version 1.35, 2016/12/16 15:31:11
|
version 1.35.2.7, 2024/07/02 19:42:06
|
Line 29
|
Line 29
|
package Apache::switchserver; |
package Apache::switchserver; |
|
|
use strict; |
use strict; |
use Apache::Constants qw(:common); |
use Apache::Constants qw(:common :remotehost); |
use Apache::lonnet; |
use Apache::lonnet; |
use Apache::lonmenu; |
use Digest::MD5 qw(md5_hex); |
use CGI::Cookie(); |
use CGI::Cookie(); |
use Apache::lonlocal; |
use Apache::lonlocal; |
use LONCAPA qw(:DEFAULT :match); |
use LONCAPA qw(:DEFAULT :match); |
Line 49 sub init_env {
|
Line 49 sub init_env {
|
} |
} |
my $lonidsdir=$r->dir_config('lonIDsDir'); |
my $lonidsdir=$r->dir_config('lonIDsDir'); |
&Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle); |
&Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle); |
|
|
return $r->dir_config('lonIDsDir')."/$handle.id"; |
return $r->dir_config('lonIDsDir')."/$handle.id"; |
} |
} |
|
|
sub do_redirect { |
sub do_redirect { |
my ($r,$url,$only_body,$extra_text) = @_; |
my ($r,$url,$only_body,$extra_text) = @_; |
$r->send_http_header; |
$r->send_http_header; |
|
my $delay = 0.5; |
|
if ($only_body && !$extra_text) { |
|
$delay = 0; |
|
} |
my $start_page = |
my $start_page = |
&Apache::loncommon::start_page('Switching Server ...',undef, |
&Apache::loncommon::start_page('Switching Server ...',undef, |
{'redirect' => [0.5,$url], |
{'redirect' => [$delay,$url,'',1], |
'only_body' => $only_body,}); |
'only_body' => $only_body,}); |
my $end_page = &Apache::loncommon::end_page(); |
my $end_page = &Apache::loncommon::end_page(); |
$r->print($start_page.$extra_text.$end_page); |
$r->print($start_page.$extra_text.$end_page); |
Line 68 sub do_redirect {
|
Line 72 sub do_redirect {
|
return OK; |
return OK; |
} |
} |
|
|
|
sub balancer_cookieid { |
|
my ($r,$desthost,$uname,$udom) = @_; |
|
my @hosts = &Apache::lonnet::current_machine_ids(); |
|
my $newcookieid; |
|
unless (grep(/^\Q$desthost\E$/,@hosts)) { |
|
my $balancedir=$r->dir_config('lonBalanceDir'); |
|
$newcookieid = &md5_hex(&md5_hex(time.{}.rand().$$)); |
|
my $cookie = $udom.'_'.$uname.'_'.$newcookieid; |
|
my $balcookie = "balanceID=$cookie; path=/; HttpOnly;"; |
|
if (open(my $fh,'>',"$balancedir/$cookie.id")) { |
|
print $fh $desthost; |
|
close($fh); |
|
$r->headers_out->add('Set-cookie' => $balcookie); |
|
} |
|
} |
|
return $newcookieid; |
|
} |
|
|
sub flush_course_logs { |
sub flush_course_logs { |
&Apache::lonnet::flushcourselogs(); |
&Apache::lonnet::flushcourselogs(); |
return OK; |
return OK; |
Line 80 sub handler {
|
Line 102 sub handler {
|
if (!defined($handle)) { return FORBIDDEN; } |
if (!defined($handle)) { return FORBIDDEN; } |
|
|
&Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'}, |
&Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'}, |
['otherserver','role','origurl','symb']); |
['otherserver','role','origurl','symb','edit']); |
|
|
my $switch_to=&Apache::lonnet::hostname($env{'form.otherserver'}); |
my $switch_to=&Apache::lonnet::hostname($env{'form.otherserver'}); |
if (! $env{'form.otherserver'}) { |
if (! $env{'form.otherserver'}) { |
Line 89 sub handler {
|
Line 111 sub handler {
|
$env{'user.name'}); |
$env{'user.name'}); |
if (! $env{'form.otherserver'}) { |
if (! $env{'form.otherserver'}) { |
$env{'form.otherserver'} = |
$env{'form.otherserver'} = |
&Apache::lonnet::spareserver(30000,undef,1); |
&Apache::lonnet::spareserver($r,30000,undef,1); |
} |
} |
$switch_to=&Apache::lonnet::hostname($env{'form.otherserver'}); |
$switch_to=&Apache::lonnet::hostname($env{'form.otherserver'}); |
} |
} |
Line 101 sub handler {
|
Line 123 sub handler {
|
if ($Apache::lonnet::protocol{$env{'form.otherserver'}} eq 'https') { |
if ($Apache::lonnet::protocol{$env{'form.otherserver'}} eq 'https') { |
$protocol = $Apache::lonnet::protocol{$env{'form.otherserver'}}; |
$protocol = $Apache::lonnet::protocol{$env{'form.otherserver'}}; |
} |
} |
} |
unless ($env{'form.otherserver'} eq $r->dir_config('lonHostID')) { |
|
my $alias = &Apache::lonnet::use_proxy_alias($r,$env{'form.otherserver'}); |
|
$switch_to = $alias if ($alias ne ''); |
|
} |
|
} |
|
|
if ($env{'user.name'} eq 'public' |
if ($env{'user.name'} eq 'public' |
&& $env{'user.domain'} eq 'public') { |
&& $env{'user.domain'} eq 'public') { |
my $url = $protocol.'://'.$switch_to.$r->uri; |
my $url = $protocol.'://'.$switch_to.$r->uri; |
|
unlink($handle); |
|
#expire the cookie |
|
my $c = new CGI::Cookie(-name => 'lonPubID', |
|
-value => '', |
|
-expires => '-10y',); |
|
$r->header_out('Set-cookie' => $c); |
return &do_redirect($r,$url,1) |
return &do_redirect($r,$url,1) |
} |
} |
|
|
my $skip_canhost_check = ''; |
my $skip_canhost_check = ''; |
|
my $now = time; |
if ($env{'form.role'}) { |
if ($env{'form.role'}) { |
if (!exists($env{'user.role.'.$env{'form.role'}})) { |
if (!exists($env{'user.role.'.$env{'form.role'}})) { |
delete($env{'form.role'}); |
delete($env{'form.role'}); |
} else { |
} else { |
my $now = time; |
|
my ($start,$end) = split(/\./,$env{'user.role.'.$env{'form.role'}}); |
my ($start,$end) = split(/\./,$env{'user.role.'.$env{'form.role'}}); |
if (($start && $start > $now) || ($end && $end < $now)) { |
if (($start && $start > $now) || ($end && $end < $now)) { |
delete($env{'form.role'}); |
delete($env{'form.role'}); |
Line 131 sub handler {
|
Line 163 sub handler {
|
} |
} |
|
|
unless ($skip_canhost_check) { |
unless ($skip_canhost_check) { |
my $canhost = 1; |
my $canhost = &Apache::lonnet::can_switchserver($env{'user.domain'},$env{'form.otherserver'}); |
my $uprimary_id = &Apache::lonnet::domain($env{'user.domain'},'primary'); |
unless ($canhost) { |
my $uint_dom = &Apache::lonnet::internet_dom($uprimary_id); |
if (($env{'request.course.id'}) && ($env{'form.symb'} ne '') && |
my @intdoms; |
(&Apache::lonnet::allowed('mdc',$env{'request.course.id'}))) { |
my $internet_names = &Apache::lonnet::get_internet_names($env{'form.otherserver'}); |
my $cdom = $env{'course.'.$env{'request.course.id'}.'.domain'}; |
if (ref($internet_names) eq 'ARRAY') { |
my $cnum = $env{'course.'.$env{'request.course.id'}.'.num'}; |
@intdoms = @{$internet_names}; |
if (($cdom ne '') && ($cnum ne '') && ($env{'form.role'} =~ m{^([^.]+)\Q./$cdom/$cnum\E$})) { |
} |
my $symb = &Apache::lonnet::symbclean($env{'form.symb'}); |
unless ($uint_dom ne '' && grep(/^\Q$uint_dom\E$/,@intdoms)) { |
my ($map,$idx,$url) = &Apache::lonnet::decode_symb($symb); |
my $serverhomeID = &Apache::lonnet::get_server_homeID($switch_to); |
if (&Apache::lonnet::symbverify($symb,$url)) { |
my $serverhomedom = &Apache::lonnet::host_domain($serverhomeID); |
my $fileloc = &Apache::lonnet::declutter(&Apache::lonnet::filelocation("",$url)); |
my %defdomdefaults = &Apache::lonnet::get_domain_defaults($serverhomedom); |
my $resurl = &Apache::lonnet::clutter($url); |
my %udomdefaults = &Apache::lonnet::get_domain_defaults($env{'user.domain'}); |
if ($resurl =~ m{^/res/($match_domain)/($match_username)/}) { |
my $remoterev = &Apache::lonnet::get_server_loncaparev($env{'user.domain'},$env{'form.otherserver'}); |
my ($audom,$auname) = ($1,$2); |
$canhost = |
if (&Apache::lonnet::homeserver($auname,$audom) eq $env{'form.otherserver'}) { |
&Apache::lonnet::can_host_session($env{'user.domain'}, |
my @possroles = ("user.role.au./$audom/","user.role.ca./$audom/$auname","user.role.aa./$audom/$auname"); |
$env{'form.otherserver'}, |
my $hasrole; |
$remoterev, |
foreach my $rolekey (@possroles) { |
$udomdefaults{'remotesessions'}, |
if (exists($env{$rolekey})) { |
$defdomdefaults{'hostedsessions'}); |
my ($start,$end) = split(/\./,$env{$rolekey}); |
|
unless (($start && $start > $now) || ($end && $end < $now)) { |
|
$hasrole = $rolekey; |
|
} |
|
if ($hasrole) { |
|
$hasrole =~ s/^\Quser.role.\E//; |
|
last; |
|
} |
|
} |
|
} |
|
if ($hasrole) { |
|
$env{'form.role'} = $hasrole; |
|
$env{'form.origurl'} = &Apache::lonnet::deversion($resurl); |
|
$env{'form.origurl'} =~ s{^/res/}{/priv/}; |
|
delete($env{'form.symb'}); |
|
$canhost = 1; |
|
if ($env{'form.edit'}) { |
|
my $ip = &Apache::lonnet::get_requestor_ip($r,REMOTE_NOLOOKUP); |
|
my %info=('ip' => $ip, |
|
'domain' => $env{'user.domain'}, |
|
'username' => $env{'user.name'}, |
|
'home' => $env{'user.home'}, |
|
'role' => $env{'form.role'}, |
|
'server' => $r->dir_config('lonHostID'), |
|
'origurl' => $env{'form.origurl'}); |
|
&Apache::loncommon::content_type($r,'text/html'); |
|
my $token = &Apache::lonnet::tmpput(\%info,$env{'form.otherserver'}); |
|
my $url = $protocol.'://'.$switch_to.'/adm/login?'. |
|
'domain='.$env{'user.domain'}. |
|
'&username='.$env{'user.name'}. |
|
'&token='.$token; |
|
return &do_redirect($r,$url,0); |
|
} |
|
} |
|
} |
|
} |
|
} |
|
} |
|
} |
} |
} |
unless ($canhost) { return FORBIDDEN; } |
unless ($canhost) { return FORBIDDEN; } |
} |
} |
|
|
#remove session env, and log event |
#remove session env, and log event |
unlink($handle); |
if (unlink($handle)) { |
my %temp=('switchserver' => time.':'.$env{'form.otherserver'}, |
if ($env{'user.linkedenv'} ne '') { |
|
my $lonidsdir=$r->dir_config('lonIDsDir'); |
|
if (($env{'user.linkedenv'} =~ /^[a-f0-9]+_linked$/) && |
|
(-l "$lonidsdir/$env{'user.linkedenv'}.id") && |
|
(readlink("$lonidsdir/$env{'user.linkedenv'}.id") eq $handle)) { |
|
unlink("$lonidsdir/$env{'user.linkedenv'}.id"); |
|
} |
|
} |
|
} |
|
my %temp=('switchserver' => $now.':'.$env{'form.otherserver'}, |
$env{'form.role'}); |
$env{'form.role'}); |
&Apache::lonnet::put('email_status',\%temp); |
&Apache::lonnet::put('email_status',\%temp); |
my $logmsg = "Switch Server to $env{'form.otherserver'}"; |
my $logmsg = "Switch Server to $env{'form.otherserver'}"; |
Line 166 sub handler {
|
Line 245 sub handler {
|
} else { |
} else { |
$logmsg .= " (no role)"; |
$logmsg .= " (no role)"; |
} |
} |
$logmsg .= ' '.$ENV{'REMOTE_ADDR'}; |
my $ip = &Apache::lonnet::get_requestor_ip($r,REMOTE_NOLOOKUP); |
|
$logmsg .= ' '.$ip; |
&Apache::lonnet::log($env{'user.domain'},$env{'user.name'}, |
&Apache::lonnet::log($env{'user.domain'},$env{'user.name'}, |
$env{'user.home'},$logmsg); |
$env{'user.home'},$logmsg); |
|
|
&Apache::loncommon::content_type($r,'text/html'); |
&Apache::loncommon::content_type($r,'text/html'); |
|
|
#expire the cookie |
#expire the cookies |
my $c = new CGI::Cookie(-name => 'lonID', |
my %cookies=CGI::Cookie->parse($r->header_in('Cookie')); |
-value => '', |
foreach my $name (keys(%cookies)) { |
-expires => '-10y',); |
next unless ($name =~ /^lon(|S|Link|Pub)ID$/); |
$r->header_out('Set-cookie' => $c); |
my $c = new CGI::Cookie(-name => $name, |
|
-value => '', |
|
-expires => '-10y',); |
|
$r->headers_out->add('Set-cookie' => $c); |
|
} |
if ($r->header_only) { |
if ($r->header_only) { |
$r->send_http_header; |
$r->send_http_header; |
return OK; |
return OK; |
} |
} |
# -------------------------------------------------------- Menu script and info |
# -------------------------------------------------------- Menu script and info |
|
|
# ---------------------------------------------------------------- Get handover |
# ---------------------------------------------------------------- Get handover |
|
|
my ($is_balancer) = &Apache::lonnet::check_loadbalancing($env{'user.name'},$env{'user.domain'}); |
my ($is_balancer,$setcookie,$newcookieid,$otherbalcookie); |
my %info=('ip' => $ENV{'REMOTE_ADDR'}, |
my $only_body = 0; |
|
($is_balancer,undef,$setcookie) = |
|
&Apache::lonnet::check_loadbalancing($env{'user.name'},$env{'user.domain'},'switchserver'); |
|
if ($is_balancer && $setcookie && $env{'form.otherserver'}) { |
|
|
|
# Set a balancer cookie unless browser already sent LON-CAPA load balancer |
|
# cookie which points at the target server |
|
my ($found_server,$balancer_cookie) = &Apache::lonnet::check_for_balancer_cookie($r,1); |
|
|
|
if (($found_server eq $env{'form.otherserver'}) && |
|
($balancer_cookie =~ /^\Q$env{'user.domain'}\E_\Q$env{'user.name'}\E_/)) { |
|
$only_body = 1; |
|
} else { |
|
$newcookieid = &balancer_cookieid($r,$env{'form.otherserver'}, |
|
$env{'user.name'},$env{'user.domain'}); |
|
} |
|
} |
|
if ((!$is_balancer) && ($env{'request.balancercookie'})) { |
|
$otherbalcookie = $env{'request.balancercookie'}; |
|
} |
|
|
|
my %info=('ip' => $ip, |
'domain' => $env{'user.domain'}, |
'domain' => $env{'user.domain'}, |
'username' => $env{'user.name'}, |
'username' => $env{'user.name'}, |
'role' => $env{'form.role'}, |
'role' => $env{'form.role'}, |
'server' => $r->dir_config('lonHostID'), |
'server' => $r->dir_config('lonHostID'), |
'balancer' => $is_balancer); |
'balancer' => $is_balancer); |
|
if ($newcookieid) { |
|
$info{'balcookie'} = $newcookieid; |
|
} elsif ($otherbalcookie) { |
|
$info{'otherbalcookie'} = $otherbalcookie; |
|
} |
if ($env{'form.origurl'}) { |
if ($env{'form.origurl'}) { |
$info{'origurl'} = $env{'form.origurl'}; |
$info{'origurl'} = $env{'form.origurl'}; |
} |
} |
if ($env{'form.symb'}) { |
if ($env{'form.symb'}) { |
$info{'symb'} = $env{'form.symb'}; |
$info{'symb'} = $env{'form.symb'}; |
} |
} |
|
my $ssologoutscript = ''; |
if ($env{'request.sso.login'}) { |
if ($env{'request.sso.login'}) { |
$info{'sso.login'} = $env{'request.sso.login'}; |
$info{'sso.login'} = $env{'request.sso.login'}; |
|
if (defined($r->dir_config("lonSSOUserLogoutScriptFile_$info{domain}"))) { |
|
if (open(my $fh,'<',$r->dir_config("lonSSOUserLogoutScriptFile_$info{domain}"))) { |
|
$ssologoutscript .= join('',<$fh>); |
|
close($fh); |
|
} |
|
} |
|
if (defined($r->dir_config('lonSSOUserLogoutScriptFile'))) { |
|
if (open(my $fh,'<',$r->dir_config('lonSSOUserLogoutScriptFile'))) { |
|
$ssologoutscript .= join('',<$fh>); |
|
close($fh); |
|
} |
|
} |
} |
} |
if ($env{'request.sso.reloginserver'}) { |
if ($env{'request.sso.reloginserver'}) { |
$info{'sso.reloginserver'} = $env{'request.sso.reloginserver'}; |
$info{'sso.reloginserver'} = $env{'request.sso.reloginserver'}; |
Line 211 sub handler {
|
Line 333 sub handler {
|
'&username='.$env{'user.name'}. |
'&username='.$env{'user.name'}. |
'&token='.$token; |
'&token='.$token; |
# --------------------------------------------------------------- Screen Output |
# --------------------------------------------------------------- Screen Output |
return &do_redirect($r, $url, 0); |
return &do_redirect($r, $url, $only_body, $ssologoutscript); |
} |
} |
|
|
1; |
1; |