#!/bin/bash

#####
# ESG SECURITY
# This script is intended to be an adjunct to the esg-node / esg-gway scripts
#             (author: gavin@llnl.gov)
#****************************************************************************
#*                                                                          *
#*  Organization: Lawrence Livermore National Lab (LLNL)                    *
#*   Directorate: Computation                                               *
#*    Department: Computing Applications and Research                       *
#*      Division: S&T Global Security                                       *
#*        Matrix: Atmospheric, Earth and Energy Division                    *
#*       Program: PCMDI                                                     *
#*       Project: Earth Systems Grid (ESG) Data Node Software Stack         *
#*  First Author: Gavin M. Bell (gavin@llnl.gov)                            *
#*                                                                          *
#****************************************************************************
#*                                                                          *
#*   Copyright (c) 2009, Lawrence Livermore National Security, LLC.         *
#*   Produced at the Lawrence Livermore National Laboratory                 *
#*   Written by: Gavin M. Bell (gavin@llnl.gov)                             *
#*   LLNL-CODE-420962                                                       *
#*                                                                          *
#*   All rights reserved. This file is part of the:                         *
#*   Earth System Grid (ESG) Data Node Software Stack, Version 1.0          *
#*                                                                          *
#*   For details, see http://esgf.org/                                      *
#*   Please also read this link                                             *
#*    http://esgf.org/LICENSE                                               *
#*                                                                          *
#*   * Redistribution and use in source and binary forms, with or           *
#*   without modification, are permitted provided that the following        *
#*   conditions are met:                                                    *
#*                                                                          *
#*   * Redistributions of source code must retain the above copyright       *
#*   notice, this list of conditions and the disclaimer below.              *
#*                                                                          *
#*   * Redistributions in binary form must reproduce the above copyright    *
#*   notice, this list of conditions and the disclaimer (as noted below)    *
#*   in the documentation and/or other materials provided with the          *
#*   distribution.                                                          *
#*                                                                          *
#*   Neither the name of the LLNS/LLNL nor the names of its contributors    *
#*   may be used to endorse or promote products derived from this           *
#*   software without specific prior written permission.                    *
#*                                                                          *
#*   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS    *
#*   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT      *
#*   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS      *
#*   FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL LAWRENCE    *
#*   LIVERMORE NATIONAL SECURITY, LLC, THE U.S. DEPARTMENT OF ENERGY OR     *
#*   CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,           *
#*   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT       *
#*   LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF       *
#*   USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND    *
#*   ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,     *
#*   OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT     *
#*   OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF     *
#*   SUCH DAMAGE.                                                           *
#*                                                                          *
#****************************************************************************
######


# Description: Installation of the esg-security infrastructure.  This
#              file is meant to be sourced by the esg-node
#              scripts that has the definition of checked_get(),
#              stop_tomcat(), start_tomcat(), $workdir,

workdir=${workdir:-${installer_home}/workbench/esg}

esg_security_filters_dist_url=${esg_dist_url}/filters
hessian_version=${hessian_version:-"3.0.20"}

#arg (1) - install = 0 [default]
#          upgrade = 1 
setup_drs_resolving_filter() {

    mkdir -p $workdir
    [ $? != 0 ] && return 1
    pushd $workdir >& /dev/null
    
    install_drs_resolving_filter
    
    popd >& /dev/null
    start_tomcat
    return 0
}

#Takes 2 arguments: 
# First  - The top level directory of the webapp where filter is to be installed.
# Second - The file containing the filter entry xml snippet (optional: defaulted)
install_drs_resolving_filter() {
    local dest_dir=${1:-${tomcat_install_dir}/webapps/thredds}
    local esg_filter_entry_file=${2:-esg-drs-resolving-filter-web.xml}
    local esg_filter_entry_pattern="<!--@@esg_drs_resolving_filter_entry@@-->"

    ! egrep ${esg_filter_entry_pattern} ${dest_dir}/WEB-INF/web.xml && printf " No Pattern Found In File [${dest_dir}/WEB-INF/web.xml] - skipping this filter setup\n" && return 1

    echo
    echo "*******************************"
    echo "Installing Tomcat Filters to support ESGF Data Node Manager hooks and functionality..."
    echo "*******************************"
    echo
    echo "Filter installation destination dir = ${dest_dir}"
    echo "Filter entry file = ${esg_filter_entry_file}"
    echo "Filter entry pattern = ${esg_filter_entry_pattern}"

    #Installs esg filter into Thredds' web.xml file, directly after
    #the AuthorizationTokenValidationFilter's mapping, by replacing a
    #place holder token with the contents of the filter snippet file
    #"esg-filter-web.xml".  Copies the filter jar file to the thredds'
    #lib dir

    local node_dist_dir=${node_dist_dir:-esgf-node-manager-${esgf_node_manager_version}}
    
    #pre-checking... make sure the files we need in thredds are there....
    [ ! -e ${dest_dir}/WEB-INF ] && echo " ERROR: Could not find THREDDS installation dir" && checked_done 1
    [ ! -e ${dest_dir}/WEB-INF/lib ] && echo " ERROR: Could not find WEB-INF/lib installation dir!!" && return 1
    [ ! -e ${dest_dir}/WEB-INF/web.xml ] && echo " ERROR no web.xml file found!!" && checked_done 1
    [ ! -e ${workdir}/${node_dist_dir} ] && echo " ERROR: Could not locate node distribution dir ${workdir}/${node_dist_dir}" && return 1

    ! egrep ${esg_filter_entry_pattern} ${dest_dir}/WEB-INF/web.xml && echo "No Pattern Found In File [${dest_dir}/WEB-INF/web.xml] - exiting this filter setup" && return 1

    stop_tomcat

    pushd ${dest_dir} >& /dev/null
    echo "Checking for / Installing required jars..."
    [ ! -e WEB-INF/lib/commons-dbcp-1.2.2.jar ]  && echo "no commons-dbcp found locally" && jar xvf ${workdir}/${node_dist_dir}/esgf-node-manager.war WEB-INF/lib/commons-dbcp-1.2.2.jar
    [ ! -e WEB-INF/lib/commons-dbutils-1.3.jar ] && echo "no commons-dbutils found locally" && jar xvf ${workdir}/${node_dist_dir}/esgf-node-manager.war WEB-INF/lib/commons-dbutils-1.3.jar
    [ ! -e WEB-INF/lib/commons-pool-1.5.4.jar ]  && echo "no commons-pool found locally" && jar xvf ${workdir}/${node_dist_dir}/esgf-node-manager.war WEB-INF/lib/commons-pool-1.5.4.jar
    [ ! -e WEB-INF/lib/${postgress_jar} ]  && echo "no jdbc driver found locally" && jar xvf ${workdir}/${node_dist_dir}/esgf-node-manager.war WEB-INF/lib/${postgress_jar}
    popd >& /dev/null
    

    #----------------------
    #NOTE:
    #For the Data Node Manager - it's custom filter and entry file is
    # *IN* the distribution itself, not gotten from distribution site!
    
    pushd ${workdir}/${node_dist_dir} >& /dev/null
    
    #Pull out the templated filter entry snippet file...
    jar xvf esgf-node-manager-filters-*.jar ${esg_filter_entry_file} #only need file name to pull out of jar
    esg_filter_entry_file=`pwd`/${esg_filter_entry_file} #going to need full path for pattern replacement below
    
    #Place (copy) the filter jar in the WEB-INF/lib
    echo "Installing ESGF Node Manager Filter jar..."
    cp -v esgf-node-manager-common-*.jar ${dest_dir}/WEB-INF/lib
    cp -v esgf-node-manager-filters-*.jar ${dest_dir}/WEB-INF/lib
    
    popd >& /dev/null
    #----------------------

    
    #----------------------
    #Thredds configuration...
    pushd ${dest_dir}/WEB-INF >& /dev/null
    [ $? != 0 ] && echo " ERROR: Could not find thredds web application (${tomcat_install_dir}/webapps/thredds/)" && return 0
    local target_file=web.xml

    #Replace the filter's place holder token in thredds' web.xml file with the filter entry.
    #Use utility function...
    insert_file_at_pattern $(readlink -f ${target_file}) ${esg_filter_entry_file} "${esg_filter_entry_pattern}"

    #Edit the web.xml file for Thredds to include these token replacement values
    echo -n "Replacing tokens... "
    eval "perl -p -i -e 's/\\@db.driver\\@/${postgress_driver}/g' ${target_file}"; echo -n "*"
    eval "perl -p -i -e 's/\\@db.protocol\\@/${postgress_protocol}/g' ${target_file}"; echo -n "*"
    eval "perl -p -i -e 's/\\@db.host\\@/${postgress_host}/g' ${target_file}"; echo -n "*"
    eval "perl -p -i -e 's/\\@db.port\\@/${postgress_port}/g' ${target_file}"; echo -n "*"
    eval "perl -p -i -e 's/\\@db.database\\@/${node_db_name}/g' ${target_file}"; echo -n "*"
    eval "perl -p -i -e 's/\\@db.user\\@/${postgress_user}/g' ${target_file}"; echo -n "*"
    eval "perl -p -i -e 's/\\@db.password\\@/${pg_sys_acct_passwd}/g' ${target_file}"; echo -n "*"
    echo " [OK]"
    popd >& /dev/null
    #----------------------
    chown -R ${tomcat_user} ${dest_dir}/WEB-INF
    chgrp -R ${tomcat_group} ${dest_dir}/WEB-INF

    return 0
}