--- loncom/auth/switchserver.pm 2006/11/23 01:49:41 1.10 +++ loncom/auth/switchserver.pm 2010/08/13 00:06:27 1.28.2.1 @@ -1,7 +1,7 @@ # The LearningOnline Network # Switch Servers Handler # -# $Id: switchserver.pm,v 1.10 2006/11/23 01:49:41 albertel Exp $ +# $Id: switchserver.pm,v 1.28.2.1 2010/08/13 00:06:27 raeburn Exp $ # # Copyright Michigan State University Board of Trustees # @@ -34,6 +34,7 @@ use Apache::lonnet; use Apache::lonmenu; use CGI::Cookie(); use Apache::lonlocal; +use LONCAPA qw(:DEFAULT :match); sub init_env { my ($r) = @_; @@ -42,23 +43,30 @@ sub init_env { return $env{'user.environment'}; } my $requrl=$r->uri; - my %cookies=CGI::Cookie->parse($r->header_in('Cookie')); - my $lonid=$cookies{'lonID'}; - my $cookie; - if (!$lonid) { return undef; } - - my $handle=&LONCAPA::clean_handle($lonid->value); - my $lonidsdir=$r->dir_config('lonIDsDir'); - if ((!-e "$lonidsdir/$handle.id") || ($handle eq '')) { - $r->log_reason("Cookie $handle not valid", $r->filename); + my $handle= &Apache::lonnet::check_for_valid_session($r); + if ($handle ne '') { return undef; } - + my $lonidsdir=$r->dir_config('lonIDsDir'); &Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle); return $r->dir_config('lonIDsDir')."/$handle.id"; } +sub do_redirect { + my ($r,$url,$only_body,$extra_text) = @_; + $r->send_http_header; + my $start_page = + &Apache::loncommon::start_page('Switching Server ...',undef, + {'redirect' => [0.5,$url], + 'no_inline_link' => 1, + 'only_body' => $only_body,}); + my $end_page = &Apache::loncommon::end_page(); + $r->print($start_page.$extra_text.$end_page); + return OK; + +} + sub handler { my ($r) = @_; @@ -66,18 +74,69 @@ sub handler { if (!defined($handle)) { return FORBIDDEN; } &Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'}, - ['otherserver','role']); + ['otherserver','role','origurl','symb']); - my $switch_to=$Apache::lonnet::hostname{$env{'form.otherserver'}}; - if (!$env{'form.otherserver'}) { - $env{'form.otherserver'}=&Apache::lonnet::spareserver(30000,undef,1); - $switch_to=$Apache::lonnet::hostname{$env{'form.otherserver'}}; + my $switch_to=&Apache::lonnet::hostname($env{'form.otherserver'}); + if (! $env{'form.otherserver'}) { + $env{'form.otherserver'} = + &Apache::lonnet::find_existing_session($env{'user.domain'}, + $env{'user.name'}); + if (! $env{'form.otherserver'}) { + $env{'form.otherserver'} = + &Apache::lonnet::spareserver(30000,undef,1); + } + $switch_to=&Apache::lonnet::hostname($env{'form.otherserver'}); } if (!defined($switch_to)) { return FORBIDDEN; } - if ($env{'form.role'} && - !exists($env{'user.role.'.$env{'form.role'}})) { return FORBIDDEN; } + if ($env{'user.name'} eq 'public' + && $env{'user.domain'} eq 'public') { + my $url = 'http://'.$switch_to.$r->uri; + return &do_redirect($r,$url,1) + } + + my $skip_canhost_check = ''; + if ($env{'form.role'}) { + if (!exists($env{'user.role.'.$env{'form.role'}})) { + return FORBIDDEN; + } else { + my $now = time; + my ($start,$end) = split(/\./,$env{'user.role.'.$env{'form.role'}}); + if (($start && $start > $now) || ($end && $end < $now)) { + return FORBIDDEN; + } elsif ($env{'form.role'} eq 'au./'.$env{'user.domain'}.'/') { + if (&Apache::lonnet::homeserver($env{'user.name'},$env{'user.domain'}) eq $env{'form.otherserver'}) { + $skip_canhost_check = 1; + } + } elsif ($env{'form.role'} =~ m{^[ac]a\./($match_domain)/($match_username)/$}) { + if (&Apache::lonnet::homeserver($2,$1) eq $env{'form.otherserver'}) { + $skip_canhost_check = 1; + } + } + } + } + + unless ($skip_canhost_check) { + my $canhost = 1; + my $uprimary_id = &Apache::lonnet::domain($env{'user.domain'},'primary'); + my $uint_dom = &Apache::lonnet::internet_dom($uprimary_id); + my @intdoms = &Apache::lonnet::get_internet_names($env{'form.otherserver'}); + unless ($uint_dom ne '' && grep(/^\Q$uint_dom\E$/,@intdoms)) { + my $serverhomeID = &Apache::lonnet::get_server_homeID($switch_to); + my $serverhomedom = &Apache::lonnet::host_domain($serverhomeID); + my %defdomdefaults = &Apache::lonnet::get_domain_defaults($serverhomedom); + my %udomdefaults = &Apache::lonnet::get_domain_defaults($env{'user.domain'}); + my $remoterev = &Apache::lonnet::get_server_loncaparev($env{'user.domain'},$env{'form.otherserver'}); + $canhost = + &Apache::lonnet::can_host_session($env{'user.domain'}, + $env{'form.otherserver'}, + $remoterev, + $udomdefaults{'remotesessions'}, + $defdomdefaults{'hostedsessions'}); + } + unless ($canhost) { return FORBIDDEN; } + } #remove session env, and log event unlink($handle); @@ -89,12 +148,22 @@ sub handler { "Switch Server to $env{'form.otherserver'} with role $env{'form.role'} $ENV{'REMOTE_ADDR'}"); &Apache::loncommon::content_type($r,'text/html'); - $r->send_http_header; - return OK if $r->header_only; + + #expire the cookie + my $c = new CGI::Cookie(-name => 'lonID', + -value => '', + -expires => '-10y',); + $r->header_out('Set-cookie' => $c); + + if ($r->header_only) { + $r->send_http_header; + return OK; + } # -------------------------------------------------------- Menu script and info - - my $windowinfo=&Apache::lonmenu::close(); - $windowinfo.=&Apache::lonnavmaps::close(); + + my $windowinfo= + &Apache::lonmenu::close(). + &Apache::lonnavmaps::close(); # ---------------------------------------------------------------- Get handover my %info=('ip' => $ENV{'REMOTE_ADDR'}, @@ -102,20 +171,26 @@ sub handler { 'username' => $env{'user.name'}, 'role' => $env{'form.role'}, 'server' => $r->dir_config('lonHostID')); + if ($env{'form.origurl'}) { + $info{'origurl'} = $env{'form.origurl'}; + } + if ($env{'form.symb'}) { + $info{'symb'} = $env{'form.symb'}; + } if ($env{'request.sso.login'}) { $info{'sso.login'} = $env{'request.sso.login'}; } + if ($env{'request.sso.reloginserver'}) { + $info{'sso.reloginserver'} = $env{'request.sso.reloginserver'}; + } my $token = &Apache::lonnet::tmpput(\%info,$env{'form.otherserver'}); - my $switch=''; - my $start_page = &Apache::loncommon::start_page('Switching Server ...', - $switch, - {'no_inline_link' => 1,}); - my $end_page = &Apache::loncommon::end_page(); + my $url ='http://'.$switch_to.'/adm/login?'. + 'domain='.$env{'user.domain'}. + '&username='.$env{'user.name'}. + '&token='.$token; # --------------------------------------------------------------- Screen Output - $r->print($start_page.$windowinfo.$end_page); - &Apache::lonnet::flushcourselogs(); - return OK; + return &do_redirect($r,$url,0,$windowinfo); } 1;