version 1.7, 2000/06/05 20:28:17
|
version 1.17, 2000/11/10 10:08:24
|
Line 2
|
Line 2
|
# User Authentication Module |
# User Authentication Module |
# 5/21/99,5/22,5/25,5/26,5/27,5/29,6/2,6/11,6/14,6/15 |
# 5/21/99,5/22,5/25,5/26,5/27,5/29,6/2,6/11,6/14,6/15 |
# 16/11,12/16, |
# 16/11,12/16, |
# 1/14,2/24,2/28,2/29,3/7,5/29,5/30,5/31,6/1,6/5 Gerd Kortemeyer |
# 1/14,2/24,2/28,2/29,3/7,5/29,5/30,5/31,6/1,6/5,6/29, |
|
# 7/1,7/10,10/2,10/5,10/9,10/26,10/30,11/10 Gerd Kortemeyer |
|
|
package Apache::lonauth; |
package Apache::lonauth; |
|
|
Line 10 use Apache::Constants qw(:common);
|
Line 11 use Apache::Constants qw(:common);
|
use Apache::File; |
use Apache::File; |
use CGI qw(:standard); |
use CGI qw(:standard); |
use CGI::Cookie(); |
use CGI::Cookie(); |
|
use Crypt::DES; |
use Apache::lonnet(); |
use Apache::lonnet(); |
|
use Apache::lonmenu(); |
|
|
# ------------------------------------------------------------ Successful login |
# ------------------------------------------------------------ Successful login |
|
|
Line 19 sub success {
|
Line 22 sub success {
|
my $lonids=$r->dir_config('lonIDsDir'); |
my $lonids=$r->dir_config('lonIDsDir'); |
|
|
# See if old ID present, if so, remove |
# See if old ID present, if so, remove |
my $cookie; |
|
while ($cookie=<$lonids/$username\_*\_$domain\_$authhost.id>) { |
my $filename; |
unlink($cookie); |
opendir(DIR,$lonids); |
|
while ($filename=readdir(DIR)) { |
|
if ($filename=~/^$username\_\d+\_$domain\_$authhost\.id$/) { |
|
unlink($lonids.'/'.$filename); |
|
} |
} |
} |
|
closedir(DIR); |
|
|
# Give them a new cookie |
# Give them a new cookie |
|
|
|
my $cookie; |
my $now=time; |
my $now=time; |
$cookie="$username\_$now\_$domain\_$authhost"; |
$cookie="$username\_$now\_$domain\_$authhost"; |
|
|
Line 61 sub success {
|
Line 70 sub success {
|
if ($httpbrowser=~/next/i) { $clientos='next'; } |
if ($httpbrowser=~/next/i) { $clientos='next'; } |
if (($httpbrowser=~/mac/i) || |
if (($httpbrowser=~/mac/i) || |
($httpbrowser=~/powerpc/i)) { $clientos='mac'; } |
($httpbrowser=~/powerpc/i)) { $clientos='mac'; } |
if ($httpbrowser=~/win/) { $clientos='win'; } |
if ($httpbrowser=~/win/i) { $clientos='win'; } |
|
|
|
# ------------------------------------------------------------- Get environment |
|
|
|
my $userenv=Apache::lonnet::reply("dump:$domain:$username:environment", |
|
$authhost); |
|
if (($userenv eq 'con_lost') || |
|
($userenv =~ /^error\:/)) { |
|
$userenv=''; |
|
} |
|
$userenv=~s/\&/\nenvironment\./g; |
|
if ($userenv ne '') { |
|
$userenv='environment.'.$userenv; |
|
} |
# --------------------------------------------------------- Write first profile |
# --------------------------------------------------------- Write first profile |
|
|
{ |
{ |
my $idf=Apache::File->new(">$lonids/$cookie.id"); |
my $idf=Apache::File->new(">$lonids/$cookie.id"); |
|
if ($userenv ne '') { print $idf "$userenv\n"; } |
print $idf "user.name=$username\n"; |
print $idf "user.name=$username\n"; |
print $idf "user.domain=$domain\n"; |
print $idf "user.domain=$domain\n"; |
print $idf "user.home=$authhost\n"; |
print $idf "user.home=$authhost\n"; |
Line 74 sub success {
|
Line 96 sub success {
|
print $idf "browser.version=$clientversion\n"; |
print $idf "browser.version=$clientversion\n"; |
print $idf "browser.mathml=$clientmathml\n"; |
print $idf "browser.mathml=$clientmathml\n"; |
print $idf "browser.os=$clientos\n"; |
print $idf "browser.os=$clientos\n"; |
if ($userroles ne '') { print $idf "$userroles" }; |
print $idf "request.course.fn=\n"; |
|
print $idf "request.course.uri=\n"; |
|
print $idf "request.course.sec=\n"; |
|
print $idf "request.role=cm\n"; |
|
print $idf "request.host=$ENV{'HTTP_HOST'}\n"; |
|
if ($userroles ne '') { print $idf "$userroles"; } |
} |
} |
|
|
# -------------------------------------------------------------------- Log this |
# -------------------------------------------------------------------- Log this |
|
|
&Apache::lonnet::log($domain,$username,$authhost, |
&Apache::lonnet::log($domain,$username,$authhost, |
"Login $ENV{'REMOTE_ADDR'}"); |
"Login $ENV{'REMOTE_ADDR'}"); |
|
|
|
# ------------------------------------------------- Check for critical messages |
|
|
|
my @what=&Apache::lonnet::dump('critical'); |
|
if ($what[0]) { |
|
if ($what[0] ne 'con_lost') { |
|
$lowerurl='/adm/email/critical/'.$what[0]; |
|
} |
|
} |
|
|
# ------------------------------------------------------------ Get cookie ready |
# ------------------------------------------------------------ Get cookie ready |
|
|
$cookie="lonID=$cookie; path=/"; |
$cookie="lonID=$cookie; path=/"; |
|
# -------------------------------------------------------- Menu script and info |
|
|
|
my $windowinfo=&Apache::lonmenu::open(); |
# ------------------------------------------------- Output for successful login |
# ------------------------------------------------- Output for successful login |
|
|
$r->send_cgi_header(<<ENDHEADER); |
$r->send_cgi_header(<<ENDHEADER); |
Line 99 ENDHEADER
|
Line 138 ENDHEADER
|
<meta HTTP-EQUIV="Refresh" CONTENT="1; url=$lowerurl"> |
<meta HTTP-EQUIV="Refresh" CONTENT="1; url=$lowerurl"> |
</head> |
</head> |
<body bgcolor="#FFFFFF"> |
<body bgcolor="#FFFFFF"> |
<script> |
$windowinfo |
menu=window.open("/res/adm/pages/menu.html","LONCAPAmenu", |
|
"height=350,width=150,scrollbars=no,menubar=no"); |
|
</script> |
|
<h1>Welcome!</h1> |
<h1>Welcome!</h1> |
</body> |
</body> |
</html> |
</html> |
Line 158 sub handler {
|
Line 194 sub handler {
|
my $domain = $r->dir_config('lonDefDomain'); |
my $domain = $r->dir_config('lonDefDomain'); |
my $prodir = $r->dir_config('lonUsersDir'); |
my $prodir = $r->dir_config('lonUsersDir'); |
|
|
|
# ---------------------------------------- Get the information from login token |
|
|
|
my $tmpinfo=Apache::lonnet::reply('tmpget:'.$FORM{'logtoken'}, |
|
$FORM{'serverid'}); |
|
|
|
if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost')) { |
|
failed($r,'Login token missing, inaccessible or expired'); |
|
return OK; |
|
} |
|
|
|
my ($key,$firsturl)=split(/&/,$tmpinfo); |
|
|
|
my $keybin=pack("H16",$key); |
|
|
|
my $cipher=new DES $keybin; |
|
|
|
my $upass=$cipher->decrypt( |
|
unpack("a8",pack("H16",substr($FORM{'upass'},0,16)))); |
|
|
|
$upass.=$cipher->decrypt( |
|
unpack("a8",pack("H16",substr($FORM{'upass'},16,16)))); |
|
|
|
$upass=substr($upass,1,ord(substr($upass,0,1))); |
|
|
# ---------------------------------------------------------------- Authenticate |
# ---------------------------------------------------------------- Authenticate |
my $authhost=Apache::lonnet::authenticate($FORM{'uname'}, |
my $authhost=Apache::lonnet::authenticate($FORM{'uname'}, |
$FORM{'upass'}, |
$upass, |
$FORM{'udom'}); |
$FORM{'udom'}); |
|
|
# --------------------------------------------------------------------- Failed? |
# --------------------------------------------------------------------- Failed? |
Line 170 sub handler {
|
Line 230 sub handler {
|
return OK; |
return OK; |
} |
} |
|
|
if ($FORM{'firsturl'} eq '') { |
if (($firsturl eq '') || ($firsturl eq '/adm/logout')) { |
$FORM{'firsturl'}='/res/index.html'; |
$firsturl='/res/adm/pages/index.html'; |
} |
} |
|
|
success($r,$FORM{'uname'},$FORM{'udom'},$authhost,$FORM{'firsturl'}); |
success($r,$FORM{'uname'},$FORM{'udom'},$authhost,$firsturl); |
return OK; |
return OK; |
} |
} |
|
|