version 1.115, 2011/06/12 14:18:09
|
version 1.121.2.18, 2019/08/03 22:45:30
|
Line 32 use strict;
|
Line 32 use strict;
|
use LONCAPA; |
use LONCAPA; |
use Apache::Constants qw(:common); |
use Apache::Constants qw(:common); |
use CGI qw(:standard); |
use CGI qw(:standard); |
use DynaLoader; # for Crypt::DES version |
|
use Crypt::DES; |
|
use Apache::loncommon(); |
use Apache::loncommon(); |
use Apache::lonnet; |
use Apache::lonnet; |
use Apache::lonmenu(); |
use Apache::lonmenu(); |
use Apache::createaccount; |
use Apache::createaccount; |
use Fcntl qw(:flock); |
use Fcntl qw(:flock); |
use Apache::lonlocal; |
use Apache::lonlocal; |
use Apache::File (); |
use Apache::File(); |
use HTML::Entities; |
use HTML::Entities; |
|
use Digest::MD5; |
|
|
# ------------------------------------------------------------ Successful login |
# ------------------------------------------------------------ Successful login |
sub success { |
sub success { |
Line 72 sub success {
|
Line 71 sub success {
|
} |
} |
} |
} |
|
|
# ------------------------------------------------------------ Get cookie ready |
# ------------------------------------------------------------ Get cookies ready |
$cookie="lonID=$cookie; path=/"; |
my ($securecookie,$defaultcookie); |
|
my $ssl = $r->subprocess_env('https'); |
|
if ($ssl) { |
|
$securecookie="lonSID=$cookie; path=/; HttpOnly; secure"; |
|
my $lonidsdir=$r->dir_config('lonIDsDir'); |
|
if (($lonidsdir) && (-e "$lonidsdir/$cookie.id")) { |
|
my $linkname=substr(Digest::MD5::md5_hex(Digest::MD5::md5_hex(time(). {}. rand(). $$)), 0, 32).'_linked'; |
|
if (-e "$lonidsdir/$linkname.id") { |
|
unlink("$lonidsdir/$linkname.id"); |
|
} |
|
my $made_symlink = eval { symlink("$lonidsdir/$cookie.id", |
|
"$lonidsdir/$linkname.id"); 1 }; |
|
if ($made_symlink) { |
|
$defaultcookie = "lonLinkID=$linkname; path=/; HttpOnly;"; |
|
&Apache::lonnet::appenv({'user.linkedenv' => $linkname}); |
|
} |
|
} |
|
} else { |
|
$defaultcookie = "lonID=$cookie; path=/; HttpOnly;"; |
|
} |
# -------------------------------------------------------- Menu script and info |
# -------------------------------------------------------- Menu script and info |
my $destination = $lowerurl; |
my $destination = $lowerurl; |
|
|
Line 103 sub success {
|
Line 121 sub success {
|
if ($destsymb =~ /___/) { |
if ($destsymb =~ /___/) { |
# FIXME Need to deal with encrypted symbs and urls as needed. |
# FIXME Need to deal with encrypted symbs and urls as needed. |
my ($map,$resid,$desturl)=split(/___/,$destsymb); |
my ($map,$resid,$desturl)=split(/___/,$destsymb); |
unless ($desturl=~/^(adm|uploaded|editupload|public)/) { |
$desturl = &Apache::lonnet::clutter($desturl); |
$desturl = &Apache::lonnet::clutter($desturl); |
|
} |
|
$desturl = &HTML::Entities::encode($desturl,'"<>&'); |
$desturl = &HTML::Entities::encode($desturl,'"<>&'); |
$destsymb = &HTML::Entities::encode($destsymb,'"<>&'); |
$destsymb = &HTML::Entities::encode($destsymb,'"<>&'); |
$destination .= '&destinationurl='.$desturl. |
$destination .= 'destinationurl='.$desturl. |
'&destsymb='.$destsymb; |
'&destsymb='.$destsymb; |
} else { |
} else { |
$destsymb = &HTML::Entities::encode($destsymb,'"<>&'); |
$destsymb = &HTML::Entities::encode($destsymb,'"<>&'); |
$destination .= '&destinationurl='.$destsymb; |
$destination .= 'destinationurl='.$destsymb; |
} |
} |
} |
} |
if ($destination =~ m{^/adm/roles}) { |
if ($destination =~ m{^/adm/roles}) { |
Line 120 sub success {
|
Line 136 sub success {
|
$destination .= 'source=login'; |
$destination .= 'source=login'; |
} |
} |
|
|
my $windowinfo = Apache::lonhtmlcommon::scripttag('self.name="loncapaclient";'); |
my $windowinfo=&Apache::lonmenu::open($env{'browser.os'}); |
my $header = '<meta HTTP-EQUIV="Refresh" CONTENT="0; url='.$destination.'" />'; |
my $startupremote=&Apache::lonmenu::startupremote($destination); |
|
my $remoteinfo=&Apache::lonmenu::load_remote_msg($lowerurl); |
|
my $setflags=&Apache::lonmenu::setflags(); |
|
my $maincall=&Apache::lonmenu::maincall(); |
my $brcrum = [{'href' => '', |
my $brcrum = [{'href' => '', |
'text' => 'Successful Login'},]; |
'text' => 'Successful Login'},]; |
my $start_page=&Apache::loncommon::start_page('Successful Login', |
my $start_page=&Apache::loncommon::start_page('Successful Login', |
$header, |
$startupremote, |
{'bread_crumbs' => $brcrum,}); |
{'no_inline_link' => 1, |
|
'bread_crumbs' => $brcrum,}); |
my $end_page =&Apache::loncommon::end_page(); |
my $end_page =&Apache::loncommon::end_page(); |
|
|
my $continuelink='<a href="'.$destination.'">'.&mt('Continue').'</a>'; |
my $continuelink; |
|
if ($env{'environment.remote'} eq 'off') { |
|
$continuelink='<a href="'.$destination.'">'.&mt('Continue').'</a>'; |
|
} |
# ------------------------------------------------- Output for successful login |
# ------------------------------------------------- Output for successful login |
|
|
&Apache::loncommon::content_type($r,'text/html'); |
&Apache::loncommon::content_type($r,'text/html'); |
$r->header_out('Set-cookie' => $cookie); |
if ($securecookie) { |
|
$r->headers_out->add('Set-cookie' => $securecookie); |
|
} |
|
if ($defaultcookie) { |
|
$r->headers_out->add('Set-cookie' => $defaultcookie); |
|
} |
$r->send_http_header; |
$r->send_http_header; |
|
|
my %lt=&Apache::lonlocal::texthash( |
my %lt=&Apache::lonlocal::texthash( |
'wel' => 'Welcome', |
'wel' => 'Welcome', |
'pro' => 'Login problems?', |
'pro' => 'Login problems?', |
'log' => 'loginproblems.html', |
|
); |
); |
|
my $loginhelp = &loginhelpdisplay($domain); |
|
if ($loginhelp) { |
|
$loginhelp = '<p><a href="'.$loginhelp.'">'.$lt{'pro'}.'</a></p>'; |
|
} |
|
|
my $welcome = &mt('Welcome to the Learning[_1]Online[_2] Network with CAPA. Please wait while your session is being set up.','<i>','</i>'); |
my $welcome = &mt('Welcome to the Learning[_1]Online[_2] Network with CAPA. Please wait while your session is being set up.','<i>','</i>'); |
$r->print(<<ENDSUCCESS); |
$r->print(<<ENDSUCCESS); |
$start_page |
$start_page |
|
$setflags |
$windowinfo |
$windowinfo |
<h1>$lt{'wel'}</h1> |
<h1>$lt{'wel'}</h1> |
$welcome<p> |
$welcome |
<a href="/adm/$lt{'log'}">$lt{'pro'}</a></p> |
$loginhelp |
|
$remoteinfo |
|
$maincall |
$continuelink |
$continuelink |
$end_page |
$end_page |
ENDSUCCESS |
ENDSUCCESS |
|
return; |
} |
} |
|
|
# --------------------------------------------------------------- Failed login! |
# --------------------------------------------------------------- Failed login! |
|
|
sub failed { |
sub failed { |
my ($r,$message,$form) = @_; |
my ($r,$message,$form) = @_; |
my $start_page = &Apache::loncommon::start_page('Unsuccessful Login',undef); |
(undef,undef,undef,my $clientmathml,my $clientunicode) = |
my $retry = '/adm/login?username='.$form->{'uname'}. |
&Apache::loncommon::decode_user_agent(); |
'&domain='.$form->{'udom'}; |
my $args = {}; |
|
if ($clientunicode && !$clientmathml) { |
|
$args = {'browser.unicode' => 1}; |
|
} |
|
|
|
my $start_page = &Apache::loncommon::start_page('Unsuccessful Login',undef,$args); |
|
my $uname = &Apache::loncommon::cleanup_html($form->{'uname'}); |
|
my $udom = &Apache::loncommon::cleanup_html($form->{'udom'}); |
|
if (&Apache::lonnet::domain($udom,'description') eq '') { |
|
undef($udom); |
|
} |
|
my $retry = '/adm/login'; |
|
if ($uname eq $form->{'uname'}) { |
|
$retry .= '?username='.$uname; |
|
} |
|
if ($udom) { |
|
$retry .= (($retry=~/\?/)?'&':'?').'domain='.$udom; |
|
} |
if (exists($form->{role})) { |
if (exists($form->{role})) { |
$retry .= '&role='.$form->{role}; |
my $role = &Apache::loncommon::cleanup_html($form->{role}); |
|
if ($role ne '') { |
|
$retry .= (($retry=~/\?/)?'&':'?').'role='.$role; |
|
} |
} |
} |
if (exists($form->{symb})) { |
if (exists($form->{symb})) { |
$retry .= '&symb='.$form->{symb}; |
my $symb = &Apache::loncommon::cleanup_html($form->{symb}); |
|
if ($symb ne '') { |
|
$retry .= (($retry=~/\?/)?'&':'?').'symb='.$symb; |
|
} |
} |
} |
my $end_page = &Apache::loncommon::end_page(); |
my $end_page = &Apache::loncommon::end_page(); |
&Apache::loncommon::content_type($r,'text/html'); |
&Apache::loncommon::content_type($r,'text/html'); |
$r->send_http_header; |
$r->send_http_header; |
|
my @actions = |
|
(&mt('Please [_1]log in again[_2].','<a href="'.$retry.'">','</a>')); |
|
my $loginhelp = &loginhelpdisplay($udom); |
|
if ($loginhelp) { |
|
push(@actions, '<a href="'.$loginhelp.'">'.&mt('Login problems?').'</a>'); |
|
} |
|
#FIXME: link to helpdesk might be added here |
|
|
$r->print( |
$r->print( |
$start_page |
$start_page |
.'<h1>'.&mt('Sorry ...').'</h1>' |
.'<h2>'.&mt('Sorry ...').'</h2>' |
.'<p class="LC_warning">'.&mt($message).'</p>' |
.&Apache::lonhtmlcommon::confirm_success(&mt($message),1).'<br /><br />' |
.'<p>'.&mt('Please [_1]log in again[_2].','<a href="'.$retry.'">','</a>') |
.&Apache::lonhtmlcommon::actionbox(\@actions) |
.'</p>' |
|
.'<p><a href="/adm/loginproblems.html">'.&mt('Login problems?').'</a></p>' |
|
.$end_page |
.$end_page |
); |
); |
} |
} |
Line 186 sub reroute {
|
Line 251 sub reroute {
|
my ($r) = @_; |
my ($r) = @_; |
&Apache::loncommon::content_type($r,'text/html'); |
&Apache::loncommon::content_type($r,'text/html'); |
$r->send_http_header; |
$r->send_http_header; |
my $msg='<h1>'.&mt('Sorry ...').'</h1>' |
my $msg='<b>'.&mt('Sorry ...').'</b><br />' |
.&mt('Please [_1]log in again[_2].'); |
.&mt('Please [_1]log in again[_2].'); |
&Apache::loncommon::simple_error_page($r,'Rerouting',$msg); |
&Apache::loncommon::simple_error_page($r,'Rerouting',$msg,{'no_auto_mt_msg' => 1}); |
} |
} |
|
|
# ---------------------------------------------------------------- Main handler |
# ---------------------------------------------------------------- Main handler |
|
|
sub handler { |
sub handler { |
my $r = shift; |
my $r = shift; |
my $form; |
my $londocroot = $r->dir_config('lonDocRoot'); |
# Are we re-routing? |
# Are we re-routing? |
if (-e '/home/httpd/html/lon-status/reroute.txt') { |
if (-e "$londocroot/lon-status/reroute.txt") { |
&reroute($r); |
&reroute($r); |
return OK; |
return OK; |
} |
} |
Line 226 sub handler {
|
Line 291 sub handler {
|
} |
} |
$r->print( |
$r->print( |
$start_page |
$start_page |
.'<h1>'.&mt('You are already logged in!').'</h1>' |
.'<p class="LC_warning">'.&mt('You are already logged in!').'</p>' |
.'<p>'.&mt('Please either [_1]continue the current session[_2] or [_3]log out[_4].' |
.'<p>'.&mt('Please either [_1]continue the current session[_2] or [_3]log out[_4].' |
,'<a href="'.$dest.'">','</a>','<a href="/adm/logout">','</a>') |
,'<a href="'.$dest.'">','</a>','<a href="/adm/logout">','</a>') |
.'</p>' |
.'</p>' |
Line 249 sub handler {
|
Line 314 sub handler {
|
$value =~ tr/+/ /; |
$value =~ tr/+/ /; |
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg; |
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg; |
$form{$name}=$value; |
$form{$name}=$value; |
} |
} |
|
|
if ((!$form{'uname'}) || (!$form{'upass0'}) || (!$form{'udom'})) { |
if ((!$form{'uname'}) || (!$form{'upass0'}) || (!$form{'udom'})) { |
&failed($r,'Username, password and domain need to be specified.', |
&failed($r,'Username, password and domain need to be specified.', |
Line 259 sub handler {
|
Line 324 sub handler {
|
|
|
# split user logging in and "su"-user |
# split user logging in and "su"-user |
|
|
($form{'uname'},$form{'suname'})=split(/\:/,$form{'uname'}); |
($form{'uname'},$form{'suname'},$form{'sudom'})=split(/\:/,$form{'uname'}); |
$form{'uname'} = &LONCAPA::clean_username($form{'uname'}); |
$form{'uname'} = &LONCAPA::clean_username($form{'uname'}); |
$form{'suname'}= &LONCAPA::clean_username($form{'suname'}); |
$form{'suname'}= &LONCAPA::clean_username($form{'suname'}); |
$form{'udom'} = &LONCAPA::clean_domain( $form{'udom'}); |
$form{'udom'} = &LONCAPA::clean_domain($form{'udom'}); |
|
$form{'sudom'} = &LONCAPA::clean_domain($form{'sudom'}); |
|
|
my $role = $r->dir_config('lonRole'); |
my $role = $r->dir_config('lonRole'); |
my $domain = $r->dir_config('lonDefDomain'); |
my $domain = $r->dir_config('lonDefDomain'); |
Line 293 sub handler {
|
Line 359 sub handler {
|
return OK; |
return OK; |
} |
} |
|
|
my ($key,$firsturl,$rolestr,$symbstr)=split(/&/,$tmpinfo); |
my ($key,$firsturl,$rolestr,$symbstr,$iptokenstr)=split(/&/,$tmpinfo); |
if ($rolestr) { |
if ($rolestr) { |
$rolestr = &unescape($rolestr); |
$rolestr = &unescape($rolestr); |
} |
} |
if ($symbstr) { |
if ($symbstr) { |
$symbstr= &unescape($symbstr); |
$symbstr= &unescape($symbstr); |
} |
} |
|
if ($iptokenstr) { |
|
$iptokenstr = &unescape($iptokenstr); |
|
} |
if ($rolestr =~ /^role=/) { |
if ($rolestr =~ /^role=/) { |
(undef,$form{'role'}) = split('=',$rolestr); |
(undef,$form{'role'}) = split('=',$rolestr); |
} |
} |
if ($symbstr =~ /^symb=/) { |
if ($symbstr =~ /^symb=/) { |
(undef,$form{'symb'}) = split('=',$symbstr); |
(undef,$form{'symb'}) = split('=',$symbstr); |
} |
} |
|
if ($iptokenstr =~ /^iptoken=/) { |
my $keybin=pack("H16",$key); |
(undef,$form{'iptoken'}) = split('=',$iptokenstr); |
|
|
my $cipher; |
|
if ($Crypt::DES::VERSION>=2.03) { |
|
$cipher=new Crypt::DES $keybin; |
|
} |
} |
else { |
|
$cipher=new DES $keybin; |
|
} |
|
my $upass=''; |
|
for (my $i=0;$i<=2;$i++) { |
|
my $chunk= |
|
$cipher->decrypt(unpack("a8",pack("H16",substr($form{'upass'.$i},0,16)))); |
|
|
|
$chunk.= |
my $upass = &Apache::loncommon::des_decrypt($key,$form{'upass0'}); |
$cipher->decrypt(unpack("a8",pack("H16",substr($form{'upass'.$i},16,16)))); |
|
|
|
$chunk=substr($chunk,1,ord(substr($chunk,0,1))); |
|
$upass.=$chunk; |
|
} |
|
|
|
# ---------------------------------------------------------------- Authenticate |
# ---------------------------------------------------------------- Authenticate |
my @cancreate; |
|
my %domconfig = &Apache::lonnet::get_dom('configuration',['usercreation'],$form{'udom'}); |
my %domconfig = &Apache::lonnet::get_dom('configuration',['usercreation'],$form{'udom'}); |
if (ref($domconfig{'usercreation'}) eq 'HASH') { |
my ($cancreate,$statustocreate) = |
if (ref($domconfig{'usercreation'}{'cancreate'}) eq 'HASH') { |
&Apache::createaccount::get_creation_controls($form{'udom'},$domconfig{'usercreation'}); |
if (ref($domconfig{'usercreation'}{'cancreate'}{'selfcreate'}) eq 'ARRAY') { |
|
@cancreate = @{$domconfig{'usercreation'}{'cancreate'}{'selfcreate'}}; |
|
} elsif (($domconfig{'usercreation'}{'cancreate'}{'selfcreate'} ne 'none') && |
|
($domconfig{'usercreation'}{'cancreate'}{'selfcreate'} ne '')) { |
|
@cancreate = ($domconfig{'usercreation'}{'cancreate'}{'selfcreate'}); |
|
} |
|
} |
|
} |
|
my $defaultauth; |
my $defaultauth; |
if (grep(/^login$/,@cancreate)) { |
if (ref($cancreate) eq 'ARRAY') { |
$defaultauth = 1; |
if (grep(/^login$/,@{$cancreate})) { |
|
$defaultauth = 1; |
|
} |
} |
} |
my $clientcancheckhost = 1; |
my $clientcancheckhost = 1; |
my $authhost=Apache::lonnet::authenticate($form{'uname'},$upass, |
my $authhost=Apache::lonnet::authenticate($form{'uname'},$upass, |
Line 357 sub handler {
|
Line 404 sub handler {
|
\%form); |
\%form); |
return OK; |
return OK; |
} elsif ($authhost eq 'no_account_on_host') { |
} elsif ($authhost eq 'no_account_on_host') { |
my %domconfig = |
if ($defaultauth) { |
&Apache::lonnet::get_dom('configuration',['usercreation'],$form{'udom'}); |
|
if (grep(/^login$/,@cancreate)) { |
|
my $domdesc = &Apache::lonnet::domain($form{'udom'},'description'); |
my $domdesc = &Apache::lonnet::domain($form{'udom'},'description'); |
unless (&check_can_host($r,\%form,'no_account_on_host',$domdesc)) { |
unless (&check_can_host($r,\%form,'no_account_on_host',$domdesc)) { |
return OK; |
return OK; |
} |
} |
my $start_page = |
my $start_page = |
&Apache::loncommon::start_page('Create a user account in LON-CAPA'); |
&Apache::loncommon::start_page('Create a user account in LON-CAPA', |
|
'',{'no_inline_link' => 1,}); |
my $lonhost = $r->dir_config('lonHostID'); |
my $lonhost = $r->dir_config('lonHostID'); |
my $origmail = $Apache::lonnet::perlvar{'lonSupportEMail'}; |
my $origmail = $Apache::lonnet::perlvar{'lonSupportEMail'}; |
my $contacts = |
my $contacts = |
&Apache::loncommon::build_recipient_list(undef,'helpdeskmail', |
&Apache::loncommon::build_recipient_list(undef,'helpdeskmail', |
$form{'udom'},$origmail); |
$form{'udom'},$origmail); |
my ($contact_email) = split(',',$contacts); |
my ($contact_email) = split(',',$contacts); |
my $output = &Apache::createaccount::username_check($form{'uname'}, |
my $output = |
$form{'udom'},$domdesc,'', |
&Apache::createaccount::username_check($form{'uname'},$form{'udom'}, |
$lonhost,$contact_email,$contact_name); |
$domdesc,'',$lonhost, |
|
$contact_email,$contact_name, |
|
undef,$statustocreate); |
&Apache::loncommon::content_type($r,'text/html'); |
&Apache::loncommon::content_type($r,'text/html'); |
$r->send_http_header; |
$r->send_http_header; |
&Apache::createaccount::print_header($r,$start_page); |
&Apache::createaccount::print_header($r,$start_page); |
Line 392 sub handler {
|
Line 440 sub handler {
|
($firsturl=~/^\/adm\/(logout|remote)/)) { |
($firsturl=~/^\/adm\/(logout|remote)/)) { |
$firsturl='/adm/roles'; |
$firsturl='/adm/roles'; |
} |
} |
|
|
|
my $hosthere; |
|
if ($form{'iptoken'}) { |
|
my %sessiondata = &Apache::lonnet::tmpget($form{'iptoken'}); |
|
my $delete = &Apache::lonnet::tmpdel($form{'iptoken'}); |
|
if (($sessiondata{'domain'} eq $form{'udom'}) && |
|
($sessiondata{'username'} eq $form{'uname'})) { |
|
$hosthere = 1; |
|
} |
|
} |
|
|
# --------------------------------- Are we attempting to login as somebody else? |
# --------------------------------- Are we attempting to login as somebody else? |
if ($form{'suname'}) { |
if ($form{'suname'}) { |
|
my ($suname,$sudom,$sudomref); |
|
$suname = $form{'suname'}; |
|
$sudom = $form{'udom'}; |
|
if ($form{'sudom'}) { |
|
unless ($sudom eq $form{'sudom'}) { |
|
if (&Apache::lonnet::domain($form{'sudom'})) { |
|
$sudomref = [$form{'sudom'}]; |
|
$sudom = $form{'sudom'}; |
|
} |
|
} |
|
} |
# ------------ see if the original user has enough privileges to pull this stunt |
# ------------ see if the original user has enough privileges to pull this stunt |
if (&Apache::lonnet::privileged($form{'uname'},$form{'udom'})) { |
if (&Apache::lonnet::privileged($form{'uname'},$form{'udom'},$sudomref)) { |
# ---------------------------------------------------- see if the su-user exists |
# ---------------------------------------------------- see if the su-user exists |
unless (&Apache::lonnet::homeserver($form{'suname'},$form{'udom'}) |
unless (&Apache::lonnet::homeserver($suname,$sudom) eq 'no_host') { |
eq 'no_host') { |
|
&Apache::lonnet::logthis(&Apache::lonnet::homeserver($form{'suname'},$form{'udom'})); |
|
# ------------------------------ see if the su-user is not too highly privileged |
# ------------------------------ see if the su-user is not too highly privileged |
unless (&Apache::lonnet::privileged($form{'suname'},$form{'udom'})) { |
if (&Apache::lonnet::privileged($suname,$sudom)) { |
|
&Apache::lonnet::logthis('Attempted switch user to privileged user'); |
|
} else { |
|
my $noprivswitch; |
|
# |
|
# su-user's home server and user's home server must have one of: |
|
# (a) same domain |
|
# (b) same primary library server for the two domains |
|
# (c) same "internet domain" for primary library server(s) for home servers' domains |
|
# |
|
my $suprim = &Apache::lonnet::domain($sudom,'primary'); |
|
my $suintdom = &Apache::lonnet::internet_dom($suprim); |
|
unless ($sudom eq $form{'udom'}) { |
|
my $uprim = &Apache::lonnet::domain($form{'udom'},'primary'); |
|
my $uintdom = &Apache::lonnet::internet_dom($uprim); |
|
unless ($suprim eq $uprim) { |
|
unless ($suintdom eq $uintdom) { |
|
&Apache::lonnet::logthis('Attempted switch user ' |
|
.'to user with different "internet domain".'); |
|
$noprivswitch = 1; |
|
} |
|
} |
|
} |
|
|
|
unless ($noprivswitch) { |
|
# |
|
# server where log-in occurs must have same "internet domain" as su-user's home |
|
# server |
|
# |
|
my $lonhost = $r->dir_config('lonHostID'); |
|
my $hostintdom = &Apache::lonnet::internet_dom($lonhost); |
|
if ($hostintdom ne $suintdom) { |
|
&Apache::lonnet::logthis('Attempted switch user on a ' |
|
.'server with a different "internet domain".'); |
|
} else { |
|
|
# -------------------------------------------------------- actually switch users |
# -------------------------------------------------------- actually switch users |
&Apache::lonnet::logperm('User '.$form{'uname'}.' at '.$form{'udom'}. |
|
' logging in as '.$form{'suname'}); |
&Apache::lonnet::logperm('User '.$form{'uname'}.' at '. |
$form{'uname'}=$form{'suname'}; |
$form{'udom'}.' logging in as '.$suname.':'.$sudom); |
} else { |
$form{'uname'}=$suname; |
&Apache::lonnet::logthis('Attempted switch user to privileged user'); |
if ($form{'udom'} ne $sudom) { |
|
$form{'udom'}=$sudom; |
|
} |
|
} |
|
} |
} |
} |
} |
} |
} else { |
} else { |
Line 415 sub handler {
|
Line 522 sub handler {
|
} |
} |
} |
} |
|
|
if ($r->dir_config("lonBalancer") eq 'yes') { |
my ($is_balancer,$otherserver); |
my $otherserver = &Apache::lonnet::spareserver(30000,undef,1,$form{'udom'}); |
|
if (!$otherserver) { |
unless ($hosthere) { |
$otherserver = &Apache::lonnet::choose_server($form{'udom'}); |
($is_balancer,$otherserver) = |
|
&Apache::lonnet::check_loadbalancing($form{'uname'},$form{'udom'},'login'); |
|
if ($is_balancer) { |
|
if ($otherserver eq '') { |
|
my $lowest_load; |
|
($otherserver,undef,undef,undef,$lowest_load) = &Apache::lonnet::choose_server($form{'udom'}); |
|
if ($lowest_load > 100) { |
|
$otherserver = &Apache::lonnet::spareserver($lowest_load,$lowest_load,1,$form{'udom'}); |
|
} |
|
} |
|
if ($otherserver ne '') { |
|
my @hosts = &Apache::lonnet::current_machine_ids(); |
|
if (grep(/^\Q$otherserver\E$/,@hosts)) { |
|
$hosthere = $otherserver; |
|
} |
|
} |
} |
} |
|
} |
|
|
|
if (($is_balancer) && (!$hosthere)) { |
if ($otherserver) { |
if ($otherserver) { |
&success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef, |
&success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef, |
\%form); |
\%form); |
$r->internal_redirect('/adm/switchserver?otherserver='.$otherserver.'&origurl='.$firsturl); |
my $switchto = '/adm/switchserver?otherserver='.$otherserver; |
|
if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) { |
|
$switchto .= '&origurl='.$firsturl; |
|
} |
|
if ($form{'role'}) { |
|
$switchto .= '&role='.$form{'role'}; |
|
} |
|
if ($form{'symb'}) { |
|
$switchto .= '&symb='.$form{'symb'}; |
|
} |
|
$r->internal_redirect($switchto); |
} else { |
} else { |
$r->print(&noswitch()); |
$r->print(&noswitch()); |
} |
} |
return OK; |
return OK; |
} else { |
} else { |
if (!&check_can_host($r,\%form,$authhost)) { |
if (!&check_can_host($r,\%form,$authhost)) { |
my $otherserver = &Apache::lonnet::choose_server($form{'udom'}); |
my ($otherserver) = &Apache::lonnet::choose_server($form{'udom'}); |
if ($otherserver) { |
if ($otherserver) { |
&success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef, |
&success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef, |
\%form); |
\%form); |
$r->internal_redirect('/adm/switchserver?otherserver='.$otherserver.'&origurl='.$firsturl); |
my $switchto = '/adm/switchserver?otherserver='.$otherserver; |
|
if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) { |
|
$switchto .= '&origurl='.$firsturl; |
|
} |
|
if ($form{'role'}) { |
|
$switchto .= '&role='.$form{'role'}; |
|
} |
|
if ($form{'symb'}) { |
|
$switchto .= '&symb='.$form{'symb'}; |
|
} |
|
$r->internal_redirect($switchto); |
} else { |
} else { |
$r->print(&noswitch()); |
$r->print(&noswitch()); |
} |
} |
Line 458 sub handler {
|
Line 603 sub handler {
|
if ((($userloadpercent>100.0)||($loadpercent>100.0))) { |
if ((($userloadpercent>100.0)||($loadpercent>100.0))) { |
my $unloaded=Apache::lonnet::spareserver($loadpercent,$userloadpercent,1,$form{'udom'}); |
my $unloaded=Apache::lonnet::spareserver($loadpercent,$userloadpercent,1,$form{'udom'}); |
if (!$unloaded) { |
if (!$unloaded) { |
$unloaded = &Apache::lonnet::choose_server($form{'udom'}); |
($unloaded) = &Apache::lonnet::choose_server($form{'udom'}); |
} |
} |
if ($unloaded) { |
if ($unloaded) { |
&success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect', |
&success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect', |
Line 467 sub handler {
|
Line 612 sub handler {
|
return OK; |
return OK; |
} |
} |
} |
} |
|
if (($is_balancer) && ($hosthere)) { |
|
$form{'noloadbalance'} = $hosthere; |
|
} |
&success($r,$form{'uname'},$form{'udom'},$authhost,$firsturl,undef, |
&success($r,$form{'uname'},$form{'udom'},$authhost,$firsturl,undef, |
\%form); |
\%form); |
return OK; |
return OK; |
Line 546 sub noswitch {
|
Line 694 sub noswitch {
|
return $result; |
return $result; |
} |
} |
|
|
|
sub loginhelpdisplay { |
|
my ($authdomain) = @_; |
|
my $login_help = 1; |
|
my $lang = &Apache::lonlocal::current_language(); |
|
if ($login_help) { |
|
my $dom = $authdomain; |
|
if ($dom eq '') { |
|
$dom = &Apache::lonnet::default_login_domain(); |
|
} |
|
my %domconfhash = &Apache::loncommon::get_domainconf($dom); |
|
my $loginhelp_url; |
|
if ($lang) { |
|
$loginhelp_url = $domconfhash{$dom.'.login.helpurl_'.$lang}; |
|
if ($loginhelp_url ne '') { |
|
return $loginhelp_url; |
|
} |
|
} |
|
$loginhelp_url = $domconfhash{$dom.'.login.helpurl_nolang'}; |
|
if ($loginhelp_url ne '') { |
|
return $loginhelp_url; |
|
} else { |
|
return '/adm/loginproblems.html'; |
|
} |
|
} |
|
return; |
|
} |
|
|
1; |
1; |
__END__ |
__END__ |
|
|