File:
[LON-CAPA] /
loncom /
auth /
lonracc.pm
Revision
1.18:
download - view:
text,
annotated -
select for diffs
Thu Feb 1 06:20:34 2007 UTC (17 years, 6 months ago) by
albertel
Branches:
MAIN
CVS tags:
HEAD
- performace enhancements (no need to do hostname lookups in the uploaded case or if the .subscription file doesn't exist or its a meta file)
- some style
- notice when gethostbyname fails and fail gracefully rather than ISE
1: # The LearningOnline Network
2: # Access Handler for File Transfers
3: #
4: # $Id: lonracc.pm,v 1.18 2007/02/01 06:20:34 albertel Exp $
5: #
6: # Copyright Michigan State University Board of Trustees
7: #
8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
9: #
10: # LON-CAPA is free software; you can redistribute it and/or modify
11: # it under the terms of the GNU General Public License as published by
12: # the Free Software Foundation; either version 2 of the License, or
13: # (at your option) any later version.
14: #
15: # LON-CAPA is distributed in the hope that it will be useful,
16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18: # GNU General Public License for more details.
19: #
20: # You should have received a copy of the GNU General Public License
21: # along with LON-CAPA; if not, write to the Free Software
22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
23: #
24: # /home/httpd/html/adm/gpl.txt
25: #
26: # http://www.lon-capa.org/
27: #
28:
29: package Apache::lonracc;
30:
31: use strict;
32: use Apache::Constants qw(:common :remotehost);
33: use Apache::lonnet;
34: use Apache::File();
35: use IO::Socket;
36:
37: sub subscribed {
38: my ($filename,$id) = @_;
39:
40: return 0 if (-e "$filename.subscription");
41:
42: my $hostname=$Apache::lonnet::hostname{$id};
43: my (undef,undef,undef,undef,$ip) = gethostbyname($hostname);
44:
45: return 0 if (length($ip) != 4);
46:
47: $ip=inet_ntoa($ip);
48:
49: my $expr='^'.quotemeta($id).':'.quotemeta($ip).':';
50:
51: my $found=0;
52: if (my $sh=Apache::File->new("$filename.subscription")) {
53: while (my $subline=<$sh>) { if ($subline =~ /$expr/) { $found=1; } }
54: $sh->close();
55: }
56: return $found;
57: }
58:
59: sub handler {
60: my $r = shift;
61: my $reqhost = $r->get_remote_host(REMOTE_NOLOOKUP);
62: my %iphost=&Apache::lonnet::get_iphost();
63: my $hostids=$iphost{$reqhost};
64: if (!$hostids && $reqhost ne '127.0.0.1' ) {
65: $r->log_reason("Unable to find a host for ".
66: $r->get_remote_host(REMOTE_NOLOOKUP));
67: return FORBIDDEN;
68: }
69: if ($reqhost eq '127.0.0.1') {
70: return OK;
71: }
72: my $return;
73: my @ids;
74:
75: foreach my $id (@{$hostids}) {
76: my $filename=$r->filename;
77: my $uri =$r->uri;
78: if (($filename=~/\.meta$/) ||
79: ($uri=~m|^/raw/uploaded|) ||
80: (-e "$filename.$id") ||
81: &subscribed($filename,$id) ) {
82: return OK;
83: } else {
84: $return=FORBIDDEN;
85: push(@ids,$id);
86: }
87: }
88: if ($return == FORBIDDEN) {
89: $r->log_reason(join(':',@ids)." not subscribed", $r->filename);
90: return FORBIDDEN;
91: }
92: $r->log_reason("Invalid request for file transfer from $reqhost",
93: $r->filename);
94: return FORBIDDEN;
95: }
96:
97: 1;
98: __END__
99:
100: =head1 NAME
101:
102: Apache::lonracc - Access Handler for File Transfers
103:
104: =head1 SYNOPSIS
105:
106: Invoked by /etc/httpd/conf/loncapa.conf:
107:
108: <LocationMatch "^/raw.*">
109: PerlAccessHandler Apache::lonracc
110: </LocationMatch>
111:
112: =head1 INTRODUCTION
113:
114: This module enables authentication for file transfers and works
115: against the /res tree.
116:
117: Only lond invokes the /raw namespace through its subscribe function.
118:
119: This is part of the LearningOnline Network with CAPA project
120: described at http://www.lon-capa.org.
121:
122: =head1 HANDLER SUBROUTINE
123:
124: This routine is called by Apache and mod_perl.
125:
126: =over 4
127:
128: =item *
129:
130: Determine requesting host
131:
132: =item *
133:
134: See whether or not the requesting host is subscribed.
135:
136: =item *
137:
138: Respond with status of request and make log entry in case of unallowed
139: access.
140:
141: =back
142:
143: =cut
144:
145:
146:
147:
148:
149:
150:
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>