Offer Kerberos authentication to supporting browsers

[invirt/packages/invirt-web.git] / debian / sipb-xen-www.init

diff --git a/debian/sipb-xen-www.init b/debian/sipb-xen-www.init
index 5a4db6d..f13ab6d 100755 (executable)
--- a/debian/sipb-xen-www.init
+++ b/debian/sipb-xen-www.init
@@ -5,163 +5,13 @@
 # Required-Stop:     $local_fs $remote_fs
 # Default-Start:     2 3 4 5
 # Default-Stop:      0 1 6
-# Short-Description: conserver config from invirt config for invirt host
+# Short-Description: sipb-xen web server
 # Description:
 ### END INIT INFO 
 
 PACKAGE=sipb-xen-www
+PARENTPACKAGE=apache2
+GEN_FILES=(/etc/apache2/sites-available/{ssl,svn})
 
-. /lib/lsb/init-functions
-
-gen_config()
-{
-    local errormail="$( invirt-getconf web.errormail )" \
-          hostname="$( invirt-getconf web.hostname )" \
-          tracuri="$( invirt-getconf trac.uri )" \
-          svnpath="$( invirt-getconf svn.repopath )"
-
-    cat > /etc/apache2/sites-available/ssl << EOF
-<VirtualHost *:443>
-       ServerAdmin $hostname
-       ServerName $trachost:443
-       
-       DocumentRoot /var/www/sipb-xen-www
-       <Directory /var/www/sipb-xen-www>
-               Options Indexes FollowSymLinks MultiViews ExecCGI
-               AllowOverride None
-               Order allow,deny
-               allow from all
-       </Directory>
-       <Location />
-               Require valid-user
-               AuthType SSLCert
-               AuthSSLCertVar SSL_CLIENT_S_DN_Email
-               AuthSSLCertStripSuffix "@MIT.EDU"
-       </Location>
-
-       RewriteEngine On
-       RewriteRule ^/favicon.ico - [L]
-       RewriteRule ^/static(.*) - [L]
-       RewriteRule ^/overlord/static(.*) /static/\$1 [L]
-       RewriteRule ^/admin/static(.*) /static/\$1 [L]
-       RewriteRule ^/trac.fcgi(.*) - [L]
-       RewriteRule ^/trac/chrome/common(.*) /usr/share/trac/htdocs\$1 [L]
-       RewriteRule ^/trac(.*) /var/www/trac/trac.fcgi\$1 [L]
-       RewriteRule ^/var(.*) - [L]
-       RewriteRule ^/wiki(.*) - [L]
-       RewriteRule ^/kill.cgi - [L]
-       RewriteRule ^/~ - [L]
-       RewriteRule ^/(.*) /var/www/sipb-xen-www/main.fcgi/\$1 [L]
-
-       RewriteLog /var/log/apache2/rewrite.log
-       RewriteLogLevel 0 
-
-       ErrorLog /var/log/apache2/error.log
-
-       # Possible values include: debug, info, notice, warn, error, crit,
-       # alert, emerg.
-       LogLevel warn
-
-       CustomLog /var/log/apache2/ssl_access.log combined
-       ServerSignature On
-
-       SSLEngine on
-
-       SSLCertificateFile ssl/server.crt
-       SSLCertificateKeyFile ssl/server.key
-       
-       SSLCACertificateFile ssl/mitCAclient.pem
-       SSLVerifyClient require
-       SSLVerifyDepth 10
-
-       SSLOptions +StdEnvVars
-       
-       SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
-
-
-       Redirect /wiki $tracuri 
-</VirtualHost>
-
-<VirtualHost *:446>
-       ServerAdmin $errormail
-       ServerName $hostname:446
-       
-       DocumentRoot /var/www/sipb-xen-www
-       <Directory />
-               Options Indexes FollowSymLinks MultiViews ExecCGI
-               AllowOverride None
-               Order allow,deny
-               allow from all
-       </Directory>
-
-       ErrorLog /var/log/apache2/error.log
-
-       # Possible values include: debug, info, notice, warn, error, crit,
-       # alert, emerg.
-       LogLevel warn
-
-       CustomLog /var/log/apache2/ssl_nocert_access.log combined
-       ServerSignature On
-
-       SSLEngine on
-
-       SSLCertificateFile ssl/server.crt
-       SSLCertificateKeyFile ssl/server.key
-       
-       SSLVerifyClient none
-
-       SSLOptions +StdEnvVars
-       
-       SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0        
-</VirtualHost>
-EOF
-
-    cat > /etc/apache2/sites-available/svn << EOF
-<VirtualHost *:1111>
-       ServerAdmin $errormail
-       ServerName $hostname:1111
-       
-       <Directory />
-               Options FollowSymLinks
-               AllowOverride None
-       </Directory>
-       <Location />
-               DAV svn
-               SVNPath $svnpath
-               AuthType Basic
-               AuthName "xvm.mit.edu subversion repository"
-               AuthUserFile /etc/apache2/dav_svn.passwd
-               <LimitExcept GET PROPFIND OPTIONS REPORT>
-                       Require valid-user
-               </LimitExcept>
-       </Location>
-
-       ErrorLog /var/log/apache2/error.log
-
-       # Possible values include: debug, info, notice, warn, error, crit,
-       # alert, emerg.
-       LogLevel warn
-
-       CustomLog /var/log/apache2/svn_access.log combined
-       ServerSignature On
-
-       SSLEngine on
-
-       SSLCertificateFile ssl/server.crt
-       SSLCertificateKeyFile ssl/server.key
-</VirtualHost>
-EOF
-}
-
-case "$1" in
-  start|reload|force-reload|restart)
-    log_begin_msg "Reloading config for $PACKAGE"
-    gen_config
-    log_end_msg $?
-    ;;
-  stop)
-    ;;
-  *)
-    log_success_msg "Usage: /etc/init.d/$PACKAGE {start|reload|force-reload|restart|stop}"
-    ;;
-esac
+. /lib/init/config-init.sh
+config_init "$1"