diff --git a/group_vars/development.yml b/group_vars/development.yml index 0c9b08d..ef2d3c3 100644 --- a/group_vars/development.yml +++ b/group_vars/development.yml @@ -5,3 +5,7 @@ ams_DatabaseServiceName: AMSE ams_DatabaseName: AMS Entwicklung ams_LogLevel: DEBUG + + sso_host: "Host *.TPOLIZEI-BW.DE" + sso_domain_upper: "TPOLIZEI-BW.DE" + sso_domain_lower: "tpolizei-bw.de" diff --git a/group_vars/production.yml b/group_vars/production.yml index b442d7b..440ca5b 100644 --- a/group_vars/production.yml +++ b/group_vars/production.yml @@ -5,3 +5,7 @@ ams_DatabaseServiceName: AMSP ams_DatabaseName: AMS Produktion ams_LogLevel: WARNING + + sso_host: "Host *.POLIZEI-BW.NET" + sso_domain_upper: "POLIZEI-BW.NET" + sso_domain_lower: "polizei-bw.net" diff --git a/group_vars/teaching.yml b/group_vars/teaching.yml index e2381e0..8326eea 100644 --- a/group_vars/teaching.yml +++ b/group_vars/teaching.yml @@ -5,3 +5,7 @@ ams_DatabaseServiceName: AMSS ams_DatabaseName: AMS Schulung ams_LogLevel: WARNING + + sso_host: "Host *.SPOLIZEI-BW.EDU" + sso_domain_upper: "SPOLIZEI-BW.EDU" + sso_domain_lower: "spolizei-bw.edu" diff --git a/roles/ams_0008_8.0.8.0/README.md b/roles/ams_0008_8.0.8.0/README.md index 9ebb87b..5a1b989 100644 --- a/roles/ams_0008_8.0.8.0/README.md +++ b/roles/ams_0008_8.0.8.0/README.md @@ -18,7 +18,13 @@ Alle Variablen befinden sich unterhalb ansible/ams/group_vars/ Dependencies ------------ -Keine. +Vorher muss die Role + + - base_installation + +gelaufen sein. + + Example Playbook ---------------- diff --git a/roles/ams_0008_8.0.8.0_AdminServer/.travis.yml b/roles/ams_0008_8.0.8.0_AdminServer/.travis.yml new file mode 100644 index 0000000..36bbf62 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/.travis.yml @@ -0,0 +1,29 @@ +--- +language: python +python: "2.7" + +# Use the new container infrastructure +sudo: false + +# Install ansible +addons: + apt: + packages: + - python-pip + +install: + # Install ansible + - pip install ansible + + # Check ansible version + - ansible --version + + # Create ansible.cfg with correct roles_path + - printf '[defaults]\nroles_path=../' >ansible.cfg + +script: + # Basic role syntax check + - ansible-playbook tests/test.yml -i tests/inventory --syntax-check + +notifications: + webhooks: https://galaxy.ansible.com/api/v1/notifications/ \ No newline at end of file diff --git a/roles/ams_0008_8.0.8.0_AdminServer/README.md b/roles/ams_0008_8.0.8.0_AdminServer/README.md new file mode 100644 index 0000000..b803936 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/README.md @@ -0,0 +1,44 @@ +Role Name +========= + +Installation von AMS Software 0008_8.0.8.0 mit neuem AdminServer für die Administration. + +Durch den neuen AdminServer wurden auch die psc.sh und startALL/stopALL-Skripte angepasst bzw. neu hinzugefügt. + +Requirements +------------ + +Unterhalb von templates/ und files/ sind erforderliche Dateien. Sonst nichts. + +Role Variables +-------------- + +Variablen sind innerhalb der Rolle keine vorhanden. + +Alle Variablen befinden sich unterhalb ansible/ams/group_vars/ + +Dependencies +------------ + +Vorher muss folgende Role gelaufen sein + +- ams_0008_8.0.8.0 + +Example Playbook +---------------- + +Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too: + + - hosts: servers + roles: + - ams_0008_8.0.8.0_AdminServer + +License +------- + +BSD + +Author Information +------------------ + +2020327 M. Gillitzer diff --git a/roles/ams_0008_8.0.8.0_AdminServer/defaults/main.yml b/roles/ams_0008_8.0.8.0_AdminServer/defaults/main.yml new file mode 100644 index 0000000..4db8f11 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/defaults/main.yml @@ -0,0 +1,2 @@ +--- +# defaults file for default_role \ No newline at end of file diff --git a/roles/ams_0008_8.0.8.0_AdminServer/files/psc.sh b/roles/ams_0008_8.0.8.0_AdminServer/files/psc.sh new file mode 100755 index 0000000..aba987a --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/files/psc.sh @@ -0,0 +1,57 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" +#Check for Appserver +if [ ! -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +APPS="DOWN" +else +APPS=$(cat $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status) +fi +#Check for Appserveradmin +if [ ! -f $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status ] +then +APPSADMIN="DOWN" +else +APPSADMIN=$(cat $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status) +fi +#Check for Webservice +if [ ! -f $AMSHOME/linux/Services/service/rsWebserviceImp20.status ] +then +WEBS="DOWN" +else +WEBS=$(cat $AMSHOME/linux/Services/service/rsWebserviceImp20.status) +fi +#Check for BV-Service +if [ ! -f $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.8.0/service/rsAmsBvService.status ] +then +BVS="DOWN" +else +BVS=$(cat $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.8.0/service/rsAmsBvService.status) +fi +#Anzeige + +printf "\n \e[33m\t\t\tAppserver und Services\e[0m \n\n\n" +if [[ $APPS = "STARTED" ]] +then +printf "\t\tAppserver\t\e[32m%s\e[0m \n\n\n" "$APPS" +else +printf "\t\tAppserver\t\e[31m%s\e[0m \n\n\n" "$APPS" +fi +if [[ $APPSADMIN = "STARTED" ]] +then +printf "\t\tAppserveradmin\t\e[32m%s\e[0m \n\n\n" "$APPSADMIN" +else +printf "\t\tAppserveradmin\t\e[31m%s\e[0m \n\n\n" "$APPSADMIN" +fi +if [[ $WEBS = "STARTED" ]] +then +printf "\t\tWebservice\t\e[32m%s\e[0m \n\n\n" "$WEBS" +else +printf "\t\tWebservice\t\e[31m%s\e[0m \n\n\n" "$WEBS" +fi +if [[ $BVS = "STARTED" ]] +then +printf "\t\tBV-Service\t\e[32m%s\e[0m \n\n\n" "$BVS" +else +printf "\t\tBV-Service\t\e[31m%s\e[0m \n\n\n" "$BVS" +fi diff --git a/roles/ams_0008_8.0.8.0_AdminServer/files/startALL b/roles/ams_0008_8.0.8.0_AdminServer/files/startALL new file mode 100755 index 0000000..f7140dc --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/files/startALL @@ -0,0 +1,31 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" +#Check for Appserver +if [ -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver is already running!" +else +/opt/rola/ams/linux/Appserver/service/rsWebserviceAppserver.sh start; +fi +#Check for Webservice +if [ -f $AMSHOME/linux/Services/service/rsWebserviceImp20.status ] +then +echo "Webservice is already running!" +else +/opt/rola/ams/linux/Services/service/rsWebserviceImp20.sh start; +fi +#Check for BV-Service +if [ -f $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.8.0/service/rsAmsBvService.status ] +then +echo "BV-Service is already running!" +else +/opt/rola/ams/linux/webclient-services/rsAmsBvService-8.0.8.0/service/rsAmsBvService.sh start; +fi +#Check for Appserveradmin +if [ -f $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status ] +then +echo "Appserveradmin is already running!" +else +/opt/rola/ams/linux/Appserveradmin/service/rsWebserviceAppserver.sh start; +fi +./psc.sh diff --git a/roles/ams_0008_8.0.8.0_AdminServer/files/startALLwoa b/roles/ams_0008_8.0.8.0_AdminServer/files/startALLwoa new file mode 100755 index 0000000..3e9d99a --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/files/startALLwoa @@ -0,0 +1,25 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" +#Check for Appserver +if [ -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver is already running!" +else +/opt/rola/ams/linux/Appserver/service/rsWebserviceAppserver.sh start; +fi +#Check for Webservice +if [ -f $AMSHOME/linux/Services/service/rsWebserviceImp20.status ] +then +echo "Webservice is already running!" +else +/opt/rola/ams/linux/Services/service/rsWebserviceImp20.sh start; +fi +#Check for BV-Service +if [ -f $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.8.0/service/rsAmsBvService.status ] +then +echo "BV-Service is already running!" +else +/opt/rola/ams/linux/webclient-services/rsAmsBvService-8.0.8.0/service/rsAmsBvService.sh start; +fi + +./psc.sh diff --git a/roles/ams_0008_8.0.8.0_AdminServer/files/startadmin b/roles/ams_0008_8.0.8.0_AdminServer/files/startadmin new file mode 100755 index 0000000..9ca3a48 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/files/startadmin @@ -0,0 +1,10 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" + +if [ -f $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status ] +then +echo "Appserveradmin is already running!" +else +/opt/rola/ams/linux/Appserveradmin/service/rsWebserviceAppserver.sh start; +fi +./psc.sh diff --git a/roles/ams_0008_8.0.8.0_AdminServer/files/startapps b/roles/ams_0008_8.0.8.0_AdminServer/files/startapps new file mode 100755 index 0000000..f0e6a76 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/files/startapps @@ -0,0 +1,10 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" + +if [ -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver is already running!" +else +/opt/rola/ams/linux/Appserver/service/rsWebserviceAppserver.sh start; +fi +./psc.sh diff --git a/roles/ams_0008_8.0.8.0_AdminServer/files/stopALL b/roles/ams_0008_8.0.8.0_AdminServer/files/stopALL new file mode 100755 index 0000000..15ea111 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/files/stopALL @@ -0,0 +1,31 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" +#Check for Appserver +if [ ! -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver not running!" +else +$AMSHOME/linux/Appserver/service/rsWebserviceAppserver.sh stop; +fi +#Check for Webservice +if [ ! -f $AMSHOME/linux/Services/service/rsWebserviceImp20.status ] +then +echo "Webservice not running!" +else +$AMSHOME/linux/Services/service/rsWebserviceImp20.sh stop; +fi +#Check for BV-Service +if [ ! -f $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.8.0/service/rsAmsBvService.status ] +then +echo "BV-Service not running!" +else +$AMSHOME/linux/webclient-services/rsAmsBvService-8.0.8.0/service/rsAmsBvService.sh stop; +fi +#Check for Appserveradmin +if [ ! -f $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status ] +then +echo "Appserveradmin not running!" +else +$AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.sh stop; +fi +./psc.sh diff --git a/roles/ams_0008_8.0.8.0_AdminServer/files/stopALLwoa b/roles/ams_0008_8.0.8.0_AdminServer/files/stopALLwoa new file mode 100755 index 0000000..faf714d --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/files/stopALLwoa @@ -0,0 +1,25 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" +#Check for Appserver +if [ ! -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver not running!" +else +$AMSHOME/linux/Appserver/service/rsWebserviceAppserver.sh stop; +fi +#Check for Webservice +if [ ! -f $AMSHOME/linux/Services/service/rsWebserviceImp20.status ] +then +echo "Webservice not running!" +else +$AMSHOME/linux/Services/service/rsWebserviceImp20.sh stop; +fi +#Check for BV-Service +if [ ! -f $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.8.0/service/rsAmsBvService.status ] +then +echo "BV-Service not running!" +else +$AMSHOME/linux/webclient-services/rsAmsBvService-8.0.8.0/service/rsAmsBvService.sh stop; +fi + +./psc.sh diff --git a/roles/ams_0008_8.0.8.0_AdminServer/files/stopadmin b/roles/ams_0008_8.0.8.0_AdminServer/files/stopadmin new file mode 100755 index 0000000..7e332b4 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/files/stopadmin @@ -0,0 +1,10 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" + +if [ ! -f $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status ] +then +echo "Appserver not running!" +else +/opt/rola/ams/linux/Appserveradmin/service/rsWebserviceAppserver.sh stop; +fi +./psc.sh diff --git a/roles/ams_0008_8.0.8.0_AdminServer/files/stopapps b/roles/ams_0008_8.0.8.0_AdminServer/files/stopapps new file mode 100755 index 0000000..8a24131 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/files/stopapps @@ -0,0 +1,10 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" + +if [ ! -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver not running!" +else +/opt/rola/ams/linux/Appserver/service/rsWebserviceAppserver.sh stop; +fi +./psc.sh diff --git a/roles/ams_0008_8.0.8.0_AdminServer/handlers/main.yml b/roles/ams_0008_8.0.8.0_AdminServer/handlers/main.yml new file mode 100644 index 0000000..cb71395 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/handlers/main.yml @@ -0,0 +1,2 @@ +--- +# handlers file for default_role \ No newline at end of file diff --git a/roles/ams_0008_8.0.8.0_AdminServer/meta/main.yml b/roles/ams_0008_8.0.8.0_AdminServer/meta/main.yml new file mode 100644 index 0000000..5d50bf4 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/meta/main.yml @@ -0,0 +1,60 @@ +galaxy_info: + author: your name + description: your description + company: your company (optional) + + # If the issue tracker for your role is not on github, uncomment the + # next line and provide a value + # issue_tracker_url: http://example.com/issue/tracker + + # Some suggested licenses: + # - BSD (default) + # - MIT + # - GPLv2 + # - GPLv3 + # - Apache + # - CC-BY + license: license (GPLv2, CC-BY, etc) + + min_ansible_version: 2.4 + + # If this a Container Enabled role, provide the minimum Ansible Container version. + # min_ansible_container_version: + + # Optionally specify the branch Galaxy will use when accessing the GitHub + # repo for this role. During role install, if no tags are available, + # Galaxy will use this branch. During import Galaxy will access files on + # this branch. If Travis integration is configured, only notifications for this + # branch will be accepted. Otherwise, in all cases, the repo's default branch + # (usually master) will be used. + #github_branch: + + # + # Provide a list of supported platforms, and for each platform a list of versions. + # If you don't wish to enumerate all versions for a particular platform, use 'all'. + # To view available platforms and versions (or releases), visit: + # https://galaxy.ansible.com/api/v1/platforms/ + # + # platforms: + # - name: Fedora + # versions: + # - all + # - 25 + # - name: SomePlatform + # versions: + # - all + # - 1.0 + # - 7 + # - 99.99 + + galaxy_tags: [] + # List tags for your role here, one per line. A tag is a keyword that describes + # and categorizes the role. Users find roles by searching for tags. Be sure to + # remove the '[]' above, if you add tags to this list. + # + # NOTE: A tag is limited to a single word comprised of alphanumeric characters. + # Maximum 20 tags per role. + +dependencies: [] + # List your role dependencies here, one per line. Be sure to remove the '[]' above, + # if you add dependencies to this list. \ No newline at end of file diff --git a/roles/ams_0008_8.0.8.0_AdminServer/tasks/main.yml b/roles/ams_0008_8.0.8.0_AdminServer/tasks/main.yml new file mode 100644 index 0000000..1daba78 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/tasks/main.yml @@ -0,0 +1,126 @@ +--- + - name: synchronize Folder remote from /sw/AMS/WEB/0008_8.0.8.0_AMS/linux/Appserveradmin/ to /opt/rola/ams/linux/ + synchronize: + src: /sw/AMS/WEB/0008_8.0.8.0_AMS/linux/Appserveradmin + dest: /opt/rola/ams/linux/ + delegate_to: "{{ ansible_facts['default_ipv4']['address'] }}" + - name: Create a file /opt/logs/appserveradmin/rsWebserviceAppserver-servicewrapper.log if it does not exist + file: + path: /opt/logs/appserveradmin/rsWebserviceAppserver-servicewrapper.log + state: touch + mode: '0644' + owner: jetty + group: dba + - name: Template file pwdAppserver.xml.j2 with owner and permissions + template: + src: ./templates/pwd_Appserver.xml.j2 + dest: /opt/rola/ams/linux/Appserveradmin/config/pwd.xml + owner: jetty + group: dba + mode: '0644' + - name: Template file rsWebserviceAppserver.xml.j2 with owner and permissions + template: + src: ./templates/rsWebserviceAppserver.xml.j2 + dest: /opt/rola/ams/linux/Appserveradmin/config/rsWebserviceAppserver.xml + owner: jetty + group: dba + mode: '0644' + - name: Template file rsWebserviceAppserver.conf.j2 to /opt/rola/ams/linux/Appserveradmin/service/config/rsWebserviceAppserver.conf + template: + src: ./templates/rsWebserviceAppserver.conf.j2 + dest: /opt/rola/ams/linux/Appserveradmin/service/config/rsWebserviceAppserver.conf + owner: jetty + group: dba + mode: '0644' + - name: Template file jetty.xml.j2 for Appserveradmin with owner and permissions + template: + src: ./templates/jetty.xml.j2 + dest: /opt/rola/ams/linux/Appserveradmin/frameworkconfig/jetty_home/etc/jetty.xml + owner: jetty + group: dba + mode: '0644' + - name: Copy file psc.sh for Appserveradmin with owner and permissions + copy: + src: ./files/psc.sh + dest: /home/jetty/psc.sh + owner: jetty + group: dba + mode: '0755' + - name: Copy file startadmin for Appserveradmin with owner and permissions + copy: + src: ./files/startadmin + dest: /home/jetty/startadmin + owner: jetty + group: dba + mode: '0755' + - name: Copy file startALL for Appserveradmin with owner and permissions + copy: + src: ./files/startALL + dest: /home/jetty/startALL + owner: jetty + group: dba + mode: '0755' + - name: Copy file startALLwoa for Appserveradmin with owner and permissions + copy: + src: ./files/startALLwoa + dest: /home/jetty/startALLwoa + owner: jetty + group: dba + mode: '0755' + - name: Copy file startapps for Appserveradmin with owner and permissions + copy: + src: ./files/startapps + dest: /home/jetty/startapps + owner: jetty + group: dba + mode: '0755' + - name: Copy file stopadmin for Appserveradmin with owner and permissions + copy: + src: ./files/stopadmin + dest: /home/jetty/stopadmin + owner: jetty + group: dba + mode: '0755' + - name: Copy file stopALL for Appserveradmin with owner and permissions + copy: + src: ./files/stopALL + dest: /home/jetty/stopALL + owner: jetty + group: dba + mode: '0755' + - name: Copy file stopALLwoa for Appserveradmin with owner and permissions + copy: + src: ./files/stopALLwoa + dest: /home/jetty/stopALLwoa + owner: jetty + group: dba + mode: '0755' + - name: Copy file stopapps for Appserveradmin with owner and permissions + copy: + src: ./files/stopapps + dest: /home/jetty/stopapps + owner: jetty + group: dba + mode: '0755' + - name: commit changes to git + shell: | + git add . + git -c user.name='Ansible Playbook' -c user.email='ansible@playbook' commit -m "ams_0008_8.0.8.0_AdminServer" + exit 0 + args: + chdir: "/opt/rola" + + + + + + + + + + + + + + + diff --git a/roles/ams_0008_8.0.8.0_AdminServer/templates/jetty.xml.j2 b/roles/ams_0008_8.0.8.0_AdminServer/templates/jetty.xml.j2 new file mode 100644 index 0000000..b986e93 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/templates/jetty.xml.j2 @@ -0,0 +1,158 @@ + + + + + + + + + + + + + + + + + + + + 10 + 200 + + + + + + + + + + + + + + + + + + + + https + + 32768 + 8192 + 8192 + true + false + 512 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + {{ ACCESS_LOG }}/jetty_admin-yyyy_mm_dd.request.log + 30 + true + false + GMT + + + + + + + + + false + 30000 + false + false + + + + + + java.naming.factory.initial + + + + java.naming.factory.url.pkgs + + + + + + + + + + + + + + rola/config + [DEFAULT] + true + + + + + + + + + + + + + + + diff --git a/roles/ams_0008_8.0.8.0_AdminServer/templates/pwd_Appserver.xml.j2 b/roles/ams_0008_8.0.8.0_AdminServer/templates/pwd_Appserver.xml.j2 new file mode 100644 index 0000000..5b85412 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/templates/pwd_Appserver.xml.j2 @@ -0,0 +1,22 @@ + + + + 06.01.2020 14:55:52 + + AMS + + + + 1 + + {{ ams_DatabaseIPAdress }} + + {{ ams_DatabasePort }} + + {{ ams_DatabaseServiceName }} + + CCDNIBPNNMPMLCNKEHNCHEKDHFECHDNDIANDLKJAHCOAMEHHGEMPLEMDHLHKHEIBMIF + + {{ ams_DatabaseName }} ADMIN + + diff --git a/roles/ams_0008_8.0.8.0_AdminServer/templates/rsWebserviceAppserver.conf.j2 b/roles/ams_0008_8.0.8.0_AdminServer/templates/rsWebserviceAppserver.conf.j2 new file mode 100644 index 0000000..a42f70c --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/templates/rsWebserviceAppserver.conf.j2 @@ -0,0 +1,287 @@ +#encoding=UTF-8 +#******************************************************************** +# +# Service configuration file rsWebserviceAppserver +# +#******************************************************************** +# +#******************************************************************** +# Wrapper License Properties +#******************************************************************** +# Include file problems can be debugged by leaving only one '#' +# at the beginning of the following line: +##include.debug +#include %SHARED_HOME%/foundation/servicewrapper/license/wrapper-license-rsFRAME.conf + +# The following property will output information about which License Key(s) +# are being found, and can aid in resolving any licensing problems. +#wrapper.license.debug=TRUE + +#******************************************************************** +# Wrapper Localization +#******************************************************************** +# Specify the language and locale which the Wrapper should use. +#wrapper.lang=en_US # en_US or ja_JP + +# Specify the location of the language resource files (*.mo). +wrapper.lang.folder=../lang + +#******************************************************************** +# Wrapper Java Properties +#******************************************************************** +# Java Application +wrapper.java.command=%JRE_HOME%/bin/java + +# Tell the Wrapper to log the full generated Java command line. +#wrapper.java.command.loglevel=INFO + +# Java Main class. This class must implement the WrapperListener interface +# or guarantee that the WrapperManager class is initialized. Helper +# classes are provided to do this for you. +# See the following page for details: +# http://wrapper.tanukisoftware.com/doc/english/integrate.html +wrapper.java.mainclass=com.rola.rscase.application.ServiceWrapperListener + +# Java Classpath (include wrapper.jar) Add class path elements as +# needed starting from 1 +wrapper.java.classpath.1=%SERVICE_HOME%/lib/wrapper.jar +wrapper.java.classpath.2=%SHARED_HOME%/com.rola.launcher.jar + +# Java Library Path (location of Wrapper.DLL or libwrapper.so) +wrapper.java.library.path.1=%SERVICE_HOME%/lib +wrapper.java.library.path.2=%SHARED_HOME%/native +wrapper.java.library.path.3=%SHARED_HOME%/native/%WRAPPER_BITS% +wrapper.java.library.path.4=%WINDIR%/SYSTEM32 + +# Set system path +set.PATH=%SHARED_HOME%/native%WRAPPER_PATH_SEPARATOR%%SHARED_HOME%/native/%WRAPPER_BITS%%WRAPPER_PATH_SEPARATOR%%PATH% + +# Java Bits. On applicable platforms, tells the JVM to run in 32 or 64-bit mode. +wrapper.java.additional.auto_bits=TRUE + +# Java Additional Parameters +wrapper.java.additional.1=-server +wrapper.java.additional.2=-XX:ErrorFile="%RS_HOME%/service/log/rsWebserviceAppserver_hs_err_pid%p.log" +wrapper.java.additional.2.stripquotes=TRUE +wrapper.java.additional.3=-Djava.io.tmpdir="%TEMP%" +wrapper.java.additional.3.stripquotes=TRUE +wrapper.java.additional.4=-XX:+DisableAttachMechanism +wrapper.java.additional.5=-Drola.config="%SHARED_HOME%/config" +wrapper.java.additional.5.stripquotes=TRUE + +# Java Parameters for general webservice HTTP access +wrapper.java.additional.6=-Djetty.host={{ ansible_facts['default_ipv4']['address'] }} +wrapper.java.additional.7=-Djetty.port=8181 + +# List of paths/directories to "overlay" the standard configuration files separated by comma ",". +# File contents are merged. +# Default: %RS_HOME%/config/overlay-tech,%RS_HOME%/config/overlay-spec +#wrapper.java.additional.8=-Drola.config.overlay.paths="%RS_HOME%/config/overlay-tech,%RS_HOME%/config/overlay-spec" +wrapper.java.additional.8.stripquotes=TRUE +# enable debug information for error analysis in config overlay +#wrapper.java.additional.9=-Drola.config.overlay.debug=true + +# Java parameters for secure webservice access via HTTPs (e.g. AIF) +#wrapper.java.additional.10=-Djavax.net.ssl.keyStore= +#wrapper.java.additional.11=-Djavax.net.ssl.keyStoreType=JKS +#wrapper.java.additional.12=-Djavax.net.ssl.keyStorePassword= +#wrapper.java.additional.13=-Djavax.net.ssl.trustStore= +#wrapper.java.additional.14=-Djavax.net.ssl.trustStoreType=JKS +#wrapper.java.additional.15=-Djavax.net.ssl.trustStorePassword= + +# Optional Jetty SSL configuration +# example for default web server +#wrapper.java.additional.20=-Djetty.etc.config.urls=etc/jetty.xml,etc/jetty-deployer.xml,etc/jetty-ssl.xml,etc/jetty-https.xml +# example for application server +#wrapper.java.additional.20=-Djetty.etc.config.urls=etc/jetty.xml,etc/jetty-deployer.xml,etc-appserver/jetty-ssl.xml,etc-appserver/jetty-https.xml + +#wrapper.java.additional.21=-Djetty.https.host= +#wrapper.java.additional.22=-Djetty.https.port=443 +#wrapper.java.additional.23=-Djetty.logdir="%RS_HOME%/service/log/rsWebserviceAppserver-jetty/" +#wrapper.java.additional.23.stripquotes=TRUE + +#Activate UTF-8 support for gss kerberos authentication. +wrapper.java.additional.26=-Dsun.security.krb5.msinterop.kstring=true + +# Initial Java Heap Size (in MB) +wrapper.java.initmemory=1024 + +# Maximum Java Heap Size (in MB) +wrapper.java.maxmemory=2048 + +# Service parameters: +# 1-19. parameter: OSGi and framework parameters +# 20-n. parameter: further start parameters for rsFRAME service (optional, e.g. configfile) + +wrapper.app.parameter.1=-osgiUserWorkDir +wrapper.app.parameter.2="%TEMP%" +wrapper.app.parameter.2.stripquotes=TRUE +wrapper.app.parameter.3=-osgiConfiguration +wrapper.app.parameter.4=appserver +wrapper.app.parameter.5=-osgiRoot +wrapper.app.parameter.6="%SHARED_HOME%" +wrapper.app.parameter.6.stripquotes=TRUE +wrapper.app.parameter.7=-osgiFrameworkConfigDir +wrapper.app.parameter.8="%RS_HOME%/frameworkconfig" +wrapper.app.parameter.8.stripquotes=TRUE +wrapper.app.parameter.9=-startprofileset +wrapper.app.parameter.10=appserver +wrapper.app.parameter.11=-serviceSpecificationBundle +wrapper.app.parameter.12=com.rola.rsframe.module.appserver +wrapper.app.parameter.13=-serviceSpecificationClass +wrapper.app.parameter.14=com.rola.rsframe.module.appserver.specifications.AppserverServiceSpecification +#Verbose output for osgi launcher +#wrapper.app.parameter.19=-osgiVerbose +wrapper.app.parameter.20=/configfile="%RS_HOME%/config/rsWebserviceAppserver.xml" +wrapper.app.parameter.20.stripquotes=TRUE + +#******************************************************************** +# Wrapper Logging Properties +#******************************************************************** +# Enables Debug output from the Wrapper. +# wrapper.debug=TRUE + +# Format of output for the console. (See docs for formats) +wrapper.console.format=PM + +# Log Level for console output. (See docs for log levels) +wrapper.console.loglevel=STATUS + +# Log file to use for wrapper output logging. +wrapper.logfile="{{ LOG_DIR }}/appserveradmin/rsWebserviceAppserver-servicewrapper.log" + +# Format of output for the log file. (See docs for formats) +wrapper.logfile.format=LPTM + +# Log Level for log file output. (See docs for log levels) +wrapper.logfile.loglevel={{ ams_LogLevel }} + +# Maximum size that the log file will be allowed to grow to before +# the log is rolled. Size is specified in bytes. The default value +# of 0, disables log rolling. May abbreviate with the 'k' (kb) or +# 'm' (mb) suffix. For example: 10m = 10 megabytes. +wrapper.logfile.maxsize=10m + +# Maximum number of rolled log files which will be allowed before old +# files are deleted. The default value of 0 implies no limit. +wrapper.logfile.maxfiles=30 + +# Log Level for sys/event log output. (See docs for log levels) +wrapper.syslog.loglevel=ERROR + +#******************************************************************** +# Wrapper General Properties +#******************************************************************** +# Set the working directory to the RS-Home directory +wrapper.working.dir=%RS_HOME% + +# Allow for the use of non-contiguous numbered properties +wrapper.ignore_sequence_gaps=TRUE + +# Do not start if the pid file already exists. +#wrapper.pidfile.strict=TRUE + +# Title to use when running as a console +wrapper.console.title=rsWebserviceAppserver-Service + +#******************************************************************** +# Wrapper JVM Checks +#******************************************************************** +# Detect DeadLocked Threads in the JVM. (Requires Standard Edition) +wrapper.check.deadlock=TRUE +wrapper.check.deadlock.interval=60 +wrapper.check.deadlock.action=RESTART +wrapper.check.deadlock.output=FULL + +# Out Of Memory detection. +# Ignore -verbose:class output to avoid false positives. +wrapper.filter.trigger.1000=[Loaded java.lang.OutOfMemoryError +wrapper.filter.action.1000=NONE +# (Simple match) +wrapper.filter.trigger.1001=java.lang.OutOfMemoryError +# (Only match text in stack traces if -XX:+PrintClassHistogram is being used.) +#wrapper.filter.trigger.1001=Exception in thread "*" java.lang.OutOfMemoryError +#wrapper.filter.allow_wildcards.1001=TRUE +wrapper.filter.action.1001=RESTART +wrapper.filter.message.1001=The JVM has run out of memory. + +#******************************************************************** +# Wrapper Email Notifications. (Requires Professional Edition) +#******************************************************************** +# Common Event Email settings. +#wrapper.event.default.email.debug=TRUE +#wrapper.event.default.email.smtp.host= +#wrapper.event.default.email.smtp.port=25 +#wrapper.event.default.email.subject=[%WRAPPER_HOSTNAME%:%WRAPPER_NAME%:%WRAPPER_EVENT_NAME%] Event Notification +#wrapper.event.default.email.sender= +#wrapper.event.default.email.recipient= + + +# Restart behaviour depending on exit code +# Service exited with bad result (exit code != 0) +wrapper.on_exit.default=RESTART + +# Service exited with good result (exit code = 0) +wrapper.on_exit.0=SHUTDOWN + +# Number of seconds to allow between the time that the JVM reports that it is stopped +# and the time that the JVM process actually terminates (e.g. termination of pending threads) +wrapper.jvm_exit.timeout=30 + +# Delay service restart for number of seconds +wrapper.restart.delay=15 + +#******************************************************************** +# Wrapper Windows Service Properties +#******************************************************************** +# WARNING - Do not modify any of these properties when an application +# using this configuration file has been installed as a service. +# Please uninstall the service before modifying this section. The +# service can then be reinstalled. + +# Name of the service +wrapper.name=rsWebserviceAppserver + +# Display name of the service +wrapper.displayname=rsWebserviceAppserver + +# Description of the service +wrapper.description=rsWebserviceAppserver + +# Service dependencies. Add dependencies as needed starting from 1 +wrapper.ntservice.dependency.1= + +# Mode in which the service is installed. AUTO_START, DELAY_START or DEMAND_START +wrapper.ntservice.starttype=AUTO_START + +# Allow the service to interact with the desktop (Windows NT/2000/XP only). +wrapper.ntservice.interactive=FALSE + +# Automatically restart the service periodically +#wrapper.timer.1.action=RESTART +#wrapper.timer.1.interval=hour=24 + +# Configure the log attached to event emails. +#wrapper.event.default.email.maillog=ATTACHMENT +#wrapper.event.default.email.maillog.lines=50 +#wrapper.event.default.email.maillog.format=LPTM +#wrapper.event.default.email.maillog.loglevel=INFO + +# Enable specific event emails. +#wrapper.event.wrapper_start.email=TRUE +#wrapper.event.jvm_prelaunch.email=TRUE +#wrapper.event.jvm_start.email=TRUE +#wrapper.event.jvm_started.email=TRUE +#wrapper.event.jvm_deadlock.email=TRUE +#wrapper.event.jvm_stop.email=TRUE +#wrapper.event.jvm_stopped.email=TRUE +#wrapper.event.jvm_restart.email=TRUE +#wrapper.event.jvm_failed_invocation.email=TRUE +#wrapper.event.jvm_max_failed_invocations.email=TRUE +#wrapper.event.jvm_kill.email=TRUE +#wrapper.event.jvm_killed.email=TRUE +#wrapper.event.jvm_unexpected_exit.email=TRUE +#wrapper.event.wrapper_stop.email=TRUE + +# Specify custom mail content +#wrapper.event.jvm_restart.email.body=The JVM was restarted.\n\nPlease check on its status.\n diff --git a/roles/ams_0008_8.0.8.0_AdminServer/templates/rsWebserviceAppserver.xml.j2 b/roles/ams_0008_8.0.8.0_AdminServer/templates/rsWebserviceAppserver.xml.j2 new file mode 100644 index 0000000..dadece7 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/templates/rsWebserviceAppserver.xml.j2 @@ -0,0 +1,320 @@ + + + + +]> + + + + &key; + &pwd; + &common; + ILNJNEBDBDLFBDAHBHJKCJGJKCEOKPJOHJCNHMOBAPIOHMBGNNLGEBJMOPEKKOGFAFB + + /opt/tmpadmin/ + + C:/Programme/Internet Explorer/IEXPLORE.EXE + + true + 1 + + + + + + + + + + + 5 + + 5 + + + + + 2 + + + -1 + + + + + + + + + + + + + + + + + + + + + + + + + + {{ ams_LogLevel }} + + true + + true + true + + true + + + true + + + + + + + + + '.'yyyy-MM-dd + + + %d{dd MMM yyyy HH:mm:ss} [%t] %-5p %x :APPLICATION_ID: - %m%n + + + + 10MB + + + + + + + 0 + + rsWebserviceAppServeradmin.log + + {{ LOG_DIR }}/appserveradmin/ + + false + + + + + + + + + + + + + @ENV=RS_HOME@/doc/help + + + + + /opt/tmpadmin/rsCasePrintTemp + + + + + + /opt/tmpadmin/rsCasePrintTemp/PrinterConfigurations + + + + + + + + + + + + + false + + + + + + + + + + + + + + + + + + + + A|B + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 10 + + 30 + notepad + + + + 0 + true + + + 2880 + + + 2 + + + 3600000 + + + + + + + + + ? + + + + + + + + + + + + + + + HOST/{{ ansible_fqdn }} + + {{ sso_domain_upper }} + + /etc/krb5.keytab + + + + + false + + NORMAL + + + STANDARD + + MON1 + + false + + false + + 10888 + + monadmin + + + + 127.0.0.1|0:0:0:0:0:0:0:1 + + -1 + + -1 + + false + + false + + false + + false + + + + + + false + + + + + + -1 + + + + 1000 + + + + + true + + + + + true + + config/module/dictionary/ + + config/module/dictionary/ + + /opt/tmpadmin/dictionary/ + + diff --git a/roles/ams_0008_8.0.8.0_AdminServer/tests/inventory b/roles/ams_0008_8.0.8.0_AdminServer/tests/inventory new file mode 100644 index 0000000..878877b --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/tests/inventory @@ -0,0 +1,2 @@ +localhost + diff --git a/roles/ams_0008_8.0.8.0_AdminServer/tests/test.yml b/roles/ams_0008_8.0.8.0_AdminServer/tests/test.yml new file mode 100644 index 0000000..af33406 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/tests/test.yml @@ -0,0 +1,5 @@ +--- +- hosts: localhost + remote_user: root + roles: + - default_role \ No newline at end of file diff --git a/roles/ams_0008_8.0.8.0_AdminServer/vars/main.yml b/roles/ams_0008_8.0.8.0_AdminServer/vars/main.yml new file mode 100644 index 0000000..3bdb116 --- /dev/null +++ b/roles/ams_0008_8.0.8.0_AdminServer/vars/main.yml @@ -0,0 +1,2 @@ +--- +# vars file for default_role \ No newline at end of file diff --git a/roles/ams_0013_8.0.9.0/.travis.yml b/roles/ams_0013_8.0.9.0/.travis.yml new file mode 100644 index 0000000..36bbf62 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/.travis.yml @@ -0,0 +1,29 @@ +--- +language: python +python: "2.7" + +# Use the new container infrastructure +sudo: false + +# Install ansible +addons: + apt: + packages: + - python-pip + +install: + # Install ansible + - pip install ansible + + # Check ansible version + - ansible --version + + # Create ansible.cfg with correct roles_path + - printf '[defaults]\nroles_path=../' >ansible.cfg + +script: + # Basic role syntax check + - ansible-playbook tests/test.yml -i tests/inventory --syntax-check + +notifications: + webhooks: https://galaxy.ansible.com/api/v1/notifications/ \ No newline at end of file diff --git a/roles/ams_0013_8.0.9.0/README.md b/roles/ams_0013_8.0.9.0/README.md new file mode 100644 index 0000000..eb003e4 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/README.md @@ -0,0 +1,58 @@ +Role Name +========= + +Installation Patch 0013_8.0.9.0. Ist "nur" Änderung vom BV-Client. Zudem an 2 Dateien Config-Änderung... + +Zudem werden dann aber die psc.sh/start-stop-Skripte erneuert. + +Requirements +------------ + +Die entsprechenden Verzeichnisse unterhalb von /sw/AMS/WEB/Lieferung_0013_8.0.9.0_AMS_BBTA1_HF2_BV-Schnittstelle/linux/webclient-services müssen +vorhanden sein (rsAMSBVService-8.0.9.0 und SharedComponents-8.0.9.0). + + + +Alle Ordner mit 0755 berechtigen +1. #chmod -R 755 /sw/AMS/WEB/Lieferung_0013_8.0.9.0_AMS_BBTA1_HF2_BV-Schnittstelle/linux/webclient-services + +Alle Dateien mit 0644 berechtigen +2. #find . -type f | xargs -i chmod 644 {} + +Alle Skripte in 0755 berechtigen +3. #find . -type f -name "*.sh" | xargs -i chmod 0755 {} + +Die Datei-Ordner dem User "Oracle" geben +4. #chown -R oracle:dba /sw/AMS/WEB/Lieferung_0013_8.0.9.0_AMS_BBTA1_HF2_BV-Schnittstelle/linux/webclient-services + + +Role Variables +-------------- + +Keine. + +Dependencies +------------ + +Vorher muss folgende Role gelaufen sein + +- ams_0008_8.0.8.0_AdminServer + +Example Playbook +---------------- + +Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too: + + - hosts: servers + roles: + - ams_0013_8.0.9.0 + +License +------- + +BSD + +Author Information +------------------ + +M. Gillitzer, 20200330 diff --git a/roles/ams_0013_8.0.9.0/defaults/main.yml b/roles/ams_0013_8.0.9.0/defaults/main.yml new file mode 100644 index 0000000..4db8f11 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/defaults/main.yml @@ -0,0 +1,2 @@ +--- +# defaults file for default_role \ No newline at end of file diff --git a/roles/ams_0013_8.0.9.0/files/psc.sh b/roles/ams_0013_8.0.9.0/files/psc.sh new file mode 100755 index 0000000..0d9728e --- /dev/null +++ b/roles/ams_0013_8.0.9.0/files/psc.sh @@ -0,0 +1,57 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" +#Check for Appserver +if [ ! -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +APPS="DOWN" +else +APPS=$(cat $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status) +fi +#Check for Appserveradmin +if [ ! -f $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status ] +then +APPSADMIN="DOWN" +else +APPSADMIN=$(cat $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status) +fi +#Check for Webservice +if [ ! -f $AMSHOME/linux/Services/service/rsWebserviceImp20.status ] +then +WEBS="DOWN" +else +WEBS=$(cat $AMSHOME/linux/Services/service/rsWebserviceImp20.status) +fi +#Check for BV-Service +if [ ! -f $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.9.0/service/rsAmsBvService.status ] +then +BVS="DOWN" +else +BVS=$(cat $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.9.0/service/rsAmsBvService.status) +fi +#Anzeige + +printf "\n \e[33m\t\t\tAppserver und Services\e[0m \n\n\n" +if [[ $APPS = "STARTED" ]] +then +printf "\t\tAppserver\t\e[32m%s\e[0m \n\n\n" "$APPS" +else +printf "\t\tAppserver\t\e[31m%s\e[0m \n\n\n" "$APPS" +fi +if [[ $APPSADMIN = "STARTED" ]] +then +printf "\t\tAppserveradmin\t\e[32m%s\e[0m \n\n\n" "$APPSADMIN" +else +printf "\t\tAppserveradmin\t\e[31m%s\e[0m \n\n\n" "$APPSADMIN" +fi +if [[ $WEBS = "STARTED" ]] +then +printf "\t\tWebservice\t\e[32m%s\e[0m \n\n\n" "$WEBS" +else +printf "\t\tWebservice\t\e[31m%s\e[0m \n\n\n" "$WEBS" +fi +if [[ $BVS = "STARTED" ]] +then +printf "\t\tBV-Service\t\e[32m%s\e[0m \n\n\n" "$BVS" +else +printf "\t\tBV-Service\t\e[31m%s\e[0m \n\n\n" "$BVS" +fi diff --git a/roles/ams_0013_8.0.9.0/files/startALL b/roles/ams_0013_8.0.9.0/files/startALL new file mode 100755 index 0000000..f60e653 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/files/startALL @@ -0,0 +1,31 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" +#Check for Appserver +if [ -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver is already running!" +else +/opt/rola/ams/linux/Appserver/service/rsWebserviceAppserver.sh start; +fi +#Check for Webservice +if [ -f $AMSHOME/linux/Services/service/rsWebserviceImp20.status ] +then +echo "Webservice is already running!" +else +/opt/rola/ams/linux/Services/service/rsWebserviceImp20.sh start; +fi +#Check for BV-Service +if [ -f $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.9.0/service/rsAmsBvService.status ] +then +echo "BV-Service is already running!" +else +/opt/rola/ams/linux/webclient-services/rsAmsBvService-8.0.9.0/service/rsAmsBvService.sh start; +fi +#Check for Appserveradmin +if [ -f $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status ] +then +echo "Appserveradmin is already running!" +else +/opt/rola/ams/linux/Appserveradmin/service/rsWebserviceAppserver.sh start; +fi +./psc.sh diff --git a/roles/ams_0013_8.0.9.0/files/startALLwoa b/roles/ams_0013_8.0.9.0/files/startALLwoa new file mode 100755 index 0000000..4e15464 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/files/startALLwoa @@ -0,0 +1,25 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" +#Check for Appserver +if [ -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver is already running!" +else +/opt/rola/ams/linux/Appserver/service/rsWebserviceAppserver.sh start; +fi +#Check for Webservice +if [ -f $AMSHOME/linux/Services/service/rsWebserviceImp20.status ] +then +echo "Webservice is already running!" +else +/opt/rola/ams/linux/Services/service/rsWebserviceImp20.sh start; +fi +#Check for BV-Service +if [ -f $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.9.0/service/rsAmsBvService.status ] +then +echo "BV-Service is already running!" +else +/opt/rola/ams/linux/webclient-services/rsAmsBvService-8.0.9.0/service/rsAmsBvService.sh start; +fi + +./psc.sh diff --git a/roles/ams_0013_8.0.9.0/files/startadmin b/roles/ams_0013_8.0.9.0/files/startadmin new file mode 100755 index 0000000..9ca3a48 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/files/startadmin @@ -0,0 +1,10 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" + +if [ -f $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status ] +then +echo "Appserveradmin is already running!" +else +/opt/rola/ams/linux/Appserveradmin/service/rsWebserviceAppserver.sh start; +fi +./psc.sh diff --git a/roles/ams_0013_8.0.9.0/files/startapps b/roles/ams_0013_8.0.9.0/files/startapps new file mode 100755 index 0000000..f0e6a76 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/files/startapps @@ -0,0 +1,10 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" + +if [ -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver is already running!" +else +/opt/rola/ams/linux/Appserver/service/rsWebserviceAppserver.sh start; +fi +./psc.sh diff --git a/roles/ams_0013_8.0.9.0/files/stopALL b/roles/ams_0013_8.0.9.0/files/stopALL new file mode 100755 index 0000000..095fa1f --- /dev/null +++ b/roles/ams_0013_8.0.9.0/files/stopALL @@ -0,0 +1,31 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" +#Check for Appserver +if [ ! -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver not running!" +else +$AMSHOME/linux/Appserver/service/rsWebserviceAppserver.sh stop; +fi +#Check for Webservice +if [ ! -f $AMSHOME/linux/Services/service/rsWebserviceImp20.status ] +then +echo "Webservice not running!" +else +$AMSHOME/linux/Services/service/rsWebserviceImp20.sh stop; +fi +#Check for BV-Service +if [ ! -f $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.9.0/service/rsAmsBvService.status ] +then +echo "BV-Service not running!" +else +$AMSHOME/linux/webclient-services/rsAmsBvService-8.0.9.0/service/rsAmsBvService.sh stop; +fi +#Check for Appserveradmin +if [ ! -f $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status ] +then +echo "Appserveradmin not running!" +else +$AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.sh stop; +fi +./psc.sh diff --git a/roles/ams_0013_8.0.9.0/files/stopALLwoa b/roles/ams_0013_8.0.9.0/files/stopALLwoa new file mode 100755 index 0000000..cc8a234 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/files/stopALLwoa @@ -0,0 +1,25 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" +#Check for Appserver +if [ ! -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver not running!" +else +$AMSHOME/linux/Appserver/service/rsWebserviceAppserver.sh stop; +fi +#Check for Webservice +if [ ! -f $AMSHOME/linux/Services/service/rsWebserviceImp20.status ] +then +echo "Webservice not running!" +else +$AMSHOME/linux/Services/service/rsWebserviceImp20.sh stop; +fi +#Check for BV-Service +if [ ! -f $AMSHOME/linux/webclient-services/rsAmsBvService-8.0.9.0/service/rsAmsBvService.status ] +then +echo "BV-Service not running!" +else +$AMSHOME/linux/webclient-services/rsAmsBvService-8.0.9.0/service/rsAmsBvService.sh stop; +fi + +./psc.sh diff --git a/roles/ams_0013_8.0.9.0/files/stopadmin b/roles/ams_0013_8.0.9.0/files/stopadmin new file mode 100755 index 0000000..7e332b4 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/files/stopadmin @@ -0,0 +1,10 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" + +if [ ! -f $AMSHOME/linux/Appserveradmin/service/rsWebserviceAppserver.status ] +then +echo "Appserver not running!" +else +/opt/rola/ams/linux/Appserveradmin/service/rsWebserviceAppserver.sh stop; +fi +./psc.sh diff --git a/roles/ams_0013_8.0.9.0/files/stopapps b/roles/ams_0013_8.0.9.0/files/stopapps new file mode 100755 index 0000000..8a24131 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/files/stopapps @@ -0,0 +1,10 @@ +#!/usr/bin/bash +AMSHOME="/opt/rola/ams" + +if [ ! -f $AMSHOME/linux/Appserver/service/rsWebserviceAppserver.status ] +then +echo "Appserver not running!" +else +/opt/rola/ams/linux/Appserver/service/rsWebserviceAppserver.sh stop; +fi +./psc.sh diff --git a/roles/ams_0013_8.0.9.0/handlers/main.yml b/roles/ams_0013_8.0.9.0/handlers/main.yml new file mode 100644 index 0000000..cb71395 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/handlers/main.yml @@ -0,0 +1,2 @@ +--- +# handlers file for default_role \ No newline at end of file diff --git a/roles/ams_0013_8.0.9.0/meta/main.yml b/roles/ams_0013_8.0.9.0/meta/main.yml new file mode 100644 index 0000000..5d50bf4 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/meta/main.yml @@ -0,0 +1,60 @@ +galaxy_info: + author: your name + description: your description + company: your company (optional) + + # If the issue tracker for your role is not on github, uncomment the + # next line and provide a value + # issue_tracker_url: http://example.com/issue/tracker + + # Some suggested licenses: + # - BSD (default) + # - MIT + # - GPLv2 + # - GPLv3 + # - Apache + # - CC-BY + license: license (GPLv2, CC-BY, etc) + + min_ansible_version: 2.4 + + # If this a Container Enabled role, provide the minimum Ansible Container version. + # min_ansible_container_version: + + # Optionally specify the branch Galaxy will use when accessing the GitHub + # repo for this role. During role install, if no tags are available, + # Galaxy will use this branch. During import Galaxy will access files on + # this branch. If Travis integration is configured, only notifications for this + # branch will be accepted. Otherwise, in all cases, the repo's default branch + # (usually master) will be used. + #github_branch: + + # + # Provide a list of supported platforms, and for each platform a list of versions. + # If you don't wish to enumerate all versions for a particular platform, use 'all'. + # To view available platforms and versions (or releases), visit: + # https://galaxy.ansible.com/api/v1/platforms/ + # + # platforms: + # - name: Fedora + # versions: + # - all + # - 25 + # - name: SomePlatform + # versions: + # - all + # - 1.0 + # - 7 + # - 99.99 + + galaxy_tags: [] + # List tags for your role here, one per line. A tag is a keyword that describes + # and categorizes the role. Users find roles by searching for tags. Be sure to + # remove the '[]' above, if you add tags to this list. + # + # NOTE: A tag is limited to a single word comprised of alphanumeric characters. + # Maximum 20 tags per role. + +dependencies: [] + # List your role dependencies here, one per line. Be sure to remove the '[]' above, + # if you add dependencies to this list. \ No newline at end of file diff --git a/roles/ams_0013_8.0.9.0/tasks/main.yml b/roles/ams_0013_8.0.9.0/tasks/main.yml new file mode 100644 index 0000000..8139c33 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/tasks/main.yml @@ -0,0 +1,163 @@ + +--- + - name: Remove a directory /opt/rola/ams/linux/webclient-services/rsAmsBvService-8.0.8.0 if it does exist + file: + path: /opt/rola/ams/linux/webclient-services/rsAmsBvService-8.0.8.0 + state: absent + - name: Remove a directory /opt/rola/ams/linux/webclient-services/SharedComponents-8.0.8.0/ if it does exist + file: + path: /opt/rola/ams/linux/webclient-services/SharedComponents-8.0.8.0/ + state: absent + - name: synchronize Folder remote from /sw/AMS/WEB/Lieferung_0013_8.0.9.0_AMS_BBTA1_HF2_BV-Schnittstelle/linux/webclient-services/rsAmsBvService-8.0.9.0 to /opt/rola/ams/linux/webclient-services + synchronize: + src: /sw/AMS/WEB/Lieferung_0013_8.0.9.0_AMS_BBTA1_HF2_BV-Schnittstelle/linux/webclient-services/rsAmsBvService-8.0.9.0 + dest: /opt/rola/ams/linux/webclient-services/ + delegate_to: "{{ ansible_facts['default_ipv4']['address'] }}" + - name: synchronize Folder remote from /sw/AMS/WEB/Lieferung_0013_8.0.9.0_AMS_BBTA1_HF2_BV-Schnittstelle/linux/webclient-services/SharedComponents-8.0.9.0 to /opt/rola/ams/linux/webclient-services + synchronize: + src: /sw/AMS/WEB/Lieferung_0013_8.0.9.0_AMS_BBTA1_HF2_BV-Schnittstelle/linux/webclient-services/SharedComponents-8.0.9.0 + dest: /opt/rola/ams/linux/webclient-services/ + delegate_to: "{{ ansible_facts['default_ipv4']['address'] }}" + - name: Template file rsAmsBvService.conf.j2 with owner and permissions + template: + src: ./templates/rsAmsBvService.conf.j2 + dest: /opt/rola/ams/linux/webclient-services/rsAmsBvService-8.0.9.0/service/config/rsAmsBvService.conf + owner: jetty + group: dba + mode: '0644' + - name: Template file tech.database.yaml.j2 with owner and permissions + template: + src: ./templates/tech.database.yaml.j2 + dest: /opt/rola/ams/linux/webclient-services/rsAmsBvService-8.0.9.0/frameworkconfig/prefs/tech.database.yaml + owner: jetty + group: dba + mode: '0644' + - name: Copy file psc.sh with owner and permissions + copy: + src: ./files/psc.sh + dest: /home/jetty/psc.sh + force: yes + owner: jetty + group: dba + mode: '0755' + - name: Copy file startadmin with owner and permissions + copy: + src: ./files/startadmin + dest: /home/jetty/startadmin + force: yes + owner: jetty + group: dba + mode: '0755' + - name: Copy file startALL with owner and permissions + copy: + src: ./files/startALL + dest: /home/jetty/startALL + force: yes + owner: jetty + group: dba + mode: '0755' + - name: Copy file startALLwoa with owner and permissions + copy: + src: ./files/startALLwoa + dest: /home/jetty/startALLwoa + force: yes + owner: jetty + group: dba + mode: '0755' + - name: Copy file startapps with owner and permissions + copy: + src: ./files/startapps + dest: /home/jetty/startapps + force: yes + owner: jetty + group: dba + mode: '0755' + - name: Copy file stopadmin with owner and permissions + copy: + src: ./files/stopadmin + dest: /home/jetty/stopadmin + force: yes + owner: jetty + group: dba + mode: '0755' + - name: Copy file stopALL with owner and permissions + copy: + src: ./files/stopALL + dest: /home/jetty/stopALL + force: yes + owner: jetty + group: dba + mode: '0755' + - name: Copy file stopALLwoa with owner and permissions + copy: + src: ./files/stopALLwoa + dest: /home/jetty/stopALLwoa + force: yes + owner: jetty + group: dba + mode: '0755' + - name: Copy file stopapps with owner and permissions + copy: + src: ./files/stopapps + dest: /home/jetty/stopapps + force: yes + owner: jetty + group: dba + mode: '0755' + - name: commit changes to git + shell: | + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/foundation/java/x64/linux/jre/lib/desktop/mime/packages/x-java-archive.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/foundation/java/x64/linux/jre/lib/desktop/mime/packages/x-java-jnlp-file.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/foundation/java/x86/linux/jre/lib/desktop/mime/packages/x-java-archive.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/foundation/java/x86/linux/jre/lib/desktop/mime/packages/x-java-jnlp-file.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/foundation/servicewrapper/license/wrapper-license-rsFRAME.conf + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/META-INF/persistence.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/BackendTransformer.meta.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/BackendTransformer_DEV.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/Importer.meta.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/Importer_DEV.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/ServicesErrorCodes.meta.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/ServicesErrorCodes_DEV.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/ServicesLogCodes.meta.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/ServicesLogCodes_DEV.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/Transformer.meta.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/Transformer_DEV.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/UserServiceErrorCodes.meta.xml + git rm ams/linux/webclient-services/SharedComponents-8.0.8.0/rsFrame2/plugins/rola/com.rola.radium.webmodule.amsbv/resourcegroups/labels/UserServiceErrorCodes_DEV.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/frameworkconfig/boot/boot.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/frameworkconfig/logging/logback-dev.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/frameworkconfig/logging/logback-extensions.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/frameworkconfig/logging/logback-hpov-appender.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/frameworkconfig/logging/logback-json-appender.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/frameworkconfig/logging/logback-level-custom.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/frameworkconfig/logging/logback-level-defaults.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/frameworkconfig/logging/logback-mappings-codebased.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/frameworkconfig/logging/logback-mappings-rulebased.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/frameworkconfig/logging/logback.xml + git rm ams/linux/webclient-services/rsAmsBvService-8.0.8.0/service/config/rsAmsBvService.conf + + git add . + git -c user.name='Ansible Playbook' -c user.email='ansible@playbook' commit -m "ams_0013_8.0.9.0" + exit 0 + args: + chdir: "/opt/rola" + + + + + + + + + + + + + + + + + + + + diff --git a/roles/ams_0013_8.0.9.0/templates/rsAmsBvService.conf.j2 b/roles/ams_0013_8.0.9.0/templates/rsAmsBvService.conf.j2 new file mode 100644 index 0000000..a53de82 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/templates/rsAmsBvService.conf.j2 @@ -0,0 +1,268 @@ +#encoding=UTF-8 +#******************************************************************** +# +# Service configuration file rsAmsBvService +# +#******************************************************************** +# +#******************************************************************** +# Wrapper License Properties +#******************************************************************** +# Include file problems can be debugged by leaving only one '#' +# at the beginning of the following line: +##include.debug +#include %SHARED_HOME%/foundation/servicewrapper/license/wrapper-license-rsFRAME.conf + +# The following property will output information about which License Key(s) +# are being found, and can aid in resolving any licensing problems. +#wrapper.license.debug=TRUE + +#******************************************************************** +# Wrapper Localization +#******************************************************************** +# Specify the language and locale which the Wrapper should use. +#wrapper.lang=en_US # en_US or ja_JP + +# Specify the location of the language resource files (*.mo). +wrapper.lang.folder=../lang + +#******************************************************************** +# Wrapper Java Properties +#******************************************************************** +# Java Application +wrapper.java.command=%JRE_HOME%/bin/java + +# Tell the Wrapper to log the full generated Java command line. +#wrapper.java.command.loglevel=INFO + +# Java Main class. This class must implement the WrapperListener interface +# or guarantee that the WrapperManager class is initialized. Helper +# classes are provided to do this for you. +# See the following page for details: +# http://wrapper.tanukisoftware.com/doc/english/integrate.html +wrapper.java.mainclass=com.rola.rscase.application.ServiceWrapperListener + +# Java Classpath (include wrapper.jar) Add class path elements as +# needed starting from 1 +wrapper.java.classpath.1=%SERVICE_HOME%/lib/wrapper.jar +wrapper.java.classpath.2=%SHARED_HOME%/com.rola.launcher.jar + +# Java Library Path (location of Wrapper.DLL or libwrapper.so) +wrapper.java.library.path.1=%SERVICE_HOME%/lib +wrapper.java.library.path.2=%SHARED_HOME%/native +wrapper.java.library.path.3=%SHARED_HOME%/native/%WRAPPER_BITS% +wrapper.java.library.path.4=%WINDIR%/SYSTEM32 + +# Set system path +set.PATH=%SHARED_HOME%/native%WRAPPER_PATH_SEPARATOR%%SHARED_HOME%/native/%WRAPPER_BITS%%WRAPPER_PATH_SEPARATOR%%PATH% + +# Java Bits. On applicable platforms, tells the JVM to run in 32 or 64-bit mode. +wrapper.java.additional.auto_bits=TRUE + +# Java Additional Parameters +wrapper.java.additional.1=-server +wrapper.java.additional.2=-XX:ErrorFile="%RS_HOME%/service/log/rsAmsBvService_hs_err_pid%p.log" +wrapper.java.additional.2.stripquotes=TRUE +wrapper.java.additional.3=-Djava.io.tmpdir="%TEMP%" +wrapper.java.additional.3.stripquotes=TRUE +wrapper.java.additional.4=-XX:+DisableAttachMechanism +wrapper.java.additional.5=-XX:+UseG1GC +wrapper.java.additional.6=-XX:MaxGCPauseMillis=500 +wrapper.java.additional.7=-XX:ConcGCThreads=4 +wrapper.java.additional.8=-XX:ParallelGCThreads=4 +wrapper.java.additional.9=-XX:CICompilerCount=4 +wrapper.java.additional.10=-XX:+UseStringDeduplication +# Java Parameters for general webservice HTTP access +wrapper.java.additional.11=-Dorg.apache.felix.http.host={{ ansible_facts['default_ipv4']['address'] }} +wrapper.java.additional.12=-Dorg.osgi.service.http.port=7373 +#wrapper.java.additional.13=-Dorg.osgi.service.http.port.secure=8443 + +# Optional alternative config paths for rola yaml config files +#wrapper.java.additional.20=-Drola.prefs="%RS_HOME%/frameworkconfig/prefs" +wrapper.java.additional.20.stripquotes=TRUE + +# Path for rola log files +wrapper.java.additional.21=-Drola.logfile.path="{{ LOG_DIR }}/bvservice" +wrapper.java.additional.21.stripquotes=TRUE + +# Service name and type, default is the same as the config file name +# As this is used for logging filenames, only use characters [A-Za-z0-9_.] +wrapper.java.additional.22=-Drola.service.name=rsAmsBvService +wrapper.java.additional.23=-Drola.service.type=rsAmsBvService + +# Initial Java Heap Size (in MB) +wrapper.java.initmemory=128 + +# Maximum Java Heap Size (in MB) +wrapper.java.maxmemory=2048 + +# Service parameters: +# 1-19. parameter: OSGi and framework parameters +# 20-n. parameter: further start parameters for rsFRAME service (optional, e.g. configfile) + +wrapper.app.parameter.1=-osgiUserWorkDir +wrapper.app.parameter.2="%TEMP%" +wrapper.app.parameter.2.stripquotes=TRUE +wrapper.app.parameter.3=-osgiConfiguration +wrapper.app.parameter.4=webamsbv +wrapper.app.parameter.5=-osgiRoot +wrapper.app.parameter.6="%SHARED_HOME%" +wrapper.app.parameter.6.stripquotes=TRUE +wrapper.app.parameter.7=-osgiFrameworkConfigDir +wrapper.app.parameter.8="%RS_HOME%/frameworkconfig" +wrapper.app.parameter.8.stripquotes=TRUE +wrapper.app.parameter.9=-startprofileset +wrapper.app.parameter.10=webamsbv +#Verbose output for osgi launcher +#wrapper.app.parameter.19=-osgiVerbose + +#******************************************************************** +# Wrapper Logging Properties +#******************************************************************** +# Enables Debug output from the Wrapper. +# wrapper.debug=TRUE + +# Format of output for the console. (See docs for formats) +wrapper.console.format=PM + +# Log Level for console output. (See docs for log levels) +wrapper.console.loglevel=STATUS + +# Log file to use for wrapper output logging. +wrapper.logfile="{{ LOG_DIR }}/bvservice/rsAmsBvService.log" + +# Format of output for the log file. (See docs for formats) +wrapper.logfile.format=LPTM + +# Log Level for log file output. (See docs for log levels) +wrapper.logfile.loglevel={{ ams_LogLevel }} + +# Maximum size that the log file will be allowed to grow to before +# the log is rolled. Size is specified in bytes. The default value +# of 0, disables log rolling. May abbreviate with the 'k' (kb) or +# 'm' (mb) suffix. For example: 10m = 10 megabytes. +wrapper.logfile.maxsize=10m + +# Maximum number of rolled log files which will be allowed before old +# files are deleted. The default value of 0 implies no limit. +wrapper.logfile.maxfiles=30 + +# Log Level for sys/event log output. (See docs for log levels) +wrapper.syslog.loglevel=ERROR + +#******************************************************************** +# Wrapper General Properties +#******************************************************************** +# Set the working directory to the RS-Home directory +wrapper.working.dir=%RS_HOME% + +# Allow for the use of non-contiguous numbered properties +wrapper.ignore_sequence_gaps=TRUE + +# Do not start if the pid file already exists. +#wrapper.pidfile.strict=TRUE + +# Title to use when running as a console +wrapper.console.title=rsAmsBvService + +#******************************************************************** +# Wrapper JVM Checks +#******************************************************************** +# Detect DeadLocked Threads in the JVM. (Requires Standard Edition) +wrapper.check.deadlock=TRUE +wrapper.check.deadlock.interval=60 +wrapper.check.deadlock.action=RESTART +wrapper.check.deadlock.output=FULL + +# Out Of Memory detection. +# Ignore -verbose:class output to avoid false positives. +wrapper.filter.trigger.1000=[Loaded java.lang.OutOfMemoryError +wrapper.filter.action.1000=NONE +# (Simple match) +wrapper.filter.trigger.1001=java.lang.OutOfMemoryError +# (Only match text in stack traces if -XX:+PrintClassHistogram is being used.) +#wrapper.filter.trigger.1001=Exception in thread "*" java.lang.OutOfMemoryError +#wrapper.filter.allow_wildcards.1001=TRUE +wrapper.filter.action.1001=RESTART +wrapper.filter.message.1001=The JVM has run out of memory. + +#******************************************************************** +# Wrapper Email Notifications. (Requires Professional Edition) +#******************************************************************** +# Common Event Email settings. +#wrapper.event.default.email.debug=TRUE +#wrapper.event.default.email.smtp.host= +#wrapper.event.default.email.smtp.port=25 +#wrapper.event.default.email.subject=[%WRAPPER_HOSTNAME%:%WRAPPER_NAME%:%WRAPPER_EVENT_NAME%] Event Notification +#wrapper.event.default.email.sender= +#wrapper.event.default.email.recipient= + + +# Restart behaviour depending on exit code +# Service exited with bad result (exit code != 0) +wrapper.on_exit.default=RESTART + +# Service exited with good result (exit code = 0) +wrapper.on_exit.0=SHUTDOWN + +# Number of seconds to allow between the time that the JVM reports that it is stopped +# and the time that the JVM process actually terminates (e.g. termination of pending threads) +wrapper.jvm_exit.timeout=30 + +# Delay service restart for number of seconds +wrapper.restart.delay=15 + +#******************************************************************** +# Wrapper Windows Service Properties +#******************************************************************** +# WARNING - Do not modify any of these properties when an application +# using this configuration file has been installed as a service. +# Please uninstall the service before modifying this section. The +# service can then be reinstalled. + +# Name of the service +wrapper.name=rsAmsBvService + +# Display name of the service +wrapper.displayname=rsAmsBvService + +# Description of the service +wrapper.description=rsAmsBvService + +# Service dependencies. Add dependencies as needed starting from 1 +wrapper.ntservice.dependency.1= + +# Mode in which the service is installed. AUTO_START, DELAY_START or DEMAND_START +wrapper.ntservice.starttype=AUTO_START + +# Allow the service to interact with the desktop (Windows NT/2000/XP only). +wrapper.ntservice.interactive=FALSE + +# Automatically restart the service periodically +#wrapper.timer.1.action=RESTART +#wrapper.timer.1.interval=hour=24 + +# Configure the log attached to event emails. +#wrapper.event.default.email.maillog=ATTACHMENT +#wrapper.event.default.email.maillog.lines=50 +#wrapper.event.default.email.maillog.format=LPTM +#wrapper.event.default.email.maillog.loglevel=INFO + +# Enable specific event emails. +#wrapper.event.wrapper_start.email=TRUE +#wrapper.event.jvm_prelaunch.email=TRUE +#wrapper.event.jvm_start.email=TRUE +#wrapper.event.jvm_started.email=TRUE +#wrapper.event.jvm_deadlock.email=TRUE +#wrapper.event.jvm_stop.email=TRUE +#wrapper.event.jvm_stopped.email=TRUE +#wrapper.event.jvm_restart.email=TRUE +#wrapper.event.jvm_failed_invocation.email=TRUE +#wrapper.event.jvm_max_failed_invocations.email=TRUE +#wrapper.event.jvm_kill.email=TRUE +#wrapper.event.jvm_killed.email=TRUE +#wrapper.event.jvm_unexpected_exit.email=TRUE +#wrapper.event.wrapper_stop.email=TRUE + +# Specify custom mail content +#wrapper.event.jvm_restart.email.body=The JVM was restarted.\n\nPlease check on its status.\n diff --git a/roles/ams_0013_8.0.9.0/templates/tech.database.yaml.j2 b/roles/ams_0013_8.0.9.0/templates/tech.database.yaml.j2 new file mode 100644 index 0000000..77fdf3c --- /dev/null +++ b/roles/ams_0013_8.0.9.0/templates/tech.database.yaml.j2 @@ -0,0 +1,41 @@ +## Scope +bundle.name: com.rola.radium.rsframe + +database: + + rsframe: + + ## Database connection options + db-config: + ## jdbc connection string for database connection + connect-string: jdbc:oracle:thin:@//{{ ams_DatabaseIPAdress }}:{{ ams_DatabasePort }}/{{ ams_DatabaseServiceName }} + ## oracle logon username, DO NOT MODIFY + username: ROLA_SERVERUSER + ## oracle logon password + password: ASSERVATE_TOOL + ## algorithm used for jdbc checksum calculation + #checksum-type: MD5 + ## level used for jdbc checksum calculation + #checksum-level: Accepted + ## algorithm used for jdbc encryption + #encryption-type: RC4_128 + ## level used for jdbc encryption + #encryption-level: Accepted + + # Connection pool preferences. + pool: + ## Minimum size of UCP pool. + #min-pool-size: 0 + ## Maximum size of UCP pool. + #max-pool-size: 500 + + ## Database SQL related tracing options + tracing: + ## Log all queries (to log-category: "rola.database.jdbc.query" with level "DEBUG") + #enable-log-all-queries: false + ## Log params for query- and slow-query-log entires + #enable-log-params: false + ## Log all slow queries (to log-category: "rola.database.jdbc.slowquery" with level "WARN") + #enable-log-slow-queries: true + ## Slow query execution time threshold in millis + #slow-query-threshold-millis: 30000 \ No newline at end of file diff --git a/roles/ams_0013_8.0.9.0/tests/inventory b/roles/ams_0013_8.0.9.0/tests/inventory new file mode 100644 index 0000000..878877b --- /dev/null +++ b/roles/ams_0013_8.0.9.0/tests/inventory @@ -0,0 +1,2 @@ +localhost + diff --git a/roles/ams_0013_8.0.9.0/tests/test.yml b/roles/ams_0013_8.0.9.0/tests/test.yml new file mode 100644 index 0000000..af33406 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/tests/test.yml @@ -0,0 +1,5 @@ +--- +- hosts: localhost + remote_user: root + roles: + - default_role \ No newline at end of file diff --git a/roles/ams_0013_8.0.9.0/vars/main.yml b/roles/ams_0013_8.0.9.0/vars/main.yml new file mode 100644 index 0000000..3bdb116 --- /dev/null +++ b/roles/ams_0013_8.0.9.0/vars/main.yml @@ -0,0 +1,2 @@ +--- +# vars file for default_role \ No newline at end of file diff --git a/roles/ams_sso/.travis.yml b/roles/ams_sso/.travis.yml new file mode 100644 index 0000000..36bbf62 --- /dev/null +++ b/roles/ams_sso/.travis.yml @@ -0,0 +1,29 @@ +--- +language: python +python: "2.7" + +# Use the new container infrastructure +sudo: false + +# Install ansible +addons: + apt: + packages: + - python-pip + +install: + # Install ansible + - pip install ansible + + # Check ansible version + - ansible --version + + # Create ansible.cfg with correct roles_path + - printf '[defaults]\nroles_path=../' >ansible.cfg + +script: + # Basic role syntax check + - ansible-playbook tests/test.yml -i tests/inventory --syntax-check + +notifications: + webhooks: https://galaxy.ansible.com/api/v1/notifications/ \ No newline at end of file diff --git a/roles/ams_sso/README.md b/roles/ams_sso/README.md new file mode 100644 index 0000000..72f9bbc --- /dev/null +++ b/roles/ams_sso/README.md @@ -0,0 +1,42 @@ +Role Name +========= + +Installiert Single-Sign-On + +Requirements +------------ + +Folgende Role muss vorher installiert sein. + +- ams_0013_8.0.9.0 + +Role Variables +-------------- + +Keine. + +Dependencies +------------ + +Folgende Role muss vorher installiert sein. + +- ams_0013_8.0.9.0 + +Example Playbook +---------------- + +Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too: + + - hosts: servers + roles: + - ams_sso + +License +------- + +BSD + +Author Information +------------------ + +Marcus Gillitzer, 20200406 diff --git a/roles/ams_sso/defaults/main.yml b/roles/ams_sso/defaults/main.yml new file mode 100644 index 0000000..4db8f11 --- /dev/null +++ b/roles/ams_sso/defaults/main.yml @@ -0,0 +1,2 @@ +--- +# defaults file for default_role \ No newline at end of file diff --git a/roles/ams_sso/files/sshd_config b/roles/ams_sso/files/sshd_config new file mode 100644 index 0000000..4aa34d8 --- /dev/null +++ b/roles/ams_sso/files/sshd_config @@ -0,0 +1,149 @@ +UseDNS no +# $OpenBSD: sshd_config,v 1.100 2016/08/15 12:32:04 naddy Exp $ + +# This is the sshd server system-wide configuration file. See +# sshd_config(5) for more information. + +# This sshd was compiled with PATH=/usr/local/bin:/usr/bin + +# The strategy used for options in the default sshd_config shipped with +# OpenSSH is to specify options with their default value where +# possible, but leave them commented. Uncommented options override the +# default value. + +# If you want to change the port on a SELinux system, you have to tell +# SELinux about this change. +# semanage port -a -t ssh_port_t -p tcp #PORTNUMBER +# +#Port 22 +#AddressFamily any +#ListenAddress 0.0.0.0 +#ListenAddress :: + +HostKey /etc/ssh/ssh_host_rsa_key +#HostKey /etc/ssh/ssh_host_dsa_key +HostKey /etc/ssh/ssh_host_ecdsa_key +HostKey /etc/ssh/ssh_host_ed25519_key + +# Ciphers and keying +#RekeyLimit default none + +# Logging +#SyslogFacility AUTH +SyslogFacility AUTHPRIV +#LogLevel INFO + +# Authentication: + +#LoginGraceTime 2m +PermitRootLogin yes +#StrictModes yes +#MaxAuthTries 6 +#MaxSessions 10 + +#PubkeyAuthentication yes + +# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2 +# but this is overridden so installations will only check .ssh/authorized_keys +AuthorizedKeysFile .ssh/authorized_keys + +#AuthorizedPrincipalsFile none + +#AuthorizedKeysCommand none +#AuthorizedKeysCommandUser nobody + +# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts +#HostbasedAuthentication no +# Change to yes if you don't trust ~/.ssh/known_hosts for +# HostbasedAuthentication +#IgnoreUserKnownHosts no +# Don't read the user's ~/.rhosts and ~/.shosts files +#IgnoreRhosts yes + +# To disable tunneled clear text passwords, change to no here! +#PasswordAuthentication yes +#PermitEmptyPasswords no +PasswordAuthentication no + +# Change to no to disable s/key passwords +#ChallengeResponseAuthentication yes +ChallengeResponseAuthentication no + +# Kerberos options +#KerberosAuthentication no +#KerberosOrLocalPasswd yes +#KerberosTicketCleanup yes +#KerberosGetAFSToken no +#KerberosUseKuserok yes + +# GSSAPI options +GSSAPIAuthentication yes +GSSAPICleanupCredentials yes +#GSSAPIStrictAcceptorCheck yes +#GSSAPIKeyExchange no +#GSSAPIEnablek5users no + +# Set this to 'yes' to enable PAM authentication, account processing, +# and session processing. If this is enabled, PAM authentication will +# be allowed through the ChallengeResponseAuthentication and +# PasswordAuthentication. Depending on your PAM configuration, +# PAM authentication via ChallengeResponseAuthentication may bypass +# the setting of "PermitRootLogin without-password". +# If you just want the PAM account and session checks to run without +# PAM authentication, then enable this but set PasswordAuthentication +# and ChallengeResponseAuthentication to 'no'. +# WARNING: 'UsePAM no' is not supported in Red Hat Enterprise Linux and may cause several +# problems. +UsePAM yes + +#AllowAgentForwarding yes +#AllowTcpForwarding yes +#GatewayPorts no +X11Forwarding yes +X11DisplayOffset 10 +X11UseLocalhost no +#PermitTTY yes +#PrintMotd yes +#PrintLastLog yes +#TCPKeepAlive yes +#UseLogin no +#UsePrivilegeSeparation sandbox +#PermitUserEnvironment no +#Compression delayed +#ClientAliveInterval 0 +#ClientAliveCountMax 3 +#ShowPatchLevel no +#UseDNS yes +#PidFile /var/run/sshd.pid +#MaxStartups 10:30:100 +#PermitTunnel no +#ChrootDirectory none +#VersionAddendum none + +# no default banner path +#Banner none + +# Accept locale-related environment variables +AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES +AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT +AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE +AcceptEnv XMODIFIERS + +# override default of no subsystems +Subsystem sftp /usr/libexec/openssh/sftp-server + +# Example of overriding settings on a per-user basis +#Match User anoncvs +# X11Forwarding no +# AllowTcpForwarding no +# PermitTTY no +# ForceCommand cvs server +# BEGIN ANSIBLE MANAGED BLOCK +Match Address 80.155.207.67,83.140.129.99 + PasswordAuthentication yes + PermitRootLogin yes +# END ANSIBLE MANAGED BLOCK +# BEGIN ANSIBLE-ROLE: config-ssh-remoteuser +Match User remote + AuthenticationMethods publickey +# END ANSIBLE-ROLE: config-ssh-remoteuser diff --git a/roles/ams_sso/handlers/main.yml b/roles/ams_sso/handlers/main.yml new file mode 100644 index 0000000..cb71395 --- /dev/null +++ b/roles/ams_sso/handlers/main.yml @@ -0,0 +1,2 @@ +--- +# handlers file for default_role \ No newline at end of file diff --git a/roles/ams_sso/meta/main.yml b/roles/ams_sso/meta/main.yml new file mode 100644 index 0000000..5d50bf4 --- /dev/null +++ b/roles/ams_sso/meta/main.yml @@ -0,0 +1,60 @@ +galaxy_info: + author: your name + description: your description + company: your company (optional) + + # If the issue tracker for your role is not on github, uncomment the + # next line and provide a value + # issue_tracker_url: http://example.com/issue/tracker + + # Some suggested licenses: + # - BSD (default) + # - MIT + # - GPLv2 + # - GPLv3 + # - Apache + # - CC-BY + license: license (GPLv2, CC-BY, etc) + + min_ansible_version: 2.4 + + # If this a Container Enabled role, provide the minimum Ansible Container version. + # min_ansible_container_version: + + # Optionally specify the branch Galaxy will use when accessing the GitHub + # repo for this role. During role install, if no tags are available, + # Galaxy will use this branch. During import Galaxy will access files on + # this branch. If Travis integration is configured, only notifications for this + # branch will be accepted. Otherwise, in all cases, the repo's default branch + # (usually master) will be used. + #github_branch: + + # + # Provide a list of supported platforms, and for each platform a list of versions. + # If you don't wish to enumerate all versions for a particular platform, use 'all'. + # To view available platforms and versions (or releases), visit: + # https://galaxy.ansible.com/api/v1/platforms/ + # + # platforms: + # - name: Fedora + # versions: + # - all + # - 25 + # - name: SomePlatform + # versions: + # - all + # - 1.0 + # - 7 + # - 99.99 + + galaxy_tags: [] + # List tags for your role here, one per line. A tag is a keyword that describes + # and categorizes the role. Users find roles by searching for tags. Be sure to + # remove the '[]' above, if you add tags to this list. + # + # NOTE: A tag is limited to a single word comprised of alphanumeric characters. + # Maximum 20 tags per role. + +dependencies: [] + # List your role dependencies here, one per line. Be sure to remove the '[]' above, + # if you add dependencies to this list. \ No newline at end of file diff --git a/roles/ams_sso/tasks/main.yml b/roles/ams_sso/tasks/main.yml new file mode 100644 index 0000000..28739e3 --- /dev/null +++ b/roles/ams_sso/tasks/main.yml @@ -0,0 +1,107 @@ +--- +##prüfen ob die erforderliche Software installiert ist + - name: ensure software krb5-workstation and krb5-libs are installed + yum: + name: "{{ packages }}" + vars: + packages: + - krb5-workstation + - krb5-libs +##muss noch geklärt werden ob erforderlich +##BitBW hat zudem Änderungen an dem File vorgenommen +##daher u.U. BitBW noch informieren + - name: Copy file sshd_config with owner and permissions + become_user: root + become: yes + copy: + src: ./files/sshd_config + dest: /etc/ssh/sshd_config + owner: root + group: root + mode: '0600' + - name: Template file ssh_config with owner and permissions + template: + src: ./templates/ssh_config.j2 + dest: /etc/ssh/ssh_config + owner: root + group: root + mode: '0644' +##hier muss noch eine Lösung gefunden werden für die zwei Prod-Server mit jeweils eigenen Dateien +##denkbar: host_vars und dort Variable auf den Quellpfad oder den Dateinamen +##noch nicht umgesetzt, da sich die Namen und Ordner noch ändern können +##M. Gillitzer 20200401 + - name: synchronize File remote from /sw/AMS/WEB/SSO_Komponenten/Keytabs_AMSE/krb5.keytab to /etc + become_user: root + become: yes + synchronize: + src: /sw/AMS/WEB/SSO_Komponenten/Keytabs_AMSE/krb5.keytab + dest: /etc/krb5.keytab + delegate_to: "{{ ansible_facts['default_ipv4']['address'] }}" + - name: Template file krb5.conf with owner and permissions + become_user: root + become: yes + template: + src: ./templates/krb5.conf.j2 + dest: /etc/krb5.conf + owner: root + group: root + mode: '0644' + - name: Template file rsWebserviceAppserver.xml.j2 with owner and permissions + template: + src: ./templates/rsWebserviceAppserver.xml.j2 + dest: /opt/rola/ams/linux/Appserver/config/rsWebserviceAppserver.xml + owner: jetty + group: dba + mode: '0644' + - name: Template file rsWebserviceAppserverAdmin.xml.j2 with owner and permissions + template: + src: ./templates/rsWebserviceAppserverAdmin.xml.j2 + dest: /opt/rola/ams/linux/Appserveradmin/config/rsWebserviceAppserver.xml + owner: jetty + group: dba + mode: '0644' + - name: Kdestroy zum löschen der alten Verbindung + command: /usr/bin/kdestroy + become: yes + become_user: root + - name: Kinit zum erstellen der erstmaligen Verbindung + command: /usr/bin/kinit -k HOST/{{ ansible_fqdn }}@{{ sso_domain_upper }} + become: yes + become_user: root + - name: commit changes to git + shell: | + git add . + git -c user.name='Ansible Playbook' -c user.email='ansible@playbook' commit -m "ams_sso" + exit 0 + args: + chdir: "/opt/rola" + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/roles/ams_sso/templates/krb5.conf.j2 b/roles/ams_sso/templates/krb5.conf.j2 new file mode 100644 index 0000000..d4f7090 --- /dev/null +++ b/roles/ams_sso/templates/krb5.conf.j2 @@ -0,0 +1,30 @@ +# Configuration snippets may be placed in this directory as well +includedir /etc/krb5.conf.d/ + +[logging] + default = FILE:/var/log/krb5libs.log + kdc = FILE:/var/log/krb5kdc.log + admin_server = FILE:/var/log/kadmind.log + +[libdefaults] + dns_lookup_realm = false + dns_lookup_kdc = false + kdc_timeout = 10sec + ticket_lifetime = 24h + renew_lifetime = 7d + forwardable = true + rdns = false + pkinit_anchors = /etc/pki/tls/certs/ca-bundle.crt + default_realm = {{ sso_domain_upper }} + default_ccache_name = KEYRING:persistent:%{uid} + +[realms] + {{ sso_domain_upper }} = { + kdc = {{ sso_domain_lower }} + default_domain = {{ sso_domain_upper }} + admin_server = {{ sso_domain_lower }} + } + +[domain_realm] +.{{ sso_domain_lower }} = {{ sso_domain_upper }} +{{ sso_domain_lower }} = {{ sso_domain_upper }} diff --git a/roles/ams_sso/templates/rsWebserviceAppserver.xml.j2 b/roles/ams_sso/templates/rsWebserviceAppserver.xml.j2 new file mode 100644 index 0000000..086e14b --- /dev/null +++ b/roles/ams_sso/templates/rsWebserviceAppserver.xml.j2 @@ -0,0 +1,320 @@ + + + + +]> + + + + &key; + &pwd; + &common; + + + /opt/tmp/ + + C:/Programme/Internet Explorer/IEXPLORE.EXE + + true + 1 + + + + + + + + + + + 5 + + 5 + + + + + 2 + + + -1 + + + + + + + + + + + + + + + + + + + + + + + + + + {{ ams_LogLevel }} + + true + + true + true + + true + + + true + + + + + + + + + '.'yyyy-MM-dd + + + %d{dd MMM yyyy HH:mm:ss} [%t] %-5p %x :APPLICATION_ID: - %m%n + + + + 10MB + + + + + + + 0 + + rsWebserviceAppServer.log + + {{ LOG_DIR }}/appserver + + false + + + + + + + + + + + + + @ENV=RS_HOME@/doc/help + + + + + /opt/tmp/rsCasePrintTemp + + + + + + /opt/tmp/rsCasePrintTemp/PrinterConfigurations + + + + + + + + + + + + + false + + + + + + + + + + + + + + + + + + + + A|B + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 10 + + 30 + notepad + + + + 0 + true + + + 2880 + + + 2 + + + 3600000 + + + + + + + + + ? + + + + + + + + + + + + + + + HOST/{{ ansible_fqdn }} + + {{ sso_domain_upper }} + + /etc/krb5.keytab + + + + + false + + NORMAL + + + STANDARD + + MON1 + + false + + false + + 10888 + + monadmin + + + + 127.0.0.1|0:0:0:0:0:0:0:1 + + -1 + + -1 + + false + + false + + false + + false + + + + + + false + + + + + + -1 + + + + 1000 + + + + + true + + + + + true + + config/module/dictionary/ + + config/module/dictionary/ + + /opt/tmp/dictionary/ + + diff --git a/roles/ams_sso/templates/rsWebserviceAppserverAdmin.xml.j2 b/roles/ams_sso/templates/rsWebserviceAppserverAdmin.xml.j2 new file mode 100644 index 0000000..dadece7 --- /dev/null +++ b/roles/ams_sso/templates/rsWebserviceAppserverAdmin.xml.j2 @@ -0,0 +1,320 @@ + + + + +]> + + + + &key; + &pwd; + &common; + ILNJNEBDBDLFBDAHBHJKCJGJKCEOKPJOHJCNHMOBAPIOHMBGNNLGEBJMOPEKKOGFAFB + + /opt/tmpadmin/ + + C:/Programme/Internet Explorer/IEXPLORE.EXE + + true + 1 + + + + + + + + + + + 5 + + 5 + + + + + 2 + + + -1 + + + + + + + + + + + + + + + + + + + + + + + + + + {{ ams_LogLevel }} + + true + + true + true + + true + + + true + + + + + + + + + '.'yyyy-MM-dd + + + %d{dd MMM yyyy HH:mm:ss} [%t] %-5p %x :APPLICATION_ID: - %m%n + + + + 10MB + + + + + + + 0 + + rsWebserviceAppServeradmin.log + + {{ LOG_DIR }}/appserveradmin/ + + false + + + + + + + + + + + + + @ENV=RS_HOME@/doc/help + + + + + /opt/tmpadmin/rsCasePrintTemp + + + + + + /opt/tmpadmin/rsCasePrintTemp/PrinterConfigurations + + + + + + + + + + + + + false + + + + + + + + + + + + + + + + + + + + A|B + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 10 + + 30 + notepad + + + + 0 + true + + + 2880 + + + 2 + + + 3600000 + + + + + + + + + ? + + + + + + + + + + + + + + + HOST/{{ ansible_fqdn }} + + {{ sso_domain_upper }} + + /etc/krb5.keytab + + + + + false + + NORMAL + + + STANDARD + + MON1 + + false + + false + + 10888 + + monadmin + + + + 127.0.0.1|0:0:0:0:0:0:0:1 + + -1 + + -1 + + false + + false + + false + + false + + + + + + false + + + + + + -1 + + + + 1000 + + + + + true + + + + + true + + config/module/dictionary/ + + config/module/dictionary/ + + /opt/tmpadmin/dictionary/ + + diff --git a/roles/ams_sso/templates/ssh_config.j2 b/roles/ams_sso/templates/ssh_config.j2 new file mode 100644 index 0000000..9042afc --- /dev/null +++ b/roles/ams_sso/templates/ssh_config.j2 @@ -0,0 +1,69 @@ +# $OpenBSD: ssh_config,v 1.30 2016/02/20 23:06:23 sobrado Exp $ + +# This is the ssh client system-wide configuration file. See +# ssh_config(5) for more information. This file provides defaults for +# users, and the values can be changed in per-user configuration files +# or on the command line. + +# Configuration data is parsed as follows: +# 1. command line options +# 2. user-specific file +# 3. system-wide file +# Any configuration value is only changed the first time it is set. +# Thus, host-specific definitions should be at the beginning of the +# configuration file, and defaults at the end. + +# Site-wide defaults for some commonly used options. For a comprehensive +# list of available options, their meanings and defaults, please see the +# ssh_config(5) man page. + +{{ sso_host }} +# ForwardAgent no +# ForwardX11 yes +# RhostsRSAAuthentication no +# RSAAuthentication yes +# PasswordAuthentication yes +# HostbasedAuthentication no + GSSAPIAuthentication yes + GSSAPIDelegateCredentials yes +# GSSAPIKeyExchange yes +# GSSAPITrustDNS no +# BatchMode no +# CheckHostIP yes +# AddressFamily any +# ConnectTimeout 5 +# StrictHostKeyChecking ask +# IdentityFile ~/.ssh/identity +# IdentityFile ~/.ssh/id_rsa +# IdentityFile ~/.ssh/id_dsa +# IdentityFile ~/.ssh/id_ecdsa +# IdentityFile ~/.ssh/id_ed25519 +# Port 22 +# Protocol 2 +# Cipher 3des +# Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc +# MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160 +# EscapeChar ~ +# Tunnel no +# TunnelDevice any:any +# PermitLocalCommand no +# VisualHostKey no +# ProxyCommand ssh -q -W %h:%p gateway.example.com +# RekeyLimit 1G 1h +# +# Uncomment this if you want to use .local domain +# Host *.local +# CheckHostIP no + +{{ sso_host }} + GSSAPIAuthentication yes + GSSAPIDelegateCredentials yes +# If this option is set to yes then remote X11 clients will have full access +# to the original X11 display. As virtually no X11 client supports the untrusted +# mode correctly we set this to yes. + ForwardX11Trusted yes +# Send locale-related environment variables + SendEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES + SendEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT + SendEnv LC_IDENTIFICATION LC_ALL LANGUAGE + SendEnv XMODIFIERS diff --git a/roles/ams_sso/tests/inventory b/roles/ams_sso/tests/inventory new file mode 100644 index 0000000..878877b --- /dev/null +++ b/roles/ams_sso/tests/inventory @@ -0,0 +1,2 @@ +localhost + diff --git a/roles/ams_sso/tests/test.yml b/roles/ams_sso/tests/test.yml new file mode 100644 index 0000000..af33406 --- /dev/null +++ b/roles/ams_sso/tests/test.yml @@ -0,0 +1,5 @@ +--- +- hosts: localhost + remote_user: root + roles: + - default_role \ No newline at end of file diff --git a/roles/ams_sso/vars/main.yml b/roles/ams_sso/vars/main.yml new file mode 100644 index 0000000..3bdb116 --- /dev/null +++ b/roles/ams_sso/vars/main.yml @@ -0,0 +1,2 @@ +--- +# vars file for default_role \ No newline at end of file diff --git a/roles/base_installation/tasks/main.yml b/roles/base_installation/tasks/main.yml index b75848b..7a62141 100644 --- a/roles/base_installation/tasks/main.yml +++ b/roles/base_installation/tasks/main.yml @@ -15,6 +15,15 @@ mode: '0755' owner: jetty group: dba + - name: Create a directory /opt/tmpadmin if it does not exist + become: yes + become_user: root + file: + path: /opt/tmpadmin + state: directory + mode: '0755' + owner: jetty + group: dba - name: Create a directory "{{ LOG_DIR }}/appserver" if it does not exist become: yes become_user: root @@ -24,6 +33,15 @@ mode: '0755' owner: jetty group: dba + - name: Create a directory "{{ LOG_DIR }}/appserveradmin" if it does not exist + become: yes + become_user: root + file: + path: "{{ LOG_DIR }}/appserveradmin" + state: directory + mode: '0755' + owner: jetty + group: dba - name: Create a directory "{{ LOG_DIR }}/bvservice" if it does not exist become: yes become_user: root diff --git a/site.retry b/site.retry index 9f08615..777c1c1 100644 --- a/site.retry +++ b/site.retry @@ -1,2 +1 @@ -80.155.207.111 -80.155.207.161 +80.155.206.72 diff --git a/site.yml b/site.yml index 8c4e945..f799d69 100644 --- a/site.yml +++ b/site.yml @@ -11,11 +11,12 @@ become: yes roles: - - base_installation - - git - ##veraltet - ##- ams_0006_8.0.5.0 - - ams_0008_8.0.8.0 + #- base_installation + #- ams_0008_8.0.8.0 + #- ams_sso + #- ams_0008_8.0.8.0_AdminServer + - ams_0013_8.0.9.0 + @@ -30,8 +31,6 @@ roles: - base_installation - git - ##veraltet - ##- ams_0006_8.0.5.0 - ams_0008_8.0.8.0 @@ -48,6 +47,4 @@ roles: - base_installation - git - ##veraltet - ##- ams_0006_8.0.5.0 - ams_0008_8.0.8.0