|
version 1.489.2.9, 2013/10/17 00:36:01
|
version 1.497, 2012/10/05 15:19:18
|
|
Line 130 my @passwderrors = ("ok",
|
Line 130 my @passwderrors = ("ok",
|
| "pwchange_failure - lcpasswd Error filename is invalid"); |
"pwchange_failure - lcpasswd Error filename is invalid"); |
| |
|
| |
|
| |
# The array below are lcuseradd error strings.: |
| |
|
| |
my $lastadderror = 13; |
| |
my @adderrors = ("ok", |
| |
"User ID mismatch, lcuseradd must run as user www", |
| |
"lcuseradd Incorrect number of command line parameters must be 3", |
| |
"lcuseradd Incorrect number of stdinput lines, must be 3", |
| |
"lcuseradd Too many other simultaneous pwd changes in progress", |
| |
"lcuseradd User does not exist", |
| |
"lcuseradd Unable to make www member of users's group", |
| |
"lcuseradd Unable to su to root", |
| |
"lcuseradd Unable to set password", |
| |
"lcuseradd Username has invalid characters", |
| |
"lcuseradd Password has an invalid character", |
| |
"lcuseradd User already exists", |
| |
"lcuseradd Could not add user.", |
| |
"lcuseradd Password mismatch"); |
| |
|
| |
|
| # This array are the errors from lcinstallfile: |
# This array are the errors from lcinstallfile: |
| |
|
| my @installerrors = ("ok", |
my @installerrors = ("ok", |
| "Initial user id of client not that of www", |
"Initial user id of client not that of www", |
| "Usage error, not enough command line arguments", |
"Usage error, not enough command line arguments", |
| "Source filename does not exist", |
"Source file name does not exist", |
| "Destination filename does not exist", |
"Destination file name does not exist", |
| "Some file operation failed", |
"Some file operation failed", |
| "Invalid table filename." |
"Invalid table filename." |
| ); |
); |
|
Line 1685 sub read_lonnet_global {
|
Line 1704 sub read_lonnet_global {
|
| sub server_devalidatecache_handler { |
sub server_devalidatecache_handler { |
| my ($cmd,$tail,$client) = @_; |
my ($cmd,$tail,$client) = @_; |
| my $userinput = "$cmd:$tail"; |
my $userinput = "$cmd:$tail"; |
| my $items = &unescape($tail); |
my ($name,$id) = map { &unescape($_); } split(/:/,$tail); |
| my @cached = split(/\&/,$items); |
&Apache::lonnet::devalidate_cache_new($name,$id); |
| foreach my $key (@cached) { |
|
| if ($key =~ /:/) { |
|
| my ($name,$id) = map { &unescape($_); } split(/:/,$key); |
|
| &Apache::lonnet::devalidate_cache_new($name,$id); |
|
| } |
|
| } |
|
| my $result = 'ok'; |
my $result = 'ok'; |
| &Reply($client,\$result,$userinput); |
&Reply($client,\$result,$userinput); |
| return 1; |
return 1; |
|
Line 1894 sub authenticate_handler {
|
Line 1907 sub authenticate_handler {
|
| if (ref($hostedsession) eq 'HASH') { |
if (ref($hostedsession) eq 'HASH') { |
| $hosted = $hostedsession->{'hosted'}; |
$hosted = $hostedsession->{'hosted'}; |
| } |
} |
| my $loncaparev = $clientversion; |
|
| if ($loncaparev eq '') { |
|
| $loncaparev = $Apache::lonnet::loncaparevs{$clientname}; |
|
| } |
|
| $canhost = &Apache::lonnet::can_host_session($udom,$clientname, |
$canhost = &Apache::lonnet::can_host_session($udom,$clientname, |
| $loncaparev, |
$clientversion, |
| $remote,$hosted); |
$remote,$hosted); |
| } |
} |
| } |
} |
|
Line 2122 sub change_authentication_handler {
|
Line 2131 sub change_authentication_handler {
|
| my $passfilename = &password_path($udom, $uname); |
my $passfilename = &password_path($udom, $uname); |
| if ($passfilename) { # Not allowed to create a new user!! |
if ($passfilename) { # Not allowed to create a new user!! |
| # If just changing the unix passwd. need to arrange to run |
# If just changing the unix passwd. need to arrange to run |
| # passwd since otherwise make_passwd_file will fail as |
# passwd since otherwise make_passwd_file will run |
| # creation of unix authenticated users is no longer supported |
# lcuseradd which fails if an account already exists |
| # except from the command line, when running make_domain_coordinator.pl |
# (to prevent an unscrupulous LONCAPA admin from stealing |
| |
# an existing account by overwriting it as a LonCAPA account). |
| |
|
| if(($oldauth =~/^unix/) && ($umode eq "unix")) { |
if(($oldauth =~/^unix/) && ($umode eq "unix")) { |
| my $result = &change_unix_password($uname, $npass); |
my $result = &change_unix_password($uname, $npass); |
|
Line 2142 sub change_authentication_handler {
|
Line 2152 sub change_authentication_handler {
|
| # re-run manage_permissions for that role in order to be able |
# re-run manage_permissions for that role in order to be able |
| # to take ownership of the construction space back to www:www |
# to take ownership of the construction space back to www:www |
| # |
# |
| |
|
| |
|
| |
if( (($oldauth =~ /^unix/) && ($umode eq "internal")) || |
| |
(($oldauth =~ /^internal/) && ($umode eq "unix")) ) { |
| |
if(&is_author($udom, $uname)) { |
| |
&Debug(" Need to manage author permissions..."); |
| |
&manage_permissions("/$udom/_au", $udom, $uname, "$umode:"); |
| |
} |
| |
} |
| &Reply($client, \$result, $userinput); |
&Reply($client, \$result, $userinput); |
| } |
} |
| |
|
|
Line 3177 sub get_profile_keys {
|
Line 3194 sub get_profile_keys {
|
| sub dump_profile_database { |
sub dump_profile_database { |
| my ($cmd, $tail, $client) = @_; |
my ($cmd, $tail, $client) = @_; |
| |
|
| |
my $res = LONCAPA::Lond::dump_profile_database($tail); |
| |
|
| |
if ($res =~ /^error:/) { |
| |
Failure($client, \$res, "$cmd:$tail"); |
| |
} else { |
| |
Reply($client, \$res, "$cmd:$tail"); |
| |
} |
| |
|
| |
return 1; |
| |
|
| |
#TODO remove |
| my $userinput = "$cmd:$tail"; |
my $userinput = "$cmd:$tail"; |
| |
|
| my ($udom,$uname,$namespace) = split(/:/,$tail); |
my ($udom,$uname,$namespace) = split(/:/,$tail); |
|
Line 3256 sub dump_with_regexp {
|
Line 3284 sub dump_with_regexp {
|
| my ($cmd, $tail, $client) = @_; |
my ($cmd, $tail, $client) = @_; |
| |
|
| my $res = LONCAPA::Lond::dump_with_regexp($tail, $clientversion); |
my $res = LONCAPA::Lond::dump_with_regexp($tail, $clientversion); |
| |
|
| if ($res =~ /^error:/) { |
if ($res =~ /^error:/) { |
| &Failure($client, \$res, "$cmd:$tail"); |
Failure($client, \$res, "$cmd:$tail"); |
| } else { |
} else { |
| &Reply($client, \$res, "$cmd:$tail"); |
Reply($client, \$res, "$cmd:$tail"); |
| } |
} |
| |
|
| return 1; |
return 1; |
|
Line 3839 sub put_course_id_hash_handler {
|
Line 3867 sub put_course_id_hash_handler {
|
| # a reply is written to $client. |
# a reply is written to $client. |
| sub dump_course_id_handler { |
sub dump_course_id_handler { |
| my ($cmd, $tail, $client) = @_; |
my ($cmd, $tail, $client) = @_; |
| |
|
| |
my $res = LONCAPA::Lond::dump_course_id_handler($tail); |
| |
if ($res =~ /^error:/) { |
| |
Failure($client, \$res, "$cmd:$tail"); |
| |
} else { |
| |
Reply($client, \$res, "$cmd:$tail"); |
| |
} |
| |
|
| |
return 1; |
| |
|
| |
#TODO remove |
| my $userinput = "$cmd:$tail"; |
my $userinput = "$cmd:$tail"; |
| |
|
| my ($udom,$since,$description,$instcodefilter,$ownerfilter,$coursefilter, |
my ($udom,$since,$description,$instcodefilter,$ownerfilter,$coursefilter, |
|
Line 4427 sub get_id_handler {
|
Line 4466 sub get_id_handler {
|
| } |
} |
| ®ister_handler("idget", \&get_id_handler, 0, 1, 0); |
®ister_handler("idget", \&get_id_handler, 0, 1, 0); |
| |
|
| # Deletes one or more ids in a domain's id database. |
|
| # |
|
| # Parameters: |
|
| # $cmd - Command keyword (iddel). |
|
| # $tail - Command tail. In this case a colon |
|
| # separated list containing: |
|
| # The domain for which we are deleting the id(s). |
|
| # &-separated list of id(s) to delete. |
|
| # $client - File open on client socket. |
|
| # Returns: |
|
| # 1 - Continue processing |
|
| # 0 - Exit server. |
|
| # |
|
| # |
|
| |
|
| sub del_id_handler { |
|
| my ($cmd,$tail,$client) = @_; |
|
| |
|
| my $userinput = "$cmd:$tail"; |
|
| |
|
| my ($udom,$what)=split(/:/,$tail); |
|
| chomp($what); |
|
| my $hashref = &tie_domain_hash($udom, "ids", &GDBM_WRCREAT(), |
|
| "D", $what); |
|
| if ($hashref) { |
|
| my @keys=split(/\&/,$what); |
|
| foreach my $key (@keys) { |
|
| delete($hashref->{$key}); |
|
| } |
|
| if (&untie_user_hash($hashref)) { |
|
| &Reply($client, "ok\n", $userinput); |
|
| } else { |
|
| &Failure($client, "error: ".($!+0)." untie(GDBM) Failed ". |
|
| "while attempting iddel\n", $userinput); |
|
| } |
|
| } else { |
|
| &Failure( $client, "error: ".($!+0)." tie(GDBM) Failed ". |
|
| "while attempting iddel\n", $userinput); |
|
| } |
|
| return 1; |
|
| } |
|
| ®ister_handler("iddel", \&del_id_handler, 0, 1, 0); |
|
| |
|
| # |
# |
| # Puts broadcast e-mail sent by Domain Coordinator in nohist_dcmail database |
# Puts broadcast e-mail sent by Domain Coordinator in nohist_dcmail database |
| # |
# |
|
Line 5018 sub validate_instcode_handler {
|
Line 5014 sub validate_instcode_handler {
|
| my ($dom,$instcode,$owner) = split(/:/, $tail); |
my ($dom,$instcode,$owner) = split(/:/, $tail); |
| $instcode = &unescape($instcode); |
$instcode = &unescape($instcode); |
| $owner = &unescape($owner); |
$owner = &unescape($owner); |
| my ($outcome,$description,$credits) = |
my ($outcome,$description) = |
| &localenroll::validate_instcode($dom,$instcode,$owner); |
&localenroll::validate_instcode($dom,$instcode,$owner); |
| my $result = &escape($outcome).'&'.&escape($description).'&'. |
my $result = &escape($outcome).'&'.&escape($description); |
| &escape($credits); |
|
| &Reply($client, \$result, $userinput); |
&Reply($client, \$result, $userinput); |
| |
|
| return 1; |
return 1; |
|
Line 5994 sub lcpasswdstrerror {
|
Line 5989 sub lcpasswdstrerror {
|
| } |
} |
| } |
} |
| |
|
| |
# |
| |
# Convert an error return code from lcuseradd to a string value: |
| |
# |
| |
sub lcuseraddstrerror { |
| |
my $ErrorCode = shift; |
| |
if(($ErrorCode < 0) || ($ErrorCode > $lastadderror)) { |
| |
return "lcuseradd - Unrecognized error code: ".$ErrorCode; |
| |
} else { |
| |
return $adderrors[$ErrorCode]; |
| |
} |
| |
} |
| |
|
| # grabs exception and records it to log before exiting |
# grabs exception and records it to log before exiting |
| sub catchexception { |
sub catchexception { |
| my ($error)=@_; |
my ($error)=@_; |
|
Line 6234 sub Debug {
|
Line 6241 sub Debug {
|
| # reply - Text to send to client. |
# reply - Text to send to client. |
| # request - Original request from client. |
# request - Original request from client. |
| # |
# |
| |
#NOTE $reply must be terminated by exactly *one* \n. If $reply is a reference |
| |
#this is done automatically ($$reply must not contain any \n in this case). |
| |
#If $reply is a string the caller has to ensure this. |
| sub Reply { |
sub Reply { |
| my ($fd, $reply, $request) = @_; |
my ($fd, $reply, $request) = @_; |
| if (ref($reply)) { |
if (ref($reply)) { |
|
Line 6481 sub make_new_child {
|
Line 6491 sub make_new_child {
|
| &Authen::Krb5::init_context(); |
&Authen::Krb5::init_context(); |
| unless (($dist eq 'fedora5') || ($dist eq 'fedora4') || |
unless (($dist eq 'fedora5') || ($dist eq 'fedora4') || |
| ($dist eq 'fedora6') || ($dist eq 'suse9.3') || |
($dist eq 'fedora6') || ($dist eq 'suse9.3') || |
| ($dist eq 'suse12.2') || ($dist eq 'suse12.3')) { |
($dist eq 'suse12.2')) { |
| &Authen::Krb5::init_ets(); |
&Authen::Krb5::init_ets(); |
| } |
} |
| |
|
|
Line 6526 sub make_new_child {
|
Line 6536 sub make_new_child {
|
| # |
# |
| # If the remote is attempting a local init... give that a try: |
# If the remote is attempting a local init... give that a try: |
| # |
# |
| |
logthis("remotereq: $remotereq"); |
| (my $i, my $inittype, $clientversion) = split(/:/, $remotereq); |
(my $i, my $inittype, $clientversion) = split(/:/, $remotereq); |
| # For LON-CAPA 2.9, the client session will have sent its LON-CAPA |
# For LON-CAPA 2.9, the client session will have sent its LON-CAPA |
| # version when initiating the connection. For LON-CAPA 2.8 and older, |
# version when initiating the connection. For LON-CAPA 2.8 and older, |
| # the version is retrieved from the global %loncaparevs in lonnet.pm. |
# the version is retrieved from the global %loncaparevs in lonnet.pm. |
| # $clientversion contains path to keyfile if $inittype eq 'local' |
# $clientversion contains path to keyfile if $inittype eq 'local' |
| # it's overridden below in this case |
# it's overridden below in this case |
| $clientversion ||= $Apache::lonnet::loncaparevs{$clientname}; |
$clientversion ||= $Apache::lonnet::loncaparevs{$clientname}; |
| |
|
| # If the connection type is ssl, but I didn't get my |
# If the connection type is ssl, but I didn't get my |
| # certificate files yet, then I'll drop back to |
# certificate files yet, then I'll drop back to |
|
Line 7283 sub make_passwd_file {
|
Line 7294 sub make_passwd_file {
|
| } |
} |
| } |
} |
| } elsif ($umode eq 'unix') { |
} elsif ($umode eq 'unix') { |
| &logthis(">>>Attempt to create unix account blocked -- unix auth not available for new users."); |
{ |
| $result="no_new_unix_accounts"; |
# |
| |
# Don't allow the creation of privileged accounts!!! that would |
| |
# be real bad!!! |
| |
# |
| |
my $uid = getpwnam($uname); |
| |
if((defined $uid) && ($uid == 0)) { |
| |
&logthis(">>>Attempt to create privileged account blocked"); |
| |
return "no_priv_account_error\n"; |
| |
} |
| |
|
| |
my $execpath ="$perlvar{'lonDaemons'}/"."lcuseradd"; |
| |
|
| |
my $lc_error_file = $execdir."/tmp/lcuseradd".$$.".status"; |
| |
{ |
| |
&Debug("Executing external: ".$execpath); |
| |
&Debug("user = ".$uname.", Password =". $npass); |
| |
my $se = IO::File->new("|$execpath > $perlvar{'lonDaemons'}/logs/lcuseradd.log"); |
| |
print $se "$uname\n"; |
| |
print $se "$udom\n"; |
| |
print $se "$npass\n"; |
| |
print $se "$npass\n"; |
| |
print $se "$lc_error_file\n"; # Status -> unique file. |
| |
} |
| |
if (-r $lc_error_file) { |
| |
&Debug("Opening error file: $lc_error_file"); |
| |
my $error = IO::File->new("< $lc_error_file"); |
| |
my $useraddok = <$error>; |
| |
$error->close; |
| |
unlink($lc_error_file); |
| |
|
| |
chomp $useraddok; |
| |
|
| |
if($useraddok > 0) { |
| |
my $error_text = &lcuseraddstrerror($useraddok); |
| |
&logthis("Failed lcuseradd: $error_text"); |
| |
$result = "lcuseradd_failed:$error_text"; |
| |
} else { |
| |
my $pf = IO::File->new(">$passfilename"); |
| |
if($pf) { |
| |
print $pf "unix:\n"; |
| |
} else { |
| |
$result = "pass_file_failed_error"; |
| |
} |
| |
} |
| |
} else { |
| |
&Debug("Could not locate lcuseradd error: $lc_error_file"); |
| |
$result="bug_lcuseradd_no_output_file"; |
| |
} |
| |
} |
| } elsif ($umode eq 'none') { |
} elsif ($umode eq 'none') { |
| { |
{ |
| my $pf = IO::File->new("> $passfilename"); |
my $pf = IO::File->new("> $passfilename"); |
|
Line 7349 sub get_usersession_config {
|
Line 7408 sub get_usersession_config {
|
| } |
} |
| |
|
| |
|
| |
|
| |
|
| sub distro_and_arch { |
sub distro_and_arch { |
| return $dist.':'.$arch; |
return $dist.':'.$arch; |
| } |
} |
|
Line 7677 Authen::Krb5
|
Line 7738 Authen::Krb5
|
| |
|
| =head1 COREQUISITES |
=head1 COREQUISITES |
| |
|
| |
none |
| |
|
| =head1 OSNAMES |
=head1 OSNAMES |
| |
|
| linux |
linux |
|
Line 7764 or the CA's certificate in the call to l
|
Line 7827 or the CA's certificate in the call to l
|
| <error> is the textual reason this failed. Usual reasons: |
<error> is the textual reason this failed. Usual reasons: |
| |
|
| =over 2 |
=over 2 |
| |
|
| =item Apache config file for loncapa incorrect: |
=item Apache config file for loncapa incorrect: |
| |
|
| one of the variables |
one of the variables |
| lonCertificateDirectory, lonnetCertificateAuthority, or lonnetCertificate |
lonCertificateDirectory, lonnetCertificateAuthority, or lonnetCertificate |
| undefined or incorrect |
undefined or incorrect |
|
Line 7885 Could not rewrite the
|
Line 7948 Could not rewrite the
|
| internal password file for a user |
internal password file for a user |
| |
|
| =item Result of password change for <user> : <result> |
=item Result of password change for <user> : <result> |
| |
|
| A unix password change for <user> was attempted |
A unix password change for <user> was attempted |
| and the pipe returned <result> |
and the pipe returned <result> |
| |
|
|
Line 7914 lond has been asked to exit by its clien
|
Line 7977 lond has been asked to exit by its clien
|
| client systemand <input> is the full exit command sent to the server. |
client systemand <input> is the full exit command sent to the server. |
| |
|
| =item Red CRITICAL: ABNORMAL EXIT. child <pid> for server <hostname> died through a crass with this error->[<message>]. |
=item Red CRITICAL: ABNORMAL EXIT. child <pid> for server <hostname> died through a crass with this error->[<message>]. |
| |
|
| A lond child terminated. NOte that this termination can also occur when the |
A lond child terminated. NOte that this termination can also occur when the |
| child receives the QUIT or DIE signals. <pid> is the process id of the child, |
child receives the QUIT or DIE signals. <pid> is the process id of the child, |
| <hostname> the host lond is working for, and <message> the reason the child died |
<hostname> the host lond is working for, and <message> the reason the child died |
|
Line 7998 file when sent it's USR1 signal. That p
|
Line 8061 file when sent it's USR1 signal. That p
|
| assumed to be hung in some un-fixable way. |
assumed to be hung in some un-fixable way. |
| |
|
| =item Finished checking children |
=item Finished checking children |
| |
|
| Master processs's USR1 processing is cojmplete. |
Master processs's USR1 processing is cojmplete. |
| |
|
| =item (Red) CRITICAL: ------- Starting ------ |
=item (Red) CRITICAL: ------- Starting ------ |
|
Line 8012 Started a new child process for <client>
|
Line 8075 Started a new child process for <client>
|
| connected to the child. This was as a result of a TCP/IP connection from a client. |
connected to the child. This was as a result of a TCP/IP connection from a client. |
| |
|
| =item Unable to determine who caller was, getpeername returned nothing |
=item Unable to determine who caller was, getpeername returned nothing |
| |
|
| In child process initialization. either getpeername returned undef or |
In child process initialization. either getpeername returned undef or |
| a zero sized object was returned. Processing continues, but in my opinion, |
a zero sized object was returned. Processing continues, but in my opinion, |
| this should be cause for the child to exit. |
this should be cause for the child to exit. |
|
Line 8023 In child process initialization. The pe
|
Line 8086 In child process initialization. The pe
|
| The client address is stored as "Unavailable" and processing continues. |
The client address is stored as "Unavailable" and processing continues. |
| |
|
| =item (Yellow) INFO: Connection <ip> <name> connection type = <type> |
=item (Yellow) INFO: Connection <ip> <name> connection type = <type> |
| |
|
| In child initialization. A good connectionw as received from <ip>. |
In child initialization. A good connectionw as received from <ip>. |
| |
|
| =over 2 |
=over 2 |
|
Line 8073 The client (<client> is the peer's name
|
Line 8136 The client (<client> is the peer's name
|
| negotiated an SSL connection with this child process. |
negotiated an SSL connection with this child process. |
| |
|
| =item (Green) Successful insecure authentication with <client> |
=item (Green) Successful insecure authentication with <client> |
| |
|
| |
|
| The client has successfully negotiated an insecure connection withthe child process. |
The client has successfully negotiated an insecure connection withthe child process. |
| |
|
![[BACK]](/icons/back.gif){kind=icon}
Return to lond CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [LON-CAPA] / loncom