[BACK]Return to loncacc.pm CVS log [TXT] [DIR] Up to [LON-CAPA] / loncom / auth

Diff for /loncom/auth/loncacc.pm between versions 1.13 and 1.18

version 1.13, 2000/12/26 19:50:25 version 1.18, 2001/12/21 16:57:54
Line 1 Line 1
 # The LearningOnline Network  # The LearningOnline Network
 # Cookie Based Access Handler for Construction Area  # Cookie Based Access Handler for Construction Area
 # (lonacc: 5/21/99,5/22,5/29,5/31 Gerd Kortemeyer)  # (lonacc: 5/21/99,5/22,5/29,5/31 Gerd Kortemeyer)
   #
   # $Id$
   #
   # Copyright Michigan State University Board of Trustees
   #
   # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
   #
   # LON-CAPA is free software; you can redistribute it and/or modify
   # it under the terms of the GNU General Public License as published by
   # the Free Software Foundation; either version 2 of the License, or
   # (at your option) any later version.
   #
   # LON-CAPA is distributed in the hope that it will be useful,
   # but WITHOUT ANY WARRANTY; without even the implied warranty of
   # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   # GNU General Public License for more details.
   #
   # You should have received a copy of the GNU General Public License
   # along with LON-CAPA; if not, write to the Free Software
   # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
   #
   # /home/httpd/html/adm/gpl.txt
   #
   # http://www.lon-capa.org/
   #
   # YEAR=2000
 # 6/15,16/11,22/11,  # 6/15,16/11,22/11,
 # 01/06,01/11,6/1,9/25,9/28,11/22,12/25,12/26 Gerd Kortemeyer  # YEAR=2001
   # 01/06,01/11,6/1,9/25,9/28,11/22,12/25,12/26,
   # 01/06/01,05/04,05/05,05/09 Gerd Kortemeyer
   # 12/21 Scott Harrison
   #
   ###
   
 package Apache::loncacc;  package Apache::loncacc;
   
Line 10  use strict; Line 41  use strict;
 use Apache::Constants qw(:common :http :methods);  use Apache::Constants qw(:common :http :methods);
 use Apache::File;  use Apache::File;
 use CGI::Cookie();  use CGI::Cookie();
   use Fcntl qw(:flock);
   
   sub constructaccess {
       my ($url,$ownerdomain)=@_;
       my ($ownername)=($url=~/\/(?:\~|priv\/|home\/)(\w+)/);
       unless (($ownername) && ($ownerdomain)) { return ''; }
   
       if (($ownername eq $ENV{'user.name'}) &&
           ($ownerdomain eq $ENV{'user.domain'})) {
    return ($ownername,$ownerdomain);
       }
   
       my $capriv='user.priv.ca./'.
                  $ownerdomain.'/'.$ownername.'./'.
          $ownerdomain.'/'.$ownername;
       foreach (keys %ENV) {
           if ($_ eq $capriv) {
              return ($ownername,$ownerdomain);
           }
       }
   
       return '';
   }
   
 sub handler {  sub handler {
     my $r = shift;      my $r = shift;
Line 22  sub handler { Line 76  sub handler {
         $handle=~s/\W//g;          $handle=~s/\W//g;
         my $lonidsdir=$r->dir_config('lonIDsDir');          my $lonidsdir=$r->dir_config('lonIDsDir');
         if ((-e "$lonidsdir/$handle.id") && ($handle ne '')) {          if ((-e "$lonidsdir/$handle.id") && ($handle ne '')) {
             my $ownername=$requrl;  
             $ownername=~s/\/(?:\~|priv\/)(\w+).*/\1/;  
             my $ownerdomain=$r->dir_config('lonDefDomain');  
             my @handleparts=split(/\_/,$handle);  
             my $username=$handleparts[0];  
             my $domain=$handleparts[2];  
             if (($username ne $ownername) || ($domain ne $ownerdomain)) {  
                 $r->log_reason  
                    ("$username at $domain not authorized", $r->filename);   
         return HTTP_NOT_ACCEPTABLE;  
             }  
             my @profile;              my @profile;
     {      {
              my $idf=Apache::File->new("$lonidsdir/$handle.id");               my $idf=Apache::File->new("$lonidsdir/$handle.id");
                flock($idf,LOCK_SH);
              @profile=<$idf>;               @profile=<$idf>;
                $idf->close();
     }      }
             my $envi;              my $envi;
             for ($envi=0;$envi<=$#profile;$envi++) {              for ($envi=0;$envi<=$#profile;$envi++) {
Line 48  sub handler { Line 93  sub handler {
             $ENV{'request.state'}    = "construct";              $ENV{'request.state'}    = "construct";
             $ENV{'request.filename'} = $r->filename;              $ENV{'request.filename'} = $r->filename;
   
               unless (&constructaccess($requrl,$r->dir_config('lonDefDomain'))) {
                   $r->log_reason("Unauthorized $requrl", $r->filename); 
           return HTTP_NOT_ACCEPTABLE;
               }
   
 # -------------------------------------------------------- Load POST parameters  # -------------------------------------------------------- Load POST parameters
   
   
Line 131  sub handler { Line 181  sub handler {
 1;  1;
 __END__  __END__
   
   =head1 NAME
   
   Apache::lonacc - Cookie Based Access Handler for Construction Area
   
   =head1 SYNOPSIS
   
   Invoked (for various locations) by /etc/httpd/conf/srm.conf:
   
    PerlAccessHandler       Apache::loncacc
   
   =head1 INTRODUCTION
   
   This module enables cookie based authentication for construction area
   and is used to control access for three (essentially equivalent) URIs.
   
    <LocationMatch "^/priv.*">
    <LocationMatch "^/\~.*">
    <LocationMatch "^/\~.*/$">
   
   Whenever the client sends the cookie back to the server, 
   if the cookie is missing or invalid, the user is re-challenged
   for login information.
   
   This is part of the LearningOnline Network with CAPA project
   described at http://www.lon-capa.org.
   
   =head1 HANDLER SUBROUTINE
   
   This routine is called by Apache and mod_perl.
   
   =over 4
   
   =item *
   
   load POST parameters
   
   =item *
   
   store where they wanted to go (first url entered)
   
   =back
   
   =head1 OTHERSUBROUTINES
   
   =over 4
   
   =item *
   
   constructaccess($url,$ownerdomain) : See if the owner domain and name
   in the URL match those in the expected environment.  If so, return 
   two element list ($ownername,$ownerdomain).  Else, return null string.
   
   =back
   
   =cut
   
   
   
Removed from v.1.13  
changed lines
  Added in v.1.18

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>