ""
echo "</body></html>"

simple, very simple.
and I created .cgi files (with +x permission):
Code: [Select]
[root@guepardo cgi-bin]# cat reinicia-apache.cgi
#!/bin/bash
echo "Content-type: text/html"
echo ""
echo "<html><head><title>Interface ERP guys"
echo "</title></head><body>"
service httpd-e-smith restart
echo "</body></html>"

but it do not work, give me the error:
Code: [Select]
Restarting httpd-e-smith warning: /service/httpd-e-smith: unable to open supervise/ok: access denied [FAILED] warning: /service/httpd-e-smith: unable to open supervise/ok: access denied
So it appears to be trying to run command and having permission issues.
I know this MUST be possible... but would not like to try 100s of permissions to find out what I have to change!

Could someone post the single fix (I bet it's a simple chmod) to this error?
Thanks

Jáder
Logged
...

Offline cactus

  • *
  • 4,880
  • +3/-0
    • http://www.snetram.nl
Re: simple web page to restart some sme services
« Reply #1 on: September 01, 2012, 02:41:57 PM »
I doubt it is something with chmod. I think it has to do that the www/apache user is not allowed to perform the desired actions and can not find the files in the path.
IIRC the www/apache user is configured in a very strict permission scheme to prevent exploits like you are trying to use.
Logged
Be careful whose advice you buy, but be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than its worth ~ Baz Luhrmann - Everybody's Free (To Wear Sunscreen)

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: simple web page to restart some sme services
« Reply #2 on: September 01, 2012, 04:34:22 PM »
my 2c:

start from http://www.dungog.net/wiki/Usermanager#User_Manager contrib, create a panel for the needed functions and create the needed events.. you can find more info on dev's manual..

this is the only way to do things in the SME's way
good luck
Logged

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: simple web page to restart some sme services
« Reply #3 on: September 01, 2012, 05:23:07 PM »
jader

Here is another possibility, or possibilities.

Many years ago (2004 - 2005) Darrell May created an rpm
e-smith-service-control-1.1.0-06.noarch.rpm

Maybe you could tweak that to do what you want, and then make it accessible via the user manager contrib.

If you cannot find it by searching, I have the old rpm & src rpm.

I also wonder whether the sme7admin contrib, now sme8admin contrib would do what you want or could be made to do what you want.

Also many years ago, Dungog had a contrib that added an icon to the Windows desktop to start (and stop) the dial up modem service, I forget the exact details, but it was before the days of broadband, so you might want to ask Stephen at dungog.net for help re "how to do it".
« Last Edit: September 01, 2012, 05:27:16 PM by mary »
Logged
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
Re: simple web page to restart some sme services
« Reply #4 on: September 01, 2012, 09:34:39 PM »
Quote from: cactus on September 01, 2012, 02:41:57 PM
I doubt it is something with chmod. I think it has to do that the www/apache user is not allowed to perform the desired actions and can not find the files in the path.
IIRC the www/apache user is configured in a very strict permission scheme to prevent exploits like you are trying to use.

hehehe... I know that's a bad practice... but it's requested at least for a while.
I'm sure a prefer this than allow someone else to have shell access to my server.

Just to let you to know: they request I open port 5432 (postgre) to web with default user/password: hehehehe... great security concerns!
No way I'll EVER let them TOUCH the SME shell.
Logged
...

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
Re: simple web page to restart some sme services
« Reply #5 on: September 01, 2012, 09:39:08 PM »
Quote from: mary on September 01, 2012, 05:23:07 PM
(...)
Many years ago (2004 - 2005) Darrell May created an rpm
e-smith-service-control-1.1.0-06.noarch.rpm
hum... that would be nice... I just thought that would be MUCH simpler...
Quote
I also wonder whether the sme7admin contrib, now sme8admin contrib would do what you want or could be made to do what you want.
I'll look at it... but I dont have too many hopes on this bet.
Quote
Also many years ago, Dungog had a contrib that added an icon to the Windows desktop to start (and stop) the dial up modem service, I forget the exact details, but it was before the days of broadband, so you might want to ask Stephen at dungog.net for help re "how to do it".
I'll try to talk to Stephen... lastly.

I also think about to create my own actions on SME (or just one:  restart 3 services at one button) and allow web page to call that action.
I presume this is possible because it's the way server-manager uses.

EDIT: I think event it's ADJUST-SERVICES from /etc/e-smith/events/actions
 
EDIT2:
 /etc/e-smith/events/actions/adjust-services actions restart httpd-e-smith

This would restart apache??!?!
Any colateral effects I'm not aware ?
« Last Edit: September 01, 2012, 09:54:19 PM by jader »
Logged
...
Pages: [1]   Go Up
« previous next »
  1. Koozali.org: home of the SME Server
  2. Contribs.org Forums
  3. General Discussion
  4. Topic: simple web page to restart some sme services