loncom/auth/lonauth.pm - view

File: [LON-CAPA] / loncom / auth / lonauth.pm
Revision 1.137: download - view: text, annotated - select for diffs
Mon Jan 26 22:11:52 2015 UTC (9 years, 3 months ago) by raeburn
Branches: MAIN
CVS tags: HEAD

- Eliminate 404 errors because of malformed urls such as /adm/adm/navmaps
  when user reloads a previously displayed LON-CAPA page in a browser where
  the session cookie has expired or been deleted.

1: # The LearningOnline Network 2: # User Authentication Module 3: # 4: # $Id: lonauth.pm,v 1.137 2015/01/26 22:11:52 raeburn Exp $ 5: # 6: # Copyright Michigan State University Board of Trustees 7: # 8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA). 9: # 10: # LON-CAPA is free software; you can redistribute it and/or modify 11: # it under the terms of the GNU General Public License as published by 12: # the Free Software Foundation; either version 2 of the License, or 13: # (at your option) any later version. 14: # 15: # LON-CAPA is distributed in the hope that it will be useful, 16: # but WITHOUT ANY WARRANTY; without even the implied warranty of 17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 18: # GNU General Public License for more details. 19: # 20: # You should have received a copy of the GNU General Public License 21: # along with LON-CAPA; if not, write to the Free Software 22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 23: # 24: # /home/httpd/html/adm/gpl.txt 25: # 26: # http://www.lon-capa.org/ 27: # 28: 29: package Apache::lonauth; 30: 31: use strict; 32: use LONCAPA; 33: use Apache::Constants qw(:common); 34: use CGI qw(:standard); 35: use DynaLoader; # for Crypt::DES version 36: use Crypt::DES; 37: use Apache::loncommon(); 38: use Apache::lonnet; 39: use Apache::lonmenu(); 40: use Apache::createaccount; 41: use Fcntl qw(:flock); 42: use Apache::lonlocal; 43: use Apache::File(); 44: use HTML::Entities; 45: 46: # ------------------------------------------------------------ Successful login 47: sub success { 48: my ($r, $username, $domain, $authhost, $lowerurl, $extra_env, 49: $form) = @_; 50: 51: # ------------------------------------------------------------ Get cookie ready 52: my $cookie = 53: &Apache::loncommon::init_user_environment($r, $username, $domain, 54: $authhost, $form, 55: {'extra_env' => $extra_env,}); 56: 57: my $public=($username eq 'public' && $domain eq 'public'); 58: 59: if ($public or $lowerurl eq 'noredirect') { return $cookie; } 60: 61: # -------------------------------------------------------------------- Log this 62: 63: &Apache::lonnet::log($domain,$username,$authhost, 64: "Login $ENV{'REMOTE_ADDR'}"); 65: 66: # ------------------------------------------------- Check for critical messages 67: 68: my @what=&Apache::lonnet::dump('critical',$domain,$username); 69: if ($what[0]) { 70: if (($what[0] ne 'con_lost') && ($what[0]!~/^error\:/)) { 71: $lowerurl='/adm/email?critical=display'; 72: } 73: } 74: 75: # ------------------------------------------------------------ Get cookie ready 76: $cookie="lonID=$cookie; path=/"; 77: # -------------------------------------------------------- Menu script and info 78: my $destination = $lowerurl; 79: 80: if (defined($form->{role})) { 81: my $envkey = 'user.role.'.$form->{role}; 82: my $now=time; 83: my $then=$env{'user.login.time'}; 84: my $refresh=$env{'user.refresh.time'}; 85: my $update=$env{'user.update.time'}; 86: if (!$update) { 87: $update = $then; 88: } 89: if (exists($env{$envkey})) { 90: my ($role,$where,$trolecode,$tstart,$tend,$tremark,$tstatus); 91: &Apache::lonnet::role_status($envkey,$update,$refresh,$now,\$role,\$where, 92: \$trolecode,\$tstatus,\$tstart,\$tend); 93: if ($tstatus eq 'is') { 94: $destination .= ($destination =~ /\?/) ? '&' : '?'; 95: my $newrole = &HTML::Entities::encode($form->{role},'"<>&'); 96: $destination .= 'selectrole=1&'.$newrole.'=1'; 97: } 98: } 99: } 100: if (defined($form->{symb})) { 101: my $destsymb = $form->{symb}; 102: $destination .= ($destination =~ /\?/) ? '&' : '?'; 103: if ($destsymb =~ /___/) { 104: # FIXME Need to deal with encrypted symbs and urls as needed. 105: my ($map,$resid,$desturl)=split(/___/,$destsymb); 106: $desturl = &Apache::lonnet::clutter($desturl); 107: $desturl = &HTML::Entities::encode($desturl,'"<>&'); 108: $destsymb = &HTML::Entities::encode($destsymb,'"<>&'); 109: $destination .= 'destinationurl='.$desturl. 110: '&destsymb='.$destsymb; 111: } else { 112: $destsymb = &HTML::Entities::encode($destsymb,'"<>&'); 113: $destination .= 'destinationurl='.$destsymb; 114: } 115: } 116: if ($destination =~ m{^/adm/roles}) { 117: $destination .= ($destination =~ /\?/) ? '&' : '?'; 118: $destination .= 'source=login'; 119: } 120: 121: my $windowinfo = Apache::lonhtmlcommon::scripttag('self.name="loncapaclient";'); 122: my $header = '<meta HTTP-EQUIV="Refresh" CONTENT="0; url='.$destination.'" />'; 123: my $brcrum = [{'href' => '', 124: 'text' => 'Successful Login'},]; 125: my $start_page=&Apache::loncommon::start_page('Successful Login', 126: $header, 127: {'bread_crumbs' => $brcrum,}); 128: my $end_page =&Apache::loncommon::end_page(); 129: 130: my $continuelink='<a href="'.$destination.'">'.&mt('Continue').'</a>'; 131: # ------------------------------------------------- Output for successful login 132: 133: &Apache::loncommon::content_type($r,'text/html'); 134: $r->header_out('Set-cookie' => $cookie); 135: $r->send_http_header; 136: 137: my %lt=&Apache::lonlocal::texthash( 138: 'wel' => 'Welcome', 139: 'pro' => 'Login problems?', 140: ); 141: my $loginhelp = &loginhelpdisplay($domain); 142: if ($loginhelp) { 143: $loginhelp = '<p><a href="'.$loginhelp.'">'.$lt{'pro'}.'</a></p>'; 144: } 145: 146: my $welcome = &mt('Welcome to the Learning[_1]Online[_2] Network with CAPA. Please wait while your session is being set up.','<i>','</i>'); 147: $r->print(<<ENDSUCCESS); 148: $start_page 149: $windowinfo 150: <h1>$lt{'wel'}</h1> 151: $welcome 152: $loginhelp 153: $continuelink 154: $end_page 155: ENDSUCCESS 156: return; 157: } 158: 159: # --------------------------------------------------------------- Failed login! 160: 161: sub failed { 162: my ($r,$message,$form) = @_; 163: (undef,undef,undef,my $clientmathml,my $clientunicode) = 164: &Apache::loncommon::decode_user_agent(); 165: my $args = {}; 166: if ($clientunicode && !$clientmathml) { 167: $args = {'browser.unicode' => 1}; 168: } 169: 170: my $start_page = &Apache::loncommon::start_page('Unsuccessful Login',undef,$args); 171: my $uname = &Apache::loncommon::cleanup_html($form->{'uname'}); 172: my $udom = &Apache::loncommon::cleanup_html($form->{'udom'}); 173: if (&Apache::lonnet::domain($udom,'description') eq '') { 174: undef($udom); 175: } 176: my $retry = '/adm/login'; 177: if ($uname eq $form->{'uname'}) { 178: $retry .= '?username='.$uname; 179: } 180: if ($udom) { 181: $retry .= (($retry=~/\?/)?'&':'?').'domain='.$udom; 182: } 183: if (exists($form->{role})) { 184: my $role = &Apache::loncommon::cleanup_html($form->{role}); 185: if ($role ne '') { 186: $retry .= (($retry=~/\?/)?'&':'?').'role='.$role; 187: } 188: } 189: if (exists($form->{symb})) { 190: my $symb = &Apache::loncommon::cleanup_html($form->{symb}); 191: if ($symb ne '') { 192: $retry .= (($retry=~/\?/)?'&':'?').'symb='.$symb; 193: } 194: } 195: my $end_page = &Apache::loncommon::end_page(); 196: &Apache::loncommon::content_type($r,'text/html'); 197: $r->send_http_header; 198: my @actions = 199: (&mt('Please [_1]log in again[_2].','<a href="'.$retry.'">','</a>')); 200: my $loginhelp = &loginhelpdisplay($udom); 201: if ($loginhelp) { 202: push(@actions, '<a href="'.$loginhelp.'">'.&mt('Login problems?').'</a>'); 203: } 204: #FIXME: link to helpdesk might be added here 205: 206: $r->print( 207: $start_page 208: .'<h2>'.&mt('Sorry ...').'</h2>' 209: .&Apache::lonhtmlcommon::confirm_success(&mt($message),1).'<br /><br />' 210: .&Apache::lonhtmlcommon::actionbox(\@actions) 211: .$end_page 212: ); 213: } 214: 215: # ------------------------------------------------------------------ Rerouting! 216: 217: sub reroute { 218: my ($r) = @_; 219: &Apache::loncommon::content_type($r,'text/html'); 220: $r->send_http_header; 221: my $msg='<b>'.&mt('Sorry ...').'</b><br />' 222: .&mt('Please [_1]log in again[_2].'); 223: &Apache::loncommon::simple_error_page($r,'Rerouting',$msg,{'no_auto_mt_msg' => 1}); 224: } 225: 226: # ---------------------------------------------------------------- Main handler 227: 228: sub handler { 229: my $r = shift; 230: my $londocroot = $r->dir_config('lonDocRoot'); 231: my $form; 232: # Are we re-routing? 233: if (-e "$londocroot/lon-status/reroute.txt") { 234: &reroute($r); 235: return OK; 236: } 237: 238: &Apache::lonlocal::get_language_handle($r); 239: 240: # -------------------------------- Prevent users from attempting to login twice 241: my $handle = &Apache::lonnet::check_for_valid_session($r); 242: if ($handle ne '') { 243: my $lonidsdir=$r->dir_config('lonIDsDir'); 244: if ($handle=~/^publicuser\_/) { 245: # For "public user" - remove it, we apparently really want to login 246: unlink($r->dir_config('lonIDsDir')."/$handle.id"); 247: } else { 248: # Indeed, a valid token is found 249: &Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle); 250: &Apache::loncommon::content_type($r,'text/html'); 251: $r->send_http_header; 252: my $start_page = 253: &Apache::loncommon::start_page('Already logged in'); 254: my $end_page = 255: &Apache::loncommon::end_page(); 256: my $dest = '/adm/roles'; 257: if ($env{'form.firsturl'} ne '') { 258: $dest = $env{'form.firsturl'}; 259: } 260: $r->print( 261: $start_page 262: .'<p class="LC_warning">'.&mt('You are already logged in!').'</p>' 263: .'<p>'.&mt('Please either [_1]continue the current session[_2] or [_3]log out[_4].' 264: ,'<a href="'.$dest.'">','</a>','<a href="/adm/logout">','</a>') 265: .'</p>' 266: .$end_page 267: ); 268: return OK; 269: } 270: } 271: 272: # ---------------------------------------------------- No valid token, continue 273: 274: 275: my $buffer; 276: if ($r->header_in('Content-length') > 0) { 277: $r->read($buffer,$r->header_in('Content-length'),0); 278: } 279: my %form; 280: foreach my $pair (split(/&/,$buffer)) { 281: my ($name,$value) = split(/=/,$pair); 282: $value =~ tr/+/ /; 283: $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg; 284: $form{$name}=$value; 285: } 286: 287: if ((!$form{'uname'}) || (!$form{'upass0'}) || (!$form{'udom'})) { 288: &failed($r,'Username, password and domain need to be specified.', 289: \%form); 290: return OK; 291: } 292: 293: # split user logging in and "su"-user 294: 295: ($form{'uname'},$form{'suname'})=split(/\:/,$form{'uname'}); 296: $form{'uname'} = &LONCAPA::clean_username($form{'uname'}); 297: $form{'suname'}= &LONCAPA::clean_username($form{'suname'}); 298: $form{'udom'} = &LONCAPA::clean_domain( $form{'udom'}); 299: 300: my $role = $r->dir_config('lonRole'); 301: my $domain = $r->dir_config('lonDefDomain'); 302: my $prodir = $r->dir_config('lonUsersDir'); 303: my $contact_name = &mt('LON-CAPA helpdesk'); 304: 305: # ---------------------------------------- Get the information from login token 306: 307: my $tmpinfo=Apache::lonnet::reply('tmpget:'.$form{'logtoken'}, 308: $form{'serverid'}); 309: 310: my %sessiondata; 311: if ($form{'iptoken'}) { 312: %sessiondata = &Apache::lonnet::tmpget($form{'iptoken'}); 313: my $delete = &Apache::lonnet::tmpdel($form{'iptoken'}); 314: } 315: 316: if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost') || 317: ($tmpinfo eq 'no_such_host')) { 318: &failed($r,'Information needed to verify your login information is missing, inaccessible or expired.',\%form); 319: return OK; 320: } else { 321: my $reply = &Apache::lonnet::reply('tmpdel:'.$form{'logtoken'}, 322: $form{'serverid'}); 323: if ( $reply ne 'ok' ) { 324: &failed($r,'Session could not be opened.',\%form); 325: &Apache::lonnet::logthis("ERROR got a reply of $reply when trying to contact ". $form{'serverid'}." to get login token"); 326: return OK; 327: } 328: } 329: 330: if (!&Apache::lonnet::domain($form{'udom'})) { 331: &failed($r,'The domain you provided is not a valid LON-CAPA domain.',\%form); 332: return OK; 333: } 334: 335: my ($key,$firsturl,$rolestr,$symbstr)=split(/&/,$tmpinfo); 336: if ($rolestr) { 337: $rolestr = &unescape($rolestr); 338: } 339: if ($symbstr) { 340: $symbstr= &unescape($symbstr); 341: } 342: if ($rolestr =~ /^role=/) { 343: (undef,$form{'role'}) = split('=',$rolestr); 344: } 345: if ($symbstr =~ /^symb=/) { 346: (undef,$form{'symb'}) = split('=',$symbstr); 347: } 348: 349: my $upass = $ENV{HTTPS} ? join("", @form{qw(upass0 upass1 upass2)}) 350: : decrypt($key, @form{qw(upass0 upass1 upass2)}); 351: 352: # ---------------------------------------------------------------- Authenticate 353: 354: my %domconfig = &Apache::lonnet::get_dom('configuration',['usercreation'],$form{'udom'}); 355: my ($cancreate,$statustocreate) = 356: &Apache::createaccount::get_creation_controls($form{'udom'},$domconfig{'usercreation'}); 357: my $defaultauth; 358: if (ref($cancreate) eq 'ARRAY') { 359: if (grep(/^login$/,@{$cancreate})) { 360: $defaultauth = 1; 361: } 362: } 363: my $clientcancheckhost = 1; 364: my $authhost=Apache::lonnet::authenticate($form{'uname'},$upass, 365: $form{'udom'},$defaultauth, 366: $clientcancheckhost); 367: 368: # --------------------------------------------------------------------- Failed? 369: 370: if ($authhost eq 'no_host') { 371: &failed($r,'Username and/or password could not be authenticated.', 372: \%form); 373: return OK; 374: } elsif ($authhost eq 'no_account_on_host') { 375: if ($defaultauth) { 376: my $domdesc = &Apache::lonnet::domain($form{'udom'},'description'); 377: unless (&check_can_host($r,\%form,'no_account_on_host',$domdesc)) { 378: return OK; 379: } 380: my $start_page = 381: &Apache::loncommon::start_page('Create a user account in LON-CAPA'); 382: my $lonhost = $r->dir_config('lonHostID'); 383: my $origmail = $Apache::lonnet::perlvar{'lonSupportEMail'}; 384: my $contacts = 385: &Apache::loncommon::build_recipient_list(undef,'helpdeskmail', 386: $form{'udom'},$origmail); 387: my ($contact_email) = split(',',$contacts); 388: my $output = 389: &Apache::createaccount::username_check($form{'uname'},$form{'udom'}, 390: $domdesc,'',$lonhost, 391: $contact_email,$contact_name, 392: undef,$statustocreate); 393: &Apache::loncommon::content_type($r,'text/html'); 394: $r->send_http_header; 395: &Apache::createaccount::print_header($r,$start_page); 396: $r->print('<h3>'.&mt('Account creation').'</h3>'. 397: &mt('Although your username and password were authenticated, you do not currently have a LON-CAPA account at this institution.').'<br />'. 398: $output.&Apache::loncommon::end_page()); 399: return OK; 400: } else { 401: &failed($r,'Although your username and password were authenticated, you do not currently have a LON-CAPA account in this domain, and you are not permitted to create one.',\%form); 402: return OK; 403: } 404: } 405: 406: if (($firsturl eq '') || 407: ($firsturl=~/^\/adm\/(logout|remote)/)) { 408: $firsturl='/adm/roles'; 409: } 410: 411: my $hosthere; 412: if ($form{'iptoken'}) { 413: if (($sessiondata{'domain'} eq $form{'udom'}) && 414: ($sessiondata{'username'} eq $form{'uname'})) { 415: $hosthere = 1; 416: } 417: } 418: 419: # --------------------------------- Are we attempting to login as somebody else? 420: if ($form{'suname'}) { 421: # ------------ see if the original user has enough privileges to pull this stunt 422: if (&Apache::lonnet::privileged($form{'uname'},$form{'udom'})) { 423: # ---------------------------------------------------- see if the su-user exists 424: unless (&Apache::lonnet::homeserver($form{'suname'},$form{'udom'}) 425: eq 'no_host') { 426: &Apache::lonnet::logthis(&Apache::lonnet::homeserver($form{'suname'},$form{'udom'})); 427: # ------------------------------ see if the su-user is not too highly privileged 428: unless (&Apache::lonnet::privileged($form{'suname'},$form{'udom'})) { 429: # -------------------------------------------------------- actually switch users 430: &Apache::lonnet::logperm('User '.$form{'uname'}.' at '.$form{'udom'}. 431: ' logging in as '.$form{'suname'}); 432: $form{'uname'}=$form{'suname'}; 433: } else { 434: &Apache::lonnet::logthis('Attempted switch user to privileged user'); 435: } 436: } 437: } else { 438: &Apache::lonnet::logthis('Non-privileged user attempting switch user'); 439: } 440: } 441: 442: my ($is_balancer,$otherserver); 443: 444: unless ($hosthere) { 445: ($is_balancer,$otherserver) = 446: &Apache::lonnet::check_loadbalancing($form{'uname'},$form{'udom'}); 447: } 448: 449: if ($is_balancer) { 450: if (!$otherserver) { 451: ($otherserver) = &Apache::lonnet::choose_server($form{'udom'}); 452: } 453: if ($otherserver) { 454: &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef, 455: \%form); 456: my $switchto = '/adm/switchserver?otherserver='.$otherserver; 457: if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) { 458: $switchto .= '&origurl='.$firsturl; 459: } 460: if ($form{'role'}) { 461: $switchto .= '&role='.$form{'role'}; 462: } 463: if ($form{'symb'}) { 464: $switchto .= '&symb='.$form{'symb'}; 465: } 466: $r->internal_redirect($switchto); 467: } else { 468: $r->print(&noswitch()); 469: } 470: return OK; 471: } else { 472: if (!&check_can_host($r,\%form,$authhost)) { 473: my ($otherserver) = &Apache::lonnet::choose_server($form{'udom'}); 474: if ($otherserver) { 475: &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect',undef, 476: \%form); 477: my $switchto = '/adm/switchserver?otherserver='.$otherserver; 478: if (($firsturl) && ($firsturl ne '/adm/switchserver') && ($firsturl ne '/adm/roles')) { 479: $switchto .= '&origurl='.$firsturl; 480: } 481: if ($form{'role'}) { 482: $switchto .= '&role='.$form{'role'}; 483: } 484: if ($form{'symb'}) { 485: $switchto .= '&symb='.$form{'symb'}; 486: } 487: $r->internal_redirect($switchto); 488: } else { 489: $r->print(&noswitch()); 490: } 491: return OK; 492: } 493: 494: # ------------------------------------------------------- Do the load balancing 495: 496: # ---------------------------------------------------------- Determine own load 497: my $loadlim = $r->dir_config('lonLoadLim'); 498: my $loadavg; 499: { 500: my $loadfile=Apache::File->new('/proc/loadavg'); 501: $loadavg=<$loadfile>; 502: } 503: $loadavg =~ s/\s.*//g; 504: my $loadpercent=sprintf("%.1f",100*$loadavg/$loadlim); 505: my $userloadpercent=&Apache::lonnet::userload(); 506: 507: # ---------------------------------------------------------- Are we overloaded? 508: if ((($userloadpercent>100.0)||($loadpercent>100.0))) { 509: my $unloaded=Apache::lonnet::spareserver($loadpercent,$userloadpercent,1,$form{'udom'}); 510: if (!$unloaded) { 511: ($unloaded) = &Apache::lonnet::choose_server($form{'udom'}); 512: } 513: if ($unloaded) { 514: &success($r,$form{'uname'},$form{'udom'},$authhost,'noredirect', 515: undef,\%form); 516: $r->internal_redirect('/adm/switchserver?otherserver='.$unloaded.'&origurl='.$firsturl); 517: return OK; 518: } 519: } 520: &success($r,$form{'uname'},$form{'udom'},$authhost,$firsturl,undef, 521: \%form); 522: return OK; 523: } 524: } 525: 526: sub decrypt { 527: my ($key, @chunks) = @_; 528: 529: my $keybin = pack("H16",$key); 530: 531: my $cipher; 532: if ($Crypt::DES::VERSION >= 2.03) { 533: $cipher = new Crypt::DES $keybin; 534: } else { 535: $cipher = new DES $keybin; 536: } 537: 538: my $upass=''; 539: for (my $i=0;$i<=2;$i++) { 540: my $chunk = 541: $cipher->decrypt( 542: unpack("a8",pack("H16",substr($chunks[$i],0,16)))); 543: 544: $chunk .= 545: $cipher->decrypt( 546: unpack("a8",pack("H16",substr($chunks[$i],16,16)))); 547: 548: $chunk = substr($chunk,1,ord(substr($chunk,0,1))); 549: $upass .= $chunk; 550: } 551: return $upass; 552: } 553: 554: sub check_can_host { 555: my ($r,$form,$authhost,$domdesc) = @_; 556: return unless (ref($form) eq 'HASH'); 557: my $canhost = 1; 558: my $lonhost = $r->dir_config('lonHostID'); 559: my $udom = $form->{'udom'}; 560: my @intdoms; 561: my $internet_names = &Apache::lonnet::get_internet_names($lonhost); 562: if (ref($internet_names) eq 'ARRAY') { 563: @intdoms = @{$internet_names}; 564: } 565: my $uprimary_id = &Apache::lonnet::domain($udom,'primary'); 566: my $uint_dom = &Apache::lonnet::internet_dom($uprimary_id); 567: unless ($uint_dom ne '' && grep(/^\Q$uint_dom\E$/,@intdoms)) { 568: my $machine_dom = &Apache::lonnet::host_domain($lonhost); 569: my $hostname = &Apache::lonnet::hostname($lonhost); 570: my $serverhomeID = &Apache::lonnet::get_server_homeID($hostname); 571: my $serverhomedom = &Apache::lonnet::host_domain($serverhomeID); 572: my %defdomdefaults = &Apache::lonnet::get_domain_defaults($serverhomedom); 573: my %udomdefaults = &Apache::lonnet::get_domain_defaults($udom); 574: my $loncaparev; 575: if ($authhost eq 'no_account_on_host') { 576: $loncaparev = &Apache::lonnet::get_server_loncaparev($machine_dom); 577: } else { 578: $loncaparev = &Apache::lonnet::get_server_loncaparev($machine_dom,$lonhost); 579: } 580: $canhost = &Apache::lonnet::can_host_session($udom,$lonhost,$loncaparev, 581: $udomdefaults{'remotesessions'}, 582: $defdomdefaults{'hostedsessions'}); 583: } 584: unless ($canhost) { 585: if ($authhost eq 'no_account_on_host') { 586: my $checkloginvia = 1; 587: my ($login_host,$hostname) = 588: &Apache::lonnet::choose_server($udom,$checkloginvia); 589: &Apache::loncommon::content_type($r,'text/html'); 590: $r->send_http_header; 591: if ($login_host ne '') { 592: my $protocol = $Apache::lonnet::protocol{$login_host}; 593: $protocol = 'http' if ($protocol ne 'https'); 594: my $newurl = $protocol.'://'.$hostname.'/adm/createaccount'; 595: $r->print(&Apache::loncommon::start_page('Create a user account in LON-CAPA'). 596: '<h3>'.&mt('Account creation').'</h3>'. 597: &mt('You do not currently have a LON-CAPA account at this institution.').'<br />'. 598: '<p>'.&mt('You will be able to create one by logging into a LON-CAPA server within the [_1] domain.',$domdesc).'</p>'. 599: '<p>'.&mt('[_1]Log in[_2]','<a href="'.$newurl.'">','</a>'). 600: &Apache::loncommon::end_page()); 601: } else { 602: $r->print(&Apache::loncommon::start_page('Access to LON-CAPA unavailable'). 603: '<h3>'.&mt('Account creation unavailable').'</h3>'. 604: &mt('You do not currently have a LON-CAPA account at this institution.').'<br />'. 605: '<p>'.&mt('Currently a LON-CAPA server is not available within the [_1] domain for you to log-in to, to create an account.',$domdesc).'</p>'. 606: &Apache::loncommon::end_page()); 607: } 608: } else { 609: &success($r,$form->{'uname'},$udom,$authhost,'noredirect',undef, 610: $form); 611: my ($otherserver) = &Apache::lonnet::choose_server($udom); 612: $r->internal_redirect('/adm/switchserver?otherserver='.$otherserver); 613: } 614: } 615: return $canhost; 616: } 617: 618: sub noswitch { 619: my $result = &Apache::loncommon::start_page('Access to LON-CAPA unavailable'). 620: '<h3>'.&mt('Session unavailable').'</h3>'. 621: &mt('This LON-CAPA server is unable to host your session.').'<br />'. 622: '<p>'.&mt('Currently no other LON-CAPA server is available to host your session either.').'</p>'. 623: &Apache::loncommon::end_page(); 624: return $result; 625: } 626: 627: sub loginhelpdisplay { 628: my ($authdomain) = @_; 629: my $login_help = 1; 630: my $lang = &Apache::lonlocal::current_language(); 631: if ($login_help) { 632: my $dom = $authdomain; 633: if ($dom eq '') { 634: $dom = &Apache::lonnet::default_login_domain(); 635: } 636: my %domconfhash = &Apache::loncommon::get_domainconf($dom); 637: my $loginhelp_url; 638: if ($lang) { 639: $loginhelp_url = $domconfhash{$dom.'.login.helpurl_'.$lang}; 640: if ($loginhelp_url ne '') { 641: return $loginhelp_url; 642: } 643: } 644: $loginhelp_url = $domconfhash{$dom.'.login.helpurl_nolang'}; 645: if ($loginhelp_url ne '') { 646: return $loginhelp_url; 647: } else { 648: return '/adm/loginproblems.html'; 649: } 650: } 651: return; 652: } 653: 654: 1; 655: __END__ 656: 657: