version 1.260, 2004/10/11 10:58:28
|
version 1.262, 2004/10/19 10:57:06
|
Line 1806 sub change_authentication_handler {
|
Line 1806 sub change_authentication_handler {
|
chomp($npass); |
chomp($npass); |
|
|
$npass=&unescape($npass); |
$npass=&unescape($npass); |
|
my $oldauth = &get_auth_type($udom, $uname); # Get old auth info. |
my $passfilename = &password_path($udom, $uname); |
my $passfilename = &password_path($udom, $uname); |
if ($passfilename) { # Not allowed to create a new user!! |
if ($passfilename) { # Not allowed to create a new user!! |
my $result=&make_passwd_file($uname, $umode,$npass,$passfilename); |
my $result=&make_passwd_file($uname, $umode,$npass,$passfilename); |
|
# |
|
# If the current auth mode is internal, and the old auth mode was |
|
# unix, or krb*, and the user is an author for this domain, |
|
# re-run manage_permissions for that role in order to be able |
|
# to take ownership of the construction space back to www:www |
|
# |
|
|
|
if( ($oldauth =~ /^unix/) && ($umode eq "internal")) { # unix -> internal |
|
if(&is_author($udom, $uname)) { |
|
&Debug(" Need to manage author permissions..."); |
|
&manage_permissions("/$udom/_au", $udom, $uname, "internal:"); |
|
} |
|
} |
|
|
|
|
&Reply($client, $result, $userinput); |
&Reply($client, $result, $userinput); |
} else { |
} else { |
&Failure($client, "non_authorized\n", $userinput); # Fail the user now. |
&Failure($client, "non_authorized\n", $userinput); # Fail the user now. |
Line 2445 sub roles_put_handler {
|
Line 2461 sub roles_put_handler {
|
# is done on close this improves the chances the log will be an un- |
# is done on close this improves the chances the log will be an un- |
# corrupted ordered thing. |
# corrupted ordered thing. |
if ($hashref) { |
if ($hashref) { |
|
my $pass_entry = &get_auth_type($udom, $uname); |
|
my ($auth_type,$pwd) = split(/:/, $pass_entry); |
|
$auth_type = $auth_type.":"; |
my @pairs=split(/\&/,$what); |
my @pairs=split(/\&/,$what); |
foreach my $pair (@pairs) { |
foreach my $pair (@pairs) { |
my ($key,$value)=split(/=/,$pair); |
my ($key,$value)=split(/=/,$pair); |
my $pass_entry = &get_auth_type($udom, $uname); |
|
my ($auth_type,$pwd) = split(/:/, $pass_entry); |
|
$auth_type = $auth_type.":"; |
|
&manage_permissions($key, $udom, $uname, |
&manage_permissions($key, $udom, $uname, |
$auth_type); |
$auth_type); |
$hashref->{$key}=$value; |
$hashref->{$key}=$value; |
Line 3943 sub process_request {
|
Line 3959 sub process_request {
|
|
|
} |
} |
|
|
#------------------- Commands not yet in spearate handlers. -------------- |
print $client "unknown_cmd\n"; |
|
|
#------------------------------- is auto-enrollment enabled? |
|
if ($userinput =~/^autorun/) { |
|
if (isClient) { |
|
my ($cmd,$cdom) = split(/:/,$userinput); |
|
my $outcome = &localenroll::run($cdom); |
|
print $client "$outcome\n"; |
|
} else { |
|
print $client "0\n"; |
|
} |
|
#------------------------------- get official sections (for auto-enrollment). |
|
} elsif ($userinput =~/^autogetsections/) { |
|
if (isClient) { |
|
my ($cmd,$coursecode,$cdom)=split(/:/,$userinput); |
|
my @secs = &localenroll::get_sections($coursecode,$cdom); |
|
my $seclist = &escape(join(':',@secs)); |
|
print $client "$seclist\n"; |
|
} else { |
|
print $client "refused\n"; |
|
} |
|
#----------------------- validate owner of new course section (for auto-enrollment). |
|
} elsif ($userinput =~/^autonewcourse/) { |
|
if (isClient) { |
|
my ($cmd,$inst_course_id,$owner,$cdom)=split(/:/,$userinput); |
|
my $outcome = &localenroll::new_course($inst_course_id,$owner,$cdom); |
|
print $client "$outcome\n"; |
|
} else { |
|
print $client "refused\n"; |
|
} |
|
#-------------- validate course section in schedule of classes (for auto-enrollment). |
|
} elsif ($userinput =~/^autovalidatecourse/) { |
|
if (isClient) { |
|
my ($cmd,$inst_course_id,$cdom)=split(/:/,$userinput); |
|
my $outcome=&localenroll::validate_courseID($inst_course_id,$cdom); |
|
print $client "$outcome\n"; |
|
} else { |
|
print $client "refused\n"; |
|
} |
|
#--------------------------- create password for new user (for auto-enrollment). |
|
} elsif ($userinput =~/^autocreatepassword/) { |
|
if (isClient) { |
|
my ($cmd,$authparam,$cdom)=split(/:/,$userinput); |
|
my ($create_passwd,$authchk); |
|
($authparam,$create_passwd,$authchk) = &localenroll::create_password($authparam,$cdom); |
|
print $client &escape($authparam.':'.$create_passwd.':'.$authchk)."\n"; |
|
} else { |
|
print $client "refused\n"; |
|
} |
|
#--------------------------- read and remove temporary files (for auto-enrollment). |
|
} elsif ($userinput =~/^autoretrieve/) { |
|
if (isClient) { |
|
my ($cmd,$filename) = split(/:/,$userinput); |
|
my $source = $perlvar{'lonDaemons'}.'/tmp/'.$filename; |
|
if ( (-e $source) && ($filename ne '') ) { |
|
my $reply = ''; |
|
if (open(my $fh,$source)) { |
|
while (<$fh>) { |
|
chomp($_); |
|
$_ =~ s/^\s+//g; |
|
$_ =~ s/\s+$//g; |
|
$reply .= $_; |
|
} |
|
close($fh); |
|
print $client &escape($reply)."\n"; |
|
# unlink($source); |
|
} else { |
|
print $client "error\n"; |
|
} |
|
} else { |
|
print $client "error\n"; |
|
} |
|
} else { |
|
print $client "refused\n"; |
|
} |
|
#--------------------- read and retrieve institutional code format |
|
# (for support form). |
|
} elsif ($userinput =~/^autoinstcodeformat/) { |
|
if (isClient) { |
|
my $reply; |
|
my($cmd,$cdom,$course) = split(/:/,$userinput); |
|
my @pairs = split/\&/,$course; |
|
my %instcodes = (); |
|
my %codes = (); |
|
my @codetitles = (); |
|
my %cat_titles = (); |
|
my %cat_order = (); |
|
foreach (@pairs) { |
|
my ($key,$value) = split/=/,$_; |
|
$instcodes{&unescape($key)} = &unescape($value); |
|
} |
|
my $formatreply = &localenroll::instcode_format($cdom,\%instcodes,\%codes,\@codetitles,\%cat_titles,\%cat_order); |
|
if ($formatreply eq 'ok') { |
|
my $codes_str = &hash2str(%codes); |
|
my $codetitles_str = &array2str(@codetitles); |
|
my $cat_titles_str = &hash2str(%cat_titles); |
|
my $cat_order_str = &hash2str(%cat_order); |
|
print $client $codes_str.':'.$codetitles_str.':'.$cat_titles_str.':'.$cat_order_str."\n"; |
|
} |
|
} else { |
|
print $client "refused\n"; |
|
} |
|
# ------------------------------------------------------------- unknown command |
|
|
|
} else { |
|
# unknown command |
|
print $client "unknown_cmd\n"; |
|
} |
|
# -------------------------------------------------------------------- complete |
# -------------------------------------------------------------------- complete |
Debug("process_request - returning 1"); |
Debug("process_request - returning 1"); |
return 1; |
return 1; |
Line 4925 sub make_new_child {
|
Line 4834 sub make_new_child {
|
exit; |
exit; |
|
|
} |
} |
|
# |
|
# Determine if a user is an author for the indicated domain. |
|
# |
|
# Parameters: |
|
# domain - domain to check in . |
|
# user - Name of user to check. |
|
# |
|
# Return: |
|
# 1 - User is an author for domain. |
|
# 0 - User is not an author for domain. |
|
sub is_author { |
|
my ($domain, $user) = @_; |
|
|
|
&Debug("is_author: $user @ $domain"); |
|
|
|
my $hashref = &tie_user_hash($domain, $user, "roles", |
|
&GDBM_READER()); |
|
|
|
# Author role should show up as a key /domain/_au |
|
|
|
my $key = "/$domain/_au"; |
|
my $value = $hashref->{$key}; |
|
|
|
if(defined($value)) { |
|
&Debug("$user @ $domain is an author"); |
|
} |
|
|
|
return defined($value); |
|
} |
# |
# |
# Checks to see if the input roleput request was to set |
# Checks to see if the input roleput request was to set |
# an author role. If so, invokes the lchtmldir script to set |
# an author role. If so, invokes the lchtmldir script to set |
Line 4941 sub make_new_child {
|
Line 4877 sub make_new_child {
|
sub manage_permissions |
sub manage_permissions |
{ |
{ |
|
|
|
|
my ($request, $domain, $user, $authtype) = @_; |
my ($request, $domain, $user, $authtype) = @_; |
|
|
|
&Debug("manage_permissions: $request $domain $user $authtype"); |
|
|
# See if the request is of the form /$domain/_au |
# See if the request is of the form /$domain/_au |
if($request =~ /^(\/$domain\/_au)$/) { # It's an author rolesput... |
if($request =~ /^(\/$domain\/_au)$/) { # It's an author rolesput... |
my $execdir = $perlvar{'lonDaemons'}; |
my $execdir = $perlvar{'lonDaemons'}; |
my $userhome= "/home/$user" ; |
my $userhome= "/home/$user" ; |
&logthis("system $execdir/lchtmldir $userhome $user $authtype"); |
&logthis("system $execdir/lchtmldir $userhome $user $authtype"); |
|
&Debug("Setting homedir permissions for $userhome"); |
system("$execdir/lchtmldir $userhome $user $authtype"); |
system("$execdir/lchtmldir $userhome $user $authtype"); |
} |
} |
} |
} |
Line 5392 sub make_passwd_file {
|
Line 5332 sub make_passwd_file {
|
if ($umode eq 'krb4' or $umode eq 'krb5') { |
if ($umode eq 'krb4' or $umode eq 'krb5') { |
{ |
{ |
my $pf = IO::File->new(">$passfilename"); |
my $pf = IO::File->new(">$passfilename"); |
print $pf "$umode:$npass\n"; |
if ($pf) { |
|
print $pf "$umode:$npass\n"; |
|
} else { |
|
$result = "pass_file_failed_error"; |
|
} |
} |
} |
} elsif ($umode eq 'internal') { |
} elsif ($umode eq 'internal') { |
my $salt=time; |
my $salt=time; |
Line 5401 sub make_passwd_file {
|
Line 5345 sub make_passwd_file {
|
{ |
{ |
&Debug("Creating internal auth"); |
&Debug("Creating internal auth"); |
my $pf = IO::File->new(">$passfilename"); |
my $pf = IO::File->new(">$passfilename"); |
print $pf "internal:$ncpass\n"; |
if($pf) { |
|
print $pf "internal:$ncpass\n"; |
|
} else { |
|
$result = "pass_file_failed_error"; |
|
} |
} |
} |
} elsif ($umode eq 'localauth') { |
} elsif ($umode eq 'localauth') { |
{ |
{ |
my $pf = IO::File->new(">$passfilename"); |
my $pf = IO::File->new(">$passfilename"); |
print $pf "localauth:$npass\n"; |
if($pf) { |
|
print $pf "localauth:$npass\n"; |
|
} else { |
|
$result = "pass_file_failed_error"; |
|
} |
} |
} |
} elsif ($umode eq 'unix') { |
} elsif ($umode eq 'unix') { |
{ |
{ |
Line 5445 sub make_passwd_file {
|
Line 5397 sub make_passwd_file {
|
$result = "lcuseradd_failed:$error_text\n"; |
$result = "lcuseradd_failed:$error_text\n"; |
} else { |
} else { |
my $pf = IO::File->new(">$passfilename"); |
my $pf = IO::File->new(">$passfilename"); |
print $pf "unix:\n"; |
if($pf) { |
|
print $pf "unix:\n"; |
|
} else { |
|
$result = "pass_file_failed_error"; |
|
} |
} |
} |
} |
} |
} elsif ($umode eq 'none') { |
} elsif ($umode eq 'none') { |
{ |
{ |
my $pf = IO::File->new("> $passfilename"); |
my $pf = IO::File->new("> $passfilename"); |
print $pf "none:\n"; |
if($pf) { |
|
print $pf "none:\n"; |
|
} else { |
|
$result = "pass_file_failed_error"; |
|
} |
} |
} |
} else { |
} else { |
$result="auth_mode_error\n"; |
$result="auth_mode_error\n"; |