CVS log for loncom/auth/lonlogin.pm

Up to [LON-CAPA] / loncom / auth

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- For 2.11.4 (modified)
  Include changes in 1.207

- Avoid endless redirects to current host when login page redirects are in
  effect and original URL request was for /enc/ for an expired session.

- For 2.11.4 (modified)
  Include changes in 1.206

- Bugs 6754 and 6907
  - Return of grades to launcher CMS supported for resources or folders
    accessed via LTI-mediated deep link.
  - Support option: "Encrypt stored consumer secrets defined in domain"
  - Signing of LTI payloads for roster retrieval, passback of grades,
    and callback to logput launcher CMS session all now occur on
    primary library server for course's domain.

- For 2.11.4 (modified)
  Include changes in 1.205

- Typo

- For 2.11.4 (modified)
  Include changes in 1.204

- Support access to specific LON-CAPA message after login in cases where a
  LON-CAPA loadbalancer node is used as the portal for a domain.

- For 2.11.4 (modified)
  Include changes in 1.202, 1.203

- Remove unused scalar

- Dual SSO and non-SSO login from /adm/login
  - Display of domain configuration for each server split into two tables
    so input textboxes can be longer.
  - "Pop-up if iframe" (Y/N) item added.  If Y, when login page is in an
    iframe, SSO log-in dialog will be displayed in a new window, i.e.,
    not within the iframe, e.g., to satisfy sameorigin requirement in
    x-frame-options in header sent by SSO server.

- For 2.11.4 (modified)
  Include changes in 1.199, 1.200, 1.201

- Bug 6907
  "Exit Tool" button available to logout a session launched via deep link
  and escape iframe and redirect (for LTI-protected link).

- Bug 6907
  - Set request.linkprotuser in %env for students accessing deep-linked items
    with LTI link protection which includes username from other LMS.
  - Set "only_body" for intermediate pages shown while session is being set up
    for LTI link-protected access.
  - Provide appropriate feedback when a deep link is followed but the user
    only has a future and/or expired role in the target course.

- Bug 6907
  For LTI-protected deep links in which username is included in launch payload
  compare username in payload with username for any existing LON-CAPA session
  in current web browser and expire old session, if different user.

- For 2.11.4 (modified)
  Include changes in 1.198

- Bug 6907
    Stop deep-linked items escaping iframe context, if LTI link protection in
    effect, but user needs to authenticate, and login page supports dual SSO
    and non-SSO login.

- For 2.11.4 (modified)
  Include changes in rev. 1.196 and 1.197.

- Bug 6907
  Stop deep-linked items escaping iframe context, if LTI link protection in
  effect, but user needs to authenticate.

- Bug 6907
  Stop deep-linked items escaping iframe context, if LTI link protection in
  effect, but user needs to authenticate.

- For 2.11.4 (modified)
  Include changes in 1.195

- For 2.11
  Backport 1.195

- Set focus to username field when /adm/login is landing page for SSO and
  non-SSO authentication, and user toggles to use non-SSO auth.

- For 2.11.4 (modified)
  Include changes in 1.194

- For 2.11
  Backport 1.194

- Domain config for alt attributes for banner, main logo, and domain logo
  used on log-in page.
- Add id attributes to img tags.

- For 2.11.4 (modified)
  Include changes in 1.172, 1.177, 1.179, 1.187 (part), 1.192 (part),
  1.193 (part).

- For 2.11
  Backport 1.183, 1.184, 1.185, 1.186, 1.187 (part), 1.188, 1.189, 1.190,
            1.191, 1.192 (part), 1.193

- Bug 6907
  - Use of token to store linkprot or linkkey compatible with use of
    btoken and iptoken (for load balancing and IP change respectively).
  - Launching access from a deeplink, with its own ltoken and/or linkkey,
    for a user session originally launched from a different deeplink will
    update required session information.

- Use token to store role, symb, linkprot, and/or linkkey when dual log-in
  page to support SSO (Shibboleth) and non-SSO is in use, and for "log in
  again" retry link for failed login, instead of using query string directly.
- When digest is used by tmpput handler in lond to generate an id, only use
  id which does not already exist in LON-CAPA's tmp directory.

- If SAML authentication (Shibboleth) is using /adm/login as landing page,
  delay deleting ltoken from tempdir, so it is available to lonacc::sso_login()
- Append either ltoken or linkkey to landing page link to /adm/sso to support
  deep-linking.

- Include name of item in query string as well as the value.

- $env{'form.firsturl'} not kept if it points at /adm/logout

- Use URI::Escape to encode firsturl in query string, and only use
  HTML::Entities for single quotes.

- HTML Entity encoding of user-supplied input in query string for URLs.

- Declaration no longer needed here.

- Declaration no longer needed.

- For SAML authentication (Shibboleth) config for each of domain's nodes
  to set /adm/log-in as landing page for user toggle between SSO or non-SSO.

- Bug 6914
 - Check whether WAF proxy alias should be used when using switchserver.
 - Requests for /adm/dns/hosts and /adm/dns/domain from other nodes in the
   network do not require redirecting to an alias (if in use).

- For 2.11.3 (modified)
  Include changes in 1.182

- For 2.11
  Backport 1.182

- Retrieval of requestor's IP address centralized in lonnet::get_requestor_ip()
- Domain configuration to allow domain's LON-CAPA nodes to operate behind a
  WAF/Reverse Proxy using aliased hostname (CNAME).
- Web requests from other nodes bypass the WAF as their requests are made
  directly to the server hostname (A record); same for internal LON-CAPA
  connections for lonc -> lond.

- For 2.11.3 (modified)
  Include changes in 1.180, 1.181

- For 2.11
  Backport 1.181

- Prevent duplicates in list of other potential servers.

- For 2.11
  Backport 1.180

- When server is unavailable for login because of local lonc/lond problem:
  - Reinstate pre-2.2.2 behavior whereby list of other potential servers
  featured "preferred" servers first.
  - "Preferred" list from domain config for "User session hosting/offloading"
    for the server, instead of from spare.tab file.
  - satisfy w3c validation
  - links are to https or http as appropriate from data in dns_hosts.tab

- For 2.11.3 (modified)
  Include changes in 1.172

- For 2.11
  Backport 1.170, 1.173

- For 2.11
  Backport 1.174, 1.175, 1.176, 1.178

- For 2.11.2 (modified)
  Include changes in 1.172

- Bug 6400
  - Enforce access restrictions for content which is deeplink-only (users
    with "advanced priv for current role are exempt).
  - Support "key" link type in deeplink parameter (requested link must either
    be sent with linkkey as element in POSTed data, or with linkkey in query
    string).  Corresponding value must match key set in deeplink parameter.

- Call Apache::lonnet::hostname($lonhost) before accessing
  $Apache::lonnet::protocol{$lonhost) so %Apache::lonnet::protocol is populated.

- Bug 6400 Deep-linking
  - URLs like /adm/lti/tiny/domain/uniqueID can be used to restrict use of
    deep links to access from another LTI-enabled application (no user data
    passed in this context).

- Avoid repeated redirects back and forth between balancer and target node
  in corner case.
  - Remove file on balancer with record of node in use when browser lacks
    cookie for the active session on (balanced) node, when log-in page on
    that node is set to redirect.
  - If removal fails, remove the user's session file on the node itself.

- Validate domain when detection of an IP change by /adm/migrateuser.pm
  brought us here.

- Domain config for load balancer to use cookie to record offload target.
  Subsequent requests by same user/browser will send requests to same target
  if remote session still active, and remote node not overloaded.

- For 2.11
  Backport 1.169, 1.170 (modified), 1.171.

- For 2.11.2 (modified)
  Include changes in 1.169 omitted in rev. 1.158.2.6.2.1

- Use 'secure' attribute for session cookie on servers using Apache/SSL.

- Bug 6400 Tiny URL for deep-linking

- For 2.11.2 (modified)
  Include changes in 1.169, 1.170 (modified), 1.171.

- When browser sends a LON-CAPA cookie for an expired session, redirect user
  to portal URL for user's domain for re-authentication.

- Name of cookie for public user set to lonPubID.

- Header will direct browser to expire "public" cookie if a "public" user
  is attempting to login.

- For 2.11
  - Backport 1.168

- For 2.11
  - Backport 1.165

- Improve display of log-in page for mobile devices with small viewports.

- Fix typo in rev. 1.166

- Reinstate log-in from https following changes in rev. 1.165.

- Bug 5679

- For 2.11
  Backport 1.163, 1.164

- Eliminate duplicate definitions.

- Support custom HTML mark-up in head block of log-in page for different
  domains on a multi-domain server.

- For 2.11
  - Missed in 1.158.2.1 backport of changes in 1.161.

- For 2.11
  - Backport 1.159

- For 2.11
  - Backport 1.161

- Reinstate changes in rev 1.159, which were removed in rev. 1.160

- Domain configuration to accommodate inclusion of custom HTML mark-up in
  head block of log-in page (e.g., javascript for analytics) for each server
  in a domain.

Disabled encryption and decryption of user's password for login, if the
login server uses https. Otherwise encryption and decryption stay enabled.

Bug 6675
- Changed client IP address when load balancing:
  Support option to host on Load Balancer itself, after re-authentication.

- Move &cleanup_html() from lonsupportreq.pm to loncommon.pm to facilitate
  reuse.
- Validation.

- Bug 6675
- Case where $env{'REMOTE_ADDR'} as reported to server selected to host
  user session, is different from $env{'REMOTE_ADDR'} as reported to
  server which handled original authentication request.
  - Domain configuration for a load balancing server can be set to one of
    the following, if an IP mismatch is detected by /adm/migrateuser
    during credentials checking after redirect via /adm/switchserver
    (i) Session will be hosted on Load Balancer
    (ii) Session will be hosted on offload server
    for each of (a) SSO users from load balancer's domain, (b) non-SSO users
  - Setting to host on load balancer will be ignored if switch server was called
    by an author or co-author switching to server housing the authoring space.

- Bug 6673.
Do not autocapitalize or autocorrect text entered in username or domain fields
in log-in page, if user agent string implies client browser is for a mobile
device.

(Note: autocapitalize & autocorrect attributes are not compliant for
XHTML 1.0 Transitional)

- Remove any characters excluded in domain names from value for codedom
  added to query string for "Contact Helpdesk".

- Default is for "Contact Helpdesk" link to be shown on log-in page.

- Log-in page
  - Domain configuration to disable display of "Contact Helpdesk" link
    on log-in page (default is to display).
  - Don't display server administrator's e-mail address, if configured to be
    hidden, in the case where a user's self-declared domain is not the
    server's own domain.

- Move &loginhelpdisplay() from lonlogin.pm to lonauth.pm to facilitate reuse.
- Log-in help page configuration moved from helpsettings to login section in
  Domain configuration interface.
- Add ability to upload different help files for the different supported languages.
- Link to log-in help page depends on user's browser language preferences.

- Fix indents so code is easier to read.
  (standard LON-CAPA indent is 4 spaces).

changed <h1> to <p class='LC_error/warning/info'> where a headline is misplaced

- use lonDocRoot perlvar in place of static string: '/home/httpd/html'.

- Check for "no_such_host" response when storing logtoken.
- Only display advice to log-in into another server, if they
  other servers are available.

- Improve changes in rev 1.145.
  - No display of table rows for User Load, Server Load, or Version if
    there are no numbers to display.

Same vertical alignment for login box and main logo / announcement

Don't show "User Load: 0.00 percent" if there is no maximum load configured. That looks like nobody is using the system.

Bug 6345 resolution side effect:
Make changes from rev. 1.139 also work in Internet Explorer 6 and 7 by using the exact name (case!)

- Typo.

- Sanitize input from query string.

- Domain Logo moved to right side of lower box.
- Existing position: immediately below main logo looked odd if there
  was no announcement (which is displayed between the two logos).

- Offloading from a busy server delayed until after authentication so
  user's domain is available when determining which less loaded server
  will host (check that hosting is allowed).

- Bug 6345.

Bug 6271, Bug 5577:
Get rid of user authentication image on login page (always use text version)
including all corresponding configuration settings.
Although the user interface is cleaned up and functional, the internal domain configuration cleanup could be improved.

Bug 6271 - Simplyfied/consistent login page styles
- Replaced some special styles by standard styles and added special CSS directly to corresponding tags where needed.
- Removed unnecessary HTML table in login box.
- Removed upper separator line (seems unnecessary) and use simple <hr> at bottom.
- Consistent and simplified floating of block elements.
- Removed nobreak for catalog link and removed box width limit. Now more flexible with enhanced floating.
  "nobreak" not needed since box width (both, upper and lower box) is now controlled by the longest element (independent from used language, wording, browser font and other browser rendering differences). line break on (very) small screens should be ok though.
- Moved retrival of login box colors from loncommon.pm to lonlogin.pm - the only place where this and the corresponding styles are needed.

- Backport 1.136.

- Consistent wording.

- If custom log-in help page, link to page for domain displayed in domain textbox (may be different from default_login_domain.
- If user is already logged in, load user's %env so primary_menu links  are shown for user.
  - Don't display "login problems" link, if user is already logged in,
    as it doesn't make sense here.

- Backport 1.126, 1.127, 1.128, 1.133.

- Backport 1.134.

- Keep link to Course/Community Catalog on one line.

- More flexibilty in redirection from log-in page for a server in a domain to
  domain's load balancer or SSO server.
  - Append specified path from domain config to destination hostname.
  - No redirection if client IP is listed as exempt in domain config.

- Backport 1.129 (part).

- Backport 1.125.

- Corrected floating of domain description text: Always display text below logo.
- Optimized line breaks in loginInfo box: only break if content exists.
- No additional line breaks for contact block (too many variations are possible)
- Moved version number from contact block to server info box.
- Same alginment of server info box as elements above.
- Header: Replaced HTML table by simple div.

Added ability to customize Log-in Help

Info Box:
- Consistent design and indention for server admin e-mail address, version number, new account link
- Moved line breaks from subroutines which create the links/texts to the block where they are displayed
- Separate contact block from rest of info fields
- XHTML: Corrected label references for uname, password, domain

Consistent wording "Course Catalog" -> "Course/Community Catalog"

- Checking that the hostname is known for the hostID to which redirection is to occur works better for the case of a multi-domain server.

No direct log-in.
- &Apache::loncommon::get_domainconf() returns simple hash (not a hash of a hash etc.)
- Get redirection setting for appropriate domain and hostID from this hash.

- Check if domain configuration for the server has been set to replace standard
  log-in page wth redirection to a different server (e.g., a lonbalancer server).

- If a firsturl was specified in the query string for the log-in page,
   send the user there if the user already has a LON-CAPA session.

- Backport 1.123, 1.124.

- Backport 1.122

- Bug 3987.
- Destination URL and Symb supplied in query string to log-in page, used to load page after appropriate role selection.

- Bug 3987. Deep linking.
- Include role and symb in query string when calling log-in page.
- Role is automatically selected and resource is displayed (assuming user actually has the role, and its active, and symb is valid).

XHTML

- Backport 1.109, 1.106.2.2, 1.106.2.3, 1.115, 1.116, 1.117.
- xhtml.

- Move check for undefined spareserver to lonnet.pm (this is how lonnet.pm pre-1.784  (9/28/2006) used to behave).

There seem to be circumstances when $otherserver can wind up containing
http://  in that case map it to an empty string so that the login form
action becomes a relative link on the current server.

Removed unused textual interface code

Style preparations for a new loginpage layout, layout changes on loginpage

Edited Exit, Logout, log in, log out in eng/ger for consistent wording.

XHTML conform javascript start tag attributes

XHTML

Changed order of the links right to the login box.

- Replace word 'percent' with % to save space.
- Improvements in alignment of titles with corresponding values.

- Item description on a single line.

Changing loginContainer h1 into h2

- Backport 1.109.

- moving $textcol and $bgcol to loncommon
- changing size of input fields
- removed fieldset and legend

- cleaned up texthash
- moved link 'Contact Helpdesk' to LC_loginpage_loginInfo

moving $sidebg to loncommon and removing background color attribute from serverinformation table

- New subroutine in domainprefs: &logo_display_options() - used to provide "show" checkbox for login page images - 'img' and 'logo' ('Header' image and 'Main Logo' respectively).
- Domains can choose to include/exclude these two images in the log-in page.
  - Default is to include the images (and to display defaults, if not custom image was uploaded).

Seperating style and logic

Removing the Accessibility Options. Redesigning the page.

Localization:
- Added missing &mt() call

The load shown on the login page is actually the server load
in contrast to the user load, so let's make this clear.

Added warning message to login screen which is displayed, if user has no (java)script activated in the web browser.

- Localization: Added missing &mt() calls to "server is temporarily not available" screen
- Added headline to "server is temporarily not available" screen

- Checked posted form submissions for an element named 'firsturl'.
- Used to direct the user to a self-enrollment for a course after log-in.

- can add a "New User?" link to the log-in page to allow users with out LON-CAPA accounts to create them
- Default authentication type, argument and language configurable via "Domain Configuration" interface (supercede domain.tab).
- when these domain defaults are changed an e-mail is sent to LON-CAPA cluster administrator so dns_domain.tab can be updated to support LON-CAPA versions: 2.4, 2.5 and 2.6.
- Ability to enable/disable format rules for users self-enrolling wth e-mail addresses.
- Ability to determine types of usernames which may be created when self-enrolling (e-mail address, institutional logon, SSO, any, or none.

Localization: added missing &mt(...) for 'Already logged in' screen

- Localization: Added missing &mt(...)
- Optimized screen layout: added line break before 'remember option' in Accessibility Options

Bug 5577.

domainprefs.pm
- On log-in page, log-in box can use either an image or text.  DC can choose which of these to use, and override default image and text color and background.
- javascript functions - colchg_span() and get_id() added to support dhtml-driven change of colors in square boxes used for legend for background colors, when new colors are chosen from the color picker
- &Apache::loncommon::devalidate_domconfig_cache() called in more cases when configuration changes have been made for a domain.

lonlogin.pm
- replace html tags for start end end of page with loncommon::start_page() and loncommon::end_page()
- log-in box can use either an image (e.g., userauthentication.gif) or text (configurable by DC via "Domain Configuration")

loncommon.pm
-  &designparm() will retrieve settings for log-in box header on log-in page: image, text color, and background color.
- &endbodytag() can take an optional argument (a ref to a hash) which if key of noredirectlink is true in the hash will suppress display of a 'Continue' link in the case where the $env{'internal.head.redirect'} exists.

default.tab
- new parameters added for default log-in box header - a default image, and default colors for text and background.

- backport 1.97

- library servers can offload

- convert exisiting cookie reads/validations to use
   lonnet::check_for_valid_session

- common thorough validation of an existing user session

- switch to using loncommon mechanism

* increase character contrast by default (white background)
* labels
* fix some &mt()s
* css on roles screen

Unbalanced parentheses.

Default is to show coursecatalog link.

- domainprefs.pm
   - DCs can modify font colors, background colors and images for login page and also for defaults for different roles (student, coordinator, author, admin).
   - default settings (from /home/httpd/lonTabs/lonDomColors/default.tab) displayed if no custom choices made.
   - thumbnail images shown for both custom images and defaults
   - uploaded files stored in portfolio for domain config user (username: $dom-domainconfig), with indefinite public access permissions
   - $dom-domainconfig user created if not present

- loncommon.pm
  - Only default.tab file is now read from /home/httpd/lonTabs/lonDomColors.
  - defaults available in global hash: %Apache::loncommon::defaultdesign
  - &designparm() now gets custom settings for a specific domain from lonnet::get_domainconf($domain)
  - In &bodytag(), top frame rendering only uses $lonhttpdPort for images served from /adm, i.e., defaults.
  - Domain logo information now from config data from lonnet::get_domainconf($domain)

- lonlogin.pm
  - Display of Course Catalog link (default is display) and Server Administrator Email address (default is no display) now determined from domain configuration set for domain.

- lonnet.pm
  - get_domainconf() retrieves domain configuration.  Caching used (1800s lifetime).
      if configuration.db exists for primary library server in domain data from there,
          otherwise from /home/httpd/lonTabs/lonDomColors/$dom.tab (if one exists)
  - &get_dom() and &put_dom() can now take a fourth optional argument ($uhome) to allow domain data to be retrieved/stored in .db on specified host server ($uhome) in domain.
      Default is the primary library server in the domain.
  - &userfileupload() and &finishuserfileupload() can now accept to additional optional arguments (width and height in pixels for a thumbnail image to be stored for the uploaded file).
  - thumbnail is stored in same directory as full size image, and is named with a tn- prepended to the name of the full size image.
  - documentation updated for &get_dom and &put_dom().

- eliminating the domain hash globals in favor of functional access

- starting work on moving to distributed DNS, eliminate usage of the lonnet hostanme global

Move &additional_machine_domains() to lonnet.pm so it is more widely available

Move determination of default domain based on $ENV{'HTTP_HOST'} from lonlogin.pm to &default_login_domain() in lonnet.pm so it is more widely available

Default domain in coursecatalog now uses lonnet::default_login_domain() to display catlog for appropriate domain on a server with multiple domains, based on URL.

Bug 5136. If course catalog is displayed by a logged in user (other than public), catalog is shown for the domain of the current user's role, unless no role is selected, in which case catalog is shown for user's domain.

Non-logged in user and public users see course catalog of the domain of the machine, as determined from lonnet:::default_login_domain().

Some indentation and a missing </td>.

- lots of \w -> probper regexp replacements

Replace buttons for "Accessibility" and "About Lon-CAPA" with links.

Add link to course catalog.

Rename and move "Help" link.

Make "Contact Helpdesk" link more prominent.

Modify tmpput handler in lond to use md5_hash of random items when creating token for password resets to provide less deterministic token.

Add an extra argument to lonnet::tmpput() so context is included when request sent to lond (if context argument was supplied).  It appears some uses of lond::tmpput make use of the number_IP_number structure of current token.

Add Forgot Password link to log-in page.

Some wording changes in reset password page.

More comprehensive check of e-mail for valid format.

Require user to provide e-mail address when requesting password change, and compare with e-mail in record associated with LON-CAPA user account.

Too much email, this does not scale.

Removed system and server administrator from login screen.

- allow specifying addtional domains that can appear in the url for auto
  filling in the Domain filed with

- move absoltue_url to lonnet,
- use absolute_url in lonnet::ssi

- get redirected from arguments (in case were the ErrorDocument)

- move to using a sub as more location are going to need fixing.
- navigation thorugh a course with https:// works

- if the access was to 443 keep it there

- make the switch the the official server name explicit

&Apache::lonnet::unescape -> &unescape
&Apache::lonnet::escape -> &escape

- start_page

- typo

- BUG#4654

- BUG #4524 swtchserver works in a backward to 2.0 and before manner

More sticky than I thought.

Remove "already logged in" and "no active roles" weirdness after looking
at /public-resources.

i- include the multidomain url -> default domain code in the default line

- we want the domain from the domain.tab file ot the one from the URL

- adding <label>

Avoid "Harvard Problem"

Bug #2616: password can have 45 characters now

 lc before comaping in case of case issues between url and real domain name

- remove duplicate hostnames for the list of servers
- order the list in alphabetical (by hostanme) order

- ENV -> env

- nsdl version

Only display 'Contact Helpdesk' link on log-in page if a valid SupportEmail address has been defined in loncapa.conf.  Also include selected domain in query string passed to help request form when 'Contact Helpdesk' link is followed, so appropriate select boxes are shown.

Add some links and preamble to display of support request form, when helpdesk is called from log-in page. Change default color.

DC can select a CC role in his/her domain, and receive CC privileges on the fly.  Work in progress. Access is not quite set right for pages.

- xhtmlize login page

When not talking to lond, list the preferred servers first and a little
larger than the other servers.

$loadavg does not need to be expressed to 4 digits beyond the decimal point.
1 digit is probably enough.

- We were emitting 2 <html> tags

- backporting support for CSTR on multidomained machines into 1.1.X

- special lonlogin for s17

Bug #2357: Multiple logins from same host detected, even for round-robin IP
(because for example s2.lite.msu.edu-cookie does not get sent to
msu.lon-capa.org/adm/login).

Bug #2060: IE does not update URL field, points to
/adm/remote?action=collapse on re-login.

Set document charset according to language lexicon.

Setting content language in headers.

Start Portuguese for UNICAMP

more work on German translation
work on login page
Portuguese buttons

Initialize language handle

Also have login handlers detect re-reouting.

- need to tell it what domain

- backport 1.47

- backport 1.46

- bluh, spareserver return '' if now good alternate server found, need to leave $otherserver set to the current machine

Multidomain hosting: show expected domain design on login screen

Bug #815: Frontpage announcements can now be entered by
Superusers and Domain Coordinators
on a per-machine-base from "CLDR (Calendar/Announce)".

Bug #1968: version information more easily available

Passing of parameters to locate local client-side files.

- put user load on front page
- make userload pretty

- user login load balancing should work now BUG#958

- forgot a part when commiting a configuarable lonhttpd port

Direct notification email directly to login screen.

Login screen gets bent out of shape if more than one sys admin

Bug #1285
loncron cleans login tokens after a day.
* lonauth now give better error messages
* lonlogin refreshes the login page after a day
  (so the "expired" error should never happen anyway)
* loginproblems was adapted

* Additional browser information
* Accessibility options get stored in environment for "remember"

Make text-based login screen more accessible. Add "remember" checkbox, which
still has to be picked up in lonauth.pm.

Switch off applets (if it was up to me, this would be default)

Work on ADA compliance and PDA compatibility

Tell people what they are looking at
Add configuration item for non-graphical browsers
Should probably have another one for "not supported" browsers

Give people some options if lonc/lond is down on current server.

The plan was to be able to pass username and domain (NOT PASSWORD!!!) in the
query string to support "Switch Server" better. Unfortunately, as expected,
the query string is not available to this module if it is called by
"/priv/username/..." as an error document.

bgcolor of logo must be same as page background

Help link with common login problems on login and welcome screens.
Unfortunately, we cannot use the cool help system here, since it will
not work when pop-up ad filters are installed.

- Fixes BUG#1107, you can now login if port 8080 is filtered, or if the images haven't fully loaded.

Get small GIFs from lonhttpd

Fixing a pet peeve: When you go to the login screen, the focus will now
be automatically sent to the username box, if the browser supports it. The
"if" statement should prevent any script errors. I was worried Netscape 4
wouldn't work, but lo, it does. Not tested in IE but I see no reason this won't
work.

This means you can now login in with the keyboard sequence
"usernameTABpasswordENTER", which can't be optimized any more.

It's the little things... and commit messages five times the size of the
code committed... that make all the difference.

Best to use '&&' instead of 'or' when making the decision to check other
servers.

Backport of spareserver fixes.

Guy is so picky.....

Changes to fix handling of spare.tab.  Firstly, do not omit self from
spare.tab.  Secondly, compare load averages to self (initially) when
determining which server to offload onto.

To save Guy's eyes - at least in his domain.

Colors and logos can now be configured by domain for the LON-CAPA-header pages
and the login screen.

The configuration tables are in /home/httpd/lonTabs/lonDomColors.
default.tab has the default definitions. [domainname].tab (if present) can
override any of these settings.

Domain Logos and Headers

On modern browsers, can now use "enter" key to submit login form.
(Tested on Netscape 4, Mozilla, and IE6; should work everywhere.) Make
"Log in" an actual submit button, importent for screen readers. Added
alt tags to images.

Probably safer

Value of "interface" passed on.

First steps towards accessibility and PDA access

See if this simple solution works.

- Josh Brunskole's new login page.

- testing things out

- this page shouldn't get cached since it has the random DES key in it.

GPL

Explicit server specification

Got rid of "LON" for sys admin

Accessibility Options and About Link, got rid of one table

Fixed firsturl bug with special character &

Login mechanism now uses encryption
lond has new routines for temporary entries tmpget, tmpput

Updates. Implement roles control on browsing and menu.

Restored direct jump to URL

Graphical Layout

Roles have starting and end time
Bug fixes after replication shift
New login screen
Authenticator routes to roles screen
Form variables are transfered to environment (not tested)

LON-CAPA Communication Module

Initial revision