loncom/auth/lonauth.pm - diff

Return to lonauth.pm CVS log

Up to [LON-CAPA] / loncom / auth

Diff for /loncom/auth/lonauth.pm between versions 1.121.2.16 and 1.137

-version 1.121.2.16, 2017/06/06 22:34:37
+version 1.137, 2015/01/26 22:11:52
  Line 1
  # The LearningOnline Network
  # User Authentication Module
  #
  # $Id$
  #
  # Copyright Michigan State University Board of Trustees
  #
  # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
  #
  # LON-CAPA is free software; you can redistribute it and/or modify
  # it under the terms of the GNU General Public License as published by
  # the Free Software Foundation; either version 2 of the License, or
  # (at your option) any later version.
  #
  # LON-CAPA is distributed in the hope that it will be useful,
  # but WITHOUT ANY WARRANTY; without even the implied warranty of
  # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  # GNU General Public License for more details.
  #
  # You should have received a copy of the GNU General Public License
  # along with LON-CAPA; if not, write to the Free Software
  # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  #
  # /home/httpd/html/adm/gpl.txt
  #
  # http://www.lon-capa.org/
  #
  package Apache::lonauth;
  use strict;
  use LONCAPA;
  use Apache::Constants qw(:common);
  use CGI qw(:standard);
  use DynaLoader; # for Crypt::DES version
  use Crypt::DES;
  use Apache::loncommon();
  use Apache::lonnet;
  use Apache::lonmenu();
  use Apache::createaccount;
  use Fcntl qw(:flock);
  use Apache::lonlocal;
  use Apache::File();
  use HTML::Entities;
  # ------------------------------------------------------------ Successful login
  sub success {
      my ($r, $username, $domain, $authhost, $lowerurl, $extra_env,
  	$form) = @_;
  # ------------------------------------------------------------ Get cookie ready
      my $cookie =
  	&Apache::loncommon::init_user_environment($r, $username, $domain,
  						  $authhost, $form,
  						  {'extra_env' => $extra_env,});
      my $public=($username eq 'public' && $domain eq 'public');
      if ($public or $lowerurl eq 'noredirect') { return $cookie; }
  # -------------------------------------------------------------------- Log this
      &Apache::lonnet::log($domain,$username,$authhost,
                           "Login $ENV{'REMOTE_ADDR'}");
  # ------------------------------------------------- Check for critical messages
      my @what=&Apache::lonnet::dump('critical',$domain,$username);
      if ($what[0]) {
  	if (($what[0] ne 'con_lost') && ($what[0]!~/^error\:/)) {
  	    $lowerurl='/adm/email?critical=display';
          }
      }
  # ------------------------------------------------------------ Get cookie ready
-     $cookie="lonID=$cookie; path=/; HttpOnly";
+     $cookie="lonID=$cookie; path=/";
  # -------------------------------------------------------- Menu script and info
      my $destination = $lowerurl;
      if (defined($form->{role})) {
          my $envkey = 'user.role.'.$form->{role};
          my $now=time;
          my $then=$env{'user.login.time'};
          my $refresh=$env{'user.refresh.time'};
          my $update=$env{'user.update.time'};
          if (!$update) {
              $update = $then;
          }
          if (exists($env{$envkey})) {
              my ($role,$where,$trolecode,$tstart,$tend,$tremark,$tstatus);
              &Apache::lonnet::role_status($envkey,$update,$refresh,$now,\$role,\$where,
                                           \$trolecode,\$tstatus,\$tstart,\$tend);
              if ($tstatus eq 'is') {
                  $destination  .= ($destination =~ /\?/) ? '&' : '?';
                  my $newrole = &HTML::Entities::encode($form->{role},'"<>&');
                  $destination .= 'selectrole=1&'.$newrole.'=1';
              }
          }
      }
      if (defined($form->{symb})) {
          my $destsymb = $form->{symb};
          $destination  .= ($destination =~ /\?/) ? '&' : '?';
          if ($destsymb =~ /___/) {
              # FIXME Need to deal with encrypted symbs and urls as needed.
              my ($map,$resid,$desturl)=split(/___/,$destsymb);
              $desturl = &Apache::lonnet::clutter($desturl);
              $desturl = &HTML::Entities::encode($desturl,'"<>&');
              $destsymb = &HTML::Entities::encode($destsymb,'"<>&');
              $destination .= 'destinationurl='.$desturl.
                              '&destsymb='.$destsymb;
          } else {
              $destsymb = &HTML::Entities::encode($destsymb,'"<>&');
              $destination .= 'destinationurl='.$destsymb;
          }
      }
      if ($destination =~ m{^/adm/roles}) {
          $destination  .= ($destination =~ /\?/) ? '&' : '?';
          $destination .= 'source=login';
      }
-     my $windowinfo=&Apache::lonmenu::open($env{'browser.os'});
+     my $windowinfo = Apache::lonhtmlcommon::scripttag('self.name="loncapaclient";');
-     my $startupremote=&Apache::lonmenu::startupremote($destination);
+     my $header = '<meta HTTP-EQUIV="Refresh" CONTENT="0; url='.$destination.'" />';
-     my $remoteinfo=&Apache::lonmenu::load_remote_msg($lowerurl);
+     my $brcrum = [{'href' => '',
-     my $setflags=&Apache::lonmenu::setflags();
+                    'text' => 'Successful Login'},];
-     my $maincall=&Apache::lonmenu::maincall();
+     my $start_page=&Apache::loncommon::start_page('Successful Login',
-     my $brcrum = [{'href' => '',
+                                                   $header,
-                    'text' => 'Successful Login'},];
+                                                   {'bread_crumbs' => $brcrum,});
-     my $start_page=&Apache::loncommon::start_page('Successful Login',
+     my $end_page  =&Apache::loncommon::end_page();
-                                                   $startupremote,
-                                                   {'no_inline_link' => 1,
+ 	my $continuelink='<a href="'.$destination.'">'.&mt('Continue').'</a>';
-                                                    'bread_crumbs' => $brcrum,});
+ # ------------------------------------------------- Output for successful login
-     my $end_page  =&Apache::loncommon::end_page();
+     &Apache::loncommon::content_type($r,'text/html');
-     my $continuelink;
+     $r->header_out('Set-cookie' => $cookie);
-     if ($env{'environment.remote'} eq 'off') {
+     $r->send_http_header;
- 	$continuelink='<a href="'.$destination.'">'.&mt('Continue').'</a>';
-     }
+     my %lt=&Apache::lonlocal::texthash(
- # ------------------------------------------------- Output for successful login
+ 				       'wel' => 'Welcome',
+ 				       'pro' => 'Login problems?',
-     &Apache::loncommon::content_type($r,'text/html');
+ 				       );
-     $r->header_out('Set-cookie' => $cookie);
+     my $loginhelp = &loginhelpdisplay($domain);
-     $r->send_http_header;
+     if ($loginhelp) {
+         $loginhelp = '<p><a href="'.$loginhelp.'">'.$lt{'pro'}.'</a></p>';
-     my %lt=&Apache::lonlocal::texthash(
+     }
- 				       'wel' => 'Welcome',
- 				       'pro' => 'Login problems?',
+     my $welcome = &mt('Welcome to the Learning[_1]Online[_2] Network with CAPA. Please wait while your session is being set up.','<i>','</i>');
- 				       );
+     $r->print(<<ENDSUCCESS);
-     my $loginhelp = &loginhelpdisplay($domain);
+ $start_page
-     if ($loginhelp) {
+ $windowinfo
-         $loginhelp = '<p><a href="'.$loginhelp.'">'.$lt{'pro'}.'</a></p>';
+ <h1>$lt{'wel'}</h1>
-     }
+ $welcome
+ $loginhelp
-     my $welcome = &mt('Welcome to the Learning[_1]Online[_2] Network with CAPA. Please wait while your session is being set up.','<i>','</i>');
+ $continuelink
-     $r->print(<<ENDSUCCESS);
+ $end_page
- $start_page
+ ENDSUCCESS
- $setflags
+     return;
- $windowinfo
+ }
- <h1>$lt{'wel'}</h1>
- $welcome
+ # --------------------------------------------------------------- Failed login!
- $loginhelp
- $remoteinfo
+ sub failed {
- $maincall
+     my ($r,$message,$form) = @_;
- $continuelink
+     (undef,undef,undef,my $clientmathml,my $clientunicode) =
- $end_page
+         &Apache::loncommon::decode_user_agent();
- ENDSUCCESS
+     my $args = {};
-     return;
+     if ($clientunicode && !$clientmathml) {
- }
+         $args = {'browser.unicode' => 1};
+     }
- # --------------------------------------------------------------- Failed login!
+     my $start_page = &Apache::loncommon::start_page('Unsuccessful Login',undef,$args);
- sub failed {
+     my $uname = &Apache::loncommon::cleanup_html($form->{'uname'});
-     my ($r,$message,$form) = @_;
+     my $udom = &Apache::loncommon::cleanup_html($form->{'udom'});
-     (undef,undef,undef,my $clientmathml,my $clientunicode) =
+     if (&Apache::lonnet::domain($udom,'description') eq '') {
-         &Apache::loncommon::decode_user_agent();
+         undef($udom);
-     my $args = {};
+     }
-     if ($clientunicode && !$clientmathml) {
+     my $retry = '/adm/login';
-         $args = {'browser.unicode' => 1};
+     if ($uname eq $form->{'uname'}) {
-     }
+         $retry .= '?username='.$uname;
+     }
-     my $start_page = &Apache::loncommon::start_page('Unsuccessful Login',undef,$args);
+     if ($udom) {
-     my $uname = &Apache::loncommon::cleanup_html($form->{'uname'});
+         $retry .= (($retry=~/\?/)?'&amp;':'?').'domain='.$udom;
-     my $udom = &Apache::loncommon::cleanup_html($form->{'udom'});
+     }
-     if (&Apache::lonnet::domain($udom,'description') eq '') {
+     if (exists($form->{role})) {
-         undef($udom);
+         my $role = &Apache::loncommon::cleanup_html($form->{role});
-     }
+         if ($role ne '') {
-     my $retry = '/adm/login';
+             $retry .= (($retry=~/\?/)?'&amp;':'?').'role='.$role;
-     if ($uname eq $form->{'uname'}) {
+         }
-         $retry .= '?username='.$uname;
+     }
-     }
+     if (exists($form->{symb})) {
-     if ($udom) {
+         my $symb = &Apache::loncommon::cleanup_html($form->{symb});
-         $retry .= (($retry=~/\?/)?'&amp;':'?').'domain='.$udom;
+         if ($symb ne '') {
-     }
+             $retry .= (($retry=~/\?/)?'&amp;':'?').'symb='.$symb;
-     if (exists($form->{role})) {
+         }
-         my $role = &Apache::loncommon::cleanup_html($form->{role});
+     }
-         if ($role ne '') {
+     my $end_page = &Apache::loncommon::end_page();
-             $retry .= (($retry=~/\?/)?'&amp;':'?').'role='.$role;
+     &Apache::loncommon::content_type($r,'text/html');
-         }
+     $r->send_http_header;
-     }
+     my @actions =
-     if (exists($form->{symb})) {
+          (&mt('Please [_1]log in again[_2].','<a href="'.$retry.'">','</a>'));
-         my $symb = &Apache::loncommon::cleanup_html($form->{symb});
+     my $loginhelp = &loginhelpdisplay($udom);
-         if ($symb ne '') {
+     if ($loginhelp) {
-             $retry .= (($retry=~/\?/)?'&amp;':'?').'symb='.$symb;
+         push(@actions, '<a href="'.$loginhelp.'">'.&mt('Login problems?').'</a>');
-         }
+     }
-     }
+     #FIXME: link to helpdesk might be added here
-     my $end_page = &Apache::loncommon::end_page();
-     &Apache::loncommon::content_type($r,'text/html');
+     $r->print(
-     $r->send_http_header;
+        $start_page
-     my @actions =
+       .'<h2>'.&mt('Sorry ...').'</h2>'
-          (&mt('Please [_1]log in again[_2].','<a href="'.$retry.'">','</a>'));
+       .&Apache::lonhtmlcommon::confirm_success(&mt($message),1).'<br /><br />'
-     my $loginhelp = &loginhelpdisplay($udom);
+       .&Apache::lonhtmlcommon::actionbox(\@actions)
-     if ($loginhelp) {
+       .$end_page
-         push(@actions, '<a href="'.$loginhelp.'">'.&mt('Login problems?').'</a>');
+     );
-     }
+  }
-     #FIXME: link to helpdesk might be added here
+ # ------------------------------------------------------------------ Rerouting!
-     $r->print(
-        $start_page
+ sub reroute {
-       .'<h2>'.&mt('Sorry ...').'</h2>'
+     my ($r) = @_;
-       .&Apache::lonhtmlcommon::confirm_success(&mt($message),1).'<br /><br />'
+     &Apache::loncommon::content_type($r,'text/html');
-       .&Apache::lonhtmlcommon::actionbox(\@actions)
+     $r->send_http_header;
-       .$end_page
+     my $msg='<b>'.&mt('Sorry ...').'</b><br />'
-     );
+            .&mt('Please [_1]log in again[_2].');
-  }
+     &Apache::loncommon::simple_error_page($r,'Rerouting',$msg,{'no_auto_mt_msg' => 1});
+ }
- # ------------------------------------------------------------------ Rerouting!
+ # ---------------------------------------------------------------- Main handler
- sub reroute {
-     my ($r) = @_;
+ sub handler {
-     &Apache::loncommon::content_type($r,'text/html');
+     my $r = shift;
-     $r->send_http_header;
+     my $londocroot = $r->dir_config('lonDocRoot');
-     my $msg='<b>'.&mt('Sorry ...').'</b><br />'
+     my $form;
-            .&mt('Please [_1]log in again[_2].');
+ # Are we re-routing?
-     &Apache::loncommon::simple_error_page($r,'Rerouting',$msg,{'no_auto_mt_msg' => 1});
+     if (-e "$londocroot/lon-status/reroute.txt") {
- }
+ 	&reroute($r);
+ 	return OK;
- # ---------------------------------------------------------------- Main handler
+     }
- sub handler {
+     &Apache::lonlocal::get_language_handle($r);
-     my $r = shift;
-     my $londocroot = $r->dir_config('lonDocRoot');
+ # -------------------------------- Prevent users from attempting to login twice
- # Are we re-routing?
+     my $handle = &Apache::lonnet::check_for_valid_session($r);
-     if (-e "$londocroot/lon-status/reroute.txt") {
+     if ($handle ne '') {
- 	&reroute($r);
+         my $lonidsdir=$r->dir_config('lonIDsDir');
- 	return OK;
+         if ($handle=~/^publicuser\_/) {
-     }
+ # For "public user" - remove it, we apparently really want to login
+             unlink($r->dir_config('lonIDsDir')."/$handle.id");
-     &Apache::lonlocal::get_language_handle($r);
+         } else {
+ # Indeed, a valid token is found
- # -------------------------------- Prevent users from attempting to login twice
+             &Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle);
-     my $handle = &Apache::lonnet::check_for_valid_session($r);
+ 	    &Apache::loncommon::content_type($r,'text/html');
-     if ($handle ne '') {
+ 	    $r->send_http_header;
-         my $lonidsdir=$r->dir_config('lonIDsDir');
+ 	    my $start_page =
-         if ($handle=~/^publicuser\_/) {
+ 	        &Apache::loncommon::start_page('Already logged in');
- # For "public user" - remove it, we apparently really want to login
+ 	    my $end_page =
-             unlink($r->dir_config('lonIDsDir')."/$handle.id");
+ 	        &Apache::loncommon::end_page();
-         } else {
+             my $dest = '/adm/roles';
- # Indeed, a valid token is found
+             if ($env{'form.firsturl'} ne '') {
-             &Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle);
+                 $dest = $env{'form.firsturl'};
- 	    &Apache::loncommon::content_type($r,'text/html');
+             }
- 	    $r->send_http_header;
+             $r->print(
- 	    my $start_page =
+                $start_page
- 	        &Apache::loncommon::start_page('Already logged in');
+               .'<p class="LC_warning">'.&mt('You are already logged in!').'</p>'
- 	    my $end_page =
+               .'<p>'.&mt('Please either [_1]continue the current session[_2] or [_3]log out[_4].'
- 	        &Apache::loncommon::end_page();
+                     ,'<a href="'.$dest.'">','</a>','<a href="/adm/logout">','</a>')
-             my $dest = '/adm/roles';
+               .'</p>'
-             if ($env{'form.firsturl'} ne '') {
+               .$end_page
-                 $dest = $env{'form.firsturl'};
+             );
-             }
+             return OK;
-             $r->print(
+         }
-                $start_page
+     }
-               .'<p class="LC_warning">'.&mt('You are already logged in!').'</p>'
-               .'<p>'.&mt('Please either [_1]continue the current session[_2] or [_3]log out[_4].'
+ # ---------------------------------------------------- No valid token, continue
-                     ,'<a href="'.$dest.'">','</a>','<a href="/adm/logout">','</a>')
-               .'</p>'
-               .$end_page
+     my $buffer;
-             );
+     if ($r->header_in('Content-length') > 0) {
-             return OK;
+ 	$r->read($buffer,$r->header_in('Content-length'),0);
-         }
+     }
-     }
+     my %form;
+     foreach my $pair (split(/&/,$buffer)) {
- # ---------------------------------------------------- No valid token, continue
+        my ($name,$value) = split(/=/,$pair);
+        $value =~ tr/+/ /;
+        $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
-     my $buffer;
+        $form{$name}=$value;
-     if ($r->header_in('Content-length') > 0) {
+     }
- 	$r->read($buffer,$r->header_in('Content-length'),0);
-     }
+     if ((!$form{'uname'}) || (!$form{'upass0'}) || (!$form{'udom'})) {
-     my %form;
+ 	&failed($r,'Username, password and domain need to be specified.',
-     foreach my $pair (split(/&/,$buffer)) {
+ 		\%form);
-        my ($name,$value) = split(/=/,$pair);
+         return OK;
-        $value =~ tr/+/ /;
+     }
-        $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
-        $form{$name}=$value;
+ # split user logging in and "su"-user
-     }
+     ($form{'uname'},$form{'suname'})=split(/\:/,$form{'uname'});
-     if ((!$form{'uname'}) || (!$form{'upass0'}) || (!$form{'udom'})) {
+     $form{'uname'} = &LONCAPA::clean_username($form{'uname'});
- 	&failed($r,'Username, password and domain need to be specified.',
+     $form{'suname'}= &LONCAPA::clean_username($form{'suname'});
- 		\%form);
+     $form{'udom'}  = &LONCAPA::clean_domain(  $form{'udom'});
-         return OK;
-     }
+     my $role   = $r->dir_config('lonRole');
+     my $domain = $r->dir_config('lonDefDomain');
- # split user logging in and "su"-user
+     my $prodir = $r->dir_config('lonUsersDir');
+     my $contact_name = &mt('LON-CAPA helpdesk');
-     ($form{'uname'},$form{'suname'})=split(/\:/,$form{'uname'});
-     $form{'uname'} = &LONCAPA::clean_username($form{'uname'});
+ # ---------------------------------------- Get the information from login token
-     $form{'suname'}= &LONCAPA::clean_username($form{'suname'});
-     $form{'udom'}  = &LONCAPA::clean_domain(  $form{'udom'});
+     my $tmpinfo=Apache::lonnet::reply('tmpget:'.$form{'logtoken'},
+                                       $form{'serverid'});
-     my $role   = $r->dir_config('lonRole');
-     my $domain = $r->dir_config('lonDefDomain');
+     my %sessiondata;
-     my $prodir = $r->dir_config('lonUsersDir');
+     if ($form{'iptoken'}) {
-     my $contact_name = &mt('LON-CAPA helpdesk');
+         %sessiondata = &Apache::lonnet::tmpget($form{'iptoken'});
+         my $delete = &Apache::lonnet::tmpdel($form{'iptoken'});
- # ---------------------------------------- Get the information from login token
+     }
-     my $tmpinfo=Apache::lonnet::reply('tmpget:'.$form{'logtoken'},
+     if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost') ||
-                                       $form{'serverid'});
+         ($tmpinfo eq 'no_such_host')) {
+ 	&failed($r,'Information needed to verify your login information is missing, inaccessible or expired.',\%form);
-     if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost') ||
+         return OK;
-         ($tmpinfo eq 'no_such_host')) {
+     } else {
- 	&failed($r,'Information needed to verify your login information is missing, inaccessible or expired.',\%form);
+ 	my $reply = &Apache::lonnet::reply('tmpdel:'.$form{'logtoken'},
-         return OK;
+ 					   $form{'serverid'});
-     } else {
+         if ( $reply ne 'ok' ) {
- 	my $reply = &Apache::lonnet::reply('tmpdel:'.$form{'logtoken'},
+             &failed($r,'Session could not be opened.',\%form);
- 					   $form{'serverid'});
+ 	    &Apache::lonnet::logthis("ERROR got a reply of $reply when trying to contact ". $form{'serverid'}." to get login token");
-         if ( $reply ne 'ok' ) {
+ 	    return OK;
-             &failed($r,'Session could not be opened.',\%form);
+ 	}
- 	    &Apache::lonnet::logthis("ERROR got a reply of $reply when trying to contact ". $form{'serverid'}." to get login token");
+     }
- 	    return OK;
- 	}
+     if (!&Apache::lonnet::domain($form{'udom'})) {
-     }
+         &failed($r,'The domain you provided is not a valid LON-CAPA domain.',\%form);
+         return OK;
-     if (!&Apache::lonnet::domain($form{'udom'})) {
+     }
-         &failed($r,'The domain you provided is not a valid LON-CAPA domain.',\%form);
-         return OK;
+     my ($key,$firsturl,$rolestr,$symbstr)=split(/&/,$tmpinfo);
-     }
+     if ($rolestr) {
+         $rolestr = &unescape($rolestr);
-     my ($key,$firsturl,$rolestr,$symbstr,$iptokenstr)=split(/&/,$tmpinfo);
+     }
-     if ($rolestr) {
+     if ($symbstr) {
-         $rolestr = &unescape($rolestr);
+         $symbstr= &unescape($symbstr);
      }
-     if ($symbstr) {
+     if ($rolestr =~ /^role=/) {
-         $symbstr= &unescape($symbstr);
+         (undef,$form{'role'}) = split('=',$rolestr);
      }
-     if ($iptokenstr) {
+     if ($symbstr =~ /^symb=/) {
-         $iptokenstr = &unescape($iptokenstr);
+         (undef,$form{'symb'}) = split('=',$symbstr);
      }
-     if ($rolestr =~ /^role=/) {
-         (undef,$form{'role'}) = split('=',$rolestr);
+     my $upass = $ENV{HTTPS} ? join("", @form{qw(upass0 upass1 upass2)})
-     }
+         : decrypt($key, @form{qw(upass0 upass1 upass2)});
-     if ($symbstr =~ /^symb=/) {
-         (undef,$form{'symb'}) = split('=',$symbstr);
+ # ---------------------------------------------------------------- Authenticate
-     }
-     if ($iptokenstr =~ /^iptoken=/) {
+     my %domconfig = &Apache::lonnet::get_dom('configuration',['usercreation'],$form{'udom'});
-         (undef,$form{'iptoken'}) = split('=',$iptokenstr);
+     my ($cancreate,$statustocreate) =
-     }
+         &Apache::createaccount::get_creation_controls($form{'udom'},$domconfig{'usercreation'});
+     my $defaultauth;
-     my $upass = &Apache::loncommon::des_decrypt($key,$form{'upass0'});
+     if (ref($cancreate) eq 'ARRAY') {
+         if (grep(/^login$/,@{$cancreate})) {
- # ---------------------------------------------------------------- Authenticate
+             $defaultauth = 1;
+         }
-     my %domconfig = &Apache::lonnet::get_dom('configuration',['usercreation'],$form{'udom'});
+     }
-     my ($cancreate,$statustocreate) =
+     my $clientcancheckhost = 1;
-         &Apache::createaccount::get_creation_controls($form{'udom'},$domconfig{'usercreation'});
+     my $authhost=Apache::lonnet::authenticate($form{'uname'},$upass,
-     my $defaultauth;
+                                               $form{'udom'},$defaultauth,
-     if (ref($cancreate) eq 'ARRAY') {
+                                               $clientcancheckhost);
-         if (grep(/^login$/,@{$cancreate})) {
-             $defaultauth = 1;
+ # --------------------------------------------------------------------- Failed?
-         }
-     }
+     if ($authhost eq 'no_host') {
-     my $clientcancheckhost = 1;
+ 	&failed($r,'Username and/or password could not be authenticated.',
-     my $authhost=Apache::lonnet::authenticate($form{'uname'},$upass,
+ 		\%form);
-                                               $form{'udom'},$defaultauth,
+         return OK;
-                                               $clientcancheckhost);
+     } elsif ($authhost eq 'no_account_on_host') {
+         if ($defaultauth) {
- # --------------------------------------------------------------------- Failed?
+             my $domdesc = &Apache::lonnet::domain($form{'udom'},'description');
+             unless (&check_can_host($r,\%form,'no_account_on_host',$domdesc)) {
-     if ($authhost eq 'no_host') {
+                 return OK;
- 	&failed($r,'Username and/or password could not be authenticated.',
+             }
- 		\%form);
+             my $start_page =
-         return OK;
+                 &Apache::loncommon::start_page('Create a user account in LON-CAPA');
-     } elsif ($authhost eq 'no_account_on_host') {
+             my $lonhost = $r->dir_config('lonHostID');
-         if ($defaultauth) {
+             my $origmail = $Apache::lonnet::perlvar{'lonSupportEMail'};
-             my $domdesc = &Apache::lonnet::domain($form{'udom'},'description');
+             my $contacts =
-             unless (&check_can_host($r,\%form,'no_account_on_host',$domdesc)) {
+                 &Apache::loncommon::build_recipient_list(undef,'helpdeskmail',
-                 return OK;
+                                                         $form{'udom'},$origmail);
-             }
+             my ($contact_email) = split(',',$contacts);
-             my $start_page =
+             my $output =
-                 &Apache::loncommon::start_page('Create a user account in LON-CAPA',
+                 &Apache::createaccount::username_check($form{'uname'},$form{'udom'},
-                                                '',{'no_inline_link'   => 1,});
+                                                        $domdesc,'',$lonhost,
-             my $lonhost = $r->dir_config('lonHostID');
+                                                        $contact_email,$contact_name,
-             my $origmail = $Apache::lonnet::perlvar{'lonSupportEMail'};
+                                                        undef,$statustocreate);
-             my $contacts =
+             &Apache::loncommon::content_type($r,'text/html');
-                 &Apache::loncommon::build_recipient_list(undef,'helpdeskmail',
+             $r->send_http_header;
-                                                         $form{'udom'},$origmail);
+             &Apache::createaccount::print_header($r,$start_page);
-             my ($contact_email) = split(',',$contacts);
+             $r->print('<h3>'.&mt('Account creation').'</h3>'.
-             my $output =
+                       &mt('Although your username and password were authenticated, you do not currently have a LON-CAPA account at this institution.').'<br />'.
-                 &Apache::createaccount::username_check($form{'uname'},$form{'udom'},
+                       $output.&Apache::loncommon::end_page());
-                                                        $domdesc,'',$lonhost,
+             return OK;
-                                                        $contact_email,$contact_name,
+         } else {
-                                                        undef,$statustocreate);
+             &failed($r,'Although your username and password were authenticated, you do not currently have a LON-CAPA account in this domain, and you are not permitted to create one.',\%form);
-             &Apache::loncommon::content_type($r,'text/html');
+             return OK;
-             $r->send_http_header;
+         }
-             &Apache::createaccount::print_header($r,$start_page);
+     }
-             $r->print('<h3>'.&mt('Account creation').'</h3>'.
-                       &mt('Although your username and password were authenticated, you do not currently have a LON-CAPA account at this institution.').'<br />'.
+     if (($firsturl eq '') ||
-                       $output.&Apache::loncommon::end_page());
+ 	($firsturl=~/^\/adm\/(logout|remote)/)) {
-             return OK;
+ 	$firsturl='/adm/roles';
-         } else {
+     }
-             &failed($r,'Although your username and password were authenticated, you do not currently have a LON-CAPA account in this domain, and you are not permitted to create one.',\%form);
-             return OK;
+     my $hosthere;
-         }
+     if ($form{'iptoken'}) {
-     }
+         if (($sessiondata{'domain'} eq $form{'udom'}) &&
+             ($sessiondata{'username'} eq $form{'uname'})) {
-     if (($firsturl eq '') ||
+             $hosthere = 1;
- 	($firsturl=~/^\/adm\/(logout|remote)/)) {
+         }
- 	$firsturl='/adm/roles';
+     }
-     }
+ # --------------------------------- Are we attempting to login as somebody else?
-     my $hosthere;
+     if ($form{'suname'}) {
-     if ($form{'iptoken'}) {
+ # ------------ see if the original user has enough privileges to pull this stunt
-         my %sessiondata = &Apache::lonnet::tmpget($form{'iptoken'});
+ 	if (&Apache::lonnet::privileged($form{'uname'},$form{'udom'})) {
-         my $delete = &Apache::lonnet::tmpdel($form{'iptoken'});
+ # ---------------------------------------------------- see if the su-user exists
-         if (($sessiondata{'domain'} eq $form{'udom'}) &&
+ 	    unless (&Apache::lonnet::homeserver($form{'suname'},$form{'udom'})
-             ($sessiondata{'username'} eq $form{'uname'})) {
+ 		eq 'no_host') {
-             $hosthere = 1;
+ 		&Apache::lonnet::logthis(&Apache::lonnet::homeserver($form{'suname'},$form{'udom'}));
-         }
+ # ------------------------------ see if the su-user is not too highly privileged
-     }
+ 		unless (&Apache::lonnet::privileged($form{'suname'},$form{'udom'})) {
+ # -------------------------------------------------------- actually switch users
- # --------------------------------- Are we attempting to login as somebody else?
+ 		    &Apache::lonnet::logperm('User '.$form{'uname'}.' at '.$form{'udom'}.
-     if ($form{'suname'}) {
+ 			' logging in as '.$form{'suname'});
- # ------------ see if the original user has enough privileges to pull this stunt
+ 		    $form{'uname'}=$form{'suname'};
- 	if (&Apache::lonnet::privileged($form{'uname'},$form{'udom'})) {
+ 		} else {
- # ---------------------------------------------------- see if the su-user exists
+ 		    &Apache::lonnet::logthis('Attempted switch user to privileged user');
- 	    unless (&Apache::lonnet::homeserver($form{'suname'},$form{'udom'})
+ 		}
- 		eq 'no_host') {
+ 	    }
- 		&Apache::lonnet::logthis(&Apache::lonnet::homeserver($form{'suname'},$form{'udom'}));
+ 	} else {
- # ------------------------------ see if the su-user is not too highly privileged
+ 	    &Apache::lonnet::logthis('Non-privileged user attempting switch user');
- 		unless (&Apache::lonnet::privileged($form{'suname'},$form{'udom'})) {
+ 	}
- # -------------------------------------------------------- actually switch users
+     }
- 		    &Apache::lonnet::logperm('User '.$form{'uname'}.' at '.$form{'udom'}.
- 			' logging in as '.$form{'suname'});
+     my ($is_balancer,$otherserver);
- 		    $form{'uname'}=$form{'suname'};
- 		} else {
+     unless ($hosthere) {
- 		    &Apache::lonnet::logthis('Attempted switch user to privileged user');
+         ($is_balancer,$otherserver) =
- 		}
+             &Apache::lonnet::check_loadbalancing($form{'uname'},$form{'udom'});
- 	    }
+     }
- 	} else {
- 	    &Apache::lonnet::logthis('Non-privileged user attempting switch user');
+     if ($is_balancer) {
- 	}
+         if (!$otherserver) {
-     }
+             ($otherserver) = &Apache::lonnet::choose_server($form{'udom'});
+         }
-     my ($is_balancer,$otherserver);
+         if ($otherserver) {
+             &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef,
-     unless ($hosthere) {
+                      \%form);
-         ($is_balancer,$otherserver) =
+             my $switchto = '/adm/switchserver?otherserver='.$otherserver;
-             &Apache::lonnet::check_loadbalancing($form{'uname'},$form{'udom'},'login');
+             if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) {
-         if ($is_balancer) {
+                 $switchto .= '&origurl='.$firsturl;
-             if ($otherserver eq '') {
+             }
-                 my $lowest_load;
+             if ($form{'role'}) {
-                 ($otherserver,undef,undef,undef,$lowest_load) = &Apache::lonnet::choose_server($form{'udom'});
+                 $switchto .= '&role='.$form{'role'};
-                 if ($lowest_load > 100) {
+             }
-                     $otherserver = &Apache::lonnet::spareserver($lowest_load,$lowest_load,1,$form{'udom'});
+             if ($form{'symb'}) {
-                 }
+                 $switchto .= '&symb='.$form{'symb'};
              }
-             if ($otherserver ne '') {
+             $r->internal_redirect($switchto);
-                 my @hosts = &Apache::lonnet::current_machine_ids();
+         } else {
-                 if (grep(/^\Q$otherserver\E$/,@hosts)) {
+             $r->print(&noswitch());
-                     $hosthere = $otherserver;
+         }
-                 }
+         return OK;
-             }
+     } else {
-         }
+         if (!&check_can_host($r,\%form,$authhost)) {
-     }
+             my ($otherserver) = &Apache::lonnet::choose_server($form{'udom'});
+             if ($otherserver) {
-     if (($is_balancer) && (!$hosthere)) {
+                 &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef,
-         if ($otherserver) {
+                          \%form);
-             &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef,
+                 my $switchto = '/adm/switchserver?otherserver='.$otherserver;
-                      \%form);
+                 if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) {
-             my $switchto = '/adm/switchserver?otherserver='.$otherserver;
+                     $switchto .= '&origurl='.$firsturl;
-             if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) {
+                 }
-                 $switchto .= '&origurl='.$firsturl;
+                 if ($form{'role'}) {
-             }
+                     $switchto .= '&role='.$form{'role'};
-             if ($form{'role'}) {
+                 }
-                 $switchto .= '&role='.$form{'role'};
+                 if ($form{'symb'}) {
-             }
+                     $switchto .= '&symb='.$form{'symb'};
-             if ($form{'symb'}) {
+                 }
-                 $switchto .= '&symb='.$form{'symb'};
+                 $r->internal_redirect($switchto);
-             }
+             } else {
-             $r->internal_redirect($switchto);
+                 $r->print(&noswitch());
-         } else {
+             }
-             $r->print(&noswitch());
+             return OK;
          }
-         return OK;
-     } else {
+ # ------------------------------------------------------- Do the load balancing
-         if (!&check_can_host($r,\%form,$authhost)) {
-             my ($otherserver) = &Apache::lonnet::choose_server($form{'udom'});
+ # ---------------------------------------------------------- Determine own load
-             if ($otherserver) {
+         my $loadlim = $r->dir_config('lonLoadLim');
-                 &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef,
+         my $loadavg;
-                          \%form);
+         {
-                 my $switchto = '/adm/switchserver?otherserver='.$otherserver;
+             my $loadfile=Apache::File->new('/proc/loadavg');
-                 if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) {
+             $loadavg=<$loadfile>;
-                     $switchto .= '&origurl='.$firsturl;
+         }
-                 }
+         $loadavg =~ s/\s.*//g;
-                 if ($form{'role'}) {
+         my $loadpercent=sprintf("%.1f",100*$loadavg/$loadlim);
-                     $switchto .= '&role='.$form{'role'};
+         my $userloadpercent=&Apache::lonnet::userload();
-                 }
-                 if ($form{'symb'}) {
+ # ---------------------------------------------------------- Are we overloaded?
-                     $switchto .= '&symb='.$form{'symb'};
+         if ((($userloadpercent>100.0)||($loadpercent>100.0))) {
-                 }
+             my $unloaded=Apache::lonnet::spareserver($loadpercent,$userloadpercent,1,$form{'udom'});
-                 $r->internal_redirect($switchto);
+             if (!$unloaded) {
-             } else {
+                 ($unloaded) = &Apache::lonnet::choose_server($form{'udom'});
-                 $r->print(&noswitch());
+             }
-             }
+             if ($unloaded) {
-             return OK;
+                 &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',
-         }
+                          undef,\%form);
+                 $r->internal_redirect('/adm/switchserver?otherserver='.$unloaded.'&origurl='.$firsturl);
- # ------------------------------------------------------- Do the load balancing
+                 return OK;
+             }
- # ---------------------------------------------------------- Determine own load
+         }
-         my $loadlim = $r->dir_config('lonLoadLim');
+         &success($r,$form{'uname'},$form{'udom'},$authhost,$firsturl,undef,
-         my $loadavg;
+                  \%form);
-         {
+         return OK;
-             my $loadfile=Apache::File->new('/proc/loadavg');
+     }
-             $loadavg=<$loadfile>;
+ }
-         }
-         $loadavg =~ s/\s.*//g;
+ sub decrypt {
-         my $loadpercent=sprintf("%.1f",100*$loadavg/$loadlim);
+     my ($key, @chunks) = @_;
-         my $userloadpercent=&Apache::lonnet::userload();
+     my $keybin = pack("H16",$key);
- # ---------------------------------------------------------- Are we overloaded?
-         if ((($userloadpercent>100.0)||($loadpercent>100.0))) {
+     my $cipher;
-             my $unloaded=Apache::lonnet::spareserver($loadpercent,$userloadpercent,1,$form{'udom'});
+     if ($Crypt::DES::VERSION >= 2.03) {
-             if (!$unloaded) {
+         $cipher = new Crypt::DES $keybin;
-                 ($unloaded) = &Apache::lonnet::choose_server($form{'udom'});
+     } else {
-             }
+         $cipher = new DES $keybin;
-             if ($unloaded) {
+     }
-                 &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',
-                          undef,\%form);
+     my $upass='';
-                 $r->internal_redirect('/adm/switchserver?otherserver='.$unloaded.'&origurl='.$firsturl);
+     for (my $i=0;$i<=2;$i++) {
-                 return OK;
+         my $chunk =
-             }
+             $cipher->decrypt(
-         }
+                 unpack("a8",pack("H16",substr($chunks[$i],0,16))));
-         if (($is_balancer) && ($hosthere)) {
-             $form{'noloadbalance'} = $hosthere;
+         $chunk .=
-         }
+             $cipher->decrypt(
-         &success($r,$form{'uname'},$form{'udom'},$authhost,$firsturl,undef,
+                 unpack("a8",pack("H16",substr($chunks[$i],16,16))));
-                  \%form);
-         return OK;
+         $chunk = substr($chunk,1,ord(substr($chunk,0,1)));
-     }
+         $upass .= $chunk;
- }
+     }
+     return $upass;
- sub check_can_host {
+ }
-     my ($r,$form,$authhost,$domdesc) = @_;
-     return unless (ref($form) eq 'HASH');
+ sub check_can_host {
-     my $canhost = 1;
+     my ($r,$form,$authhost,$domdesc) = @_;
-     my $lonhost = $r->dir_config('lonHostID');
+     return unless (ref($form) eq 'HASH');
-     my $udom = $form->{'udom'};
+     my $canhost = 1;
-     my @intdoms;
+     my $lonhost = $r->dir_config('lonHostID');
-     my $internet_names = &Apache::lonnet::get_internet_names($lonhost);
+     my $udom = $form->{'udom'};
-     if (ref($internet_names) eq 'ARRAY') {
+     my @intdoms;
-         @intdoms = @{$internet_names};
+     my $internet_names = &Apache::lonnet::get_internet_names($lonhost);
-     }
+     if (ref($internet_names) eq 'ARRAY') {
-     my $uprimary_id = &Apache::lonnet::domain($udom,'primary');
+         @intdoms = @{$internet_names};
-     my $uint_dom = &Apache::lonnet::internet_dom($uprimary_id);
+     }
-     unless ($uint_dom ne '' && grep(/^\Q$uint_dom\E$/,@intdoms)) {
+     my $uprimary_id = &Apache::lonnet::domain($udom,'primary');
-         my $machine_dom = &Apache::lonnet::host_domain($lonhost);
+     my $uint_dom = &Apache::lonnet::internet_dom($uprimary_id);
-         my $hostname = &Apache::lonnet::hostname($lonhost);
+     unless ($uint_dom ne '' && grep(/^\Q$uint_dom\E$/,@intdoms)) {
-         my $serverhomeID = &Apache::lonnet::get_server_homeID($hostname);
+         my $machine_dom = &Apache::lonnet::host_domain($lonhost);
-         my $serverhomedom = &Apache::lonnet::host_domain($serverhomeID);
+         my $hostname = &Apache::lonnet::hostname($lonhost);
-         my %defdomdefaults = &Apache::lonnet::get_domain_defaults($serverhomedom);
+         my $serverhomeID = &Apache::lonnet::get_server_homeID($hostname);
-         my %udomdefaults = &Apache::lonnet::get_domain_defaults($udom);
+         my $serverhomedom = &Apache::lonnet::host_domain($serverhomeID);
-         my $loncaparev;
+         my %defdomdefaults = &Apache::lonnet::get_domain_defaults($serverhomedom);
-         if ($authhost eq 'no_account_on_host') {
+         my %udomdefaults = &Apache::lonnet::get_domain_defaults($udom);
-             $loncaparev = &Apache::lonnet::get_server_loncaparev($machine_dom);
+         my $loncaparev;
-         } else {
+         if ($authhost eq 'no_account_on_host') {
-             $loncaparev = &Apache::lonnet::get_server_loncaparev($machine_dom,$lonhost);
+             $loncaparev = &Apache::lonnet::get_server_loncaparev($machine_dom);
-         }
+         } else {
-         $canhost = &Apache::lonnet::can_host_session($udom,$lonhost,$loncaparev,
+             $loncaparev = &Apache::lonnet::get_server_loncaparev($machine_dom,$lonhost);
-                                                      $udomdefaults{'remotesessions'},
+         }
-                                                      $defdomdefaults{'hostedsessions'});
+         $canhost = &Apache::lonnet::can_host_session($udom,$lonhost,$loncaparev,
-     }
+                                                      $udomdefaults{'remotesessions'},
-     unless ($canhost) {
+                                                      $defdomdefaults{'hostedsessions'});
-         if ($authhost eq 'no_account_on_host') {
+     }
-             my $checkloginvia = 1;
+     unless ($canhost) {
-             my ($login_host,$hostname) =
+         if ($authhost eq 'no_account_on_host') {
-                 &Apache::lonnet::choose_server($udom,$checkloginvia);
+             my $checkloginvia = 1;
-             &Apache::loncommon::content_type($r,'text/html');
+             my ($login_host,$hostname) =
-             $r->send_http_header;
+                 &Apache::lonnet::choose_server($udom,$checkloginvia);
-             if ($login_host ne '') {
+             &Apache::loncommon::content_type($r,'text/html');
-                 my $protocol = $Apache::lonnet::protocol{$login_host};
+             $r->send_http_header;
-                 $protocol = 'http' if ($protocol ne 'https');
+             if ($login_host ne '') {
-                 my $newurl = $protocol.'://'.$hostname.'/adm/createaccount';
+                 my $protocol = $Apache::lonnet::protocol{$login_host};
-                 $r->print(&Apache::loncommon::start_page('Create a user account in LON-CAPA').
+                 $protocol = 'http' if ($protocol ne 'https');
-                           '<h3>'.&mt('Account creation').'</h3>'.
+                 my $newurl = $protocol.'://'.$hostname.'/adm/createaccount';
-                           &mt('You do not currently have a LON-CAPA account at this institution.').'<br />'.
+                 $r->print(&Apache::loncommon::start_page('Create a user account in LON-CAPA').
-                           '<p>'.&mt('You will be able to create one by logging into a LON-CAPA server within the [_1] domain.',$domdesc).'</p>'.
+                           '<h3>'.&mt('Account creation').'</h3>'.
-                           '<p>'.&mt('[_1]Log in[_2]','<a href="'.$newurl.'">','</a>').
+                           &mt('You do not currently have a LON-CAPA account at this institution.').'<br />'.
-                           &Apache::loncommon::end_page());
+                           '<p>'.&mt('You will be able to create one by logging into a LON-CAPA server within the [_1] domain.',$domdesc).'</p>'.
-             } else {
+                           '<p>'.&mt('[_1]Log in[_2]','<a href="'.$newurl.'">','</a>').
-                 $r->print(&Apache::loncommon::start_page('Access to LON-CAPA unavailable').
+                           &Apache::loncommon::end_page());
-                           '<h3>'.&mt('Account creation unavailable').'</h3>'.
+             } else {
-                           &mt('You do not currently have a LON-CAPA account at this institution.').'<br />'.
+                 $r->print(&Apache::loncommon::start_page('Access to LON-CAPA unavailable').
-                           '<p>'.&mt('Currently a LON-CAPA server is not available within the [_1] domain for you to log-in to, to create an account.',$domdesc).'</p>'.
+                           '<h3>'.&mt('Account creation unavailable').'</h3>'.
-                           &Apache::loncommon::end_page());
+                           &mt('You do not currently have a LON-CAPA account at this institution.').'<br />'.
-             }
+                           '<p>'.&mt('Currently a LON-CAPA server is not available within the [_1] domain for you to log-in to, to create an account.',$domdesc).'</p>'.
-         } else {
+                           &Apache::loncommon::end_page());
-             &success($r,$form->{'uname'},$udom,$authhost,'noredirect',undef,
+             }
-                      $form);
+         } else {
-             my ($otherserver) = &Apache::lonnet::choose_server($udom);
+             &success($r,$form->{'uname'},$udom,$authhost,'noredirect',undef,
-             $r->internal_redirect('/adm/switchserver?otherserver='.$otherserver);
+                      $form);
-         }
+             my ($otherserver) = &Apache::lonnet::choose_server($udom);
-     }
+             $r->internal_redirect('/adm/switchserver?otherserver='.$otherserver);
-     return $canhost;
+         }
- }
+     }
+     return $canhost;
- sub noswitch {
+ }
-     my $result = &Apache::loncommon::start_page('Access to LON-CAPA unavailable').
-                  '<h3>'.&mt('Session unavailable').'</h3>'.
+ sub noswitch {
-                  &mt('This LON-CAPA server is unable to host your session.').'<br />'.
+     my $result = &Apache::loncommon::start_page('Access to LON-CAPA unavailable').
-                  '<p>'.&mt('Currently no other LON-CAPA server is available to host your session either.').'</p>'.
+                  '<h3>'.&mt('Session unavailable').'</h3>'.
-                  &Apache::loncommon::end_page();
+                  &mt('This LON-CAPA server is unable to host your session.').'<br />'.
-     return $result;
+                  '<p>'.&mt('Currently no other LON-CAPA server is available to host your session either.').'</p>'.
- }
+                  &Apache::loncommon::end_page();
+     return $result;
- sub loginhelpdisplay {
+ }
-     my ($authdomain) = @_;
-     my $login_help = 1;
+ sub loginhelpdisplay {
-     my $lang = &Apache::lonlocal::current_language();
+     my ($authdomain) = @_;
-     if ($login_help) {
+     my $login_help = 1;
-         my $dom = $authdomain;
+     my $lang = &Apache::lonlocal::current_language();
-         if ($dom eq '') {
+     if ($login_help) {
-             $dom = &Apache::lonnet::default_login_domain();
+         my $dom = $authdomain;
-         }
+         if ($dom eq '') {
-         my %domconfhash = &Apache::loncommon::get_domainconf($dom);
+             $dom = &Apache::lonnet::default_login_domain();
-         my $loginhelp_url;
+         }
-         if ($lang) {
+         my %domconfhash = &Apache::loncommon::get_domainconf($dom);
-             $loginhelp_url = $domconfhash{$dom.'.login.helpurl_'.$lang};
+         my $loginhelp_url;
-             if ($loginhelp_url ne '') {
+         if ($lang) {
-                 return $loginhelp_url;
+             $loginhelp_url = $domconfhash{$dom.'.login.helpurl_'.$lang};
-             }
+             if ($loginhelp_url ne '') {
-         }
+                 return $loginhelp_url;
-         $loginhelp_url = $domconfhash{$dom.'.login.helpurl_nolang'};
+             }
-         if ($loginhelp_url ne '') {
+         }
-             return $loginhelp_url;
+         $loginhelp_url = $domconfhash{$dom.'.login.helpurl_nolang'};
-         } else {
+         if ($loginhelp_url ne '') {
-             return '/adm/loginproblems.html';
+             return $loginhelp_url;
-         }
+         } else {
-     }
+             return '/adm/loginproblems.html';
-     return;
+         }
- }
+     }
+     return;
-;
+ }
- __END__
+;
+ __END__

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>

Removed from v.1.121.2.16
changed lines
	Added in v.1.137