|
version 1.121.2.24.2.4, 2022/07/08 15:40:03
|
version 1.173, 2022/05/21 05:16:43
|
|
Line 1
|
Line 1
|
| # The LearningOnline Network |
# The LearningOnline Network
|
| # User Authentication Module |
# User Authentication Module
|
| # |
#
|
| # $Id$ |
# $Id$
|
| # |
#
|
| # Copyright Michigan State University Board of Trustees |
# Copyright Michigan State University Board of Trustees
|
| # |
#
|
| # This file is part of the LearningOnline Network with CAPA (LON-CAPA). |
# This file is part of the LearningOnline Network with CAPA (LON-CAPA).
|
| # |
#
|
| # LON-CAPA is free software; you can redistribute it and/or modify |
# LON-CAPA is free software; you can redistribute it and/or modify
|
| # it under the terms of the GNU General Public License as published by |
# it under the terms of the GNU General Public License as published by
|
| # the Free Software Foundation; either version 2 of the License, or |
# the Free Software Foundation; either version 2 of the License, or
|
| # (at your option) any later version. |
# (at your option) any later version.
|
| # |
#
|
| # LON-CAPA is distributed in the hope that it will be useful, |
# LON-CAPA is distributed in the hope that it will be useful,
|
| # but WITHOUT ANY WARRANTY; without even the implied warranty of |
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
| # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
| # GNU General Public License for more details. |
# GNU General Public License for more details.
|
| # |
#
|
| # You should have received a copy of the GNU General Public License |
# You should have received a copy of the GNU General Public License
|
| # along with LON-CAPA; if not, write to the Free Software |
# along with LON-CAPA; if not, write to the Free Software
|
| # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
| # |
#
|
| # /home/httpd/html/adm/gpl.txt |
# /home/httpd/html/adm/gpl.txt
|
| # |
#
|
| # http://www.lon-capa.org/ |
# http://www.lon-capa.org/
|
| # |
#
|
| |
|
| package Apache::lonauth; |
package Apache::lonauth;
|
| |
|
| use strict; |
use strict;
|
| use LONCAPA qw(:DEFAULT :match); |
use LONCAPA qw(:DEFAULT :match);
|
| use Apache::Constants qw(:common); |
use Apache::Constants qw(:common);
|
| use CGI qw(:standard); |
use CGI qw(:standard);
|
| use Apache::loncommon(); |
use Apache::loncommon();
|
| use Apache::lonnet; |
use Apache::lonnet;
|
| use Apache::lonmenu(); |
use Apache::lonmenu();
|
| use Apache::createaccount; |
use Apache::createaccount;
|
| use Fcntl qw(:flock); |
use Apache::ltiauth;
|
| use Apache::lonlocal; |
use Fcntl qw(:flock);
|
| use Apache::File(); |
use Apache::lonlocal;
|
| use HTML::Entities; |
use Apache::File();
|
| use Digest::MD5; |
use HTML::Entities;
|
| use CGI::Cookie(); |
use Digest::MD5;
|
| |
use CGI::Cookie();
|
| # ------------------------------------------------------------ Successful login |
|
| sub success { |
# ------------------------------------------------------------ Successful login
|
| my ($r, $username, $domain, $authhost, $lowerurl, $extra_env, |
sub success {
|
| $form,$cid,$expirepub) = @_; |
my ($r, $username, $domain, $authhost, $lowerurl, $extra_env,
|
| |
$form,$skipcritical,$cid,$expirepub) = @_;
|
| # ------------------------------------------------------------ Get cookie ready |
|
| my $cookie = |
# ------------------------------------------------------------ Get cookie ready
|
| &Apache::loncommon::init_user_environment($r, $username, $domain, |
my $cookie =
|
| $authhost, $form, |
&Apache::loncommon::init_user_environment($r, $username, $domain,
|
| {'extra_env' => $extra_env,}); |
$authhost, $form,
|
| |
{'extra_env' => $extra_env,});
|
| my $public=($username eq 'public' && $domain eq 'public'); |
|
| |
my $public=($username eq 'public' && $domain eq 'public');
|
| if ($public or $lowerurl eq 'noredirect') { return $cookie; } |
|
| |
if ($public or $lowerurl eq 'noredirect') { return $cookie; }
|
| # -------------------------------------------------------------------- Log this |
|
| |
# -------------------------------------------------------------------- Log this
|
| my $ip = &Apache::lonnet::get_requestor_ip(); |
|
| &Apache::lonnet::log($domain,$username,$authhost, |
my $ip = &Apache::lonnet::get_requestor_ip();
|
| "Login $ip"); |
&Apache::lonnet::log($domain,$username,$authhost,
|
| |
"Login $ip");
|
| # ------------------------------------------------- Check for critical messages |
|
| |
# ------------------------------------------------- Check for critical messages
|
| my @what=&Apache::lonnet::dump('critical',$domain,$username); |
|
| if ($what[0]) { |
unless ($skipcritical) {
|
| if (($what[0] ne 'con_lost') && ($what[0]!~/^error\:/)) { |
my @what=&Apache::lonnet::dump('critical',$domain,$username);
|
| $lowerurl='/adm/email?critical=display'; |
if ($what[0]) {
|
| } |
if (($what[0] ne 'con_lost') && ($what[0]!~/^error\:/)) {
|
| } |
$lowerurl='/adm/email?critical=display';
|
| |
}
|
| # ------------------------------------------------------------ Get cookies ready |
}
|
| my ($securecookie,$defaultcookie); |
}
|
| my $ssl = $r->subprocess_env('https'); |
|
| if ($ssl) { |
# ----------------------------------------------------------- Get cookies ready
|
| $securecookie="lonSID=$cookie; path=/; HttpOnly; secure"; |
my ($securecookie,$defaultcookie);
|
| my $lonidsdir=$r->dir_config('lonIDsDir'); |
my $ssl = $r->subprocess_env('https');
|
| if (($lonidsdir) && (-e "$lonidsdir/$cookie.id")) { |
if ($ssl) {
|
| my $linkname=substr(Digest::MD5::md5_hex(Digest::MD5::md5_hex(time(). {}. rand(). $$)), 0, 32).'_linked'; |
$securecookie="lonSID=$cookie; path=/; HttpOnly; secure";
|
| if (-e "$lonidsdir/$linkname.id") { |
my $lonidsdir=$r->dir_config('lonIDsDir');
|
| unlink("$lonidsdir/$linkname.id"); |
if (($lonidsdir) && (-e "$lonidsdir/$cookie.id")) {
|
| } |
my $linkname=substr(Digest::MD5::md5_hex(Digest::MD5::md5_hex(time(). {}. rand(). $$)), 0, 32).'_linked';
|
| my $made_symlink = eval { symlink("$lonidsdir/$cookie.id", |
if (-e "$lonidsdir/$linkname.id") {
|
| "$lonidsdir/$linkname.id"); 1 }; |
unlink("$lonidsdir/$linkname.id");
|
| if ($made_symlink) { |
}
|
| $defaultcookie = "lonLinkID=$linkname; path=/; HttpOnly;"; |
my $made_symlink = eval { symlink("$lonidsdir/$cookie.id",
|
| &Apache::lonnet::appenv({'user.linkedenv' => $linkname}); |
"$lonidsdir/$linkname.id"); 1 };
|
| } |
if ($made_symlink) {
|
| } |
$defaultcookie = "lonLinkID=$linkname; path=/; HttpOnly;";
|
| } else { |
&Apache::lonnet::appenv({'user.linkedenv' => $linkname});
|
| $defaultcookie = "lonID=$cookie; path=/; HttpOnly;"; |
}
|
| } |
}
|
| # -------------------------------------------------------- Menu script and info |
} else {
|
| my $destination = $lowerurl; |
$defaultcookie = "lonID=$cookie; path=/; HttpOnly;";
|
| |
}
|
| if (defined($form->{role})) { |
# -------------------------------------------------------- Menu script and info
|
| my $envkey = 'user.role.'.$form->{role}; |
my $destination = $lowerurl;
|
| my $now=time; |
if ($env{'request.lti.login'}) {
|
| my $then=$env{'user.login.time'}; |
if (($env{'request.lti.reqcrs'}) && ($env{'request.lti.reqrole'} eq 'cc')) {
|
| my $refresh=$env{'user.refresh.time'}; |
&Apache::loncommon::content_type($r,'text/html');
|
| my $update=$env{'user.update.time'}; |
if ($securecookie) {
|
| if (!$update) { |
$r->headers_out->add('Set-cookie' => $securecookie);
|
| $update = $then; |
}
|
| } |
if ($defaultcookie) {
|
| if (exists($env{$envkey})) { |
$r->headers_out->add('Set-cookie' => $defaultcookie);
|
| my ($role,$where,$trolecode,$tstart,$tend,$tremark,$tstatus); |
}
|
| &Apache::lonnet::role_status($envkey,$update,$refresh,$now,\$role,\$where, |
$r->send_http_header;
|
| \$trolecode,\$tstatus,\$tstart,\$tend); |
if (ref($form) eq 'HASH') {
|
| if ($tstatus eq 'is') { |
$form->{'lti.login'} = $env{'request.lti.login'};
|
| $destination .= ($destination =~ /\?/) ? '&' : '?'; |
$form->{'lti.reqcrs'} = $env{'request.lti.reqcrs'};
|
| my $newrole = &HTML::Entities::encode($form->{role},'"<>&'); |
$form->{'lti.reqrole'} = $env{'request.lti.reqrole'};
|
| $destination .= 'selectrole=1&'.$newrole.'=1'; |
$form->{'lti.sourcecrs'} = $env{'request.lti.sourcecrs'};
|
| } |
}
|
| } |
&Apache::ltiauth::lti_reqcrs($r,$domain,$form,$username,$domain);
|
| } |
return;
|
| if (defined($form->{symb})) { |
}
|
| my $destsymb = $form->{symb}; |
if ($env{'request.lti.selfenrollrole'}) {
|
| my $encrypted; |
if (&Apache::ltiauth::lti_enroll($username,$domain,
|
| if ($destsymb =~ m{^/enc/}) { |
$env{'request.lti.selfenrollrole'}) eq 'ok') {
|
| $encrypted = 1; |
$form->{'role'} = $env{'request.lti.selfenrollrole'};
|
| if ($cid) { |
&Apache::lonnet::delenv('request.lti.selfenrollrole');
|
| $destsymb = &Apache::lonenc::unencrypted($destsymb,$cid); |
} else {
|
| } |
&Apache::ltiauth::invalid_request($r,24);
|
| } |
}
|
| $destination .= ($destination =~ /\?/) ? '&' : '?'; |
}
|
| if ($destsymb =~ /___/) { |
}
|
| my ($map,$resid,$desturl)=split(/___/,$destsymb); |
if (defined($form->{role})) {
|
| $desturl = &Apache::lonnet::clutter($desturl); |
my $envkey = 'user.role.'.$form->{role};
|
| if ($encrypted) { |
my $now=time;
|
| $desturl = &Apache::lonenc::encrypted($desturl,1,$cid); |
my $then=$env{'user.login.time'};
|
| $destsymb = $form->{symb}; |
my $refresh=$env{'user.refresh.time'};
|
| } |
my $update=$env{'user.update.time'};
|
| $desturl = &HTML::Entities::encode($desturl,'"<>&'); |
if (!$update) {
|
| $destsymb = &HTML::Entities::encode($destsymb,'"<>&'); |
$update = $then;
|
| $destination .= 'destinationurl='.$desturl. |
}
|
| '&destsymb='.$destsymb; |
if (exists($env{$envkey})) {
|
| } elsif (!$encrypted) { |
my ($role,$where,$trolecode,$tstart,$tend,$tremark,$tstatus);
|
| $destsymb = &HTML::Entities::encode($destsymb,'"<>&'); |
&Apache::lonnet::role_status($envkey,$update,$refresh,$now,\$role,\$where,
|
| $destination .= 'destinationurl='.$destsymb; |
\$trolecode,\$tstatus,\$tstart,\$tend);
|
| } |
if ($tstatus eq 'is') {
|
| } |
$destination .= ($destination =~ /\?/) ? '&' : '?';
|
| if ($destination =~ m{^/adm/roles}) { |
my $newrole = &HTML::Entities::encode($form->{role},'"<>&');
|
| $destination .= ($destination =~ /\?/) ? '&' : '?'; |
$destination .= 'selectrole=1&'.$newrole.'=1';
|
| $destination .= 'source=login'; |
}
|
| } |
}
|
| |
}
|
| my $brcrum = [{'href' => '', |
if (defined($form->{symb})) {
|
| 'text' => 'Successful Login'},]; |
my $destsymb = $form->{symb};
|
| my $args = {'no_inline_link' => 1, |
my $encrypted;
|
| 'bread_crumbs' => $brcrum,}; |
if ($destsymb =~ m{^/enc/}) {
|
| if (($env{'request.deeplink.login'} eq $lowerurl) && |
$encrypted = 1;
|
| (($env{'request.linkprot'}) || ($env{'request.linkkey'} ne ''))) { |
if ($cid) {
|
| my %info; |
$destsymb = &Apache::lonenc::unencrypted($destsymb,$cid);
|
| if ($env{'request.linkprot'}) { |
}
|
| $info{'linkprot'} = $env{'request.linkprot'}; |
}
|
| foreach my $item ('linkprotuser','linkprotexit') { |
$destination .= ($destination =~ /\?/) ? '&' : '?';
|
| if ($form->{$item}) { |
if ($destsymb =~ /___/) {
|
| $info{$item} = $form->{$item}; |
my ($map,$resid,$desturl)=split(/___/,$destsymb);
|
| } |
$desturl = &Apache::lonnet::clutter($desturl);
|
| } |
if ($encrypted) {
|
| $args = {'only_body' => 1,}; |
$desturl = &Apache::lonenc::encrypted($desturl,1,$cid);
|
| } elsif ($env{'request.linkkey'} ne '') { |
$destsymb = $form->{symb};
|
| $info{'linkkey'} = $env{'request.linkkey'}; |
}
|
| } |
$desturl = &HTML::Entities::encode($desturl,'"<>&');
|
| $info{'origurl'} = $lowerurl; |
$destsymb = &HTML::Entities::encode($destsymb,'"<>&');
|
| my $token = &Apache::lonnet::tmpput(\%info,$r->dir_config('lonHostID'),'link'); |
$destination .= 'destinationurl='.$desturl.
|
| unless (($token eq 'con_lost') || ($token eq 'refused') || |
'&destsymb='.$destsymb;
|
| ($token eq 'unknown_cmd') || ($token eq 'no_such_host')) { |
} elsif (!$encrypted) {
|
| $destination .= (($destination =~ /\?/) ? '&' : '?') . 'ttoken='.$token; |
$destsymb = &HTML::Entities::encode($destsymb,'"<>&');
|
| } |
$destination .= 'destinationurl='.$destsymb;
|
| } |
}
|
| if ($env{'request.deeplink.login'}) { |
}
|
| if ($env{'environment.remote'} eq 'on') { |
if ($destination =~ m{^/adm/roles}) {
|
| &Apache::lonnet::appenv({'environment.remote' => 'off'}); |
$destination .= ($destination =~ /\?/) ? '&' : '?';
|
| } |
$destination .= 'source=login';
|
| } |
}
|
| |
|
| my $windowinfo=&Apache::lonmenu::open($env{'browser.os'}); |
if (($env{'request.deeplink.login'} eq $lowerurl) &&
|
| my $startupremote=&Apache::lonmenu::startupremote($destination); |
(($env{'request.linkprot'}) || ($env{'request.linkkey'} ne ''))) {
|
| my $remoteinfo=&Apache::lonmenu::load_remote_msg($lowerurl); |
my %info;
|
| my $setflags=&Apache::lonmenu::setflags(); |
if ($env{'request.linkprot'}) {
|
| my $maincall=&Apache::lonmenu::maincall(); |
$info{'linkprot'} = $env{'request.linkprot'};
|
| my $start_page=&Apache::loncommon::start_page('Successful Login', |
} elsif ($env{'request.linkkey'} ne '') {
|
| $startupremote,$args); |
$info{'linkkey'} = $env{'request.linkkey'};
|
| my $end_page =&Apache::loncommon::end_page(); |
}
|
| |
$info{'origurl'} = $lowerurl;
|
| my $continuelink; |
my $token = &Apache::lonnet::tmpput(\%info,$r->dir_config('lonHostID'),'link');
|
| if ($env{'environment.remote'} eq 'off') { |
unless (($token eq 'con_lost') || ($token eq 'refused') ||
|
| $continuelink='<a href="'.$destination.'">'.&mt('Continue').'</a>'; |
($token eq 'unknown_cmd') || ($token eq 'no_such_host')) {
|
| } |
$destination .= (($destination =~ /\?/) ? '&' : '?') . 'ttoken='.$token;
|
| # ------------------------------------------------- Output for successful login |
}
|
| |
}
|
| &Apache::loncommon::content_type($r,'text/html'); |
|
| if ($securecookie) { |
my $windowname = 'loncapaclient';
|
| $r->headers_out->add('Set-cookie' => $securecookie); |
if ($env{'request.lti.login'}) {
|
| } |
$windowname .= 'lti';
|
| if ($defaultcookie) { |
}
|
| $r->headers_out->add('Set-cookie' => $defaultcookie); |
my $windowinfo = Apache::lonhtmlcommon::scripttag('self.name="'.$windowname.'";');
|
| } |
my $brcrum = [{'href' => '',
|
| if ($expirepub) { |
'text' => 'Successful Login'},];
|
| my $c = new CGI::Cookie(-name => 'lonPubID', |
my $args = {'bread_crumbs' => $brcrum,};
|
| -value => '', |
unless ((defined($form->{role})) || (defined($form->{symb}))) {
|
| -expires => '-10y',); |
my $update=$env{'user.update.time'};
|
| $r->headers_out->add('Set-cookie' => $c); |
if (!$update) {
|
| } |
$update = $env{'user.login.time'};
|
| $r->send_http_header; |
}
|
| |
my %roles_in_env;
|
| if ($env{'request.linkprot'}) { |
my $showcount = &Apache::lonroles::roles_from_env(\%roles_in_env,$update);
|
| $r->print(<<END); |
if ($showcount == 1) {
|
| $start_page |
foreach my $rolecode (keys(%roles_in_env)) {
|
| <br />$continuelink |
my ($cid) = ($rolecode =~ m{^\Quser.role.st./\E($match_domain/$match_courseid)(?:/|$)});
|
| $end_page |
if ($cid) {
|
| END |
my %coursedescription =
|
| } else { |
&Apache::lonnet::coursedescription($cid,{'one_time' => '1'});
|
| my %lt=&Apache::lonlocal::texthash( |
if ($coursedescription{'type'} eq 'Placement') {
|
| 'wel' => 'Welcome', |
$args->{'crstype'} = 'Placement';
|
| 'pro' => 'Login problems?', |
}
|
| ); |
last;
|
| my $loginhelp = &loginhelpdisplay($domain); |
}
|
| if ($loginhelp) { |
}
|
| $loginhelp = '<p><a href="'.$loginhelp.'">'.$lt{'pro'}.'</a></p>'; |
}
|
| } |
}
|
| |
|
| my $welcome = &mt('Welcome to the Learning[_1]Online[_2] Network with CAPA. Please wait while your session is being set up.','<i>','</i>'); |
# ------------------------------------------------- Output for successful login
|
| $r->print(<<ENDSUCCESS); |
|
| $start_page |
&Apache::loncommon::content_type($r,'text/html');
|
| $setflags |
if ($securecookie) {
|
| $windowinfo |
$r->headers_out->add('Set-cookie' => $securecookie);
|
| <h1>$lt{'wel'}</h1> |
}
|
| $welcome |
if ($defaultcookie) {
|
| $loginhelp |
$r->headers_out->add('Set-cookie' => $defaultcookie);
|
| $remoteinfo |
}
|
| $maincall |
if ($expirepub) {
|
| $continuelink |
my $c = new CGI::Cookie(-name => 'lonPubID',
|
| $end_page |
-value => '',
|
| ENDSUCCESS |
-expires => '-10y',);
|
| } |
$r->headers_out->add('Set-cookie' => $c);
|
| return; |
}
|
| } |
$r->send_http_header;
|
| |
|
| # --------------------------------------------------------------- Failed login! |
my ($start_page,$js,$pagebody,$end_page);
|
| |
if ($env{'request.lti.login'}) {
|
| sub failed { |
$args = {'only_body' => 1};
|
| my ($r,$message,$form,$authhost) = @_; |
if ($env{'request.lti.target'} eq '') {
|
| (undef,undef,undef,my $clientmathml,my $clientunicode) = |
my $ltitarget = (($destination =~ /\?/) ? '&' : '?').
|
| &Apache::loncommon::decode_user_agent(); |
'ltitarget=iframe';
|
| my $args = {}; |
&js_escape(\$destination);
|
| if ($clientunicode && !$clientmathml) { |
$js = <<"ENDJS";
|
| $args = {'browser.unicode' => 1}; |
|
| } |
<script type="text/javascript">
|
| if ($form->{firsturl} =~ m{^/tiny/$match_domain/\w+$}) { |
// <![CDATA[
|
| if ($form->{linkprot}) { |
function setLTItarget() {
|
| $args->{only_body} = 1; |
var newloc = '$destination';
|
| } |
if (parent !== window) {
|
| } |
newloc += '$ltitarget';
|
| |
}
|
| my $start_page = &Apache::loncommon::start_page('Unsuccessful Login',undef,$args); |
window.location.href=newloc;
|
| my $uname = &Apache::loncommon::cleanup_html($form->{'uname'}); |
}
|
| my $udom = &Apache::loncommon::cleanup_html($form->{'udom'}); |
// ]]>
|
| if (&Apache::lonnet::domain($udom,'description') eq '') { |
</script>
|
| undef($udom); |
|
| } |
ENDJS
|
| my $retry = '/adm/login'; |
$args->{'add_entries'} = {'onload' => "javascript:setLTItarget();"};
|
| if ($uname eq $form->{'uname'}) { |
$pagebody = '<noscript><span class="LC_warning">'
|
| $retry .= '?username='.$uname; |
.&mt('Use of LON-CAPA requires Javascript to be enabled in your web browser.')
|
| } |
.'</span></noscript>';
|
| if ($udom) { |
} else {
|
| $retry .= (($retry=~/\?/)?'&':'?').'domain='.$udom; |
$args->{'redirect'} = [0,$destination,1];
|
| } |
}
|
| my $lonhost = $r->dir_config('lonHostID'); |
$start_page=&Apache::loncommon::start_page('',$js,$args);
|
| my $querystr; |
} else {
|
| my $result = &set_retry_token($form,$lonhost,\$querystr); |
$args->{'redirect'} = [0,$destination];
|
| if ($result eq 'fail') { |
$start_page=&Apache::loncommon::start_page('Successful Login',
|
| if (exists($form->{role})) { |
$js,$args);
|
| my $role = &Apache::loncommon::cleanup_html($form->{role}); |
|
| if ($role ne '') { |
my %lt=&Apache::lonlocal::texthash(
|
| $retry .= (($retry=~/\?/)?'&':'?').'role='.$role; |
'wel' => 'Welcome',
|
| } |
'pro' => 'Login problems?',
|
| } |
);
|
| if (exists($form->{symb})) { |
$pagebody = "<h1>$lt{'wel'}</h1>\n".
|
| my $symb = &Apache::loncommon::cleanup_html($form->{symb}); |
&mt('Welcome to the Learning[_1]Online[_2] Network with CAPA. Please wait while your session is being set up.','<i>','</i>');
|
| if ($symb ne '') { |
my $loginhelp = &loginhelpdisplay($domain);
|
| $retry .= (($retry=~/\?/)?'&':'?').'symb='.$symb; |
if ($loginhelp) {
|
| } |
$pagebody .= '<p><a href="'.$loginhelp.'">'.$lt{'pro'}.'</a></p>';
|
| } |
}
|
| if (exists($form->{firsturl})) { |
}
|
| my $firsturl = &Apache::loncommon::cleanup_html($form->{firsturl}); |
$end_page = &Apache::loncommon::end_page();
|
| if ($firsturl ne '') { |
$r->print(<<ENDSUCCESS);
|
| $retry .= (($retry=~/\?/)?'&':'?').'firsturl='.$firsturl; |
$start_page
|
| if ($form->{firsturl} =~ m{^/tiny/$match_domain/\w+$}) { |
$windowinfo
|
| unless (exists($form->{linkprot})) { |
$pagebody
|
| if (exists($form->{linkkey})) { |
$end_page
|
| $retry .= 'linkkey='.$form->{linkkey}; |
ENDSUCCESS
|
| } |
return;
|
| } |
}
|
| } |
|
| } |
# --------------------------------------------------------------- Failed login!
|
| } |
|
| if (exists($form->{linkprot})) { |
sub failed {
|
| my %info = ( |
my ($r,$message,$form,$authhost) = @_;
|
| 'linkprot' => $form->{'linkprot'}, |
(undef,undef,undef,my $clientmathml,my $clientunicode) =
|
| ); |
&Apache::loncommon::decode_user_agent();
|
| foreach my $item ('linkprotuser','linkprotexit') { |
my $args = {};
|
| if ($form->{$item} ne '') { |
if ($clientunicode && !$clientmathml) {
|
| $info{$item} = $form->{$item}; |
$args = {'browser.unicode' => 1};
|
| } |
}
|
| } |
|
| my $ltoken = &Apache::lonnet::tmpput(\%info, |
my @actions;
|
| $r->dir_config('lonHostID'),'retry'); |
my $start_page = &Apache::loncommon::start_page('Unsuccessful Login',undef,$args);
|
| if ($ltoken) { |
my $uname = &Apache::loncommon::cleanup_html($form->{'uname'});
|
| $retry .= (($retry =~ /\?/) ? '&' : '?').'ltoken='.$ltoken; |
my $udom = &Apache::loncommon::cleanup_html($form->{'udom'});
|
| } |
if (&Apache::lonnet::domain($udom,'description') eq '') {
|
| } |
undef($udom);
|
| } elsif ($querystr ne '') { |
}
|
| $retry .= (($retry=~/\?/)?'&':'?').$querystr; |
my $authtype;
|
| } |
if (($udom ne '') && ($uname ne '') && ($authhost eq 'no_host')) {
|
| my $end_page = &Apache::loncommon::end_page(); |
$authtype = &Apache::lonnet::queryauthenticate($uname,$udom);
|
| &Apache::loncommon::content_type($r,'text/html'); |
}
|
| $r->send_http_header; |
my $retry = '/adm/login';
|
| my @actions = |
if (($uname eq $form->{'uname'}) && ($authtype !~ /^lti:/)) {
|
| (&mt('Please [_1]log in again[_2].','<a href="'.$retry.'">','</a>')); |
$retry .= '?username='.$uname;
|
| my $loginhelp = &loginhelpdisplay($udom); |
}
|
| if ($loginhelp) { |
if ($udom) {
|
| push(@actions, '<a href="'.$loginhelp.'">'.&mt('Login problems?').'</a>'); |
$retry .= (($retry=~/\?/)?'&':'?').'domain='.$udom;
|
| } |
}
|
| #FIXME: link to helpdesk might be added here |
my $lonhost = $r->dir_config('lonHostID');
|
| |
my $querystr;
|
| $r->print( |
my $result = &set_retry_token($form,$lonhost,\$querystr);
|
| $start_page |
if ($result eq 'fail') {
|
| .'<h2>'.&mt('Sorry ...').'</h2>' |
if (exists($form->{role})) {
|
| .&Apache::lonhtmlcommon::confirm_success(&mt($message),1).'<br /><br />' |
my $role = &Apache::loncommon::cleanup_html($form->{role});
|
| .&Apache::lonhtmlcommon::actionbox(\@actions) |
if ($role ne '') {
|
| .$end_page |
$retry .= (($retry=~/\?/)?'&':'?').'role='.$role;
|
| ); |
}
|
| } |
}
|
| |
if (exists($form->{symb})) {
|
| # ------------------------------------------------------------------ Rerouting! |
my $symb = &Apache::loncommon::cleanup_html($form->{symb});
|
| |
if ($symb ne '') {
|
| sub reroute { |
$retry .= (($retry=~/\?/)?'&':'?').'symb='.$symb;
|
| my ($r) = @_; |
}
|
| &Apache::loncommon::content_type($r,'text/html'); |
}
|
| $r->send_http_header; |
if (exists($form->{firsturl})) {
|
| my $msg='<b>'.&mt('Sorry ...').'</b><br />' |
my $firsturl = &Apache::loncommon::cleanup_html($form->{firsturl});
|
| .&mt('Please [_1]log in again[_2].'); |
if ($firsturl ne '') {
|
| &Apache::loncommon::simple_error_page($r,'Rerouting',$msg,{'no_auto_mt_msg' => 1}); |
$retry .= (($retry=~/\?/)?'&':'?').'firsturl='.$firsturl;
|
| } |
if ($form->{firsturl} =~ m{^/tiny/$match_domain/\w+$}) {
|
| |
unless (exists($form->{linkprot})) {
|
| # ---------------------------------------------------------------- Main handler |
if (exists($form->{linkkey})) {
|
| |
$retry .= 'linkkey='.$form->{linkkey};
|
| sub handler { |
}
|
| my $r = shift; |
}
|
| my $londocroot = $r->dir_config('lonDocRoot'); |
}
|
| # Are we re-routing? |
}
|
| if (-e "$londocroot/lon-status/reroute.txt") { |
}
|
| &reroute($r); |
if (exists($form->{linkprot})) {
|
| return OK; |
my $ltoken = &Apache::lonnet::tmpput({linkprot => $form->{'linkprot'}},
|
| } |
$r->dir_config('lonHostID'),'retry');
|
| |
if ($ltoken) {
|
| &Apache::lonlocal::get_language_handle($r); |
$retry .= (($retry =~ /\?/) ? '&' : '?').'ltoken='.$ltoken;
|
| |
}
|
| # -------------------------------- Prevent users from attempting to login twice |
}
|
| my $handle = &Apache::lonnet::check_for_valid_session($r); |
} elsif ($querystr ne '') {
|
| if ($handle ne '') { |
$retry .= (($retry=~/\?/)?'&':'?').$querystr;
|
| my $lonidsdir=$r->dir_config('lonIDsDir'); |
}
|
| if ($handle=~/^publicuser\_/) { |
my $end_page = &Apache::loncommon::end_page();
|
| # For "public user" - remove it, we apparently really want to login |
&Apache::loncommon::content_type($r,'text/html');
|
| unlink($r->dir_config('lonIDsDir')."/$handle.id"); |
$r->send_http_header;
|
| } else { |
if ($authtype =~ /^lti:/) {
|
| # Indeed, a valid token is found |
$message = &mt('Direct login is not supported with the username you entered.').
|
| &Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle); |
'<br /><br />'.
|
| &Apache::loncommon::content_type($r,'text/html'); |
&mt('You likely need to launch LON-CAPA from within a course in a different Learning Management System.').
|
| $r->send_http_header; |
'<br />'.
|
| my $start_page = |
&mt('You can also try to log in with a different username.');
|
| &Apache::loncommon::start_page('Already logged in'); |
@actions =
|
| my $end_page = |
(&mt('Try your [_1]log in again[_2].','<a href="'.$retry.'">','</a>'));
|
| &Apache::loncommon::end_page(); |
} else {
|
| my $dest = '/adm/roles'; |
$message = &mt($message);
|
| my %form = &get_form_items($r); |
@actions =
|
| if ($form{'logtoken'}) { |
(&mt('Please [_1]log in again[_2].','<a href="'.$retry.'">','</a>'));
|
| my $tmpinfo = &Apache::lonnet::reply('tmpget:'.$form{'logtoken'}, |
}
|
| $form{'serverid'}); |
my $loginhelp = &loginhelpdisplay($udom);
|
| unless (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost') || |
if ($loginhelp) {
|
| ($tmpinfo eq 'no_such_host')) { |
push(@actions, '<a href="'.$loginhelp.'">'.&mt('Login problems?').'</a>');
|
| my ($des_key,$firsturl,@rest)=split(/&/,$tmpinfo); |
}
|
| $firsturl = &unescape($firsturl); |
#FIXME: link to helpdesk might be added here
|
| my %info; |
$r->print(
|
| foreach my $item (@rest) { |
$start_page
|
| my ($key,$value) = split(/=/,$item); |
.'<h2>'.&mt('Sorry ...').'</h2>'
|
| $info{$key} = &unescape($value); |
.&Apache::lonhtmlcommon::confirm_success($message,1).'<br /><br />'
|
| } |
.&Apache::lonhtmlcommon::actionbox(\@actions)
|
| if ($firsturl ne '') { |
.$end_page
|
| $info{'firsturl'} = $firsturl; |
);
|
| $dest = $firsturl; |
}
|
| my $relogin; |
|
| if ($dest =~ m{^/tiny/$match_domain/\w+$}) { |
# ------------------------------------------------------------------ Rerouting!
|
| if ($env{'request.course.id'}) { |
|
| my $cnum = $env{'course.'.$env{'request.course.id'}.'.num'}; |
sub reroute {
|
| my $cdom = $env{'course.'.$env{'request.course.id'}.'.domain'}; |
my ($r) = @_;
|
| my $symb = &Apache::loncommon::symb_from_tinyurl($dest,$cnum,$cdom); |
&Apache::loncommon::content_type($r,'text/html');
|
| if ($symb) { |
$r->send_http_header;
|
| unless (&set_deeplink_login(%info) eq 'ok') { |
my $msg='<b>'.&mt('Sorry ...').'</b><br />'
|
| $relogin = 1; |
.&mt('Please [_1]log in again[_2].');
|
| } |
&Apache::loncommon::simple_error_page($r,'Rerouting',$msg,{'no_auto_mt_msg' => 1});
|
| } |
}
|
| } |
|
| if ($relogin) { |
# ---------------------------------------------------------------- Main handler
|
| $r->print( |
|
| $start_page |
sub handler {
|
| .'<p class="LC_warning">'.&mt('You are already logged in!').'</p>' |
my $r = shift;
|
| .'<p>'.&mt('Please [_1]log out[_2] first, and then try your access again', |
my $londocroot = $r->dir_config('lonDocRoot');
|
| '<a href="/adm/logout">','</a>') |
# Are we re-routing?
|
| .'</p>' |
if (-e "$londocroot/lon-status/reroute.txt") {
|
| .$end_page); |
&reroute($r);
|
| } else { |
return OK;
|
| if (($info{'linkprot'}) || ($info{'linkkey'} ne '')) { |
}
|
| if (($info{'linkprot'}) && ($info{'linkprotuser'} ne '')) { |
|
| unless ($info{'linkprotuser'} eq $env{'user.name'}.':'.$env{'user.domain'}) { |
&Apache::lonlocal::get_language_handle($r);
|
| $r->print( |
|
| $start_page |
# -------------------------------- Prevent users from attempting to login twice
|
| .'<p class="LC_warning">'.&mt('You are already logged in, but as a different user from the one expected for the link you followed from another system').'</p>' |
my $handle = &Apache::lonnet::check_for_valid_session($r);
|
| .'<p>'.&mt('Please [_1]log out[_2] first, and then try following the link again from the other system', |
if ($handle ne '') {
|
| '<a href="/adm/logout">','</a>') |
my $lonidsdir=$r->dir_config('lonIDsDir');
|
| |
if ($handle=~/^publicuser\_/) {
|
| .'</p>' |
# For "public user" - remove it, we apparently really want to login
|
| .$end_page); |
unlink($r->dir_config('lonIDsDir')."/$handle.id");
|
| return OK; |
} else {
|
| } |
# Indeed, a valid token is found
|
| } |
&Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle);
|
| my $token = &Apache::lonnet::tmpput(\%info,$r->dir_config('lonHostID'),'link'); |
&Apache::loncommon::content_type($r,'text/html');
|
| unless (($token eq 'con_lost') || ($token eq 'refused') || |
$r->send_http_header;
|
| ($token eq 'unknown_cmd') || ($token eq 'no_such_host')) { |
my $start_page =
|
| $dest .= (($dest =~ /\?/) ? '&' : '?') . 'ttoken='.$token; |
&Apache::loncommon::start_page('Already logged in');
|
| } |
my $end_page =
|
| } |
&Apache::loncommon::end_page();
|
| $r->print( |
my $dest = '/adm/roles';
|
| $start_page |
my %form = &get_form_items($r);
|
| .'<p class="LC_warning">'.&mt('You are already logged in!').'</p>' |
if ($form{'logtoken'}) {
|
| .'<p>'.&mt('Please either [_1]continue the current session[_2] or [_3]log out[_4] first, and then try your access again', |
my $tmpinfo = &Apache::lonnet::reply('tmpget:'.$form{'logtoken'},
|
| '<a href="'.$dest.'">','</a>', |
$form{'serverid'});
|
| '<a href="/adm/logout">','</a>') |
unless (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost') ||
|
| .'</p>' |
($tmpinfo eq 'no_such_host')) {
|
| .$end_page); |
my ($des_key,$firsturl,@rest)=split(/&/,$tmpinfo);
|
| } |
$firsturl = &unescape($firsturl);
|
| return OK; |
my %info;
|
| } |
foreach my $item (@rest) {
|
| } |
my ($key,$value) = split(/=/,$item);
|
| } |
$info{$key} = &unescape($value);
|
| } |
}
|
| $r->print( |
if ($firsturl ne '') {
|
| $start_page |
$info{'firsturl'} = $firsturl;
|
| .'<p class="LC_warning">'.&mt('You are already logged in!').'</p>' |
$dest = $firsturl;
|
| .'<p>'.&mt('Please either [_1]continue the current session[_2] or [_3]log out[_4].' |
my $relogin;
|
| ,'<a href="'.$dest.'">','</a>','<a href="/adm/logout">','</a>') |
if ($dest =~ m{^/tiny/$match_domain/\w+$}) {
|
| .'</p>' |
if ($env{'request.course.id'}) {
|
| .$end_page |
my $cnum = $env{'course.'.$env{'request.course.id'}.'.num'};
|
| ); |
my $cdom = $env{'course.'.$env{'request.course.id'}.'.domain'};
|
| return OK; |
my $symb = &Apache::loncommon::symb_from_tinyurl($dest,$cnum,$cdom);
|
| } |
if ($symb) {
|
| } |
unless (&set_deeplink_login(%info) eq 'ok') {
|
| |
$relogin = 1;
|
| # ---------------------------------------------------- No valid token, continue |
}
|
| |
}
|
| my %form = &get_form_items($r); |
}
|
| if ((!$form{'uname'}) || (!$form{'upass0'}) || (!$form{'udom'})) { |
if ($relogin) {
|
| &failed($r,'Username, password and domain need to be specified.', |
$r->print(
|
| \%form); |
$start_page
|
| return OK; |
.'<p class="LC_warning">'.&mt('You are already logged in!').'</p>'
|
| } |
.'<p>'.&mt('Please [_1]log out[_2] first, and then try your access again',
|
| |
'<a href="/adm/logout">','</a>')
|
| # split user logging in and "su"-user |
.'</p>'
|
| |
.$end_page);
|
| ($form{'uname'},$form{'suname'},$form{'sudom'})=split(/\:/,$form{'uname'}); |
} else {
|
| $form{'uname'} = &LONCAPA::clean_username($form{'uname'}); |
if (($info{'linkprot'}) || ($info{'linkkey'} ne '')) {
|
| $form{'suname'}= &LONCAPA::clean_username($form{'suname'}); |
my $token = &Apache::lonnet::tmpput(\%info,$r->dir_config('lonHostID'),'link');
|
| $form{'udom'} = &LONCAPA::clean_domain($form{'udom'}); |
unless (($token eq 'con_lost') || ($token eq 'refused') ||
|
| $form{'sudom'} = &LONCAPA::clean_domain($form{'sudom'}); |
($token eq 'unknown_cmd') || ($token eq 'no_such_host')) {
|
| |
$dest .= (($dest =~ /\?/) ? '&' : '?') . 'ttoken='.$token;
|
| my $role = $r->dir_config('lonRole'); |
}
|
| my $domain = $r->dir_config('lonDefDomain'); |
}
|
| my $prodir = $r->dir_config('lonUsersDir'); |
$r->print(
|
| my $contact_name = &mt('LON-CAPA helpdesk'); |
$start_page
|
| |
.'<p class="LC_warning">'.&mt('You are already logged in!').'</p>'
|
| # ---------------------------------------- Get the information from login token |
.'<p>'.&mt('Please either [_1]continue the current session[_2] or [_3]log out[_4] first, and then try your access again',
|
| |
'<a href="'.$dest.'">','</a>',
|
| my $tmpinfo=Apache::lonnet::reply('tmpget:'.$form{'logtoken'}, |
'<a href="/adm/logout">','</a>')
|
| $form{'serverid'}); |
.'</p>'
|
| |
.$end_page);
|
| if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost') || |
}
|
| ($tmpinfo eq 'no_such_host')) { |
return OK;
|
| &failed($r,'Information needed to verify your login information is missing, inaccessible or expired.',\%form); |
}
|
| return OK; |
}
|
| } else { |
}
|
| my $reply = &Apache::lonnet::reply('tmpdel:'.$form{'logtoken'}, |
}
|
| $form{'serverid'}); |
$r->print(
|
| if ( $reply ne 'ok' ) { |
$start_page
|
| &failed($r,'Session could not be opened.',\%form); |
.'<p class="LC_warning">'.&mt('You are already logged in!').'</p>'
|
| &Apache::lonnet::logthis("ERROR got a reply of $reply when trying to contact ". $form{'serverid'}." to get login token"); |
.'<p>'.&mt('Please either [_1]continue the current session[_2] or [_3]log out[_4].'
|
| return OK; |
,'<a href="'.$dest.'">','</a>','<a href="/adm/logout">','</a>')
|
| } |
.'</p>'
|
| } |
.$end_page
|
| |
);
|
| if (!&Apache::lonnet::domain($form{'udom'})) { |
return OK;
|
| &failed($r,'The domain you provided is not a valid LON-CAPA domain.',\%form); |
}
|
| return OK; |
}
|
| } |
|
| |
# ---------------------------------------------------- No valid token, continue
|
| my ($des_key,$firsturl,@rest)=split(/&/,$tmpinfo); |
|
| $firsturl = &unescape($firsturl); |
my %form = &get_form_items($r);
|
| foreach my $item (@rest) { |
if ((!$form{'uname'}) || (!$form{'upass0'}) || (!$form{'udom'})) {
|
| my ($key,$value) = split(/=/,$item); |
&failed($r,'Username, password and domain need to be specified.',
|
| $form{$key} = &unescape($value); |
\%form);
|
| } |
return OK;
|
| if ($firsturl =~ m{^/tiny/$match_domain/\w+$}) { |
}
|
| $form{'firsturl'} = $firsturl; |
|
| } |
# split user logging in and "su"-user
|
| my $upass = &Apache::loncommon::des_decrypt($des_key,$form{'upass0'}); |
|
| |
($form{'uname'},$form{'suname'},$form{'sudom'})=split(/\:/,$form{'uname'});
|
| # ---------------------------------------------------------------- Authenticate |
$form{'uname'} = &LONCAPA::clean_username($form{'uname'});
|
| |
$form{'suname'}= &LONCAPA::clean_username($form{'suname'});
|
| my %domconfig = &Apache::lonnet::get_dom('configuration',['usercreation'],$form{'udom'}); |
$form{'udom'} = &LONCAPA::clean_domain($form{'udom'});
|
| my ($cancreate,$statustocreate) = |
$form{'sudom'} = &LONCAPA::clean_domain($form{'sudom'});
|
| &Apache::createaccount::get_creation_controls($form{'udom'},$domconfig{'usercreation'}); |
|
| my $defaultauth; |
my $role = $r->dir_config('lonRole');
|
| if (ref($cancreate) eq 'ARRAY') { |
my $domain = $r->dir_config('lonDefDomain');
|
| if (grep(/^login$/,@{$cancreate})) { |
my $prodir = $r->dir_config('lonUsersDir');
|
| $defaultauth = 1; |
my $contact_name = &mt('LON-CAPA helpdesk');
|
| } |
|
| } |
# ---------------------------------------- Get the information from login token
|
| my $clientcancheckhost = 1; |
|
| my $authhost=Apache::lonnet::authenticate($form{'uname'},$upass, |
my $tmpinfo=Apache::lonnet::reply('tmpget:'.$form{'logtoken'},
|
| $form{'udom'},$defaultauth, |
$form{'serverid'});
|
| $clientcancheckhost); |
|
| |
if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost') ||
|
| # --------------------------------------------------------------------- Failed? |
($tmpinfo eq 'no_such_host')) {
|
| |
&failed($r,'Information needed to verify your login information is missing, inaccessible or expired.',\%form);
|
| if ($authhost eq 'no_host') { |
return OK;
|
| my $pwdverify; |
} else {
|
| if (&Apache::lonnet::homeserver($form{'uname'},$form{'udom'}) eq 'no_host') { |
my $reply = &Apache::lonnet::reply('tmpdel:'.$form{'logtoken'},
|
| my %possunames = &alternate_unames_check($form{'uname'},$form{'udom'}); |
$form{'serverid'});
|
| if (keys(%possunames) > 0) { |
if ( $reply ne 'ok' ) {
|
| foreach my $rulematch (keys(%possunames)) { |
&failed($r,'Session could not be opened.',\%form);
|
| my $possuname = $possunames{$rulematch}; |
&Apache::lonnet::logthis("ERROR got a reply of $reply when trying to contact ". $form{'serverid'}." to get login token");
|
| if (($possuname ne '') && ($possuname =~ /^$match_username$/)) { |
return OK;
|
| $authhost=Apache::lonnet::authenticate($possuname,$upass, |
}
|
| $form{'udom'},undef, |
}
|
| $clientcancheckhost); |
|
| if (($authhost eq 'no_host') || ($authhost eq 'no_account_on_host')) { |
if (!&Apache::lonnet::domain($form{'udom'})) {
|
| next; |
&failed($r,'The domain you provided is not a valid LON-CAPA domain.',\%form);
|
| } elsif (($authhost ne '') && (&Apache::lonnet::hostname($authhost) ne '')) { |
return OK;
|
| $pwdverify = 1; |
}
|
| &Apache::lonnet::logthis("Authenticated user: $possuname was submitted as: $form{'uname'}"); |
|
| $form{'uname'} = $possuname; |
my ($des_key,$firsturl,@rest)=split(/&/,$tmpinfo);
|
| last; |
$firsturl = &unescape($firsturl);
|
| } |
foreach my $item (@rest) {
|
| } |
my ($key,$value) = split(/=/,$item);
|
| } |
$form{$key} = &unescape($value);
|
| } |
}
|
| } |
if ($firsturl =~ m{^/tiny/$match_domain/\w+$}) {
|
| unless ($pwdverify) { |
$form{'firsturl'} = $firsturl;
|
| &failed($r,'Username and/or password could not be authenticated.', |
}
|
| \%form); |
my $upass = $ENV{HTTPS} ? $form{'upass0'}
|
| return OK; |
: &Apache::loncommon::des_decrypt($des_key,$form{'upass0'});
|
| } |
|
| } elsif ($authhost eq 'no_account_on_host') { |
# ---------------------------------------------------------------- Authenticate
|
| if ($defaultauth) { |
|
| my $domdesc = &Apache::lonnet::domain($form{'udom'},'description'); |
my %domconfig = &Apache::lonnet::get_dom('configuration',['usercreation'],$form{'udom'});
|
| unless (&check_can_host($r,\%form,'no_account_on_host',$domdesc)) { |
my ($cancreate,$statustocreate) =
|
| return OK; |
&Apache::createaccount::get_creation_controls($form{'udom'},$domconfig{'usercreation'});
|
| } |
my $defaultauth;
|
| my $start_page = |
if (ref($cancreate) eq 'ARRAY') {
|
| &Apache::loncommon::start_page('Create a user account in LON-CAPA', |
if (grep(/^login$/,@{$cancreate})) {
|
| '',{'no_inline_link' => 1,}); |
$defaultauth = 1;
|
| my $lonhost = $r->dir_config('lonHostID'); |
}
|
| my $origmail = $Apache::lonnet::perlvar{'lonSupportEMail'}; |
}
|
| my $contacts = |
my $clientcancheckhost = 1;
|
| &Apache::loncommon::build_recipient_list(undef,'helpdeskmail', |
my $authhost=Apache::lonnet::authenticate($form{'uname'},$upass,
|
| $form{'udom'},$origmail); |
$form{'udom'},$defaultauth,
|
| my ($contact_email) = split(',',$contacts); |
$clientcancheckhost);
|
| my $output = |
|
| &Apache::createaccount::username_check($form{'uname'},$form{'udom'}, |
# --------------------------------------------------------------------- Failed?
|
| $domdesc,'',$lonhost, |
|
| $contact_email,$contact_name, |
if ($authhost eq 'no_host') {
|
| undef,$statustocreate); |
my $pwdverify;
|
| &Apache::loncommon::content_type($r,'text/html'); |
if (&Apache::lonnet::homeserver($form{'uname'},$form{'udom'}) eq 'no_host') {
|
| $r->send_http_header; |
my %possunames = &alternate_unames_check($form{'uname'},$form{'udom'});
|
| &Apache::createaccount::print_header($r,$start_page); |
if (keys(%possunames) > 0) {
|
| $r->print('<h3>'.&mt('Account creation').'</h3>'. |
foreach my $rulematch (keys(%possunames)) {
|
| &mt('Although your username and password were authenticated, you do not currently have a LON-CAPA account at this institution.').'<br />'. |
my $possuname = $possunames{$rulematch};
|
| $output.&Apache::loncommon::end_page()); |
if (($possuname ne '') && ($possuname =~ /^$match_username$/)) {
|
| return OK; |
$authhost=Apache::lonnet::authenticate($possuname,$upass,
|
| } else { |
$form{'udom'},undef,
|
| &failed($r,'Although your username and password were authenticated, you do not currently have a LON-CAPA account in this domain, and you are not permitted to create one.',\%form); |
$clientcancheckhost);
|
| return OK; |
if (($authhost eq 'no_host') || ($authhost eq 'no_account_on_host')) {
|
| } |
next;
|
| } |
} elsif (($authhost ne '') && (&Apache::lonnet::hostname($authhost) ne '')) {
|
| |
$pwdverify = 1;
|
| if (($firsturl eq '') || |
&Apache::lonnet::logthis("Authenticated user: $possuname was submitted as: $form{'uname'}");
|
| ($firsturl=~/^\/adm\/(logout|remote)/)) { |
$form{'uname'} = $possuname;
|
| $firsturl='/adm/roles'; |
last;
|
| } |
}
|
| |
}
|
| my ($hosthere,%sessiondata); |
}
|
| if ($form{'iptoken'}) { |
}
|
| %sessiondata = &Apache::lonnet::tmpget($form{'iptoken'}); |
}
|
| my $delete = &Apache::lonnet::tmpdel($form{'iptoken'}); |
unless ($pwdverify) {
|
| if (($sessiondata{'domain'} eq $form{'udom'}) && |
&failed($r,'Username and/or password could not be authenticated.',
|
| ($sessiondata{'username'} eq $form{'uname'})) { |
\%form,$authhost);
|
| $hosthere = 1; |
return OK;
|
| } |
}
|
| } |
} elsif ($authhost eq 'no_account_on_host') {
|
| |
if ($defaultauth) {
|
| # --------------------------------- Are we attempting to login as somebody else? |
my $domdesc = &Apache::lonnet::domain($form{'udom'},'description');
|
| if ($form{'suname'}) { |
unless (&check_can_host($r,\%form,'no_account_on_host',$domdesc)) {
|
| my ($suname,$sudom,$sudomref); |
return OK;
|
| $suname = $form{'suname'}; |
}
|
| $sudom = $form{'udom'}; |
my $start_page =
|
| if ($form{'sudom'}) { |
&Apache::loncommon::start_page('Create a user account in LON-CAPA',
|
| unless ($sudom eq $form{'sudom'}) { |
'',{'no_inline_link' => 1,});
|
| if (&Apache::lonnet::domain($form{'sudom'})) { |
my $lonhost = $r->dir_config('lonHostID');
|
| $sudomref = [$form{'sudom'}]; |
my $origmail = $Apache::lonnet::perlvar{'lonSupportEMail'};
|
| $sudom = $form{'sudom'}; |
my $contacts =
|
| } |
&Apache::loncommon::build_recipient_list(undef,'helpdeskmail',
|
| } |
$form{'udom'},$origmail);
|
| } |
my ($contact_email) = split(',',$contacts);
|
| # ------------ see if the original user has enough privileges to pull this stunt |
my $output =
|
| if (&Apache::lonnet::privileged($form{'uname'},$form{'udom'},$sudomref)) { |
&Apache::createaccount::username_check($form{'uname'},$form{'udom'},
|
| # ---------------------------------------------------- see if the su-user exists |
$domdesc,'',$lonhost,
|
| unless (&Apache::lonnet::homeserver($suname,$sudom) eq 'no_host') { |
$contact_email,$contact_name,
|
| # ------------------------------ see if the su-user is not too highly privileged |
undef,$statustocreate);
|
| if (&Apache::lonnet::privileged($suname,$sudom)) { |
&Apache::loncommon::content_type($r,'text/html');
|
| &Apache::lonnet::logthis('Attempted switch user to privileged user'); |
$r->send_http_header;
|
| } else { |
&Apache::createaccount::print_header($r,$start_page);
|
| my $noprivswitch; |
$r->print('<h3>'.&mt('Account creation').'</h3>'.
|
| # |
&mt('Although your username and password were authenticated, you do not currently have a LON-CAPA account at this institution.').'<br />'.
|
| # su-user's home server and user's home server must have one of: |
$output.&Apache::loncommon::end_page());
|
| # (a) same domain |
return OK;
|
| # (b) same primary library server for the two domains |
} else {
|
| # (c) same "internet domain" for primary library server(s) for home servers' domains |
&failed($r,'Although your username and password were authenticated, you do not currently have a LON-CAPA account in this domain, and you are not permitted to create one.',\%form);
|
| # |
return OK;
|
| my $suprim = &Apache::lonnet::domain($sudom,'primary'); |
}
|
| my $suintdom = &Apache::lonnet::internet_dom($suprim); |
}
|
| unless ($sudom eq $form{'udom'}) { |
|
| my $uprim = &Apache::lonnet::domain($form{'udom'},'primary'); |
if (($firsturl eq '') ||
|
| my $uintdom = &Apache::lonnet::internet_dom($uprim); |
($firsturl=~/^\/adm\/(logout|remote)/)) {
|
| unless ($suprim eq $uprim) { |
$firsturl='/adm/roles';
|
| unless ($suintdom eq $uintdom) { |
}
|
| &Apache::lonnet::logthis('Attempted switch user ' |
|
| .'to user with different "internet domain".'); |
my ($hosthere,%sessiondata);
|
| $noprivswitch = 1; |
if ($form{'iptoken'}) {
|
| } |
%sessiondata = &Apache::lonnet::tmpget($form{'iptoken'});
|
| } |
my $delete = &Apache::lonnet::tmpdel($form{'iptoken'});
|
| } |
if (($sessiondata{'domain'} eq $form{'udom'}) &&
|
| |
($sessiondata{'username'} eq $form{'uname'})) {
|
| unless ($noprivswitch) { |
$hosthere = 1;
|
| # |
}
|
| # server where log-in occurs must have same "internet domain" as su-user's home |
}
|
| # server |
|
| # |
# --------------------------------- Are we attempting to login as somebody else?
|
| my $lonhost = $r->dir_config('lonHostID'); |
if ($form{'suname'}) {
|
| my $hostintdom = &Apache::lonnet::internet_dom($lonhost); |
my ($suname,$sudom,$sudomref);
|
| if ($hostintdom ne $suintdom) { |
$suname = $form{'suname'};
|
| &Apache::lonnet::logthis('Attempted switch user on a ' |
$sudom = $form{'udom'};
|
| .'server with a different "internet domain".'); |
if ($form{'sudom'}) {
|
| } else { |
unless ($sudom eq $form{'sudom'}) {
|
| |
if (&Apache::lonnet::domain($form{'sudom'})) {
|
| # -------------------------------------------------------- actually switch users |
$sudomref = [$form{'sudom'}];
|
| |
$sudom = $form{'sudom'};
|
| &Apache::lonnet::logperm('User '.$form{'uname'}.' at '. |
}
|
| $form{'udom'}.' logging in as '.$suname.':'.$sudom); |
}
|
| $form{'uname'}=$suname; |
}
|
| if ($form{'udom'} ne $sudom) { |
# ------------ see if the original user has enough privileges to pull this stunt
|
| $form{'udom'}=$sudom; |
if (&Apache::lonnet::privileged($form{'uname'},$form{'udom'},$sudomref)) {
|
| } |
# ---------------------------------------------------- see if the su-user exists
|
| } |
unless (&Apache::lonnet::homeserver($suname,$sudom) eq 'no_host') {
|
| } |
# ------------------------------ see if the su-user is not too highly privileged
|
| } |
if (&Apache::lonnet::privileged($suname,$sudom)) {
|
| } |
&Apache::lonnet::logthis('Attempted switch user to privileged user');
|
| } else { |
} else {
|
| &Apache::lonnet::logthis('Non-privileged user attempting switch user'); |
my $noprivswitch;
|
| } |
#
|
| } |
# su-user's home server and user's home server must have one of:
|
| |
# (a) same domain
|
| if ($form{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) { |
# (b) same primary library server for the two domains
|
| if (($form{'linkprot'}) && ($form{'linkprotuser'} ne '')) { |
# (c) same "internet domain" for primary library server(s) for home servers' domains
|
| unless($form{'linkprotuser'} eq $form{'uname'}.':'.$form{'udom'}) { |
#
|
| delete($form{'udom'}); |
my $suprim = &Apache::lonnet::domain($sudom,'primary');
|
| delete($form{'uname'}); |
my $suintdom = &Apache::lonnet::internet_dom($suprim);
|
| &failed($r,'Username and/or domain are different to that expected for the link you followed from another system', |
unless ($sudom eq $form{'udom'}) {
|
| \%form,$authhost); |
my $uprim = &Apache::lonnet::domain($form{'udom'},'primary');
|
| return OK; |
my $uintdom = &Apache::lonnet::internet_dom($uprim);
|
| } |
unless ($suprim eq $uprim) {
|
| } |
unless ($suintdom eq $uintdom) {
|
| } |
&Apache::lonnet::logthis('Attempted switch user '
|
| |
.'to user with different "internet domain".');
|
| my ($is_balancer,$otherserver); |
$noprivswitch = 1;
|
| |
}
|
| unless ($hosthere) { |
}
|
| ($is_balancer,$otherserver) = |
}
|
| &Apache::lonnet::check_loadbalancing($form{'uname'},$form{'udom'},'login'); |
|
| if ($is_balancer) { |
unless ($noprivswitch) {
|
| # Check if browser sent a LON-CAPA load balancer cookie (and this is a balancer) |
#
|
| my ($found_server,$balancer_cookie) = &Apache::lonnet::check_for_balancer_cookie($r); |
# server where log-in occurs must have same "internet domain" as su-user's home
|
| if (($found_server) && ($balancer_cookie =~ /^\Q$env{'user.domain'}\E_\Q$env{'user.name'}\E_/)) { |
# server
|
| $otherserver = $found_server; |
#
|
| } |
my $lonhost = $r->dir_config('lonHostID');
|
| if ($otherserver eq '') { |
my $hostintdom = &Apache::lonnet::internet_dom($lonhost);
|
| my $lowest_load; |
if ($hostintdom ne $suintdom) {
|
| ($otherserver,undef,undef,undef,$lowest_load) = &Apache::lonnet::choose_server($form{'udom'}); |
&Apache::lonnet::logthis('Attempted switch user on a '
|
| if ($lowest_load > 100) { |
.'server with a different "internet domain".');
|
| $otherserver = &Apache::lonnet::spareserver($r,$lowest_load,$lowest_load,1,$form{'udom'}); |
} else {
|
| } |
|
| } |
# -------------------------------------------------------- actually switch users
|
| if ($otherserver ne '') { |
|
| my @hosts = &Apache::lonnet::current_machine_ids(); |
&Apache::lonnet::logperm('User '.$form{'uname'}.' at '.
|
| if (grep(/^\Q$otherserver\E$/,@hosts)) { |
$form{'udom'}.' logging in as '.$suname.':'.$sudom);
|
| $hosthere = $otherserver; |
$form{'uname'}=$suname;
|
| } |
if ($form{'udom'} ne $sudom) {
|
| } |
$form{'udom'}=$sudom;
|
| } |
}
|
| } |
}
|
| |
}
|
| if (($is_balancer) && (!$hosthere)) { |
}
|
| if ($otherserver) { |
}
|
| &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef, |
} else {
|
| \%form); |
&Apache::lonnet::logthis('Non-privileged user attempting switch user');
|
| my $switchto = '/adm/switchserver?otherserver='.$otherserver; |
}
|
| if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) { |
}
|
| $switchto .= '&origurl='.$firsturl; |
|
| } |
my ($is_balancer,$otherserver);
|
| if ($form{'role'}) { |
|
| $switchto .= '&role='.$form{'role'}; |
unless ($hosthere) {
|
| } |
($is_balancer,$otherserver) =
|
| if ($form{'symb'}) { |
&Apache::lonnet::check_loadbalancing($form{'uname'},$form{'udom'},'login');
|
| $switchto .= '&symb='.$form{'symb'}; |
if ($is_balancer) {
|
| } |
# Check if browser sent a LON-CAPA load balancer cookie (and this is a balancer)
|
| if ($form{'linkprot'}) { |
my ($found_server,$balancer_cookie) = &Apache::lonnet::check_for_balancer_cookie($r);
|
| $env{'request.linkprot'} = $form{'linkprot'}; |
if (($found_server) && ($balancer_cookie =~ /^\Q$env{'user.domain'}\E_\Q$env{'user.name'}\E_/)) {
|
| foreach my $item ('linkprotuser','linkprotexit') { |
$otherserver = $found_server;
|
| if ($form{$item}) { |
}
|
| $env{'request.'.$item} = $form{$item}; |
if ($otherserver eq '') {
|
| } |
my $lowest_load;
|
| } |
($otherserver,undef,undef,undef,$lowest_load) = &Apache::lonnet::choose_server($form{'udom'});
|
| } elsif ($form{'linkkey'} ne '') { |
if ($lowest_load > 100) {
|
| $env{'request.linkkey'} = $form{'linkkey'}; |
$otherserver = &Apache::lonnet::spareserver($r,$lowest_load,$lowest_load,1,$form{'udom'});
|
| } |
}
|
| if ($form{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) { |
}
|
| &set_deeplink_login(%form); |
if ($otherserver ne '') {
|
| } |
my @hosts = &Apache::lonnet::current_machine_ids();
|
| $r->internal_redirect($switchto); |
if (grep(/^\Q$otherserver\E$/,@hosts)) {
|
| } else { |
$hosthere = $otherserver;
|
| &Apache::loncommon::content_type($r,'text/html'); |
}
|
| $r->send_http_header; |
}
|
| $r->print(&noswitch()); |
}
|
| } |
}
|
| return OK; |
|
| } else { |
if (($is_balancer) && (!$hosthere)) {
|
| if (!&check_can_host($r,\%form,$authhost)) { |
if ($otherserver) {
|
| my ($otherserver) = &Apache::lonnet::choose_server($form{'udom'}); |
&success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef,
|
| if ($otherserver) { |
\%form);
|
| &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef, |
my $switchto = '/adm/switchserver?otherserver='.$otherserver;
|
| \%form); |
if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) {
|
| my $switchto = '/adm/switchserver?otherserver='.$otherserver; |
$switchto .= '&origurl='.$firsturl;
|
| if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) { |
}
|
| $switchto .= '&origurl='.$firsturl; |
if ($form{'role'}) {
|
| } |
$switchto .= '&role='.$form{'role'};
|
| if ($form{'role'}) { |
}
|
| $switchto .= '&role='.$form{'role'}; |
if ($form{'symb'}) {
|
| } |
$switchto .= '&symb='.$form{'symb'};
|
| if ($form{'symb'}) { |
}
|
| $switchto .= '&symb='.$form{'symb'}; |
if ($form{'linkprot'}) {
|
| } |
$env{'request.linkprot'} = $form{'linkprot'};
|
| if ($form{'linkprot'}) { |
} elsif ($form{'linkkey'} ne '') {
|
| $env{'request.linkprot'} = $form{'linkprot'}; |
$env{'request.linkkey'} = $form{'linkkey'};
|
| foreach my $item ('linkprotuser','linkprotexit') { |
}
|
| if ($form{$item}) { |
if ($form{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) {
|
| $env{'request.'.$item} = $form{$item}; |
&set_deeplink_login(%form);
|
| } |
}
|
| } |
$r->internal_redirect($switchto);
|
| } elsif ($form{'linkkey'} ne '') { |
} else {
|
| $env{'request.linkkey'} = $form{'linkkey'}; |
&Apache::loncommon::content_type($r,'text/html');
|
| } |
$r->send_http_header;
|
| if ($form{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) { |
$r->print(&noswitch());
|
| &set_deeplink_login(%form); |
}
|
| } |
return OK;
|
| $r->internal_redirect($switchto); |
} else {
|
| } else { |
if (!&check_can_host($r,\%form,$authhost)) {
|
| &Apache::loncommon::content_type($r,'text/html'); |
my ($otherserver) = &Apache::lonnet::choose_server($form{'udom'});
|
| $r->send_http_header; |
if ($otherserver) {
|
| $r->print(&noswitch()); |
&success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef,
|
| } |
\%form);
|
| return OK; |
my $switchto = '/adm/switchserver?otherserver='.$otherserver;
|
| } |
if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) {
|
| |
$switchto .= '&origurl='.$firsturl;
|
| # ------------------------------------------------------- Do the load balancing |
}
|
| |
if ($form{'role'}) {
|
| # ---------------------------------------------------------- Determine own load |
$switchto .= '&role='.$form{'role'};
|
| my $loadlim = $r->dir_config('lonLoadLim'); |
}
|
| my $loadavg; |
if ($form{'symb'}) {
|
| { |
$switchto .= '&symb='.$form{'symb'};
|
| my $loadfile=Apache::File->new('/proc/loadavg'); |
}
|
| $loadavg=<$loadfile>; |
if ($form{'linkprot'}) {
|
| } |
$env{'request.linkprot'} = $form{'linkprot'};
|
| $loadavg =~ s/\s.*//g; |
} elsif ($form{'linkkey'} ne '') {
|
| my $loadpercent=sprintf("%.1f",100*$loadavg/$loadlim); |
$env{'request.linkkey'} = $form{'linkkey'};
|
| my $userloadpercent=&Apache::lonnet::userload(); |
}
|
| |
if ($form{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) {
|
| # ---------------------------------------------------------- Are we overloaded? |
&set_deeplink_login(%form);
|
| if ((($userloadpercent>100.0)||($loadpercent>100.0))) { |
}
|
| my $unloaded=Apache::lonnet::spareserver($r,$loadpercent,$userloadpercent,1,$form{'udom'}); |
$r->internal_redirect($switchto);
|
| if (!$unloaded) { |
} else {
|
| ($unloaded) = &Apache::lonnet::choose_server($form{'udom'}); |
&Apache::loncommon::content_type($r,'text/html');
|
| } |
$r->send_http_header;
|
| if ($unloaded) { |
$r->print(&noswitch());
|
| &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect', |
}
|
| undef,\%form); |
return OK;
|
| if ($form{'linkprot'}) { |
}
|
| $env{'request.linkprot'} = $form{'linkprot'}; |
|
| } elsif ($form{'linkkey'} ne '') { |
# ------------------------------------------------------- Do the load balancing
|
| $env{'request.linkkey'} = $form{'linkkey'}; |
|
| } |
# ---------------------------------------------------------- Determine own load
|
| if ($form{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) { |
my $loadlim = $r->dir_config('lonLoadLim');
|
| &set_deeplink_login(%form); |
my $loadavg;
|
| } |
{
|
| $r->internal_redirect('/adm/switchserver?otherserver='.$unloaded.'&origurl='.$firsturl); |
my $loadfile=Apache::File->new('/proc/loadavg');
|
| return OK; |
$loadavg=<$loadfile>;
|
| } |
}
|
| } |
$loadavg =~ s/\s.*//g;
|
| if (($is_balancer) && ($hosthere)) { |
my $loadpercent=sprintf("%.1f",100*$loadavg/$loadlim);
|
| $form{'noloadbalance'} = $hosthere; |
my $userloadpercent=&Apache::lonnet::userload();
|
| } |
|
| my $extra_env; |
# ---------------------------------------------------------- Are we overloaded?
|
| if (($hosthere) && ($sessiondata{'sessionserver'} ne '')) { |
if ((($userloadpercent>100.0)||($loadpercent>100.0))) {
|
| if ($sessiondata{'origurl'} ne '') { |
my $unloaded=Apache::lonnet::spareserver($r,$loadpercent,$userloadpercent,1,$form{'udom'});
|
| $firsturl = $sessiondata{'origurl'}; |
if (!$unloaded) {
|
| $form{'firsturl'} = $sessiondata{'origurl'}; |
($unloaded) = &Apache::lonnet::choose_server($form{'udom'});
|
| my @names = ('role','symb','linkprot','linkkey'); |
}
|
| foreach my $item (@names) { |
if ($unloaded) {
|
| if ($sessiondata{$item} ne '') { |
&success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',
|
| $form{$item} = $sessiondata{$item}; |
undef,\%form);
|
| } |
if ($form{'linkprot'}) {
|
| } |
$env{'request.linkprot'} = $form{'linkprot'};
|
| } |
} elsif ($form{'linkkey'} ne '') {
|
| } |
$env{'request.linkkey'} = $form{'linkkey'};
|
| if ($form{'linkprot'}) { |
}
|
| my ($linkprotector,$uri) = split(/:/,$form{'linkprot'},2); |
if ($form{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) {
|
| if ($linkprotector) { |
&set_deeplink_login(%form);
|
| $extra_env = {'user.linkprotector' => $linkprotector, |
}
|
| 'user.linkproturi' => $uri}; |
$r->internal_redirect('/adm/switchserver?otherserver='.$unloaded.'&origurl='.$firsturl);
|
| } |
return OK;
|
| } elsif ($form{'linkkey'} ne '') { |
}
|
| $extra_env = {'user.deeplinkkey' => $form{'linkkey'}, |
}
|
| 'user.keyedlinkuri' => $form{'firsturl'}}; |
if (($is_balancer) && ($hosthere)) {
|
| } |
$form{'noloadbalance'} = $hosthere;
|
| if ($form{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) { |
}
|
| &set_deeplink_login(%form); |
my $extra_env;
|
| if ($form{'linkprot'}) { |
if (($hosthere) && ($sessiondata{'sessionserver'} ne '')) {
|
| if (ref($extra_env) eq 'HASH') { |
if ($sessiondata{'origurl'} ne '') {
|
| %{$extra_env} = ( %{$extra_env}, 'request.linkprot' => $form{'linkprot'} ); |
$firsturl = $sessiondata{'origurl'};
|
| } else { |
$form{'firsturl'} = $sessiondata{'origurl'};
|
| $extra_env = {'request.linkprot' => $form{'linkprot'}}; |
my @names = ('role','symb','linkprot','linkkey');
|
| } |
foreach my $item (@names) {
|
| if ($form{'linkprotexit'}) { |
if ($sessiondata{$item} ne '') {
|
| $extra_env->{'request.linkprotexit'} = $form{'linkprotexit'}; |
$form{$item} = $sessiondata{$item};
|
| } |
}
|
| } elsif ($form{'linkkey'} ne '') { |
}
|
| if (ref($extra_env) eq 'HASH') { |
}
|
| %{$extra_env} = ( %{$extra_env}, 'request.linkkey' => $form{'linkkey'} ); |
}
|
| } else { |
if ($form{'linkprot'}) {
|
| $extra_env = {'request.linkkey' => $form{'linkkey'}}; |
my ($linkprotector,$uri) = split(/:/,$form{'linkprot'},2);
|
| } |
if ($linkprotector) {
|
| } |
$extra_env = {'user.linkprotector' => $linkprotector,
|
| if ($env{'request.deeplink.login'}) { |
'user.linkproturi' => $uri};
|
| if (ref($extra_env) eq 'HASH') { |
}
|
| %{$extra_env} = ( %{$extra_env}, 'request.deeplink.login' => $form{'firsturl'} ); |
} elsif ($form{'linkkey'} ne '') {
|
| } else { |
$extra_env = {'user.deeplinkkey' => $form{'linkkey'},
|
| $extra_env = {'request.deeplink.login' => $form{'firsturl'}}; |
'user.keyedlinkuri' => $form{'firsturl'}};
|
| } |
}
|
| } |
if ($form{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) {
|
| } |
&set_deeplink_login(%form);
|
| &success($r,$form{'uname'},$form{'udom'},$authhost,$firsturl,$extra_env, |
if ($form{'linkprot'}) {
|
| \%form); |
if (ref($extra_env) eq 'HASH') {
|
| return OK; |
%{$extra_env} = ( %{$extra_env}, 'request.linkprot' => $form{'linkprot'} );
|
| } |
} else {
|
| } |
$extra_env = {'request.linkprot' => $form{'linkprot'}};
|
| |
}
|
| sub get_form_items { |
} elsif ($form{'linkkey'} ne '') {
|
| my ($r) = @_; |
if (ref($extra_env) eq 'HASH') {
|
| my $buffer; |
%{$extra_env} = ( %{$extra_env}, 'request.linkkey' => $form{'linkkey'} );
|
| if ($r->header_in('Content-length') > 0) { |
} else {
|
| $r->read($buffer,$r->header_in('Content-length'),0); |
$extra_env = {'request.linkkey' => $form{'linkkey'}};
|
| } |
}
|
| my %form; |
}
|
| foreach my $pair (split(/&/,$buffer)) { |
if ($env{'request.deeplink.login'}) {
|
| my ($name,$value) = split(/=/,$pair); |
if (ref($extra_env) eq 'HASH') {
|
| $value =~ tr/+/ /; |
%{$extra_env} = ( %{$extra_env}, 'request.deeplink.login' => $form{'firsturl'} );
|
| $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg; |
} else {
|
| $form{$name}=$value; |
$extra_env = {'request.deeplink.login' => $form{'firsturl'}};
|
| } |
}
|
| return %form; |
}
|
| } |
}
|
| |
&success($r,$form{'uname'},$form{'udom'},$authhost,$firsturl,$extra_env,
|
| sub set_deeplink_login { |
\%form);
|
| my (%form) = @_; |
return OK;
|
| my $disallow; |
}
|
| if ($form{'firsturl'} =~ m{^/tiny/($match_domain)/\w+$}) { |
}
|
| my $cdom = $1; |
|
| my ($cnum,$symb) = &Apache::loncommon::symb_from_tinyurl($form{'firsturl'},'',$cdom); |
sub get_form_items {
|
| if ($symb) { |
my ($r) = @_;
|
| if ($env{'request.course.id'} eq $cdom.'_'.$cnum) { |
my $buffer;
|
| my $deeplink; |
if ($r->header_in('Content-length') > 0) {
|
| if ($symb =~ /\.(page|sequence)$/) { |
$r->read($buffer,$r->header_in('Content-length'),0);
|
| my $mapname = &Apache::lonnet::deversion((&Apache::lonnet::decode_symb($symb))[2]); |
}
|
| my $navmap = Apache::lonnavmaps::navmap->new(); |
my %form;
|
| if (ref($navmap)) { |
foreach my $pair (split(/&/,$buffer)) {
|
| $deeplink = $navmap->get_mapparam(undef,$mapname,'0.deeplink'); |
my ($name,$value) = split(/=/,$pair);
|
| } |
$value =~ tr/+/ /;
|
| } else { |
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
|
| $deeplink = &Apache::lonnet::EXT('resource.0.deeplink',$symb); |
$form{$name}=$value;
|
| } |
}
|
| if ($deeplink ne '') { |
return %form;
|
| my ($state,$others,$listed,$scope,$protect) = split(/,/,$deeplink); |
}
|
| if (($protect ne 'none') && ($protect ne '')) { |
|
| my ($acctype,$item) = split(/:/,$protect); |
sub set_deeplink_login {
|
| if ($acctype =~ /lti(c|d)$/) { |
my (%form) = @_;
|
| unless ($form{'linkprot'} eq $item.$1.':'.$env{'request.deeplink.login'}) { |
my $disallow;
|
| $disallow = 1; |
if ($form{'firsturl'} =~ m{^/tiny/($match_domain)/\w+$}) {
|
| } |
my $cdom = $1;
|
| } elsif ($acctype eq 'key') { |
my ($cnum,$symb) = &Apache::loncommon::symb_from_tinyurl($form{'firsturl'},'',$cdom);
|
| unless ($form{'linkkey'} eq $item) { |
if ($symb) {
|
| $disallow = 1; |
if ($env{'request.course.id'} eq $cdom.'_'.$cnum) {
|
| } |
my $deeplink;
|
| } |
if ($symb =~ /\.(page|sequence)$/) {
|
| } |
my $mapname = &Apache::lonnet::deversion((&Apache::lonnet::decode_symb($symb))[2]);
|
| } |
my $navmap = Apache::lonnavmaps::navmap->new();
|
| unless ($disallow) { |
if (ref($navmap)) {
|
| $env{'request.deeplink.login'} = $form{'firsturl'}; |
$deeplink = $navmap->get_mapparam(undef,$mapname,'0.deeplink');
|
| } |
}
|
| } else { |
} else {
|
| $env{'request.deeplink.login'} = $form{'firsturl'}; |
$deeplink = &Apache::lonnet::EXT('resource.0.deeplink',$symb);
|
| } |
}
|
| } |
if ($deeplink ne '') {
|
| } |
my ($state,$others,$listed,$scope,$protect) = split(/,/,$deeplink);
|
| if ($disallow) { |
if (($protect ne 'none') && ($protect ne '')) {
|
| return; |
my ($acctype,$item) = split(/:/,$protect);
|
| } |
if ($acctype =~ /lti(c|d)$/) {
|
| return 'ok'; |
unless ($form{'linkprot'} eq $item.$1.':'.$env{'request.deeplink.login'}) {
|
| } |
$disallow = 1;
|
| |
}
|
| sub set_retry_token { |
} elsif ($acctype eq 'key') {
|
| my ($form,$lonhost,$querystr) = @_; |
unless ($form{'linkkey'} eq $item) {
|
| if (ref($form) eq 'HASH') { |
$disallow = 1;
|
| my ($firsturl,$token,$extras,@names); |
}
|
| @names = ('role','symb','linkprotuser','linkprotexit','linkprot','linkkey','iptoken'); |
}
|
| foreach my $name (@names) { |
}
|
| if ($form->{$name} ne '') { |
}
|
| $extras .= '&'.$name.'='.&escape($form->{$name}); |
unless ($disallow) {
|
| last if ($name eq 'linkprot'); |
$env{'request.deeplink.login'} = $form{'firsturl'};
|
| } |
}
|
| } |
} else {
|
| my $firsturl = $form->{'firsturl'}; |
$env{'request.deeplink.login'} = $form{'firsturl'};
|
| if (($firsturl ne '') || ($extras ne '')) { |
}
|
| $extras .= ':retry'; |
}
|
| $token = &Apache::lonnet::reply('tmpput:'.&escape($firsturl). |
}
|
| $extras,$lonhost); |
if ($disallow) {
|
| if (($token eq 'con_lost') || ($token eq 'no_such_host')) { |
return;
|
| return 'fail'; |
}
|
| } else { |
return 'ok';
|
| if (ref($querystr)) { |
}
|
| $$querystr = 'retry='.$token; |
|
| } |
sub set_retry_token {
|
| return 'ok'; |
my ($form,$lonhost,$querystr) = @_;
|
| } |
if (ref($form) eq 'HASH') {
|
| } |
my ($firsturl,$token,$extras,@names);
|
| } |
@names = ('role','symb','linkprot','linkkey','iptoken');
|
| return; |
foreach my $name (@names) {
|
| } |
if ($form->{$name} ne '') {
|
| |
$extras .= '&'.$name.'='.&escape($form->{$name});
|
| sub check_can_host { |
last if ($name eq 'linkprot');
|
| my ($r,$form,$authhost,$domdesc) = @_; |
}
|
| return unless (ref($form) eq 'HASH'); |
}
|
| my $canhost = 1; |
my $firsturl = $form->{'firsturl'};
|
| my $lonhost = $r->dir_config('lonHostID'); |
if (($firsturl ne '') || ($extras ne '')) {
|
| my $udom = $form->{'udom'}; |
$extras .= ':retry';
|
| my @intdoms; |
$token = &Apache::lonnet::reply('tmpput:'.&escape($firsturl).
|
| my $internet_names = &Apache::lonnet::get_internet_names($lonhost); |
$extras,$lonhost);
|
| if (ref($internet_names) eq 'ARRAY') { |
if (($token eq 'con_lost') || ($token eq 'no_such_host')) {
|
| @intdoms = @{$internet_names}; |
return 'fail';
|
| } |
} else {
|
| my $uprimary_id = &Apache::lonnet::domain($udom,'primary'); |
if (ref($querystr)) {
|
| my $uint_dom = &Apache::lonnet::internet_dom($uprimary_id); |
$$querystr = 'retry='.$token;
|
| unless ($uint_dom ne '' && grep(/^\Q$uint_dom\E$/,@intdoms)) { |
}
|
| my $machine_dom = &Apache::lonnet::host_domain($lonhost); |
return 'ok';
|
| my $hostname = &Apache::lonnet::hostname($lonhost); |
}
|
| my $serverhomeID = &Apache::lonnet::get_server_homeID($hostname); |
}
|
| my $serverhomedom = &Apache::lonnet::host_domain($serverhomeID); |
}
|
| my %defdomdefaults = &Apache::lonnet::get_domain_defaults($serverhomedom); |
return;
|
| my %udomdefaults = &Apache::lonnet::get_domain_defaults($udom); |
}
|
| my $loncaparev; |
|
| if ($authhost eq 'no_account_on_host') { |
sub check_can_host {
|
| $loncaparev = &Apache::lonnet::get_server_loncaparev($machine_dom); |
my ($r,$form,$authhost,$domdesc) = @_;
|
| } else { |
return unless (ref($form) eq 'HASH');
|
| $loncaparev = &Apache::lonnet::get_server_loncaparev($machine_dom,$lonhost); |
my $canhost = 1;
|
| } |
my $lonhost = $r->dir_config('lonHostID');
|
| $canhost = &Apache::lonnet::can_host_session($udom,$lonhost,$loncaparev, |
my $udom = $form->{'udom'};
|
| $udomdefaults{'remotesessions'}, |
my @intdoms;
|
| $defdomdefaults{'hostedsessions'}); |
my $internet_names = &Apache::lonnet::get_internet_names($lonhost);
|
| } |
if (ref($internet_names) eq 'ARRAY') {
|
| unless ($canhost) { |
@intdoms = @{$internet_names};
|
| if ($authhost eq 'no_account_on_host') { |
}
|
| my $checkloginvia = 1; |
my $uprimary_id = &Apache::lonnet::domain($udom,'primary');
|
| my ($login_host,$hostname) = |
my $uint_dom = &Apache::lonnet::internet_dom($uprimary_id);
|
| &Apache::lonnet::choose_server($udom,$checkloginvia); |
unless ($uint_dom ne '' && grep(/^\Q$uint_dom\E$/,@intdoms)) {
|
| &Apache::loncommon::content_type($r,'text/html'); |
my $machine_dom = &Apache::lonnet::host_domain($lonhost);
|
| $r->send_http_header; |
my $hostname = &Apache::lonnet::hostname($lonhost);
|
| if ($login_host ne '') { |
my $serverhomeID = &Apache::lonnet::get_server_homeID($hostname);
|
| my $protocol = $Apache::lonnet::protocol{$login_host}; |
my $serverhomedom = &Apache::lonnet::host_domain($serverhomeID);
|
| $protocol = 'http' if ($protocol ne 'https'); |
my %defdomdefaults = &Apache::lonnet::get_domain_defaults($serverhomedom);
|
| my $alias = &Apache::lonnet::use_proxy_alias($r,$login_host); |
my %udomdefaults = &Apache::lonnet::get_domain_defaults($udom);
|
| $hostname = $alias if ($alias ne ''); |
my $loncaparev;
|
| my $newurl = $protocol.'://'.$hostname.'/adm/createaccount'; |
if ($authhost eq 'no_account_on_host') {
|
| #FIXME Should preserve where user was going and linkprot by setting ltoken at $login_host |
$loncaparev = &Apache::lonnet::get_server_loncaparev($machine_dom);
|
| $r->print(&Apache::loncommon::start_page('Create a user account in LON-CAPA'). |
} else {
|
| '<h3>'.&mt('Account creation').'</h3>'. |
$loncaparev = &Apache::lonnet::get_server_loncaparev($machine_dom,$lonhost);
|
| &mt('You do not currently have a LON-CAPA account at this institution.').'<br />'. |
}
|
| '<p>'.&mt('You will be able to create one by logging into a LON-CAPA server within the [_1] domain.',$domdesc).'</p>'. |
$canhost = &Apache::lonnet::can_host_session($udom,$lonhost,$loncaparev,
|
| '<p>'.&mt('[_1]Log in[_2]','<a href="'.$newurl.'">','</a>'). |
$udomdefaults{'remotesessions'},
|
| &Apache::loncommon::end_page()); |
$defdomdefaults{'hostedsessions'});
|
| } else { |
}
|
| $r->print(&Apache::loncommon::start_page('Access to LON-CAPA unavailable'). |
unless ($canhost) {
|
| '<h3>'.&mt('Account creation unavailable').'</h3>'. |
if ($authhost eq 'no_account_on_host') {
|
| &mt('You do not currently have a LON-CAPA account at this institution.').'<br />'. |
my $checkloginvia = 1;
|
| '<p>'.&mt('Currently a LON-CAPA server is not available within the [_1] domain for you to log-in to, to create an account.',$domdesc).'</p>'. |
my ($login_host,$hostname) =
|
| &Apache::loncommon::end_page()); |
&Apache::lonnet::choose_server($udom,$checkloginvia);
|
| } |
&Apache::loncommon::content_type($r,'text/html');
|
| } else { |
$r->send_http_header;
|
| &success($r,$form->{'uname'},$udom,$authhost,'noredirect',undef, |
if ($login_host ne '') {
|
| $form); |
my $protocol = $Apache::lonnet::protocol{$login_host};
|
| if ($form->{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) { |
$protocol = 'http' if ($protocol ne 'https');
|
| $env{'request.deeplink.login'} = $form->{'firsturl'}; |
my $alias = &Apache::lonnet::use_proxy_alias($r,$login_host);
|
| } |
$hostname = $alias if ($alias ne '');
|
| if ($form->{'linkprot'}) { |
my $newurl = $protocol.'://'.$hostname.'/adm/createaccount';
|
| $env{'request.linkprot'} = $form->{'linkprot'}; |
#FIXME Should preserve where user was going and linkprot by setting ltoken at $login_host
|
| } elsif ($form->{'linkkey'} ne '') { |
$r->print(&Apache::loncommon::start_page('Create a user account in LON-CAPA').
|
| $env{'request.linkkey'} = $form->{'linkkey'}; |
'<h3>'.&mt('Account creation').'</h3>'.
|
| } |
&mt('You do not currently have a LON-CAPA account at this institution.').'<br />'.
|
| my ($otherserver) = &Apache::lonnet::choose_server($udom); |
'<p>'.&mt('You will be able to create one by logging into a LON-CAPA server within the [_1] domain.',$domdesc).'</p>'.
|
| $r->internal_redirect('/adm/switchserver?otherserver='.$otherserver); |
'<p>'.&mt('[_1]Log in[_2]','<a href="'.$newurl.'">','</a>').
|
| } |
&Apache::loncommon::end_page());
|
| } |
} else {
|
| return $canhost; |
$r->print(&Apache::loncommon::start_page('Access to LON-CAPA unavailable').
|
| } |
'<h3>'.&mt('Account creation unavailable').'</h3>'.
|
| |
&mt('You do not currently have a LON-CAPA account at this institution.').'<br />'.
|
| sub noswitch { |
'<p>'.&mt('Currently a LON-CAPA server is not available within the [_1] domain for you to log-in to, to create an account.',$domdesc).'</p>'.
|
| my $result = &Apache::loncommon::start_page('Access to LON-CAPA unavailable'). |
&Apache::loncommon::end_page());
|
| '<h3>'.&mt('Session unavailable').'</h3>'. |
}
|
| &mt('This LON-CAPA server is unable to host your session.').'<br />'. |
} else {
|
| '<p>'.&mt('Currently no other LON-CAPA server is available to host your session either.').'</p>'. |
&success($r,$form->{'uname'},$udom,$authhost,'noredirect',undef,
|
| &Apache::loncommon::end_page(); |
$form);
|
| return $result; |
if ($form->{'firsturl'} =~ m{^/tiny/$match_domain/\w+$}) {
|
| } |
$env{'request.deeplink.login'} = $form->{'firsturl'};
|
| |
}
|
| sub loginhelpdisplay { |
if ($form->{'linkprot'}) {
|
| my ($authdomain) = @_; |
$env{'request.linkprot'} = $form->{'linkprot'};
|
| my $login_help = 1; |
} elsif ($form->{'linkkey'} ne '') {
|
| my $lang = &Apache::lonlocal::current_language(); |
$env{'request.linkkey'} = $form->{'linkkey'};
|
| if ($login_help) { |
}
|
| my $dom = $authdomain; |
my ($otherserver) = &Apache::lonnet::choose_server($udom);
|
| if ($dom eq '') { |
$r->internal_redirect('/adm/switchserver?otherserver='.$otherserver);
|
| $dom = &Apache::lonnet::default_login_domain(); |
}
|
| } |
}
|
| my %domconfhash = &Apache::loncommon::get_domainconf($dom); |
return $canhost;
|
| my $loginhelp_url; |
}
|
| if ($lang) { |
|
| $loginhelp_url = $domconfhash{$dom.'.login.helpurl_'.$lang}; |
sub noswitch {
|
| if ($loginhelp_url ne '') { |
my $result = &Apache::loncommon::start_page('Access to LON-CAPA unavailable').
|
| return $loginhelp_url; |
'<h3>'.&mt('Session unavailable').'</h3>'.
|
| } |
&mt('This LON-CAPA server is unable to host your session.').'<br />'.
|
| } |
'<p>'.&mt('Currently no other LON-CAPA server is available to host your session either.').'</p>'.
|
| $loginhelp_url = $domconfhash{$dom.'.login.helpurl_nolang'}; |
&Apache::loncommon::end_page();
|
| if ($loginhelp_url ne '') { |
return $result;
|
| return $loginhelp_url; |
}
|
| } else { |
|
| return '/adm/loginproblems.html'; |
sub loginhelpdisplay {
|
| } |
my ($authdomain) = @_;
|
| } |
my $login_help = 1;
|
| return; |
my $lang = &Apache::lonlocal::current_language();
|
| } |
if ($login_help) {
|
| |
my $dom = $authdomain;
|
| sub alternate_unames_check { |
if ($dom eq '') {
|
| my ($uname,$udom) = @_; |
$dom = &Apache::lonnet::default_login_domain();
|
| my %possunames; |
}
|
| my %domdefs = &Apache::lonnet::get_domain_defaults($udom); |
my %domconfhash = &Apache::loncommon::get_domainconf($dom);
|
| if (ref($domdefs{'unamemap_rule'}) eq 'ARRAY') { |
my $loginhelp_url;
|
| if (@{$domdefs{'unamemap_rule'}} > 0) { |
if ($lang) {
|
| %possunames = |
$loginhelp_url = $domconfhash{$dom.'.login.helpurl_'.$lang};
|
| &Apache::lonnet::inst_rulecheck($udom,$uname,undef, |
if ($loginhelp_url ne '') {
|
| 'unamemap',$domdefs{'unamemap_rule'}); |
return $loginhelp_url;
|
| } |
}
|
| } |
}
|
| return %possunames; |
$loginhelp_url = $domconfhash{$dom.'.login.helpurl_nolang'};
|
| } |
if ($loginhelp_url ne '') {
|
| |
return $loginhelp_url;
|
| 1; |
} else {
|
| __END__ |
return '/adm/loginproblems.html';
|
| |
}
|
| |
}
|
| |
return;
|
| |
}
|
| |
|
| |
sub alternate_unames_check {
|
| |
my ($uname,$udom) = @_;
|
| |
my %possunames;
|
| |
my %domdefs = &Apache::lonnet::get_domain_defaults($udom);
|
| |
if (ref($domdefs{'unamemap_rule'}) eq 'ARRAY') {
|
| |
if (@{$domdefs{'unamemap_rule'}} > 0) {
|
| |
%possunames =
|
| |
&Apache::lonnet::inst_rulecheck($udom,$uname,undef,
|
| |
'unamemap',$domdefs{'unamemap_rule'});
|
| |
}
|
| |
}
|
| |
return %possunames;
|
| |
}
|
| |
|
| |
1;
|
| |
__END__
|
| |
|
| |
|
![[BACK]](/icons/back.gif){kind=icon}
Return to lonauth.pm CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [LON-CAPA] / loncom / auth