wcp/bin/v-add-sys-pma-sso at 76bebd111c5bcfd1b0a42942ce5eb72ace7371b6 · ghzhost/wcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
#!/bin/bash
# info: enables support for single sign on PHPmyAdmin
# options: [mode]
# labels:
#
# example: v-add-sys-pma-sso
#
# Enables support for SSO to PHPmyAdmin

#----------------------------------------------------------#
#                    Variable&Function                     #
#----------------------------------------------------------#

MODE=$1

# Includes
source $HESTIA/func/main.sh
source $HESTIA/conf/hestia.conf

PMA_INSTALL="/usr/share/phpmyadmin"
PMA_CONFIG="/etc/phpmyadmin"

#----------------------------------------------------------#
#                    Verifications                         #
#----------------------------------------------------------#

# Perform verification if read-only mode is enabled
check_hestia_demo_mode

# Checking root permissions
if [ "x$(id -u)" != 'x0' ]; then
    echo "Error: Script can be run executed only by root"
    exit 10
fi

if [ ! -z "$PHPMYADMIN_KEY" ] && [ "$PHPMYADMIN_KEY" != "" ] ; then
    echo "Error: SSO has been installed before to reenable it please run v-delete-sys-pma-sso first"
    exit 1;
fi

# Ensure that $HESTIA (/usr/local/hestia/) and other variables are valid.
if [ -z "$HESTIA" ]; then
    HESTIA="/usr/local/hestia"
fi

if [ -z "$HOMEDIR" ] || [ -z "$HESTIA_INSTALL_DIR" ]; then
    echo "Error: Hestia environment vars not present"
    exit 2
fi

if [ -f "/usr/share/phpmyadmin/hestia-sso.php" ]; then
    echo "Error: hestia-sso.php is already installed"
    exit 2
fi

if [ -f "/usr/local/hesta/web/api/index.php" ]; then
    echo "Error: API script not installed"
    exit 2
fi

if [ "$API" != "yes" ]; then
    echo "Error: API is not enabled"
    exit 2
fi

#----------------------------------------------------------#
#                       Action                             #
#----------------------------------------------------------#

# Generate the keys to secure everything
phpmyadminkey=$(generate_password);
apikey=$($BIN/v-generate-api-key);

# copy config dir to /usr/share/phpmyadmin/
cp -f $HESTIA_INSTALL_DIR/phpmyadmin/hestia-sso.php $PMA_INSTALL/hestia-sso.php
chmod 644 $PMA_INSTALL/hestia-sso.php

sed -i "s/%PHPMYADMIN_KEY%/$phpmyadminkey/g" $PMA_INSTALL/hestia-sso.php
sed -i "s/%API_KEY%/$apikey/g" $PMA_INSTALL/hestia-sso.php
sed -i "s/%API_HOST_NAME%/$(hostname)/g" $PMA_INSTALL/hestia-sso.php
sed -i "s/%API_HESTIA_PORT%/$BACKEND_PORT/g" $PMA_INSTALL/hestia-sso.php


# Check if config already contains the keys

touch $PMA_CONFIG/hestia-sso.inc.php
chmod 644 $PMA_CONFIG/hestia-sso.inc.php
echo "<?php
if(isset(\$_GET['hestia_token']) || isset(\$_COOKIE['SignonSession'])){
\$cfg['Servers'][\$i]['auth_type'] = 'signon';
\$cfg['Servers'][\$i]['SignonSession'] = 'SignonSession';
\$cfg['Servers'][\$i]['SignonURL'] = 'hestia-sso.php';
\$cfg['Servers'][\$i]['LogoutURL'] = 'hestia-sso.php?logout=1';
}
?>" >> $PMA_CONFIG/hestia-sso.inc.php

file=$(cat $PMA_CONFIG/config.inc.php)
if ! [[  $file =~ "hestia-sso.inc.php" ]]; then
    if [[ $file =~ "//Add Hestia SSO code here" ]]; then
        sed -i "s|//Add Hestia SSO code here|//Add Hestia SSO code here\n     include ('$PMA_CONFIG/hestia-sso.inc.php');|g" $PMA_CONFIG/config.inc.php
    else
        echo "include ('$PMA_CONFIG/hestia-sso.inc.php');" >> $PMA_CONFIG/config.inc.php
    fi
fi

$BIN/v-change-sys-config-value 'PHPMYADMIN_KEY' "$phpmyadminkey"

#----------------------------------------------------------#
#                       Logging                            #
#----------------------------------------------------------#

if [ "$MODE" != "quiet" ]; then
    echo "PMA Hestia-SSO plugin has been succesfully installed"
fi

log_history "PMA Hestia-SSO plugin has been succesfully installed" '' 'admin'
log_event "$OK" "$ARGUMENTS"