Return to lonauth.pm CVS log

Up to [LON-CAPA] / loncom / auth

- I have a couple of dreams
1) to never see a call to reply outside of lonnet.pm
2) to see the use of esace/unescape minimized
3) world peace


- Anyway this change has the side effect of fixing the problems with %20
 etc appearing in the middle of names.

(Don't be afraid of lonnet::dump/get/put etc, they try to do it right.)

    1: # The LearningOnline Network
    2: # User Authentication Module
    3: #
    4: # $Id: lonauth.pm,v 1.32 2002/09/14 05:45:45 albertel Exp $
    5: #
    6: # Copyright Michigan State University Board of Trustees
    7: #
    8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
    9: #
   10: # LON-CAPA is free software; you can redistribute it and/or modify
   11: # it under the terms of the GNU General Public License as published by
   12: # the Free Software Foundation; either version 2 of the License, or
   13: # (at your option) any later version.
   14: #
   15: # LON-CAPA is distributed in the hope that it will be useful,
   16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
   17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   18: # GNU General Public License for more details.
   19: #
   20: # You should have received a copy of the GNU General Public License
   21: # along with LON-CAPA; if not, write to the Free Software
   22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
   23: #
   24: # /home/httpd/html/adm/gpl.txt
   25: #
   26: # http://www.lon-capa.org/
   27: #
   28: # 5/21/99,5/22,5/25,5/26,5/27,5/29,6/2,6/11,6/14,6/15
   29: # 16/11,12/16,
   30: # 1/14,2/24,2/28,2/29,3/7,5/29,5/30,5/31,6/1,6/5,6/29,
   31: # 7/1,7/10,10/2,10/5,10/9,10/26,10/30,11/10,
   32: # 05/28,05/29 Gerd Kortemeyer
   33: # 07/24 Scott Harrison
   34: # 07/28,08/03 Gerd Kortemeyer
   35: # 8/15 Scott Harrison
   36: # 8/20 Gerd Kortemeyer
   37: 
   38: package Apache::lonauth;
   39: 
   40: use strict;
   41: use Apache::Constants qw(:common);
   42: use Apache::File;
   43: use CGI qw(:standard);
   44: use CGI::Cookie();
   45: use DynaLoader; # for Crypt::DES version
   46: use Crypt::DES;
   47: use Apache::lonnet();
   48: use Apache::lonmenu();
   49: use Fcntl qw(:flock);
   50: # ------------------------------------------------------------ Successful login
   51: 
   52: sub success {
   53:     my ($r, $username, $domain, $authhost,$lowerurl) = @_;
   54:     my $lonids=$r->dir_config('lonIDsDir');
   55: 
   56: # See if old ID present, if so, remove
   57: 
   58:     my $filename;
   59:     opendir(DIR,$lonids);
   60:     while ($filename=readdir(DIR)) {
   61:        if ($filename=~/^$username\_\d+\_$domain\_$authhost\.id$/) {
   62: 	  unlink($lonids.'/'.$filename);
   63:        }
   64:     }
   65:     closedir(DIR);
   66: 
   67: # Give them a new cookie
   68: 
   69:     my $cookie;
   70:     my $now=time;
   71:     $cookie="$username\_$now\_$domain\_$authhost";
   72: 
   73: # Initialize roles
   74: 
   75:     my $userroles=Apache::lonnet::rolesinit($domain,$username,$authhost);
   76: 
   77: # ------------------------------------ Check browser type and MathML capability
   78: 
   79:     my @browsertype=split(/\&/,$r->dir_config("lonBrowsDet"));
   80:     my %mathcap=split(/\&/,$r->dir_config("lonMathML"));
   81:     my $httpbrowser=$ENV{"HTTP_USER_AGENT"};
   82:     my $i;
   83:     my $clientbrowser='unknown';
   84:     my $clientversion='0';
   85:     my $clientmathml='';
   86:     for ($i=0;$i<=$#browsertype;$i++) {
   87:         my ($bname,$match,$notmatch,$vreg,$minv)=split(/\:/,$browsertype[$i]);
   88: 	if (($httpbrowser=~/$match/i)  && ($httpbrowser!~/$notmatch/i)) {
   89: 	    $clientbrowser=$bname;
   90:             $httpbrowser=~/$vreg/i;
   91: 	    $clientversion=$1;
   92:             $clientmathml=($clientversion>=$minv);
   93:         }
   94:     }
   95:     my $clientos='unknown';
   96:     if (($httpbrowser=~/linux/i) ||
   97:         ($httpbrowser=~/unix/i) ||
   98:         ($httpbrowser=~/ux/i) ||
   99:         ($httpbrowser=~/solaris/i)) { $clientos='unix'; }
  100:     if (($httpbrowser=~/vax/i) ||
  101:         ($httpbrowser=~/vms/i)) { $clientos='vms'; }
  102:     if ($httpbrowser=~/next/i) { $clientos='next'; }
  103:     if (($httpbrowser=~/mac/i) ||
  104:         ($httpbrowser=~/powerpc/i)) { $clientos='mac'; }
  105:     if ($httpbrowser=~/win/i) { $clientos='win'; }
  106:     if ($httpbrowser=~/embed/i) { $clientos='pda'; }
  107: 
  108: # ------------------------------------------------------------- Get environment
  109: 
  110:     my $userenv;
  111:     my %userenv=Apache::lonnet::dump('environment',$domain,$username);
  112:     my ($tmp) = keys(%userenv);
  113:     if ($tmp !~ /^(con_lost|error|no_such_host)/i) {
  114: 	foreach my $key (keys(%userenv)) {
  115: 	    $userenv.="environment.$key=$userenv{$key}\n";
  116: 	}
  117:     }
  118: # --------------------------------------------------------- Write first profile
  119: 
  120:        {
  121: 	    my $idf=Apache::File->new(">$lonids/$cookie.id");
  122: 	    unless (flock($idf,LOCK_EX)) {
  123: 	      &Apache::lonnet::logthis("<font color=blue>WARNING: ".
  124: 			    'Could not obtain exclusive lock in lonauth: '.$!);
  125: 	      $idf->close();
  126: 	      return 'error: '.$!;
  127: 	    }
  128:             if ($userenv ne '') { print $idf "$userenv\n"; }
  129:             print $idf "user.name=$username\n";
  130:             print $idf "user.domain=$domain\n";
  131:             print $idf "user.home=$authhost\n";
  132:             print $idf "browser.type=$clientbrowser\n";
  133:             print $idf "browser.version=$clientversion\n";
  134:             print $idf "browser.mathml=$clientmathml\n";
  135:             print $idf "browser.os=$clientos\n";
  136:             print $idf "request.course.fn=\n";
  137:             print $idf "request.course.uri=\n";
  138:             print $idf "request.course.sec=\n";
  139:             print $idf "request.role=cm\n";
  140:             print $idf "request.host=$ENV{'HTTP_HOST'}\n"; 
  141:             if ($userroles ne '') { print $idf "$userroles"; }
  142: 	    $idf->close();
  143:         }
  144:          $ENV{'request.role'}='cm';
  145:          $ENV{'browser.type'}=$clientbrowser;
  146: # -------------------------------------------------------------------- Log this
  147: 
  148:     &Apache::lonnet::log($domain,$username,$authhost,
  149:                          "Login $ENV{'REMOTE_ADDR'}");
  150: 
  151: # ------------------------------------------------- Check for critical messages
  152: 
  153:     my @what=&Apache::lonnet::dump('critical',$domain,$username);
  154:     if ($what[0]) {
  155: 	if (($what[0] ne 'con_lost') && ($what[0]!~/^error\:/)) {
  156: 	    $lowerurl='/adm/email?critical=display';
  157:         }
  158:     }
  159: 
  160: # ------------------------------------------------------------ Get cookie ready
  161: 
  162:     $cookie="lonID=$cookie; path=/";
  163: # -------------------------------------------------------- Menu script and info
  164:     my $windowinfo=&Apache::lonmenu::open($clientos);
  165: # ------------------------------------------------------------- Info for Remote
  166:     my $configmenu=&Apache::lonmenu::rawconfig($r);
  167: # ------------------------------------------------- Output for successful login
  168: 
  169:     $r->send_cgi_header(<<ENDHEADER);
  170: Content-type: text/html
  171: Set-cookie: $cookie
  172: 
  173: ENDHEADER
  174:     $r->print(<<ENDSUCCESS);
  175: <html>
  176: <head>
  177: <title>Successful Login to the LearningOnline Network with CAPA</title>
  178: <script>
  179: 
  180: // --------------------------------------------- Checks if server frame defined
  181: 
  182: function checkdef() {
  183:    if ((menuloaded==0) && (tim==0)) { setTimeout('checkdef()',100); }
  184: }
  185: 
  186: // ---------------------------------------------------------- The wait function
  187: var canceltim;
  188: function wait() {
  189:    if ((menuloaded==1) || (tim==1)) {
  190:       if (tim==0) {
  191:          clearTimeout(canceltim);
  192:          $configmenu
  193:          window.location='$lowerurl';  
  194:       } else {
  195:          alert("Remote Control Timed Out.");
  196:       }
  197:    } else {
  198:       setTimeout('wait();',100);
  199:    }
  200: }
  201: 
  202: function main() {
  203:    canceltim=setTimeout('tim=1;',80000);
  204:    checkdef();
  205:    wait();
  206: }
  207: 
  208: </script>
  209: </head>
  210: <body bgcolor="#FFFFFF">
  211: <script>
  212:     menuloaded=0;
  213:     tim=0;
  214: </script>
  215: $windowinfo
  216: <h1>Welcome!</h1>
  217: <script>
  218:     main();
  219: </script>
  220: </body>
  221: </html>
  222: ENDSUCCESS
  223: }
  224: 
  225: # --------------------------------------------------------------- Failed login!
  226: 
  227: sub failed {
  228:     my ($r,$message) = @_;
  229:     $r->send_cgi_header(<<ENDFHEADER);
  230: Content-type: text/html
  231: 
  232: ENDFHEADER
  233:     $r->print(<<ENDFAILED);
  234: <html>
  235: <head>
  236: <title>Unsuccessful Login to the LearningOnline Network with CAPA</title>
  237: </head>
  238: <html>
  239: <body bgcolor="#FFFFFF">
  240: <h1>Sorry ...</h1>
  241: <h2>$message to use the Learning<i>Online</i> Network with CAPA</h2>
  242: </body>
  243: </html>
  244: ENDFAILED
  245: }
  246: 
  247: # ---------------------------------------------------------------- Main handler
  248: 
  249: sub handler {
  250:     my $r = shift;
  251: 
  252:     my $buffer;
  253:     $r->read($buffer,$r->header_in('Content-length'));
  254:     my @pairs=split(/&/,$buffer);
  255:     my $pair; my $name; my $value; my %FORM;
  256:     foreach $pair (@pairs) {
  257:        ($name,$value) = split(/=/,$pair);
  258:        $value =~ tr/+/ /;
  259:        $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
  260:        $FORM{$name}=$value;
  261:     } 
  262: 
  263:     if ((!$FORM{'uname'}) || (!$FORM{'upass'}) || (!$FORM{'udom'})) {
  264: 	failed($r,'Username, password and domain need to be specified');
  265:         return OK;
  266:     }
  267:     $FORM{'uname'} =~ s/\W//g;
  268:     $FORM{'udom'}  =~ s/\W//g;
  269: 
  270:     my $role   = $r->dir_config('lonRole');
  271:     my $domain = $r->dir_config('lonDefDomain');
  272:     my $prodir = $r->dir_config('lonUsersDir');
  273: 
  274: # ---------------------------------------- Get the information from login token
  275: 
  276:     my $tmpinfo=Apache::lonnet::reply('tmpget:'.$FORM{'logtoken'},
  277:                                       $FORM{'serverid'});
  278: 
  279:     if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost')) {
  280: 	failed($r,'Login token missing, inaccessible or expired');
  281:         return OK;
  282:     }
  283:     
  284:     my ($key,$firsturl)=split(/&/,$tmpinfo);
  285: 
  286:     my $keybin=pack("H16",$key);
  287: 
  288:     my $cipher;
  289:     if ($Crypt::DES::VERSION>=2.03) {
  290: 	$cipher=new Crypt::DES $keybin;
  291:     }
  292:     else {
  293: 	$cipher=new DES $keybin;
  294:     }
  295: 
  296:     my $upass=$cipher->decrypt(
  297:        unpack("a8",pack("H16",substr($FORM{'upass'},0,16))));
  298: 
  299:     $upass.=$cipher->decrypt(
  300:        unpack("a8",pack("H16",substr($FORM{'upass'},16,16))));
  301: 
  302:     $upass=substr($upass,1,ord(substr($upass,0,1)));
  303: 
  304: # ---------------------------------------------------------------- Authenticate
  305:     my $authhost=Apache::lonnet::authenticate($FORM{'uname'},
  306:                                               $upass,
  307:                                               $FORM{'udom'});
  308:     
  309: # --------------------------------------------------------------------- Failed?
  310: 
  311:     if ($authhost eq 'no_host') {
  312: 	failed($r,'Username and/or password could not be authenticated');
  313:         return OK;
  314:     }
  315: 
  316:     if (($firsturl eq '') || ($firsturl eq '/adm/logout')) {
  317: 	$firsturl='/adm/roles';
  318:     }
  319: 
  320:     success($r,$FORM{'uname'},$FORM{'udom'},$authhost,$firsturl);
  321:     return OK;
  322: }
  323: 
  324: 1;
  325: __END__
  326: 
  327: