--- loncom/auth/lonacc.pm	2010/03/03 21:33:10	1.131
+++ loncom/auth/lonacc.pm	2011/08/09 01:35:31	1.137
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Cookie Based Access Handler
 #
-# $Id: lonacc.pm,v 1.131 2010/03/03 21:33:10 droeschl Exp $
+# $Id: lonacc.pm,v 1.137 2011/08/09 01:35:31 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -156,7 +156,7 @@ sub get_posted_cgi {
 	for ($i=0;$i<=$#lines;$i++) {
 	    if ($lines[$i]=~/^--\Q$contentsep\E/) {
 		if ($name) {
-		    chomp($value);
+		    $value=~s/[\r\n]+$//;
                     if (ref($fields) eq 'ARRAY') {
                         next if (!grep(/^\Q$name\E$/,@{$fields}));
                     }
@@ -290,12 +290,17 @@ sub sso_login {
         }
     }
 
-    my $domain = $r->dir_config('lonDefDomain');
+    my $domain = $r->dir_config('lonSSOUserDomain');
+    if ($domain eq '') {
+        $domain = $r->dir_config('lonDefDomain');
+    }
     my $home=&Apache::lonnet::homeserver($user,$domain);
     if ($home !~ /(con_lost|no_host|no_such_host)/) {
 	&Apache::lonnet::logthis(" SSO authorized user $user ");
-	if ($r->dir_config("lonBalancer") eq 'yes') {
-	    # login but immeaditly go to switch server to find us a new 
+        my ($is_balancer,$otherserver) =
+            &Apache::lonnet::check_loadbalancing($user,$domain);
+	if ($is_balancer) {
+	    # login but immediately go to switch server to find us a new 
 	    # machine
 	    &Apache::lonauth::success($r,$user,$domain,$home,'noredirect');
             $env{'request.sso.login'} = 1;
@@ -303,7 +308,11 @@ sub sso_login {
                 $env{'request.sso.reloginserver'} =
                     $r->dir_config('lonSSOReloginServer');
             }
-	    $r->internal_redirect('/adm/switchserver');
+            my $redirecturl = '/adm/switchserver';
+            if ($otherserver ne '') {
+                $redirecturl .= '?otherserver='.$otherserver;
+            }
+	    $r->internal_redirect($redirecturl);
 	    $r->set_handlers('PerlHandler'=> undef);
 	} else {
 	    # need to login them in, so generate the need data that
@@ -380,11 +389,7 @@ sub handler {
 	return $result;
     }
 
-
-    if ($r->dir_config("lonBalancer") eq 'yes') {
-	$r->set_handlers('PerlResponseHandler'=>
-			 [\&Apache::switchserver::handler]);
-    }
+    my ($is_balancer,$otherserver);
     
     if ($handle eq '') {
 	$r->log_reason("Cookie $handle not valid", $r->filename); 
@@ -431,6 +436,19 @@ sub handler {
 
 	&Apache::lonacc::get_posted_cgi($r);
 
+# ------------------------------------------------------ Check if load balancer 
+
+        ($is_balancer,$otherserver) =
+            &Apache::lonnet::check_loadbalancing($env{'user.name'},
+                                                 $env{'user.domain'});
+        if ($is_balancer) {
+            $r->set_handlers('PerlResponseHandler'=>
+                             [\&Apache::switchserver::handler]);
+            if ($otherserver ne '') {
+                $env{'form.otherserver'} = $otherserver;
+            }
+        }
+
 # ---------------------------------------------------------------- Check access
 	my $now = time;
 	if ($requrl !~ m{^/(?:adm|public|prtspool)/}
@@ -452,8 +470,16 @@ sub handler {
                 if ($requrl =~ m{^/res/}) {
                     $access = &Apache::lonnet::allowed('bro',$requrl);
                     if ($access ne 'F') {
-                        $env{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
-                        return HTTP_NOT_ACCEPTABLE;
+                        if ($requrl eq '/res/lib/templates/simpleproblem.problem/smpedit') {
+                            $access = &Apache::lonnet::allowed('bre','/res/lib/templates/simpleproblem.problem');
+                            if ($access ne 'F') {
+                                $env{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
+                                return HTTP_NOT_ACCEPTABLE;
+                            }
+                        } else {
+                            $env{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
+                            return HTTP_NOT_ACCEPTABLE;
+                        }
                     }
                 } else {
 		    $env{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
@@ -493,11 +519,13 @@ sub handler {
 	    $requrl=~/\.(\w+)$/;
             my $query=$r->args;
 	    if ((&Apache::loncommon::fileembstyle($1) eq 'ssi') ||
-		($requrl=~/^\/adm\/.*\/(aboutme|navmaps|smppg|bulletinboard)(\?|$ )/x) ||
+		($requrl=~/^\/adm\/.*\/(aboutme|smppg|bulletinboard)(\?|$ )/x) ||
 		($requrl=~/^\/adm\/wrapper\//) ||
 		($requrl=~m|^/adm/coursedocs/showdoc/|) ||
 		($requrl=~m|\.problem/smpedit$|) ||
-		($requrl=~/^\/public\/.*\/syllabus$/)) {
+		($requrl=~/^\/public\/.*\/syllabus$/) ||
+                ($requrl=~/^\/adm\/(viewclasslist|navmaps)$/) ||
+                ($requrl=~/^\/adm\/.*\/aboutme\/portfolio(\?|$)/)) {
 # ------------------------------------- This is serious stuff, get symb and log
 		my $symb;
 		if ($query) {
@@ -512,7 +540,9 @@ sub handler {
 						  'last_known' =>[$murl,$mid]);
 		    } elsif ((&Apache::lonnet::symbverify($symb,$requrl)) ||
 			     (($requrl=~m|(.*)/smpedit$|) &&
-			      &Apache::lonnet::symbverify($symb,$1))) {
+			      &Apache::lonnet::symbverify($symb,$1)) ||
+                             (($requrl=~m|(.*/aboutme)/portfolio$|) &&
+                              &Apache::lonnet::symbverify($symb,$1))) {
 			my ($map,$mid,$murl)=&Apache::lonnet::decode_symb($symb);
 			&Apache::lonnet::symblist($map,$murl => [$murl,$mid],
 						  'last_known' =>[$murl,$mid]);
@@ -524,6 +554,9 @@ sub handler {
 			return HTTP_NOT_ACCEPTABLE; 
 		    }
 		} else {
+                    if ($requrl=~m{^(/adm/.*/aboutme)/portfolio$}) {
+                        $requrl = $1;
+                    }
 		    $symb=&Apache::lonnet::symbread($requrl);
 		    if (&Apache::lonnet::is_on_map($requrl) && $symb &&
 			!&Apache::lonnet::symbverify($symb,$requrl)) {
@@ -559,6 +592,17 @@ sub handler {
             }
 	}
 	return OK;
+    } else {
+        my $defdom=$r->dir_config('lonDefDomain');
+        ($is_balancer,$otherserver) =
+            &Apache::lonnet::check_loadbalancing(undef,$defdom);
+        if ($is_balancer) {
+            $r->set_handlers('PerlResponseHandler'=>
+                             [\&Apache::switchserver::handler]);
+            if ($otherserver ne '') {
+                $env{'form.otherserver'} = $otherserver;
+            }
+        }
     }
 # -------------------------------------------- See if this is a public resource
     if ($requrl=~m|^/+adm/+help/+|) {