作成開始 : 平成21年04月12日(日)　最終更新 : 平成22年02月28日(日)

DHCPサーバーを試す

DHCPとは・・・・・

インターネットに一時的に接続するコンピュータに、IPアドレスなど必要な情報を自動的に割り当てるプロトコル。DHCPサーバには、ゲートウェイサーバやDNSサーバのIPアドレスや、サブネットマスク、クライアントに割り当ててもよいIPアドレスの範囲などが設定されており、アクセスしてきたコンピュータにこれらの情報を提供する。クライアントが通信を終えると自動的にアドレスを回収し、他のコンピュータに割り当てる。DHCPを使うとネットワークの設定に詳しくないユーザでも簡単にインターネットに接続することができ、また、ネットワーク管理者は多くのクライアントを容易に一元管理することができる。

・・・・とのことです。

わが家ではあえて DHCP でIPアドレスを取得するほどクライアントPCは多くないが、たまに人のPC修復やノートPCを持って出先で使用する時がある。
自宅のルータにもその機能はあるが、検証も兼ねてインストール、設定してみた。
なお、ルータのDHCP機能は停止しておいた。

1.インストールしたPC

Mail、Ntp、Dns の各サーバーとして常時稼動している「 PC-9821Ne 」にインストールした。
CPU : 33MHz MEM : 14Mbyte HDD : 350Mbyte -> 1.2GByteに換装 という超々低スペックである。
OS は FreeBSD 4.5-RELEASE である。

2.インストール

/stand/sysinstall でパッケージを選択してインストールした。
最新ソースをダウンロードしてコンパイルしても良かったがそこまでしなくてもまぁいいかーである。
パッケージ名は「 isc-dhcp3-3.0.1.r4 」、バイナリ名は「 isc-dhcp3-3.0.1.r4.tar.gz 」である。

最新ソースとかは ここ　からどうぞ。

3.設定

インストールすると色んなところにファイルできるけど、関係する部分のみ記述します。

# cp /usr/local/etc/dhcpd.conf.sample /usr/local/etc/dhcpd.conf ・・・・　で conf ファイルを作成します。

# chmod 644 /usr/local/etc/dhcpd.conf ・・・　で root に書込み権限を付与します。

vi で /usr/local/etc/dhcpd.conf を編集します。

オリジナルは以下のとおりでした。

# dhcpd.conf # # Sample configuration file for ISC dhcpd # # option definitions common to all supported networks... option domain-name "example.org"; option domain-name-servers ns1.example.org, ns2.example.org; default-lease-time 600; max-lease-time 7200; # If this DHCP server is the official DHCP server for the local # network, the authoritative directive should be uncommented. #authoritative; # Use this to send dhcp log messages to a different log file (you also # have to hack syslog.conf to complete the redirection). log-facility local7; # No service will be given on this subnet, but declaring it helps the # DHCP server to understand the network topology. subnet 10.152.187.0 netmask 255.255.255.0 { } # This is a very basic subnet declaration. subnet 10.254.239.0 netmask 255.255.255.224 { range 10.254.239.10 10.254.239.20; option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org; } # This declaration allows BOOTP clients to get dynamic addresses, # which we don't really recommend. subnet 10.254.239.32 netmask 255.255.255.224 { range dynamic-bootp 10.254.239.40 10.254.239.60; option broadcast-address 10.254.239.31; option routers rtr-239-32-1.example.org; } # A slightly different configuration for an internal subnet. subnet 10.5.5.0 netmask 255.255.255.224 { range 10.5.5.26 10.5.5.30; option domain-name-servers ns1.internal.example.org; option domain-name "internal.example.org"; option routers 10.5.5.1; option broadcast-address 10.5.5.31; default-lease-time 600; max-lease-time 7200; } # Hosts which require special configuration options can be listed in # host statements. If no address is specified, the address will be # allocated dynamically (if possible), but the host-specific information # will still come from the host declaration. host passacaglia { hardware ethernet 0:0:c0:5d:bd:95; filename "vmunix.passacaglia"; server-name "toccata.fugue.com"; } # Fixed IP addresses can also be specified for hosts. These addresses # should not also be listed as being available for dynamic assignment. # Hosts for which fixed IP addresses have been specified can boot using # BOOTP or DHCP. Hosts for which no fixed address is specified can only # be booted with DHCP, unless there is an address range on the subnet # to which a BOOTP client is connected which has the dynamic-bootp flag # set. host fantasia { hardware ethernet 08:00:07:26:c0:a5; fixed-address fantasia.fugue.com; } # You can declare a class of clients and then do address allocation # based on that. The example below shows a case where all clients # in a certain class get addresses on the 10.17.224/24 subnet, and all # other clients get addresses on the 10.0.29/24 subnet. class "foo" { match if substring (option vendor-class-identifier, 0, 4) = "SUNW"; } shared-network 224-29 { subnet 10.17.224.0 netmask 255.255.255.0 { option routers rtr-224.example.org; } subnet 10.0.29.0 netmask 255.255.255.0 { option routers rtr-29.example.org; } pool { allow members of "foo"; range 10.17.224.10 10.17.224.250; } pool { deny members of "foo"; range 10.0.29.10 10.0.29.230; } }

自分の環境にあわせ以下を訂正・追記しました。
MACアドレスで配布するIPアドレスを固定したりとか色々できますが、まぁそれは必要になった時にします。

# option definitions common to all supported networks...
option domain-name "takaq.jp";

# option domain-name-servers ns1.example.org, ns2.example.org;
option domain-name-servers 192.168.1.7;

# Nao tentar atualizar o DNS. -> この分は起動時メッセージ見て追加しました。
ddns-update-style none;

# If this DHCP server is the official DHCP server for the local
# network, the authoritative directive should be uncommented.
authoritative;

subnet 192.168.1.0 netmask 255.255.255.0 {
　　range 192.168.1.60 192.168.1.100;
　　option routers 192.168.1.1;
}

※bind とかで ddns-update使って ddns する場合「 ddns-update-style interim; 」としておきます。

# cp /usr/local/etc/rc.d/isc-dhcpd.sh /usr/local/etc/rc.d/dhcpd.sh で起動ファイルを作成します。

オリジナルは以下のとおりでした。修正はなしでそのまま使いました。
ネットワークが複数ある場合は「 dhcpd_ifaces= 」に使用するインタフェースを記述します。(Ex : dhcpd_ifaces=fe0 )

#! /bin/sh # # $FreeBSD: ports/net/isc-dhcp3/files/isc-dhcpd.sh.sample,v 1.4 2001/10/15 13:33:15 roam Exp $ # # Start or stop isc-dhcpd. # rc_file=${0##*/} rc_arg=$1 # override these variables in ${PREFIX}/etc/rc.isc-dhcpd.conf dhcpd_options= # command option(s) dhcpd_ifaces= # ethernet interface(s) if ! PREFIX=$(expr $0 : "\(/.*\)/etc/rc\.d/${rc_file}\$"); then echo "${rc_file}: Cannot determine PREFIX." >&2 echo "Please use the complete pathname." >&2 exit 64 fi rcconf_dir=${PREFIX}/etc rcconf_file=rc.${rc_file%.sh}.conf rcconf_path=${rcconf_dir}/${rcconf_file} if [ -f ${rcconf_path} ]; then . ${rcconf_path} fi program_dir=${PREFIX}/sbin program_file=dhcpd program_path=${program_dir}/${program_file} config_dir=${PREFIX}/etc config_file=${program_file}.conf config_path=${config_dir}/${config_file} pid_dir=/var/run pid_file=${program_file}.pid pid_path=${pid_dir}/${pid_file} syslog_facility=daemon.err case "$rc_arg" in start) if [ ! -x ${program_path} ]; then logger -sp ${syslog_facility} -t ${program_file} \ "unable to start: ${program_path} is missing." exit 72 fi if [ ! -f ${config_path} ]; then logger -sp ${syslog_facility} -t ${program_file} \ "unable to start: ${config_path} is missing." exit 72 fi ${program_path} ${dhcpd_options} ${dhcpd_ifaces} && echo -n " ${program_file}" ;; stop) if [ -r ${pid_path} ]; then kill $(cat ${pid_path}) 2> /dev/null else killall ${program_file} 2> /dev/null fi ;; restart) $0 stop $0 start ;; status) ps -auxww | egrep ${program_file} | egrep -v "($0|egrep)" ;; *) echo "usage: ${rc_file} {start|stop|restart|status}" >&2 exit 64 ;; esac exit 0

# touch /var/db/dhcpd.leases でリース情報用ログファイルを作成します。これしないと起動しません。

4.起動

# /usr/local/etc/rc.d/dhcp.sh start で起動します。

この時、設定ファイルや環境で足りないファイルなどがあったりするとメッセージで知らせてきます。
その都度見直し・修正とかして起動、修正を繰り返します。
正常時は次ぎのようなメッセージでした。

Internet Software Consortium DHCP Server V3.0.1rc4
Copyright 1995-2001 Internet Software Consortium.
All rights reserved.
For info, please visit http://www.isc.org/products/DHCP
Wrote 0 deleted host decls to leases file.
Wrote 0 new dynamic host decls to leases file.
Wrote 2 leases to leases file.
Listening on BPF/fe0/00:80:3d:04:60:1a/192.168.1.0/24
Sending on BPF/fe0/00:80:3d:04:60:1a/192.168.1.0/24
Sending on Socket/fallback/fallback-net
dhcpd

これで、OS起動時は自動で起動します。

5.テスト

クライアントPC( WindowsXP) の TCP-IP を次のようにします。

うまく取得できたか確認します。

　　↑
どうやらとれていますね。(設定範囲の後ろからかい!)

これで、他のホストへの ping とかインターネットでWebサイト閲覧とかができればOKですね。

平成21年04月14日(火) 追記

これまでの設定のままでは、LAN内でDHCPにてアドレス取得したPCの名前解決ができないので、ApacheのアクセスログやCCIの判定などで生のIPアドレスだけになったしまうし、tcpwrapperとかでドメイン名でアクセス許可している場合はアクセスできず許可するIPアドレスの範囲を書く必要があります。
わが家では、tinydns を使ってLAN内の名前解決していますが、これには bind の ddns-update機能が無いので tinydns の data に DHCP で払い出すIPアドレス分の記述を追加してmake しました。

[参考] -> /var/db/dhcpd.leases です。

平成21年04月20日(月) 追記

/var/db/dhcpd.leasesの 貸し出し期間の starts, ends の時刻はグリニッジ平均時 (GMT) で指定され、ローカルのタイムゾーンではありません。実はグリニッジは年内のある期間サマータイムになるので、貸し出しの時刻が常に壁時計時刻と同じになるところは、世界中のどこにも存在しません。 Unix マシンでは、GMT での現時刻は date -u と入力すればわかります。 ・・・・　とのことです。

平成21年04月23日(木) 追記

dhcp_dns で isc-dhcpd と djbdns を連携してみました。資料はここにあります。

平成22年02月28日(日) 追記

PC-9821Neが壊れたのに伴い libretto 60 に環境構築しました。
バージョンは V3.0.12rc4 です。OSは4系の最終バージョンである FreeBSD 4.11 Release です。

V3.0.12rc4 では、グループ dhcpd と ユーザ dhcpd が要りました。/stand/sysinstall で作成しましたが以下に書いておきます。

/etc/group

　　dhcpd:*:1001:

/etc/passwd

　　dhcpd:*:1002:1001:User &:/home/dhcpd:/sbin/nologin

また、leases は /var/db/dhcpd/dhcpd.leases になっていました。

FreeBSDのあるバージョンからは、OS起動時に読み込まれる起動シェルを制御するのに /usr/local/etc/rc.subr を参照するような構造になっているようです。
各種アプリケーションも起動シェル内でこれを見る作りになっているものがあります。
今回、libretto 60 に環境構築 する前にそれまで入っていた Apache, Samba を /stand/sysinstall で削除した後、残ってしまったファイルを手で削除しました。
その時にゴミファイルと思って /usr/local/etc/rc.subr を rm してしまったのです。
なので、dhcpd を起動できなくなってしまいました。

手で削除したものだから /stand/sysinstall のパッケージ管理ができなくなったのです。
ここで、暫ーーく時間とられましたが、丁度 FreeBSD 4.11 Release が入った DynaBook220CS があったので、それにインストールして FTP で libretto 60 に転送してOKになりました。

私のような間違いした人のために以下にファイルを置いておきます。

# $NetBSD: rc.subr,v 1.60 2003/07/26 05:13:47 lukem Exp $ # $FreeBSD: src/etc/rc.subr,v 1.31 2004/07/30 17:19:35 mtm Exp $ # # Copyright (c) 1997-2002 The NetBSD Foundation, Inc. # All rights reserved. # # This code is derived from software contributed to The NetBSD Foundation # by Luke Mewburn. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions # are met: # 1. Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # 2. Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in the # documentation and/or other materials provided with the distribution. # 3. All advertising materials mentioning features or use of this software # must display the following acknowledgement: # This product includes software developed by the NetBSD # Foundation, Inc. and its contributors. # 4. Neither the name of The NetBSD Foundation nor the names of its # contributors may be used to endorse or promote products derived # from this software without specific prior written permission. # # THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS # ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED # TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR # PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS # INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN # CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) # ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE # POSSIBILITY OF SUCH DAMAGE. # # rc.subr # functions used by various rc scripts # # # Operating System dependent/independent variables # if [ -z "${_rc_subr_loaded}" ]; then _rc_subr_loaded="YES" SYSCTL="/sbin/sysctl" SYSCTL_N="${SYSCTL} -n" CMD_OSTYPE="${SYSCTL_N} kern.ostype" OSTYPE=`${CMD_OSTYPE}` ID="/usr/bin/id" IDCMD="if [ -x $ID ]; then $ID -un; fi" case ${OSTYPE} in FreeBSD) SYSCTL_W="${SYSCTL}" ;; NetBSD) SYSCTL_W="${SYSCTL} -w" ;; esac # # functions # --------- # # set_rcvar base_var # Set the variable name enabling a specific service. # FreeBSD uses ${service}_enable, while NetBSD uses # just the name of the service. For example: # FreeBSD: sendmail_enable="YES" # NetBSD : sendmail="YES" # $1 - if $name is not the base to work of off, specify # a different one # set_rcvar() { if [ -z "$1" ]; then base_var=${name} else base_var="$1" fi case ${OSTYPE} in FreeBSD) echo ${base_var}_enable ;; NetBSD) echo ${base_var} ;; *) echo 'XXX' ;; esac } # # force_depend script # Force a service to start. Intended for use by services # to resolve dependency issues. It is assumed the caller # has check to make sure this call is necessary # $1 - filename of script, in /etc/rc.d, to run # force_depend() { _depend="$1" info "${name} depends on ${_depend}, which will be forced to start." if ! /etc/rc.d/${_depend} forcestart ; then warn "Unable to force ${_depend}. It may already be running." return 1 fi return 0 } # # checkyesno var # Test $1 variable, and warn if not set to YES or NO. # Return 0 if it's "yes" (et al), nonzero otherwise. # checkyesno() { eval _value=\$${1} debug "checkyesno: $1 is set to $_value." case $_value in # "yes", "true", "on", or "1" [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) return 0 ;; # "no", "false", "off", or "0" [Nn][Oo]|[Ff][Aa][Ll][Ss][Ee]|[Oo][Ff][Ff]|0) return 1 ;; *) warn "\$${1} is not set properly - see rc.conf(5)." return 1 ;; esac } # reverse_list list # print the list in reverse order # reverse_list() { _revlist= for _revfile; do _revlist="$_revfile $_revlist" done echo $_revlist } # # mount_critical_filesystems type # Go through the list of critical filesystems as provided in # the rc.conf(5) variable $critical_filesystems_${type}, checking # each one to see if it is mounted, and if it is not, mounting it. # mount_critical_filesystems() { eval _fslist=\$critical_filesystems_${1} for _fs in $_fslist; do mount | ( _ismounted=false while read what _on on _type type; do if [ $on = $_fs ]; then _ismounted=true fi done if $_ismounted; then : else mount $_fs >/dev/null 2>&1 fi ) done } # # check_pidfile pidfile procname [interpreter] # Parses the first line of pidfile for a PID, and ensures # that the process is running and matches procname. # Prints the matching PID upon success, nothing otherwise. # interpreter is optional; see _find_processes() for details. # check_pidfile() { _pidfile=$1 _procname=$2 _interpreter=$3 if [ -z "$_pidfile" -o -z "$_procname" ]; then err 3 'USAGE: check_pidfile pidfile procname [interpreter]' fi if [ ! -f $_pidfile ]; then debug "pid file ($_pidfile): not readable." return fi read _pid _junk < $_pidfile if [ -z "$_pid" ]; then debug "pid file {$_pidfile): no pid in file." return fi _find_processes $_procname ${_interpreter:-.} '-p '"$_pid" } # # check_process procname [interpreter] # Ensures that a process (or processes) named procname is running. # Prints a list of matching PIDs. # interpreter is optional; see _find_processes() for details. # check_process() { _procname=$1 _interpreter=$2 if [ -z "$_procname" ]; then err 3 'USAGE: check_process procname [interpreter]' fi _find_processes $_procname ${_interpreter:-.} '-ax' } # # _find_processes procname interpreter psargs # Search for procname in the output of ps generated by psargs. # Prints the PIDs of any matching processes, space separated. # # If interpreter == ".", check the following variations of procname # against the first word of each command: # procname # `basename procname` # `basename procname` + ":" # "(" + `basename procname` + ")" # # If interpreter != ".", read the first line of procname, remove the # leading #!, normalise whitespace, append procname, and attempt to # match that against each command, either as is, or with extra words # at the end. # _find_processes() { if [ $# -ne 3 ]; then err 3 'USAGE: _find_processes procname interpreter psargs' fi _procname=$1 _interpreter=$2 _psargs=$3 _pref= if [ $_interpreter != "." ]; then # an interpreted script read _interp < $_procname # read interpreter name _interp=${_interp#\#!} # strip #! set -- $_interp if [ $_interpreter != $1 ]; then warn "\$command_interpreter $_interpreter != $1" fi _interp="$* $_procname" # cleanup spaces, add _procname _fp_args='_argv' _fp_match='case "$_argv" in ${_interp}|"${_interp} "*)' else # a normal daemon _procnamebn=${_procname##*/} _fp_args='_arg0 _argv' _fp_match='case "$_arg0" in $_procname|$_procnamebn|${_procnamebn}:|"(${_procnamebn})")' fi _proccheck=' ps 2>/dev/null -o "pid,command" '"$_psargs"' | while read _npid '"$_fp_args"'; do case "$_npid" in PID) continue ;; esac ; '"$_fp_match"' echo -n "$_pref$_npid" ; _pref=" " ;; esac done' # debug "in _find_processes: proccheck is ($_proccheck)." eval $_proccheck } # # wait_for_pids pid [pid ...] # spins until none of the pids exist # wait_for_pids() { _list="$@" if [ -z "$_list" ]; then return fi _prefix= while true; do _nlist=""; for _j in $_list; do if kill -0 $_j 2>/dev/null; then _nlist="${_nlist}${_nlist:+ }$_j" fi done if [ -z "$_nlist" ]; then break fi _list=$_nlist echo -n ${_prefix:-"Waiting for PIDS: "}$_list _prefix=", " sleep 2 done if [ -n "$_prefix" ]; then echo "." fi } # # run_rc_command argument # Search for argument in the list of supported commands, which is: # "start stop restart rcvar status poll ${extra_commands}" # If there's a match, run ${argument}_cmd or the default method # (see below). # # If argument has a given prefix, then change the operation as follows: # Prefix Operation # ------ --------- # fast Skip the pid check, and set rc_fast=yes # force Set ${rcvar} to YES, and set rc_force=yes # one Set ${rcvar} to YES # # The following globals are used: # # Name Needed Purpose # ---- ------ ------- # name y Name of script. # # command n Full path to command. # Not needed if ${rc_arg}_cmd is set for # each keyword. # # command_args n Optional args/shell directives for command. # # command_interpreter n If not empty, command is interpreted, so # call check_{pidfile,process}() appropriately. # # extra_commands n List of extra commands supported. # # pidfile n If set, use check_pidfile $pidfile $command, # otherwise use check_process $command. # In either case, only check if $command is set. # # procname n Process name to check for instead of $command. # # rcvar n This is checked with checkyesno to determine # if the action should be run. # # ${name}_chroot n Directory to chroot to before running ${command} # Requires /usr to be mounted. # # ${name}_chdir n Directory to cd to before running ${command} # (if not using ${name}_chroot). # # ${name}_flags n Arguments to call ${command} with. # NOTE: $flags from the parent environment # can be used to override this. # # ${name}_nice n Nice level to run ${command} at. # # ${name}_user n User to run ${command} as, using su(1) if not # using ${name}_chroot. # Requires /usr to be mounted. # # ${name}_group n Group to run chrooted ${command} as. # Requires /usr to be mounted. # # ${name}_groups n Comma separated list of supplementary groups # to run the chrooted ${command} with. # Requires /usr to be mounted. # # ${rc_arg}_cmd n If set, use this as the method when invoked; # Otherwise, use default command (see below) # # ${rc_arg}_precmd n If set, run just before performing the # ${rc_arg}_cmd method in the default # operation (i.e, after checking for required # bits and process (non)existence). # If this completes with a non-zero exit code, # don't run ${rc_arg}_cmd. # # ${rc_arg}_postcmd n If set, run just after performing the # ${rc_arg}_cmd method, if that method # returned a zero exit code. # # required_dirs n If set, check for the existence of the given # directories before running the default # (re)start command. # # required_files n If set, check for the readability of the given # files before running the default (re)start # command. # # required_vars n If set, perform checkyesno on each of the # listed variables before running the default # (re)start command. # # Default behaviour for a given argument, if no override method is # provided: # # Argument Default behaviour # -------- ----------------- # start if !running && checkyesno ${rcvar} # ${command} # # stop if ${pidfile} # rc_pid=$(check_pidfile $pidfile $command) # else # rc_pid=$(check_process $command) # kill $sig_stop $rc_pid # wait_for_pids $rc_pid # ($sig_stop defaults to TERM.) # # reload Similar to stop, except use $sig_reload instead, # and doesn't wait_for_pids. # $sig_reload defaults to HUP. # # restart Run `stop' then `start'. # # status Show if ${command} is running, etc. # # poll Wait for ${command} to exit. # # rcvar Display what rc.conf variable is used (if any). # # Variables available to methods, and after run_rc_command() has # completed: # # Variable Purpose # -------- ------- # rc_arg Argument to command, after fast/force/one processing # performed # # rc_flags Flags to start the default command with. # Defaults to ${name}_flags, unless overridden # by $flags from the environment. # This variable may be changed by the precmd method. # # rc_pid PID of command (if appropriate) # # rc_fast Not empty if "fast" was provided (q.v.) # # rc_force Not empty if "force" was provided (q.v.) # # run_rc_command() { _return=0 rc_arg=$1 if [ -z "$name" ]; then err 3 'run_rc_command: $name is not set.' fi # Don't repeat the first argument when passing additional command- # line arguments to the command subroutines. # shift 1 rc_extra_args="$*" _rc_prefix= case "$rc_arg" in fast*) # "fast" prefix; don't check pid rc_arg=${rc_arg#fast} rc_fast=yes ;; force*) # "force prefix; always run rc_force=yes _rc_prefix=force rc_arg=${rc_arg#${_rc_prefix}} if [ -n "${rcvar}" ]; then eval ${rcvar}=YES fi ;; one*) # "one" prefix; set ${rcvar}=yes _rc_prefix=one rc_arg=${rc_arg#${_rc_prefix}} if [ -n "${rcvar}" ]; then eval ${rcvar}=YES fi ;; esac eval _overide_command=\$${name}_program if [ -n "$_overide_command" ]; then command=$_overide_command fi _keywords="start stop restart rcvar $extra_commands" rc_pid= _pidcmd= _procname=${procname:-${command}} # setup pid check command if [ -n "$_procname" ]; then if [ -n "$pidfile" ]; then _pidcmd='rc_pid=$(check_pidfile '"$pidfile $_procname $command_interpreter"')' else _pidcmd='rc_pid=$(check_process '"$_procname $command_interpreter"')' fi if [ -n "$_pidcmd" ]; then _keywords="${_keywords} status poll" fi fi if [ -z "$rc_arg" ]; then rc_usage "$_keywords" fi if [ -n "$flags" ]; then # allow override from environment rc_flags=$flags else eval rc_flags=\$${name}_flags fi eval _chdir=\$${name}_chdir _chroot=\$${name}_chroot \ _nice=\$${name}_nice _user=\$${name}_user \ _group=\$${name}_group _groups=\$${name}_groups if [ -n "$_user" ]; then # unset $_user if running as that user if [ "$_user" = "$(eval $IDCMD)" ]; then unset _user fi fi # if ${rcvar} is set, and $1 is not # "rcvar", then run # checkyesno ${rcvar} # and return if that failed # if [ -n "${rcvar}" -a "$rc_arg" != "rcvar" ]; then if ! checkyesno ${rcvar}; then return 0 fi fi eval $_pidcmd # determine the pid if necessary for _elem in $_keywords; do if [ "$_elem" != "$rc_arg" ]; then continue fi # if there's a custom ${XXX_cmd}, # run that instead of the default # eval _cmd=\$${rc_arg}_cmd _precmd=\$${rc_arg}_precmd \ _postcmd=\$${rc_arg}_postcmd if [ -n "$_cmd" ]; then # if the precmd failed and force # isn't set, exit # if [ -n "$_precmd" ]; then debug "run_rc_command: evaluating ${_precmd}()." eval $_precmd $rc_extra_args _return=$? [ $_return -ne 0 ] && [ -z "$rc_force" ] && return 1 fi if [ -n "$_cmd" ]; then debug "run_rc_command: evaluating ${_cmd}()." eval $_cmd $rc_extra_args _return=$? [ $_return -ne 0 ] && [ -z "$rc_force" ] && return 1 fi if [ -n "$_postcmd" ]; then debug "run_rc_command: evaluating ${_postcmd}()." eval $_postcmd $rc_extra_args _return=$? fi return $_return fi case "$rc_arg" in # default operations... status) if [ -n "$rc_pid" ]; then echo "${name} is running as pid $rc_pid." else echo "${name} is not running." return 1 fi ;; start) if [ -z "$rc_fast" -a -n "$rc_pid" ]; then echo "${name} already running? (pid=$rc_pid)." exit 1 fi if [ ! -x ${_chroot}${command} ]; then info "run_rc_command: cannot run ($command)." return 0 fi # check for required variables, # directories, and files # for _f in $required_vars; do if ! checkyesno $_f; then warn "\$${_f} is not set." if [ -z "$rc_force" ]; then return 1 fi fi done for _f in $required_dirs; do if [ ! -d "${_f}/." ]; then warn "${_f} is not a directory." if [ -z "$rc_force" ]; then return 1 fi fi done for _f in $required_files; do if [ ! -r "${_f}" ]; then warn "${_f} is not readable." if [ -z "$rc_force" ]; then return 1 fi fi done # if the precmd failed and force # isn't set, exit # if [ -n "${_precmd}" ]; then debug "run_rc_command: evaluating ${_precmd}()." eval $_precmd _return=$? [ $_return -ne 0 ] && [ -z "$rc_force" ] && return 1 fi # setup the command to run, and run it # echo "Starting ${name}." if [ -n "$_chroot" ]; then _doit="\ ${_nice:+nice -n $_nice }\ chroot ${_user:+-u $_user }${_group:+-g $_group }${_groups:+-G $_groups }\ $_chroot $command $rc_flags $command_args" else _doit="\ ${_chdir:+cd $_chdir; }\ ${_nice:+nice -n $_nice }\ $command $rc_flags $command_args" if [ -n "$_user" ]; then _doit="su -m $_user -c 'sh -c \"$_doit\"'" fi fi # if the cmd failed and force # isn't set, exit # debug "run_rc_command: _doit: $_doit" eval $_doit _return=$? [ $_return -ne 0 ] && [ -z "$rc_force" ] && return 1 # finally, run postcmd # if [ -n "${_postcmd}" ]; then debug "run_rc_command: evaluating ${_postcmd}()." eval $_postcmd fi ;; stop) if [ -z "$rc_pid" ]; then [ -n "$rc_fast" ] && exit 0 if [ -n "$pidfile" ]; then echo \ "${name} not running? (check $pidfile)." else echo "${name} not running?" fi exit 1 fi # if the precmd failed and force # isn't set, exit # if [ -n "$_precmd" ]; then eval $_precmd _return=$? [ $_return -ne 0 ] && [ -z "$rc_force" ] && return 1 fi # send the signal to stop # echo "Stopping ${name}." _doit="kill -${sig_stop:-TERM} $rc_pid" if [ -n "$_user" ]; then _doit="su -m $_user -c 'sh -c \"$_doit\"'" fi # if the stop cmd failed and force # isn't set, exit # eval $_doit _return=$? [ $_return -ne 0 ] && [ -z "$rc_force" ] && return 1 # wait for the command to exit, # and run postcmd. wait_for_pids $rc_pid if [ -n "$_postcmd" ]; then eval $_postcmd _return=$? fi ;; reload) if [ -z "$rc_pid" ]; then if [ -n "$pidfile" ]; then echo \ "${name} not running? (check $pidfile)." else echo "${name} not running?" fi exit 1 fi echo "Reloading ${name} config files." if [ -n "$_precmd" ]; then eval $_precmd _return=$? [ $_return -ne 0 ] && [ -z "$rc_force" ] && return 1 fi _doit="kill -${sig_reload:-HUP} $rc_pid" if [ -n "$_user" ]; then _doit="su -m $_user -c 'sh -c \"$_doit\"'" fi eval $_doit _return=$? [ $_return -ne 0 ] && [ -z "$rc_force" ] && return 1 if [ -n "$_postcmd" ]; then eval $_postcmd _return=$? fi ;; restart) if [ -n "$_precmd" ]; then eval $_precmd $rc_extra_args _return=$? [ $_return -ne 0 ] && [ -z "$rc_force" ] && return 1 fi # prevent restart being called more # than once by any given script # if ${_rc_restart_done:-false}; then return 0 fi _rc_restart_done=true ( $0 ${_rc_prefix}stop $rc_extra_args ) $0 ${_rc_prefix}start $rc_extra_args if [ -n "$_postcmd" ]; then eval $_postcmd $rc_extra_args _return=$? fi ;; poll) if [ -n "$rc_pid" ]; then wait_for_pids $rc_pid fi ;; rcvar) echo "# $name" if [ -n "$rcvar" ]; then if checkyesno ${rcvar}; then echo "\$${rcvar}=YES" else echo "\$${rcvar}=NO" fi fi ;; *) rc_usage "$_keywords" ;; esac return $_return done echo 1>&2 "$0: unknown directive '$rc_arg'." rc_usage "$_keywords" exit 1 } # # run_rc_script file arg # Start the script `file' with `arg', and correctly handle the # return value from the script. If `file' ends with `.sh', it's # sourced into the current environment. If `file' appears to be # a backup or scratch file, ignore it. Otherwise if it's # executable run as a child process. # run_rc_script() { _file=$1 _arg=$2 if [ -z "$_file" -o -z "$_arg" ]; then err 3 'USAGE: run_rc_script file arg' fi unset name command command_args command_interpreter \ extra_commands pidfile procname \ rcvar required_dirs required_files required_vars eval unset ${_arg}_cmd ${_arg}_precmd ${_arg}_postcmd case "$_file" in *.sh) # run in current shell set $_arg ; . $_file ;; *[~#]|*.OLD|*.orig|*,v) # scratch file; skip warn "Ignoring scratch file $_file" ;; *) # run in subshell if [ -x $_file ]; then if [ -n "$rc_fast_and_loose" ]; then set $_arg ; . $_file else ( trap "echo Script $_file interrupted; kill -QUIT $$" 3 trap "echo Script $_file interrupted; exit 1" 2 set $_arg ; . $_file ) fi fi ;; esac } # # load_rc_config # Source in the configuration file for a given command. # load_rc_config() { _command=$1 if [ -z "$_command" ]; then err 3 'USAGE: load_rc_config command' fi if ${_rc_conf_loaded:-false}; then : else if [ -r /etc/defaults/rc.conf ]; then debug "Sourcing /etc/defaults/rc.conf" . /etc/defaults/rc.conf source_rc_confs elif [ -r /etc/rc.conf ]; then debug "Sourcing /etc/rc.conf (/etc/defaults/rc.conf doesn't exist)." . /etc/rc.conf fi _rc_conf_loaded=true fi if [ -f /etc/rc.conf.d/"$_command" ]; then debug "Sourcing /etc/rc.conf.d/${_command}" . /etc/rc.conf.d/"$_command" fi # XXX - Deprecated variable name support # case ${OSTYPE} in FreeBSD) [ -n "$portmap_enable" ] && rpcbind_enable="$portmap_enable" [ -n "$portmap_program" ] && rpcbind_program="$portmap_program" [ -n "$portmap_flags" ] && rpcbind_flags="$portmap_flags" [ -n "$single_mountd_enable" ] && mountd_enable="$single_mountd_enable" [ -n "$xntpd_enable" ] && ntpd_enable="$xntpd_enable" [ -n "$xntpd_program" ] && ntpd_program="$xntpd_program" [ -n "$xntpd_flags" ] && ntpd_flags="$xntpd_flags" [ -n "$dhcp_program" ] && dhclient_program="$dhcp_program" [ -n "$dhcp_flags" ] && dhclient_flags="$dhcp_flags" ;; esac } # # rc_usage commands # Print a usage string for $0, with `commands' being a list of # valid commands. # rc_usage() { echo -n 1>&2 "Usage: $0 [fast|force|one](" _sep= for _elem; do echo -n 1>&2 "$_sep$_elem" _sep="|" done echo 1>&2 ")" exit 1 } # # err exitval message # Display message to stderr and log to the syslog, and exit with exitval. # err() { exitval=$1 shift if [ -x /usr/bin/logger ]; then logger "$0: ERROR: $*" fi echo 1>&2 "$0: ERROR: $*" exit $exitval } # # warn message # Display message to stderr and log to the syslog. # warn() { if [ -x /usr/bin/logger ]; then logger "$0: WARNING: $*" fi echo 1>&2 "$0: WARNING: $*" } # # info message # Display informational message to stdout and log to syslog. # info() { case ${rc_info} in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) if [ -x /usr/bin/logger ]; then logger "$0: INFO: $*" fi echo "$0: INFO: $*" ;; esac } # # debug message # If debugging is enabled in rc.conf output message to stderr. # BEWARE that you don't call any subroutine that itself calls this # function. # debug() { case ${rc_debug} in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) if [ -x /usr/bin/logger ]; then logger "$0: INFO: $*" fi echo 1>&2 "$0: DEBUG: $*" ;; esac } # # backup_file action file cur backup # Make a backup copy of `file' into `cur', and save the previous # version of `cur' as `backup' or use rcs for archiving. # # This routine checks the value of the backup_uses_rcs variable, # which can be either YES or NO. # # The `action' keyword can be one of the following: # # add `file' is now being backed up (and is possibly # being reentered into the backups system). `cur' # is created and RCS files, if necessary, are # created as well. # # update `file' has changed and needs to be backed up. # If `cur' exists, it is copied to to `back' or # checked into RCS (if the repository file is old), # and then `file' is copied to `cur'. Another RCS # check in done here if RCS is being used. # # remove `file' is no longer being tracked by the backups # system. If RCS is not being used, `cur' is moved # to `back', otherwise an empty file is checked in, # and then `cur' is removed. # # backup_file() { _action=$1 _file=$2 _cur=$3 _back=$4 if checkyesno backup_uses_rcs; then _msg0="backup archive" _msg1="update" # ensure that history file is not locked if [ -f $_cur,v ]; then rcs -q -u -U -M $_cur fi # ensure after switching to rcs that the # current backup is not lost if [ -f $_cur ]; then # no archive, or current newer than archive if [ ! -f $_cur,v -o $_cur -nt $_cur,v ]; then ci -q -f -u -t-"$_msg0" -m"$_msg1" $_cur rcs -q -kb -U $_cur co -q -f -u $_cur fi fi case $_action in add|update) cp -p $_file $_cur ci -q -f -u -t-"$_msg0" -m"$_msg1" $_cur rcs -q -kb -U $_cur co -q -f -u $_cur chown root:wheel $_cur $_cur,v ;; remove) cp /dev/null $_cur ci -q -f -u -t-"$_msg0" -m"$_msg1" $_cur rcs -q -kb -U $_cur chown root:wheel $_cur $_cur,v rm $_cur ;; esac else case $_action in add|update) if [ -f $_cur ]; then cp -p $_cur $_back fi cp -p $_file $_cur chown root:wheel $_cur ;; remove) mv -f $_cur $_back ;; esac fi } # make_symlink src link # Make a symbolic link 'link' to src from basedir. If the # directory in which link is to be created does not exist # a warning will be displayed and an error will be returned. # Returns 0 on sucess, 1 otherwise. # make_symlink() { local src link linkdir _me src="$1" link="$2" linkdir="`dirname $link`" _me="make_symlink()" if [ -z "$src" -o -z "$link" ]; then warn "$_me: requires two arguments." return 1 fi if [ ! -d "$linkdir" ]; then warn "$_me: the directory $linkdir does not exist" return 1 fi if ! ln -sf $src $link ; then warn "$_me: unable to make a symbolic link from $link to $src" return 1 fi return 0 } # devfs_rulesets_from_file file # Reads a set of devfs commands from file, and creates # the specified rulesets with their rules. Returns non-zero # if there was an error. # devfs_rulesets_from_file() { local file _err _me file="$1" _me="devfs_rulesets_from_file" _err=0 if [ -z "$file" ]; then warn "$_me: you must specify a file" return 1 fi if [ ! -e "$file" ]; then debug "$_me: no such file ($file)" return 0 fi debug "reading rulesets from file ($file)" { while read line do case $line in \#*) continue ;; \[*\]*) rulenum=`expr "$line" : "\[.*=\([0-9]*\)\]"` if [ -z "$rulenum" ]; then warn "$_me: cannot extract rule number ($line)" _err=1 break fi rulename=`expr "$line" : "\[\(.*\)=[0-9]*\]"` if [ -z "$rulename" ]; then warn "$_me: cannot extract rule name ($line)" _err=1 break; fi eval $rulename=\$rulenum debug "found ruleset: $rulename=$rulenum" if ! /sbin/devfs rule -s $rulenum delset ; then _err=1 break fi ;; *) rulecmd="${line%%"\#*"}" # evaluate the command incase it includes # other rules if [ -n "$rulecmd" ]; then debug "adding rule ($rulecmd)" if ! eval /sbin/devfs rule -s $rulenum $rulecmd then _err=1 break fi fi ;; esac if [ $_err -ne 0 ]; then debug "error in $_me" break fi done } < $file return $_err } # devfs_init_rulesets # Initializes rulesets from configuration files. Returns # non-zero if there was an error. # devfs_init_rulesets() { local file _me _me="devfs_init_rulesets" # Go through this only once if [ -n "$devfs_rulesets_init" ]; then debug "$_me: devfs rulesets already initialized" return fi for file in $devfs_rulesets ; do devfs_rulesets_from_file $file || return 1 done devfs_rulesets_init=1 debug "$_me: devfs rulesets initialized" return 0 } # devfs_set_ruleset ruleset [dir] # Sets the default ruleset of dir to ruleset. The ruleset arguement # must be a ruleset name as specified in devfs.rules(5) file. # Returns non-zero if it could not set it successfully. # devfs_set_ruleset() { local devdir rs _me [ -n "$1" ] && eval rs=\$$1 || rs= [ -n "$2" ] && devdir="-m "$2"" || devdir= _me="devfs_set_ruleset" if [ -z "$rs" ]; then warn "$_me: you must specify a ruleset number" return 1 fi debug "$_me: setting ruleset ($rs) on mount-point (${devdir#-m })" if ! /sbin/devfs $devdir ruleset $rs ; then warn "$_me: unable to set ruleset $rs to ${devdir#-m }" return 1 fi return 0 } # devfs_apply_ruleset ruleset [dir] # Apply ruleset number $ruleset to the devfs mountpoint $dir. # The ruleset argument must be a ruleset name as specified # in a devfs.rules(5) file. Returns 0 on success or

【戻る】