From 7b71623df33336f8c69b2f6d12c9cf7230e1f6e6 Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Fri, 28 Oct 2022 10:30:45 +0300 Subject: add dserver configs --- frontends/scripts/dserver-update-key-cache.sh.tpl | 34 +++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 frontends/scripts/dserver-update-key-cache.sh.tpl (limited to 'frontends/scripts') diff --git a/frontends/scripts/dserver-update-key-cache.sh.tpl b/frontends/scripts/dserver-update-key-cache.sh.tpl new file mode 100644 index 0000000..86b5ecf --- /dev/null +++ b/frontends/scripts/dserver-update-key-cache.sh.tpl @@ -0,0 +1,34 @@ +#!/bin/ksh + +CACHEDIR=/var/run/dserver/cache +DSERVER_USER=_dserver +DSERVER_GROUP=_dserver + +echo 'Updating SSH key cache' + +ls /home/ | while read remoteuser; do + keysfile=/home/$remoteuser/.ssh/authorized_keys + + if [ -f $keysfile ]; then + cachefile=$CACHEDIR/$remoteuser.authorized_keys + echo "Caching $keysfile -> $cachefile" + + cp $keysfile $cachefile + chown $DSERVER_USER:$DSERVER_GROUP $cachefile + chmod 600 $cachefile + fi +done + +# Cleanup obsolete public SSH keys +find $CACHEDIR -name \*.authorized_keys -type f | +while read cachefile; do + remoteuser=$(basename $cachefile | cut -d. -f1) + keysfile=/home/$remoteuser/.ssh/authorized_keys + + if [ ! -f $keysfile ]; then + echo 'Deleting obsolete cache file $cachefile' + rm $cachefile + fi +done + +echo 'All set...' -- cgit v1.2.3