version 1.1, 2001/01/03 16:20:59
|
version 1.6, 2002/03/30 23:27:00
|
Line 1
|
Line 1
|
# The LearningOnline Network |
# The LearningOnline Network |
# Preferences |
# Preferences |
# |
# |
|
# $Id$ |
|
# |
|
# Copyright Michigan State University Board of Trustees |
|
# |
|
# This file is part of the LearningOnline Network with CAPA (LON-CAPA). |
|
# |
|
# LON-CAPA is free software; you can redistribute it and/or modify |
|
# it under the terms of the GNU General Public License as published by |
|
# the Free Software Foundation; either version 2 of the License, or |
|
# (at your option) any later version. |
|
# |
|
# LON-CAPA is distributed in the hope that it will be useful, |
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
# GNU General Public License for more details. |
|
# |
|
# You should have received a copy of the GNU General Public License |
|
# along with LON-CAPA; if not, write to the Free Software |
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
|
# |
|
# /home/httpd/html/adm/gpl.txt |
|
# |
|
# http://www.lon-capa.org/ |
|
# |
# (Internal Server Error Handler |
# (Internal Server Error Handler |
# |
# |
# (Login Screen |
# (Login Screen |
Line 11
|
Line 35
|
# |
# |
# 3/1 Gerd Kortemeyer |
# 3/1 Gerd Kortemeyer |
# |
# |
|
# 2/13/02 2/14 2/15 Matthew Hall |
|
# |
|
# This package uses the "londes.js" javascript code. |
|
# |
|
# TODOs that have to be completed: |
|
# interface with lonnet to change the password |
|
|
package Apache::lonpreferences; |
package Apache::lonpreferences; |
|
|
use strict; |
use strict; |
use Apache::Constants qw(:common); |
use Apache::Constants qw(:common); |
|
use Apache::File; |
|
use Crypt::DES; |
|
use DynaLoader; # for Crypt::DES version |
|
use Apache::loncommon(); |
|
|
|
# |
|
# Write lonnet::passwd to do the call below. |
|
# Use: |
|
# my $answer=reply("encrypt:passwd:$udom:$uname:$upass",$tryserver); |
|
# |
|
################################################## |
|
# password associated functions # |
|
################################################## |
|
sub des_keys { |
|
# Make a new key for DES encryption. |
|
# Each key has two parts which are returned seperately. |
|
# Please note: Each key must be passed through the &hex function |
|
# before it is output to the web browser. The hex versions cannot |
|
# be used to decrypt. |
|
my @hexstr=('0','1','2','3','4','5','6','7', |
|
'8','9','a','b','c','d','e','f'); |
|
my $lkey=''; |
|
for (0..7) { |
|
$lkey.=$hexstr[rand(15)]; |
|
} |
|
my $ukey=''; |
|
for (0..7) { |
|
$ukey.=$hexstr[rand(15)]; |
|
} |
|
return ($lkey,$ukey); |
|
} |
|
|
|
sub des_decrypt { |
|
my ($key,$cyphertext) = @_; |
|
my $keybin=pack("H16",$key); |
|
my $cypher; |
|
if ($Crypt::DES::VERSION>=2.03) { |
|
$cypher=new Crypt::DES $keybin; |
|
} else { |
|
$cypher=new DES $keybin; |
|
} |
|
my $plaintext= |
|
$cypher->decrypt(unpack("a8",pack("H16",substr($cyphertext,0,16)))); |
|
$plaintext.= |
|
$cypher->decrypt(unpack("a8",pack("H16",substr($cyphertext,16,16)))); |
|
$plaintext=substr($plaintext,1,ord(substr($plaintext,0,1)) ); |
|
return $plaintext; |
|
} |
|
|
|
################################################################ |
|
# Handler subroutines # |
|
################################################################ |
|
sub screennamechanger { |
|
my $r = shift; |
|
my $errormessage = shift; |
|
$errormessage = ($errormessage || ''); |
|
my $user = $ENV{'user.name'}; |
|
my $domain = $ENV{'user.domain'}; |
|
my $homeserver = $ENV{'user.home'}; |
|
my %userenv = &Apache::lonnet::get('environment',['screenname']); |
|
my $screenname=$userenv{'screenname'}; |
|
$r->print(<<ENDSCREEN); |
|
<html> |
|
<body bgcolor="#FFFFFF"> |
|
<h1>Preferences for $user</h1> |
|
<h3>$user is a member of domain $domain</h3> |
|
$errormessage |
|
<p> |
|
Change anonymous discussion screen name for $user |
|
</p> |
|
|
|
<form name="server" action="/adm/preferences" method="post"> |
|
<input type="hidden" name="action" value="verify_and_change_screenname" /> |
|
New screenname: |
|
<input type="text" size="20" value="$screenname" name="screenname" /> |
|
<input type="submit" value="Change" /> |
|
</form> |
|
</body> |
|
</html> |
|
ENDSCREEN |
|
} |
|
|
|
sub verify_and_change_screenname { |
|
my $r = shift; |
|
my $user = $ENV{'user.name'}; |
|
my $domain = $ENV{'user.domain'}; |
|
my $homeserver = $ENV{'user.home'}; |
|
my $newscreen = $ENV{'form.screenname'}; |
|
$newscreen=~s/\W//g; |
|
my $message=''; |
|
if ($newscreen) { |
|
my %tmp; |
|
$tmp{'screenname'}=$newscreen; |
|
&Apache::lonnet::put('environment',\%tmp); |
|
$message='Set new screenname to '.$newscreen; |
|
} else { |
|
&Apache::lonnet::del('environment',['screenname']); |
|
$message='Reset screenname'; |
|
} |
|
$r->print(<<ENDVCSCREEN); |
|
<html> |
|
<body bgcolor="#FFFFFF"> |
|
<h1>Preferences for $user</h1> |
|
<h3>$user is a member of domain $domain</h3> |
|
<p> |
|
Change anonymous discussion screen name for $user |
|
</p> |
|
$message |
|
</body></html> |
|
ENDVCSCREEN |
|
} |
|
|
|
###################################################### |
|
# password handler subroutines # |
|
###################################################### |
|
sub passwordchanger { |
|
# This function is a bit of a mess.... |
|
# Passwords are encrypted using londes.js (DES encryption) |
|
my $r = shift; |
|
my $errormessage = shift; |
|
$errormessage = ($errormessage || ''); |
|
my $user = $ENV{'user.name'}; |
|
my $domain = $ENV{'user.domain'}; |
|
my $homeserver = $ENV{'user.home'}; |
|
my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain); |
|
# Check for authentication types that allow changing of the password. |
|
return if ($currentauth !~ /^(unix|internal):/); |
|
# |
|
# Generate keys |
|
my ($lkey_cpass ,$ukey_cpass ) = &des_keys(); |
|
my ($lkey_npass1,$ukey_npass1) = &des_keys(); |
|
my ($lkey_npass2,$ukey_npass2) = &des_keys(); |
|
# Store the keys in the log files |
|
my $lonhost = $r->dir_config('lonHostID'); |
|
my $logtoken=Apache::lonnet::reply('tmpput:' |
|
.$ukey_cpass . $lkey_cpass .'&' |
|
.$ukey_npass1 . $lkey_npass1.'&' |
|
.$ukey_npass2 . $lkey_npass2, |
|
$lonhost); |
|
# Hexify the keys for output as javascript variables |
|
$ukey_cpass = hex($ukey_cpass); |
|
$lkey_cpass = hex($lkey_cpass); |
|
$ukey_npass1= hex($ukey_npass1); |
|
$lkey_npass1= hex($lkey_npass1); |
|
$ukey_npass2= hex($ukey_npass2); |
|
$lkey_npass2= hex($lkey_npass2); |
|
# Output javascript to deal with passwords |
|
# Output DES javascript |
|
{ |
|
my $include = $r->dir_config('lonIncludes'); |
|
my $jsh=Apache::File->new($include."/londes.js"); |
|
$r->print(<$jsh>); |
|
} |
|
$r->print(<<ENDFORM); |
|
|
|
<body bgcolor="#FFFFFF" onLoad="init();"> |
|
|
|
<script language="JavaScript"> |
|
|
|
function send() { |
|
uextkey=this.document.client.elements.ukey_cpass.value; |
|
lextkey=this.document.client.elements.lkey_cpass.value; |
|
initkeys(); |
|
|
|
this.document.server.elements.currentpass.value |
|
=crypted(this.document.client.elements.currentpass.value); |
|
|
|
uextkey=this.document.client.elements.ukey_npass1.value; |
|
lextkey=this.document.client.elements.lkey_npass1.value; |
|
initkeys(); |
|
this.document.server.elements.newpass_1.value |
|
=crypted(this.document.client.elements.newpass_1.value); |
|
|
|
uextkey=this.document.client.elements.ukey_npass2.value; |
|
lextkey=this.document.client.elements.lkey_npass2.value; |
|
initkeys(); |
|
this.document.server.elements.newpass_2.value |
|
=crypted(this.document.client.elements.newpass_2.value); |
|
|
|
this.document.server.submit(); |
|
} |
|
|
|
</script> |
|
<h1>Preferences for $user</h1> |
|
<h3>$user is a member of domain $domain</h3> |
|
$errormessage |
|
<p> |
|
Change password for $user |
|
</p> |
|
<p> |
|
<!-- We seperate the forms into 'server' and 'client' in order to |
|
ensure that unencrypted passwords will not be sent out by a |
|
crappy browser --> |
|
|
|
<form name="server" action="/adm/preferences" method="post"> |
|
<input type="hidden" name="logtoken" value="$logtoken" /> |
|
<input type="hidden" name="action" value="verify_and_change_pass" /> |
|
<input type="hidden" name="currentpass" value="" /> |
|
<input type="hidden" name="newpass_1" value="" /> |
|
<input type="hidden" name="newpass_2" value="" /> |
|
</form> |
|
|
|
<form name="client" > |
|
<table> |
|
<tr><td align="right"> Current password: </td> |
|
<td><input type="password" name="currentpass" size="10"/> </td></tr> |
|
<tr><td align="right"> New password: </td> |
|
<td><input type="password" name="newpass_1" size="10" /> </td></tr> |
|
<tr><td align="right"> Confirm password: </td> |
|
<td><input type="password" name="newpass_2" size="10" /> </td></tr> |
|
<tr><td colspan="2" align="center"> |
|
<input type="button" value="Change Password" onClick="send();"> |
|
</table> |
|
<input type="hidden" name="ukey_cpass" value="$ukey_cpass" /> |
|
<input type="hidden" name="lkey_cpass" value="$lkey_cpass" /> |
|
<input type="hidden" name="ukey_npass1" value="$ukey_npass1" /> |
|
<input type="hidden" name="lkey_npass1" value="$lkey_npass1" /> |
|
<input type="hidden" name="ukey_npass2" value="$ukey_npass2" /> |
|
<input type="hidden" name="lkey_npass2" value="$lkey_npass2" /> |
|
</form> |
|
</p> |
|
ENDFORM |
|
# |
|
return; |
|
} |
|
|
|
sub verify_and_change_password { |
|
my $r = shift; |
|
my $user = $ENV{'user.name'}; |
|
my $domain = $ENV{'user.domain'}; |
|
my $homeserver = $ENV{'user.home'}; |
|
my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain); |
|
# Check for authentication types that allow changing of the password. |
|
return if ($currentauth !~ /^(unix|internal):/); |
|
# |
|
$r->print(<<ENDHEADER); |
|
<html> |
|
<head> |
|
<title>LON-CAPA Preferences: Change password for $user</title> |
|
</head> |
|
ENDHEADER |
|
# |
|
my $currentpass = $ENV{'form.currentpass'}; |
|
my $newpass1 = $ENV{'form.newpass_1'}; |
|
my $newpass2 = $ENV{'form.newpass_2'}; |
|
my $logtoken = $ENV{'form.logtoken'}; |
|
# Check for empty data |
|
unless (defined($currentpass) && |
|
defined($newpass1) && |
|
defined($newpass2) ){ |
|
&passwordchanger($r,"<p>\n<font color='#ff0000'>ERROR</font>". |
|
"Password data was blank.\n</p>"); |
|
return; |
|
} |
|
# Get the keys |
|
my $lonhost = $r->dir_config('lonHostID'); |
|
my $tmpinfo = Apache::lonnet::reply('tmpget:'.$logtoken,$lonhost); |
|
if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost')) { |
|
# I do not a have a better idea about how to handle this |
|
$r->print(<<ENDERROR); |
|
<p> |
|
<font color="#ff0000">ERROR:</font> Unable to retrieve stored token for |
|
password decryption. Please log out and try again. |
|
</p> |
|
ENDERROR |
|
# Probably should log an error here |
|
return; |
|
} |
|
my ($ckey,$n1key,$n2key)=split(/&/,$tmpinfo); |
|
# |
|
my $currentpass = &des_decrypt($ckey ,$currentpass); |
|
my $newpass1 = &des_decrypt($n1key,$newpass1); |
|
my $newpass2 = &des_decrypt($n2key,$newpass2); |
|
# |
|
if ($newpass1 ne $newpass2) { |
|
&passwordchanger($r, |
|
'<font color="#ff0000">ERROR:</font>'. |
|
'The new passwords you entered do not match. '. |
|
'Please try again.'); |
|
return; |
|
} |
|
if (length($newpass1) < 7) { |
|
&passwordchanger($r, |
|
'<font color="#ff0000">ERROR:</font>'. |
|
'Passwords must be a minimum of 7 characters long. '. |
|
'Please try again.'); |
|
return; |
|
} |
|
# |
|
# Check for bad characters |
|
my $badpassword = 0; |
|
foreach (split(//,$newpass1)) { |
|
$badpassword = 1 if ((ord($_)<32)||(ord($_)>126)); |
|
} |
|
if ($badpassword) { |
|
# I can't figure out how to enter bad characters on my browser. |
|
&passwordchanger($r,<<ENDERROR); |
|
<font color="#ff0000">ERROR:</font> |
|
The password you entered contained illegal characters.<br /> |
|
Valid characters are: space and <br /> |
|
<pre> |
|
!"\#$%&\'()*+,-./0123456789:;<=>?\@ |
|
ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_\`abcdefghijklmnopqrstuvwxyz{|}~ |
|
</pre> |
|
ENDERROR |
|
} |
|
# |
|
# Change the password (finally) |
|
my $result = &Apache::lonnet::changepass |
|
($user,$domain,$currentpass,$newpass1,$homeserver); |
|
# Inform the user the password has (not?) been changed |
|
if ($result =~ /^ok$/) { |
|
$r->print(<<"ENDTEXT"); |
|
<h2>Password for $user was successfully changed</h2> |
|
ENDTEXT |
|
} else { |
|
# error error: run in circles, scream and shout |
|
$r->print(<<ENDERROR); |
|
<h2><font color="#ff0000">Password for $user was not changed</font></h2> |
|
There was an internal error when attempting to change your password. |
|
Please contact your instructor or the domain coordinator. |
|
ENDERROR |
|
} |
|
return; |
|
} |
|
|
|
###################################################### |
|
# other handler subroutines # |
|
###################################################### |
|
|
|
|
|
################################################################ |
|
# Main handler # |
|
################################################################ |
sub handler { |
sub handler { |
my $r = shift; |
my $r = shift; |
|
my $user = $ENV{'user.name'}; |
|
my $domain = $ENV{'user.domain'}; |
$r->content_type('text/html'); |
$r->content_type('text/html'); |
|
# Some pages contain DES keys and should not be cached. |
|
&Apache::loncommon::no_cache($r); |
$r->send_http_header; |
$r->send_http_header; |
return OK if $r->header_only; |
return OK if $r->header_only; |
|
# Spit out the header |
# --------------------------------------------------- Print login screen header |
if ($ENV{'form.action'} eq 'changepass') { |
$r->print(<<ENDDOCUMENT); |
&passwordchanger($r); |
|
} elsif ($ENV{'form.action'} eq 'verify_and_change_pass') { |
|
&verify_and_change_password($r); |
|
} elsif ($ENV{'form.action'} eq 'changescreenname') { |
|
&screennamechanger($r); |
|
} elsif ($ENV{'form.action'} eq 'verify_and_change_screenname') { |
|
&verify_and_change_screenname($r); |
|
} else { |
|
$r->print(<<ENDHEADER); |
<html> |
<html> |
<head> |
<head> |
<title>The LearningOnline Network with CAPA</title> |
<title>LON-CAPA Preferences</title> |
</head> |
</head> |
<body bgcolor="#FFFFFF"> |
<body bgcolor="#FFFFFF" > |
<h1>Preferences</h1> |
<h1>Preferences for $user</h1> |
<img src="/adm/lonKaputt/lonconstruct.gif"> |
<h3>$user is a member of domain $domain</h3> |
|
ENDHEADER |
|
# Determine current authentication method |
|
my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain); |
|
if ($currentauth =~ /^(unix|internal):/) { |
|
$r->print(<<ENDPASSWORDFORM); |
|
<form name="client" action="/adm/preferences" method="post"> |
|
<input type="hidden" name="action" value="changepass"> |
|
<input type="submit" value="Change password"> |
|
</form> |
|
ENDPASSWORDFORM |
|
# Change screen name |
|
$r->print(<<ENDSCREENNAMEFORM); |
|
<form name="client" action="/adm/preferences" method="post"> |
|
<input type="hidden" name="action" value="changescreenname"> |
|
<input type="submit" value="Change anonymous discussion screen name"> |
|
</form> |
|
ENDSCREENNAMEFORM |
|
# Other preference setting code should be added here |
|
} |
|
} |
|
$r->print(<<ENDFOOTER); |
</body> |
</body> |
</html> |
</html> |
ENDDOCUMENT |
ENDFOOTER |
return OK; |
return OK; |
} |
} |
|
|