#!/sbin/sh
###############################################################################
# Example script for installing MySQL database and phpMyAdmin in a Solaris Zone
###############################################################################
# Set mysql root password
mysqlpw=pw
host=mysql
ctrluser=myadmin
ctrluserpw=${mysqlpw}
tag=PreMY

##############################################################################
# Set docs path
htdocs="/opt/csw/apache2/share/htdocs"
ap2conf="/opt/csw/apache2/etc"

##############################################################################
# Set the path
PATH=/opt/csw/bin:/opt/csw/apache2/bin:/opt/csw/mysql5/bin:/usr/sfw/bin:${PATH}
export PATH

usage() {
   echo "Usage: $0 [options]
     where options include the following:
      -m  <password>   # MySQL root user password. Defaults to ${mysqlpw}
      -u  <user>       # Control user. Defaults to ${ctrluser}
      -p  <password>   # Control user password. Defaults to ${ctrluserpw}
      -h  <zonehost>   # Zone host name? Defaults to ${host}"
   exit
}

##############################################################################
# Define exit level error message routine
error_message() {
   errmsg=$1
   if [ -n "${errmsg}" ]
   then
      exec 1>&2
      echo -e "Error: ${errmsg}"
      exec 1>&1
      exit 1
   fi
}

##############################################################################
#
# If any parameters were passed evaluate their usage...
#
while getopts m:u:p:h: OPT
do
   case ${OPT} in
   m|+m) if [ -z "${OPTARG}" ];then error_message "Must provide a valid mysql root user password with the -m flag";fi
         mysqlpw="${OPTARG}"
         ;;
   u|+u) if [ -z "${OPTARG}" ];then error_message "Must provide a valid control user name with the -u flag";fi
         ctrluser="${OPTARG}"
         ;;
   p|+p) if [ -z "${OPTARG}" ];then error_message "Must provide a valid control user password with the -p flag";fi
         ctrluserpw="${OPTARG}"
         ;;
   h|+h) if [ -z "${OPTARG}" ];then error_message "Must provide a valid zone host name with the -h flag";fi
         host="${OPTARG}"
         ;;
      *) usage;;
   esac
done
shift `expr ${OPTIND} - 1`

if [ -z "${mysqlpw}" ] || [ -z "${ctrluser}" ] || [ -z "${ctrluserpw}" ] || [ -z "${host}" ]; then usage; fi

###############################################################################
# Configure MySQL
/opt/csw/mysql5/share/mysql/quick_start-csw <<EOT



EOT

# Start up MySQL
svcadm enable cswmysql5
sleep 3

# Set the MySQL root user pw.
/opt/csw/mysql5/bin/mysqladmin -u root password "${mysqlpw}"

# Load the phpMyAdmin table
mysql --user=root --password="${mysqlpw}" < ${htdocs}/phpmyadmin/scripts/create_tables.sql

# Set up the control user
mysql --user=root --password="${mysqlpw}" <<MYSQL
   GRANT USAGE ON mysql.* TO '${ctrluser}'@'localhost' IDENTIFIED BY '${ctrluserpw}';
    GRANT SELECT (
        Host, User, Select_priv, Insert_priv, Update_priv, Delete_priv,
        Create_priv, Drop_priv, Reload_priv, Shutdown_priv, Process_priv,
        File_priv, Grant_priv, References_priv, Index_priv, Alter_priv,
        Show_db_priv, Super_priv, Create_tmp_table_priv, Lock_tables_priv,
        Execute_priv, Repl_slave_priv, Repl_client_priv
        ) ON mysql.user TO '${ctrluser}'@'localhost';
    GRANT SELECT ON mysql.db TO '${ctrluser}'@'localhost';
    GRANT SELECT ON mysql.host TO '${ctrluser}'@'localhost';
    GRANT SELECT (Host, Db, User, Table_name, Table_priv, Column_priv)
        ON mysql.tables_priv TO '${ctrluser}'@'localhost';
MYSQL

###############################################################################
# Configure phpMyAdmin
cd "${htdocs}/phpmyadmin"
sed -e "s/^.*blowfish_secret.*/\$cfg['blowfish_secret'] = '${mysqlpw}';/g" \
    -e "s/^\/\/ //g" -e "s/pmapass/${mysqlpw}/g" \
   config.sample.inc.php > config.inc.php

###############################################################################
# Add php support to the indexing
cp "${ap2conf}/httpd.conf" "${ap2conf}/httpd.conf.${tag}"
sed -e "s/index.html/index.html index.php/g" -e "s/^Listen/#Listen/g" \
    -e "s/Options Indexes FollowSymLinks/Options FollowSymLinks/g" \
    -e "s/AllowOverride None/AllowOverride All/g" \
    "${ap2conf}/httpd.conf.${tag}" > "${ap2conf}/httpd.conf"

###############################################################################
# Purge apache pages and set up re-director to web-mail
cd "${htdocs}"
rm -fr apache_* index.html*
echo "<HTML><BODY><META HTTP-EQUIV=\"REFRESH\" CONTENT=\"0; URL=/phpmyadmin\"><A HREF=\"/phpmyadmin\">Click here to enter</A></BODY></HTML>" > index.html

###############################################################################
# Set proper permissions
chown -R nobody:nobody "${htdocs}/index.html" "${htdocs}/phpmyadmin"

###############################################################################
# Enable SSL on port 443 with a self signed certificate
cd "${ap2conf}"
cp httpd.conf httpd.conf.${tag}
sed -e "s/^<IfD/#<IfD/g" -e "s/^<\/IfD/#<\/IfD/g" "${ap2conf}/httpd.conf.${tag}" > "${ap2conf}/httpd.conf"
cp extra/httpd-ssl.conf extra/httpd-ssl.conf.${tag}
sed -e "s/_default_/${host}/g" "${ap2conf}/extra/httpd-ssl.conf.${tag}" > "${ap2conf}/extra/httpd-ssl.conf"
openssl genrsa -out server.key 2048
openssl req -new -x509 -key server.key -out server.crt -days 999999 <<EOCRT
US
California
Berkeley
MySQL Zone

${host}
admin@${host}
EOCRT

###############################################################################
# Set the proper permissions on the server cert files
chgrp bin server.*
svcadm enable cswapache2
svccfg -s svc:/network/http:cswapache2 setprop httpd/ssl=true
svcadm refresh cswapache2

###############################################################################
# Remove un-necessary files from the phpMyAdmin content and lock it down
cd "${htdocs}/phpmyadmin"
rm -f ChangeLog Documentation.* INSTALL RE* TODO