version 1.30, 2002/04/18 20:16:43
|
version 1.44, 2002/11/18 20:06:53
|
Line 68 BEGIN {
|
Line 68 BEGIN {
|
$ENV{'SERVER_NAME'}=~/(\w+\.\w+)$/; |
$ENV{'SERVER_NAME'}=~/(\w+\.\w+)$/; |
my $krbdefdom=$1; |
my $krbdefdom=$1; |
$krbdefdom=~tr/a-z/A-Z/; |
$krbdefdom=~tr/a-z/A-Z/; |
$authformnop=(<<END); |
my %param = ( formname => 'document.cu', |
<p> |
kerb_def_dom => $krbdefdom |
<input type="radio" name="login" value="nochange" checked="checked" |
); |
onclick="changed_radio('nochange',document.cu);"> |
$loginscript = &Apache::loncommon::authform_header(%param); |
Do not change login data |
$generalrule = &Apache::loncommon::authform_authorwarning(%param); |
</p> |
$authformnop = &Apache::loncommon::authform_nochange(%param); |
END |
$authformkrb = &Apache::loncommon::authform_kerberos(%param); |
$authformkrb=(<<END); |
$authformint = &Apache::loncommon::authform_internal(%param); |
<p> |
$authformfsys = &Apache::loncommon::authform_filesystem(%param); |
<input type="radio" name="login" value="krb" |
$authformloc = &Apache::loncommon::authform_local(%param); |
onclick="changed_radio('krb',document.cu);"> |
|
Kerberos authenticated with domain |
|
<input type="text" size="10" name="krbarg" |
|
onclick="changed_text('krb',document.cu);" |
|
onchange="changed_text('krb',document.cu);"> |
|
</p> |
|
END |
|
$authformint=(<<END); |
|
<p> |
|
<input type="radio" name="login" value="int" |
|
onclick="changed_radio('int',document.cu);"> |
|
Internally authenticated (with initial password |
|
<input type="text" size="10" name="intarg" |
|
onclick="changed_text('int',document.cu);" |
|
onchange="changed_text('int',document.cu);"> |
|
</p> |
|
END |
|
$authformfsys=(<<END); |
|
<p> |
|
<input type="radio" name="login" value="fsys" |
|
onclick="changed_radio('fsys',document.cu);"> |
|
Filesystem authenticated (with initial password |
|
<input type="text" size="10" name="fsysarg" |
|
onclick="changed_text('fsys',document.cu);" |
|
onchange="changed_text('fsys',document.cu);"> |
|
</p> |
|
END |
|
$authformloc=(<<END); |
|
<p> |
|
<input type="radio" name="login" value="loc" |
|
onclick="changed_radio('loc',document.cu);"> |
|
Local Authentication with argument |
|
<input type="text" size="10" name="locarg" |
|
onclick="changed_text('loc',document.cu);" |
|
onchange="changed_text('loc',document.cu);"> |
|
</p> |
|
END |
|
$loginscript=(<<ENDLOGINSCRIPT); |
|
<script> |
|
|
|
var authvalues = new Object(); |
|
authvalues.names = new Array('krbarg','intarg','fsysarg','locarg'); |
|
authvalues.defaults = new Array('MSU.EDU','','',''); |
|
|
|
function changed_radio(choice,currentform) { |
|
var choicearg = choice + 'arg'; |
|
if (currentform.elements[choicearg].value == '') { |
|
clear(currentform,authvalues.names); |
|
for (var i=0; i<authvalues.names.length; i++) { |
|
if (authvalues.names[i] == choicearg) { |
|
currentform.elements[choicearg].value = authvalues.defaults[i]; |
|
} |
|
} |
|
} |
|
} |
} |
|
|
function changed_text(choice,currentform) { |
|
var choicearg = choice + 'arg'; |
|
if (currentform.elements[choicearg].value !='') { |
|
// clear the other values |
|
var keep = currentform.elements[choicearg].value; |
|
clear(currentform,authvalues.names); |
|
currentform.elements[choicearg].value = keep; |
|
// validate our value |
|
if (choice == 'krb') { |
|
currentform.elements[choicearg].value = keep.toUpperCase(); |
|
} |
|
// check the appropriate checkbox |
|
set_checked('login',choice,currentform); |
|
} |
|
} |
|
|
|
function clear(currentform,names) { |
|
for (var i=0; i< currentform.elements.length; i++) { |
|
for (var j = 0; j< names.length; j++) { |
|
if (currentform.elements[i].name == names[j]) { |
|
currentform.elements[i].value = ''; |
|
} |
|
} |
|
} |
|
} |
|
|
|
function set_checked(name,choice,currentform) { |
# ==================================================== Figure out author access |
for (var i=0; i< currentform.elements.length; i++) { |
|
if (currentform.elements[i].name == name) { |
|
if (currentform.elements[i].value == choice) { |
|
currentform.elements[i].checked =true; |
|
} |
|
} |
|
} |
|
} |
|
|
|
</script> |
sub authorpriv { |
ENDLOGINSCRIPT |
my ($auname,$audom)=@_; |
$generalrule=<<END; |
if (($auname ne $ENV{'user.name'}) || |
<p> |
(($audom ne $ENV{'user.domain'}) && |
<i>As a general rule, only authors or co-authors should be filesystem |
($audom ne $ENV{'request.role.domain'}))) { return ''; } |
authenticated (which allows access to the server filesystem).</i> |
unless (&Apache::lonnet::allowed('cca',$audom)) { return ''; } |
</p> |
return 1; |
END |
|
} |
} |
|
|
# =================================================================== Phase one |
# =================================================================== Phase one |
|
|
sub phase_one { |
sub print_username_entry_form { |
my $r=shift; |
my $r=shift; |
my $defdom=$ENV{'user.domain'}; |
my $defdom=$ENV{'request.role.domain'}; |
$r->print(<<ENDDOCUMENT); |
my @domains = &Apache::loncommon::get_domains(); |
|
my $domform = &Apache::loncommon::select_dom_form($defdom,'ccdomain'); |
|
my $bodytag =&Apache::loncommon::bodytag( |
|
'Create Users, Change User Privileges'); |
|
$r->print(<<"ENDDOCUMENT"); |
<html> |
<html> |
<head> |
<head> |
<title>The LearningOnline Network with CAPA</title> |
<title>The LearningOnline Network with CAPA</title> |
</head> |
</head> |
<body bgcolor="#FFFFFF"> |
$bodytag |
<h1>Create User, Change User Privileges</h1> |
<form action="/adm/createuser" method="post"> |
<form action=/adm/createuser method=post> |
<input type="hidden" name="phase" value="get_user_info"> |
<input type=hidden name=phase value=two> |
<p> |
Username: <input type=text size=15 name=ccuname><br> |
<table> |
Domain: <input type=text size=15 name=ccdomain value=$defdom><p> |
<tr><td>Username:</td><td><input type="text" size="15" name="ccuname"> |
<input type=submit value="Continue"> |
</td></tr><tr><td> |
|
Domain:</td><td>$domform</td></tr> |
|
</table> |
|
</p> |
|
<input type="submit" value="Continue"> |
</form> |
</form> |
</body> |
</body> |
</html> |
</html> |
Line 204 ENDDOCUMENT
|
Line 125 ENDDOCUMENT
|
} |
} |
|
|
# =================================================================== Phase two |
# =================================================================== Phase two |
sub phase_two { |
sub print_user_modification_page { |
my $r=shift; |
my $r=shift; |
my $ccuname=$ENV{'form.ccuname'}; |
my $ccuname=$ENV{'form.ccuname'}; |
my $ccdomain=$ENV{'form.ccdomain'}; |
my $ccdomain=$ENV{'form.ccdomain'}; |
Line 212 sub phase_two {
|
Line 133 sub phase_two {
|
$ENV{'SERVER_NAME'}=~/(\w+\.\w+)$/; |
$ENV{'SERVER_NAME'}=~/(\w+\.\w+)$/; |
my $krbdefdom=$1; |
my $krbdefdom=$1; |
$krbdefdom=~tr/a-z/A-Z/; |
$krbdefdom=~tr/a-z/A-Z/; |
|
my %param = ( formname => 'document.cu', |
|
kerb_def_dom => $krbdefdom |
|
); |
|
$loginscript = &Apache::loncommon::authform_header(%param); |
|
|
my $defdom=$ENV{'user.domain'}; |
my $defdom=$ENV{'request.role.domain'}; |
|
|
$ccuname=~s/\W//g; |
$ccuname=~s/\W//g; |
$ccdomain=~s/\W//g; |
$ccdomain=~s/\W//g; |
Line 221 sub phase_two {
|
Line 146 sub phase_two {
|
<html> |
<html> |
<head> |
<head> |
<title>The LearningOnline Network with CAPA</title> |
<title>The LearningOnline Network with CAPA</title> |
<script> |
<script type="text/javascript" language="Javascript"> |
|
|
function pclose() { |
function pclose() { |
parmwin=window.open("/adm/rat/empty.html","LONCAPAparms", |
parmwin=window.open("/adm/rat/empty.html","LONCAPAparms", |
Line 246 sub phase_two {
|
Line 171 sub phase_two {
|
|
|
</script> |
</script> |
</head> |
</head> |
<body bgcolor="#FFFFFF"> |
|
<img align="right" src="/adm/lonIcons/lonlogos.gif"> |
|
ENDDOCHEAD |
ENDDOCHEAD |
|
$r->print(&Apache::loncommon::bodytag( |
|
'Create Users, Change User Privileges')); |
my $forminfo =<<"ENDFORMINFO"; |
my $forminfo =<<"ENDFORMINFO"; |
<form action="/adm/createuser" method="post" name="cu"> |
<form action="/adm/createuser" method="post" name="cu"> |
<input type="hidden" name="phase" value="three"> |
<input type="hidden" name="phase" value="update_user_data"> |
<input type="hidden" name="ccuname" value="$ccuname"> |
<input type="hidden" name="ccuname" value="$ccuname"> |
<input type="hidden" name="ccdomain" value="$ccdomain"> |
<input type="hidden" name="ccdomain" value="$ccdomain"> |
<input type="hidden" name="pres_value" value="" > |
<input type="hidden" name="pres_value" value="" > |
Line 261 ENDFORMINFO
|
Line 186 ENDFORMINFO
|
my $uhome=&Apache::lonnet::homeserver($ccuname,$ccdomain); |
my $uhome=&Apache::lonnet::homeserver($ccuname,$ccdomain); |
my %incdomains; |
my %incdomains; |
my %inccourses; |
my %inccourses; |
my %home_servers = &get_home_servers($ccdomain); |
|
foreach (%Apache::lonnet::hostdom) { |
foreach (%Apache::lonnet::hostdom) { |
$incdomains{$_}=1; |
$incdomains{$_}=1; |
} |
} |
Line 272 ENDFORMINFO
|
Line 196 ENDFORMINFO
|
} |
} |
if ($uhome eq 'no_host') { |
if ($uhome eq 'no_host') { |
my $home_server_list= |
my $home_server_list= |
'<option value="default" selected>default</option>'."\n"; |
'<option value="default" selected>default</option>'."\n". |
foreach (sort keys(%home_servers)) { |
&Apache::loncommon::home_server_option_list($ccdomain); |
$home_server_list.= |
|
'<option value="'.$_.'">'.$_.' '. |
|
$home_servers{$_}."</option>\n"; |
|
} |
|
$r->print(<<ENDNEWUSER); |
$r->print(<<ENDNEWUSER); |
$dochead |
$dochead |
<h1>Create New User</h1> |
<h1>Create New User</h1> |
$forminfo |
$forminfo |
<h2>New user "$ccuname" in domain $ccdomain</h2> |
<h2>New user "$ccuname" in domain $ccdomain</h2> |
|
<script type="text/javascript" language="Javascript"> |
$loginscript |
$loginscript |
|
</script> |
<input type='hidden' name='makeuser' value='1' /> |
<input type='hidden' name='makeuser' value='1' /> |
<h3>Personal Data</h3> |
<h3>Personal Data</h3> |
<p> |
<p> |
Line 301 ID/Student Number <input type='text' nam
|
Line 224 ID/Student Number <input type='text' nam
|
Home Server: <select name="hserver" size="1"> $home_server_list </select> |
Home Server: <select name="hserver" size="1"> $home_server_list </select> |
<hr /> |
<hr /> |
<h3>Login Data</h3> |
<h3>Login Data</h3> |
$generalrule |
<p>$generalrule </p> |
$authformkrb |
<p>$authformkrb </p> |
$authformint |
<p>$authformint </p> |
$authformfsys |
<p>$authformfsys</p> |
$authformloc |
<p>$authformloc </p> |
ENDNEWUSER |
ENDNEWUSER |
} else { # user already exists |
} else { # user already exists |
$r->print(<<ENDCHANGEUSER); |
$r->print(<<ENDCHANGEUSER); |
Line 344 END
|
Line 267 END
|
my ($tmp) = keys(%rolesdump); |
my ($tmp) = keys(%rolesdump); |
unless ($tmp =~ /^(con_lost|error)/i) { |
unless ($tmp =~ /^(con_lost|error)/i) { |
my $now=time; |
my $now=time; |
$r->print('<hr /><h3>Revoke Existing Roles</h3>'. |
$r->print(<<END); |
'<table border=2><tr><th>Revoke</th><th>Role</th><th>Extent</th>'. |
<hr /> |
'<th>Start</th><th>End</th>'); |
<h3>Revoke Existing Roles</h3> |
|
<table border=2> |
|
<tr><th>Revoke</th><th>Role</th><th>Extent</th><th>Start</th><th>End</th> |
|
END |
foreach my $area (keys(%rolesdump)) { |
foreach my $area (keys(%rolesdump)) { |
if ($area!~/^rolesdef/) { |
next if ($area =~ /^rolesdef/); |
my $role = $rolesdump{$area}; |
my $role = $rolesdump{$area}; |
my $thisrole=$area; |
my $thisrole=$area; |
$area=~s/\_\w\w$//; |
$area =~ s/\_\w\w$//; |
my ($role_code,$role_end_time,$role_start_time) = |
my ($role_code,$role_end_time,$role_start_time) = |
split(/_/,$role); |
split(/_/,$role); |
my $bgcol='ffffff'; |
my $bgcol='ffffff'; |
my $allows=0; |
my $allowed=0; |
if ($area=~/^\/(\w+)\/(\d\w+)/) { |
if ($area =~ /^\/(\w+)\/(\d\w+)/ ) { |
my %coursedata= |
my %coursedata= |
&Apache::lonnet::coursedescription($1.'_'.$2); |
&Apache::lonnet::coursedescription($1.'_'.$2); |
my $carea='Course: '.$coursedata{'description'}; |
my $carea='Course: '.$coursedata{'description'}; |
$inccourses{$1.'_'.$2}=1; |
$inccourses{$1.'_'.$2}=1; |
if (&Apache::lonnet::allowed('c'.$role_code,$1.'/'.$2)) { |
if (&Apache::lonnet::allowed('c'.$role_code,$1.'/'.$2)) { |
$allows=1; |
$allowed=1; |
} |
} |
# Compute the background color based on $area |
# Compute the background color based on $area |
$bgcol=$1.'_'.$2; |
$bgcol=$1.'_'.$2; |
$bgcol=~s/[^8-9b-e]//g; |
$bgcol=~s/[^8-9b-e]//g; |
$bgcol=substr($bgcol.$bgcol.$bgcol.'ffffff',0,6); |
$bgcol=substr($bgcol.$bgcol.$bgcol.'ffffff',0,6); |
if ($area=~/^\/(\w+)\/(\d\w+)\/(\w+)/) { |
if ($area=~/^\/(\w+)\/(\d\w+)\/(\w+)/) { |
$carea.='<br>Section/Group: '.$3; |
$carea.='<br>Section/Group: '.$3; |
} |
} |
$area=$carea; |
$area=$carea; |
} else { |
} else { |
# Determine if current user is able to revoke privileges |
# Determine if current user is able to revoke privileges |
if ($area=~/^\/(\w+)\//) { |
if ($area=~ /^\/(\w+)\//) { |
if (&Apache::lonnet::allowed('c'.$role_code,$1)) { |
if (&Apache::lonnet::allowed('c'.$role_code,$1)) { |
$allows=1; |
$allowed=1; |
} |
} |
} else { |
} else { |
if (&Apache::lonnet::allowed('c'.$role_code,'/')) { |
if (&Apache::lonnet::allowed('c'.$role_code,'/')) { |
$allows=1; |
$allowed=1; |
} |
} |
} |
} |
} |
} |
$r->print('<tr bgcolor=#"'.$bgcol.'"><td>'); |
if ($role_code eq 'ca') { |
my $active=1; |
$area=~/\/(\w+)\/(\w+)/; |
$active=0 if (($role_end_time) && ($now>$role_end_time)); |
if (&authorpriv($2,$1)) { |
if (($active) && ($allows)) { |
$allowed=1; |
$r->print('<input type="checkbox" name="rev:' |
} else { |
.$thisrole.'">'); |
$allowed=0; |
} else { |
} |
$r->print(' '); |
} |
} |
my $row = ''; |
$r->print('</td><td>'. |
$row.='<tr bgcolor=#"'.$bgcol.'"><td>'; |
&Apache::lonnet::plaintext($role_code). |
my $active=1; |
'</td><td>'.$area.'</td><td>'. |
$active=0 if (($role_end_time) && ($now>$role_end_time)); |
($role_start_time ? localtime($role_start_time) |
if (($active) && ($allowed)) { |
: ' ' ) |
$row.= '<input type="checkbox" name="rev:'.$thisrole.'">'; |
.'</td><td>'. |
} else { |
($role_end_time ? localtime($role_end_time) |
$row.=' '; |
: ' ' ) |
} |
."</td></tr>\n"); |
$row.= '</td><td>'.&Apache::lonnet::plaintext($role_code). |
} |
'</td><td>'.$area. |
|
'</td><td>'.($role_start_time?localtime($role_start_time) |
|
: ' ' ). |
|
'</td><td>'.($role_end_time ?localtime($role_end_time) |
|
: ' ' ) |
|
."</td></tr>\n"; |
|
$r->print($row); |
} # end of foreach (table building loop) |
} # end of foreach (table building loop) |
$r->print('</table>'); |
$r->print('</table>'); |
} # End of unless |
} # End of unless |
my $currentauth=&Apache::lonnet::queryauthenticate($ccuname,$ccdomain); |
my $currentauth=&Apache::lonnet::queryauthenticate($ccuname,$ccdomain); |
if ($currentauth=~/^krb4:/) { |
if ($currentauth=~/^krb(4|5):/) { |
$currentauth=~/^krb4:(.*)/; |
$currentauth=~/^krb(4|5):(.*)/; |
my $krbdefdom2=$1; |
my $krbdefdom2=$1; |
$loginscript=~s/vf\.krbdom\.value='.*?';/vf.krbdom.value='$krbdefdom2';/; |
my %param = ( formname => 'document.cu', |
|
kerb_def_dom => $krbdefdom |
|
); |
|
$loginscript = &Apache::loncommon::authform_header(%param); |
} |
} |
# Check for a bad authentication type |
# Check for a bad authentication type |
unless ($currentauth=~/^krb4:/ or |
unless ($currentauth=~/^krb(4|5):/ or |
$currentauth=~/^unix:/ or |
$currentauth=~/^unix:/ or |
$currentauth=~/^internal:/ or |
$currentauth=~/^internal:/ or |
$currentauth=~/^localauth:/ |
$currentauth=~/^localauth:/ |
) { # bad authentication scheme |
) { # bad authentication scheme |
if (&Apache::lonnet::allowed('mau',$ENV{'user.domain'})) { |
if (&Apache::lonnet::allowed('mau',$ENV{'request.role.domain'})) { |
$r->print(<<ENDBADAUTH); |
$r->print(<<ENDBADAUTH); |
<hr /> |
<hr /> |
|
<script type="text/javascript" language="Javascript"> |
$loginscript |
$loginscript |
|
</script> |
<font color='#ff0000'>ERROR:</font> |
<font color='#ff0000'>ERROR:</font> |
This user has an unrecognized authentication scheme ($currentauth). |
This user has an unrecognized authentication scheme ($currentauth). |
Please specify login data below. |
Please specify login data below. |
<h3>Login Data</h3> |
<h3>Login Data</h3> |
$generalrule |
<p>$generalrule</p> |
$authformkrb |
<p>$authformkrb</p> |
$authformint |
<p>$authformint</p> |
$authformfsys |
<p>$authformfsys</p> |
$authformloc |
<p>$authformloc</p> |
ENDBADAUTH |
ENDBADAUTH |
} else { |
} else { |
# This user is not allowed to modify the users |
# This user is not allowed to modify the users |
# authentication scheme, so just notify them of the problem |
# authentication scheme, so just notify them of the problem |
$r->print(<<ENDBADAUTH); |
$r->print(<<ENDBADAUTH); |
<hr /> |
<hr /> |
|
<script type="text/javascript" language="Javascript"> |
$loginscript |
$loginscript |
|
</script> |
<font color="#ff0000"> ERROR: </font> |
<font color="#ff0000"> ERROR: </font> |
This user has an unrecognized authentication scheme ($currentauth). |
This user has an unrecognized authentication scheme ($currentauth). |
Please alert a domain coordinator of this situation. |
Please alert a domain coordinator of this situation. |
Line 447 ENDBADAUTH
|
Line 386 ENDBADAUTH
|
} else { # Authentication type is valid |
} else { # Authentication type is valid |
my $authformcurrent=''; |
my $authformcurrent=''; |
my $authform_other=''; |
my $authform_other=''; |
if ($currentauth=~/^krb4:/) { |
if ($currentauth=~/^krb(4|5):/) { |
$authformcurrent=$authformkrb; |
$authformcurrent=$authformkrb; |
$authform_other=$authformint.$authformfsys.$authformloc; |
$authform_other="<p>$authformint</p>\n". |
# embarrassing script hack here |
"<p>$authformfsys</p><p>$authformloc</p>"; |
$loginscript=~s/login\[3\]/login\[4\]/; # loc |
|
$loginscript=~s/login\[2\]/login\[3\]/; # fsys |
|
$loginscript=~s/login\[1\]/login\[2\]/; # int |
|
$loginscript=~s/login\[0\]/login\[1\]/; # krb4 |
|
} |
} |
elsif ($currentauth=~/^internal:/) { |
elsif ($currentauth=~/^internal:/) { |
$authformcurrent=$authformint; |
$authformcurrent=$authformint; |
$authform_other=$authformkrb.$authformfsys.$authformloc; |
$authform_other="<p>$authformkrb</p>". |
# embarrassing script hack here |
"<p>$authformfsys</p><p>$authformloc</p>"; |
$loginscript=~s/login\[3\]/login\[4\]/; # loc |
|
$loginscript=~s/login\[2\]/login\[3\]/; # fsys |
|
$loginscript=~s/login\[1\]/login\[1\]/; # int |
|
$loginscript=~s/login\[0\]/login\[2\]/; # krb4 |
|
} |
} |
elsif ($currentauth=~/^unix:/) { |
elsif ($currentauth=~/^unix:/) { |
$authformcurrent=$authformfsys; |
$authformcurrent=$authformfsys; |
$authform_other=$authformkrb.$authformint.$authformloc; |
$authform_other="<p>$authformkrb</p>". |
# embarrassing script hack here |
"<p>$authformint</p><p>$authformloc;</p>"; |
$loginscript=~s/login\[3\]/login\[4\]/; # loc |
|
$loginscript=~s/login\[1\]/login\[3\]/; # int |
|
$loginscript=~s/login\[2\]/login\[1\]/; # fsys |
|
$loginscript=~s/login\[0\]/login\[2\]/; # krb4 |
|
} |
} |
elsif ($currentauth=~/^localauth:/) { |
elsif ($currentauth=~/^localauth:/) { |
$authformcurrent=$authformloc; |
$authformcurrent=$authformloc; |
$authform_other=$authformkrb.$authformint.$authformfsys; |
$authform_other="<p>$authformkrb</p>". |
# embarrassing script hack here |
"<p>$authformint</p><p>$authformfsys</p>"; |
$loginscript=~s/login\[3\]/login\[loc\]/; # loc |
|
$loginscript=~s/login\[2\]/login\[4\]/; # fsys |
|
$loginscript=~s/login\[1\]/login\[3\]/; # int |
|
$loginscript=~s/login\[0\]/login\[2\]/; # krb4 |
|
$loginscript=~s/login\[loc\]/login\[1\]/; # loc |
|
} |
} |
$authformcurrent=<<ENDCURRENTAUTH; |
$authformcurrent=<<ENDCURRENTAUTH; |
<table border='1'> |
<table border='1'> |
Line 494 ENDBADAUTH
|
Line 416 ENDBADAUTH
|
<td bgcolor='#cbbcbb'>Changing this value will overwrite existing authentication for the user; you should notify the user of this change.</td></tr> |
<td bgcolor='#cbbcbb'>Changing this value will overwrite existing authentication for the user; you should notify the user of this change.</td></tr> |
</table> |
</table> |
ENDCURRENTAUTH |
ENDCURRENTAUTH |
if (&Apache::lonnet::allowed('mau',$ENV{'user.domain'})) { |
if (&Apache::lonnet::allowed('mau',$ENV{'request.role.domain'})) { |
# Current user has login modification privileges |
# Current user has login modification privileges |
$r->print(<<ENDOTHERAUTHS); |
$r->print(<<ENDOTHERAUTHS); |
<hr /> |
<hr /> |
|
<script type="text/javascript" language="Javascript"> |
$loginscript |
$loginscript |
|
</script> |
<h3>Change Current Login Data</h3> |
<h3>Change Current Login Data</h3> |
$generalrule |
<p>$generalrule</p> |
$authformnop |
<p>$authformnop</p> |
$authformcurrent |
<p>$authformcurrent</p> |
<h3>Enter New Login Data</h3> |
<h3>Enter New Login Data</h3> |
$authform_other |
$authform_other |
ENDOTHERAUTHS |
ENDOTHERAUTHS |
Line 513 ENDOTHERAUTHS
|
Line 437 ENDOTHERAUTHS
|
# |
# |
# Co-Author |
# Co-Author |
# |
# |
|
if (&authorpriv($ENV{'user.name'},$ENV{'request.role.domain'}) && |
if (&Apache::lonnet::allowed('cca',$ENV{'user.domain'})) { |
($ENV{'user.name'} ne $ccuname || $ENV{'user.domain'} ne $ccdomain)) { |
|
# No sense in assigning co-author role to yourself |
my $cuname=$ENV{'user.name'}; |
my $cuname=$ENV{'user.name'}; |
my $cudom=$ENV{'user.domain'}; |
my $cudom=$ENV{'request.role.domain'}; |
$r->print(<<ENDCOAUTH); |
$r->print(<<ENDCOAUTH); |
<h4>Construction Space</h4> |
<h4>Construction Space</h4> |
<table border=2><tr><th>Activate</th><th>Role</th><th>Extent</th> |
<table border=2><tr><th>Activate</th><th>Role</th><th>Extent</th> |
Line 572 ENDDROW
|
Line 497 ENDDROW
|
} |
} |
|
|
# ================================================================= Phase Three |
# ================================================================= Phase Three |
sub phase_three { |
sub update_user_data { |
my $r=shift; |
my $r=shift; |
my $uhome=&Apache::lonnet::homeserver($ENV{'form.ccuname'}, |
my $uhome=&Apache::lonnet::homeserver($ENV{'form.ccuname'}, |
$ENV{'form.ccdomain'}); |
$ENV{'form.ccdomain'}); |
Line 585 sub phase_three {
|
Line 510 sub phase_three {
|
<head> |
<head> |
<title>The LearningOnline Network with CAPA</title> |
<title>The LearningOnline Network with CAPA</title> |
</head> |
</head> |
<body bgcolor="#FFFFFF"> |
|
<img align="right" src="/adm/lonIcons/lonlogos.gif"> |
|
ENDTHREEHEAD |
ENDTHREEHEAD |
|
my $title; |
|
if (exists($ENV{'form.makeuser'})) { |
|
$title='Set Privileges for New User'; |
|
} else { |
|
$title='Modify User Privileges'; |
|
} |
|
$r->print(&Apache::loncommon::bodytag($title)); |
# Check Inputs |
# Check Inputs |
if (! $ENV{'form.ccuname'} ) { |
if (! $ENV{'form.ccuname'} ) { |
$r->print($error.'No login name specified.'.$end); |
$r->print($error.'No login name specified.'.$end); |
Line 622 ENDTHREEHEAD
|
Line 552 ENDTHREEHEAD
|
my $amode=''; |
my $amode=''; |
my $genpwd=''; |
my $genpwd=''; |
if ($ENV{'form.login'} eq 'krb') { |
if ($ENV{'form.login'} eq 'krb') { |
$amode='krb4'; |
$amode='krb'; |
|
$amode.=$ENV{'form.krbver'}; |
$genpwd=$ENV{'form.krbarg'}; |
$genpwd=$ENV{'form.krbarg'}; |
} elsif ($ENV{'form.login'} eq 'int') { |
} elsif ($ENV{'form.login'} eq 'int') { |
$amode='internal'; |
$amode='internal'; |
Line 634 ENDTHREEHEAD
|
Line 565 ENDTHREEHEAD
|
$amode='localauth'; |
$amode='localauth'; |
$genpwd=$ENV{'form.locarg'}; |
$genpwd=$ENV{'form.locarg'}; |
$genpwd=" " if (!$genpwd); |
$genpwd=" " if (!$genpwd); |
|
} elsif (($ENV{'form.login'} eq 'nochange') || |
|
($ENV{'form.login'} eq '' )) { |
|
# There is no need to tell the user we did not change what they |
|
# did not ask us to change. |
|
# If they are creating a new user but have not specified login |
|
# information this will be caught below. |
} else { |
} else { |
$r->print($error.'Invalid login mode or password'.$end); |
$r->print($error.'Invalid login mode or password'.$end); |
return; |
return; |
Line 641 ENDTHREEHEAD
|
Line 578 ENDTHREEHEAD
|
if ($ENV{'form.makeuser'}) { |
if ($ENV{'form.makeuser'}) { |
# Create a new user |
# Create a new user |
$r->print(<<ENDNEWUSERHEAD); |
$r->print(<<ENDNEWUSERHEAD); |
<h1>Create User</h1> |
|
<h3>Creating user "$ENV{'form.ccuname'}" in domain "$ENV{'form.ccdomain'}"</h2> |
<h3>Creating user "$ENV{'form.ccuname'}" in domain "$ENV{'form.ccdomain'}"</h2> |
ENDNEWUSERHEAD |
ENDNEWUSERHEAD |
# Check for the authentication mode and password |
# Check for the authentication mode and password |
Line 654 ENDNEWUSERHEAD
|
Line 590 ENDNEWUSERHEAD
|
if (lc($desiredhost) eq 'default') { |
if (lc($desiredhost) eq 'default') { |
$desiredhost = undef; |
$desiredhost = undef; |
} else { |
} else { |
my %home_servers = &get_home_servers($ENV{'form.ccdomain'}); |
my %home_servers = &Apache::loncommon::get_library_servers |
|
($ENV{'form.ccdomain'}); |
if (! exists($home_servers{$desiredhost})) { |
if (! exists($home_servers{$desiredhost})) { |
$r->print($error.'Invalid home server specified'); |
$r->print($error.'Invalid home server specified'); |
return; |
return; |
Line 672 ENDNEWUSERHEAD
|
Line 609 ENDNEWUSERHEAD
|
$ENV{'form.ccdomain'}); |
$ENV{'form.ccdomain'}); |
$r->print('<br>Home server: '.$home.' '. |
$r->print('<br>Home server: '.$home.' '. |
$Apache::lonnet::libserv{$home}); |
$Apache::lonnet::libserv{$home}); |
} elsif ($ENV{'form.login'} ne '') { |
} elsif (($ENV{'form.login'} ne 'nochange') && |
|
($ENV{'form.login'} ne '' )) { |
# Modify user privileges |
# Modify user privileges |
$r->print(<<ENDMODIFYUSERHEAD); |
$r->print(<<ENDMODIFYUSERHEAD); |
<h1>Change User Privileges</h1> |
|
<h2>User "$ENV{'form.ccuname'}" in domain "$ENV{'form.ccdomain'}"</h2> |
<h2>User "$ENV{'form.ccuname'}" in domain "$ENV{'form.ccdomain'}"</h2> |
ENDMODIFYUSERHEAD |
ENDMODIFYUSERHEAD |
if (! $amode || ! $genpwd) { |
if (! $amode || ! $genpwd) { |
Line 683 ENDMODIFYUSERHEAD
|
Line 620 ENDMODIFYUSERHEAD
|
return; |
return; |
} |
} |
# Only allow authentification modification if the person has authority |
# Only allow authentification modification if the person has authority |
if (&Apache::lonnet::allowed('mau',$ENV{'user.domain'})) { |
if (&Apache::lonnet::allowed('mau',$ENV{'form.ccdomain'})) { |
$r->print('Modifying authentication: '. |
$r->print('Modifying authentication: '. |
&Apache::lonnet::modifyuserauth( |
&Apache::lonnet::modifyuserauth( |
$ENV{'form.ccdomain'},$ENV{'form.ccuname'}, |
$ENV{'form.ccdomain'},$ENV{'form.ccuname'}, |
$amode,$genpwd)); |
$amode,$genpwd)); |
$r->print('<br>Home server: '.&Apache::lonnet::homeserver |
$r->print('<br>Home server: '.&Apache::lonnet::homeserver |
Line 857 sub handler {
|
Line 794 sub handler {
|
(&Apache::lonnet::allowed('cin',$ENV{'request.course.id'})) || |
(&Apache::lonnet::allowed('cin',$ENV{'request.course.id'})) || |
(&Apache::lonnet::allowed('ccr',$ENV{'request.course.id'})) || |
(&Apache::lonnet::allowed('ccr',$ENV{'request.course.id'})) || |
(&Apache::lonnet::allowed('cep',$ENV{'request.course.id'})) || |
(&Apache::lonnet::allowed('cep',$ENV{'request.course.id'})) || |
(&Apache::lonnet::allowed('cca',$ENV{'user.domain'})) || |
(&Apache::lonnet::allowed('cca',$ENV{'request.role.domain'})) || |
(&Apache::lonnet::allowed('mau',$ENV{'user.domain'}))) { |
(&Apache::lonnet::allowed('mau',$ENV{'request.role.domain'}))) { |
$r->content_type('text/html'); |
$r->content_type('text/html'); |
$r->send_http_header; |
$r->send_http_header; |
unless ($ENV{'form.phase'}) { |
unless ($ENV{'form.phase'}) { |
&phase_one($r); |
&print_username_entry_form($r); |
} |
} |
if ($ENV{'form.phase'} eq 'two') { |
if ($ENV{'form.phase'} eq 'get_user_info') { |
&phase_two($r); |
&print_user_modification_page($r); |
} elsif ($ENV{'form.phase'} eq 'three') { |
} elsif ($ENV{'form.phase'} eq 'update_user_data') { |
&phase_three($r); |
&update_user_data($r); |
} |
} |
} else { |
} else { |
$ENV{'user.error.msg'}= |
$ENV{'user.error.msg'}= |
Line 934 ENDTABLE
|
Line 871 ENDTABLE
|
#---------------------------------------------- end functions for &phase_two |
#---------------------------------------------- end functions for &phase_two |
|
|
#--------------------------------- functions for &phase_two and &phase_three |
#--------------------------------- functions for &phase_two and &phase_three |
sub get_home_servers { |
|
my $domain = shift; |
|
my %home_servers; |
|
foreach (keys(%Apache::lonnet::libserv)) { |
|
if ($Apache::lonnet::hostdom{$_} eq $domain) { |
|
$home_servers{$_} = $Apache::lonnet::hostname{$_}; |
|
} |
|
} |
|
return %home_servers; |
|
} |
|
|
|
#--------------------------end of functions for &phase_two and &phase_three |
#--------------------------end of functions for &phase_two and &phase_three |
|
|