2025-06-26-13-33-49: Cronjob

roles/lmn_vpn/files/10-lmn-mount.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/bash
+#
+set -eu
+
+if [[ "$CONNECTION_ID" = "VPN-Schule" ]]; then
+  USERNAME=$(ps -o pid,user,args -C sddm-helper | sed -nE 's/.*user (.*)$/\1/p')
+  USERID=$(id -u "${USERNAME}")
+  GROUPID=$(id -g "${USERNAME}")
+  KRB5CCNAME=$(ls /tmp/krb5cc_"${USERID}"_*)
+  export KRB5CCNAME
+  printenv >&2
+  if [[ "$NM_DISPATCHER_ACTION" = "up" ]]; then
+    # Exit if server is already mounted
+    findmnt /srv/samba/schools/default-school > /dev/null && exit 0
+
+    if ! klist -s  -c "${KRB5CCNAME}"; then
+      #echo "try to renew KRB5-Ticket" >&2
+      #sudo -u "${USERNAME}" kinit -R -c "${KRB5CCNAME}"
+      echo "KRB5-Ticket is expired. Sleep 3 seconds and hope it will be renewed after." >&2
+      sleep 3
+    fi
+
+    echo "prepare mountpoints" >&2
+    umask 0002
+    mkdir -p /srv/samba/schools/default-school
+    chmod 777  /srv/samba/schools/default-school
+    mkdir -p "/lmn/media/${USERNAME}/share"
+    
+    mount -t cifs //server/default-school/ /srv/samba/schools/default-school \
+          -o "sec=krb5i,cruid=${USERID},user=${USERNAME},uid=${USERID},gid=${GROUPID},file_mode=0700,dir_mode=0700,mfsymlinks,nobrl,actimeo=600,cache=loose,echo_interval=10"
+	  echo "after mount" >&2
+    mount --bind /srv/samba/schools/default-school/share "/lmn/media/${USERNAME}/share"
+    SUDO_USER=$USERNAME /usr/local/bin/install-printers.sh
+  elif [[ "$NM_DISPATCHER_ACTION" = "pre-down" ]]; then
+    # FIXME: Only umount server when Wireguard-Connection was the only connection to server.
+    # Dirty fix (works only in fvs-IP-Range)
+    if ! (ip r s | grep "10.190." | grep -v wg0); then
+      echo "Try to umount server shares"
+      umount "/lmn/media/${USERNAME}/share"
+      umount /srv/samba/schools/default-school
+    fi
+  fi
+fi

roles/lmn_vpn/files/mountserver

@@ -0,0 +1,26 @@
+#!/usr/bin/bash
+set -eu
+
+exit_script() {
+    echo "unmounting media - terminated by trap!" >> "/tmp/${SUDO_UID}-exit-mount.log"
+    findmnt "/lmn/media/${SUDO_USER}/share" && umount "/lmn/media/${SUDO_USER}/share"
+    findmnt "/srv/samba/schools/default-school" && umount "/srv/samba/schools/default-school"
+    trap - SIGHUP SIGINT SIGTERM # clear the trap
+    kill -- -$$ # Sends SIGTERM to child/sub processes
+}
+
+findmnt /srv/samba/schools/default-school > /dev/null && exit 0
+
+umask 0002
+mkdir -p /srv/samba/schools/default-school
+chmod 777  /srv/samba/schools/default-school
+mkdir -p "/lmn/media/${SUDO_USER}/share"
+
+mount -t cifs //server/default-school/ /srv/samba/schools/default-school \
+      -o "sec=krb5i,cruid=${SUDO_UID},user=${SUDO_USER},uid=${SUDO_UID},gid=${SUDO_GID},file_mode=0700,dir_mode=0700,mfsymlinks,nobrl,actimeo=600,cache=loose,echo_interval=10"
+mount --bind /srv/samba/schools/default-school/share "/lmn/media/${SUDO_USER}/share"
+
+echo "Einbindung erfolgreich!"
+echo "Dieses Fenster bitte nicht schließen!"
+trap exit_script SIGHUP SIGINT SIGTERM
+sleep infinity