--- loncom/auth/switchserver.pm 2005/10/24 21:35:16 1.2 +++ loncom/auth/switchserver.pm 2010/09/06 15:45:08 1.28.2.3 @@ -1,7 +1,7 @@ # The LearningOnline Network # Switch Servers Handler # -# $Id: switchserver.pm,v 1.2 2005/10/24 21:35:16 albertel Exp $ +# $Id: switchserver.pm,v 1.28.2.3 2010/09/06 15:45:08 raeburn Exp $ # # Copyright Michigan State University Board of Trustees # @@ -34,43 +34,124 @@ use Apache::lonnet; use Apache::lonmenu; use CGI::Cookie(); use Apache::lonlocal; +use LONCAPA qw(:DEFAULT :match); sub init_env { my ($r) = @_; + + if (-e $env{'user.environment'}) { + return $env{'user.environment'}; + } my $requrl=$r->uri; - my %cookies=CGI::Cookie->parse($r->header_in('Cookie')); - my $lonid=$cookies{'lonID'}; - my $cookie; - if (!$lonid) { return undef; } - - my $handle=$lonid->value; - $handle=~s/\W//g; - my $lonidsdir=$r->dir_config('lonIDsDir'); - if ((!-e "$lonidsdir/$handle.id") || ($handle eq '')) { - $r->log_reason("Cookie $handle not valid", $r->filename); + my $handle= &Apache::lonnet::check_for_valid_session($r); + if ($handle ne '') { return undef; } - + my $lonidsdir=$r->dir_config('lonIDsDir'); &Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle); - return $handle; + return $r->dir_config('lonIDsDir')."/$handle.id"; +} + +sub do_redirect { + my ($r,$url,$only_body,$extra_text) = @_; + $r->send_http_header; + my $start_page = + &Apache::loncommon::start_page('Switching Server ...',undef, + {'redirect' => [0.5,$url], + 'no_inline_link' => 1, + 'only_body' => $only_body,}); + my $end_page = &Apache::loncommon::end_page(); + $r->print($start_page.$extra_text.$end_page); + unless ($env{'user.name'} eq 'public' && ($env{'user.domain'} eq 'public')) { + $r->register_cleanup(\&flush_course_logs); + } + return OK; + +} + +sub flush_course_logs { + &Apache::lonnet::flushcourselogs(); + return OK; } sub handler { - my $r = shift; - + my ($r) = @_; my $handle=&init_env($r); if (!defined($handle)) { return FORBIDDEN; } &Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'}, - ['otherserver','role']); - my $switch_to=$Apache::lonnet::hostname{$env{'form.otherserver'}}; + ['otherserver','role','origurl','symb']); + + my $switch_to=&Apache::lonnet::hostname($env{'form.otherserver'}); + if (! $env{'form.otherserver'}) { + $env{'form.otherserver'} = + &Apache::lonnet::find_existing_session($env{'user.domain'}, + $env{'user.name'}); + if (! $env{'form.otherserver'}) { + $env{'form.otherserver'} = + &Apache::lonnet::spareserver(30000,undef,1); + } + $switch_to=&Apache::lonnet::hostname($env{'form.otherserver'}); + } + if (!defined($switch_to)) { return FORBIDDEN; } - if (!exists($env{'user.role.'.$env{'form.role'}})) { return FORBIDDEN; } + + if ($env{'user.name'} eq 'public' + && $env{'user.domain'} eq 'public') { + my $url = 'http://'.$switch_to.$r->uri; + return &do_redirect($r,$url,1) + } + + my $skip_canhost_check = ''; + if ($env{'form.role'}) { + if (!exists($env{'user.role.'.$env{'form.role'}})) { + return FORBIDDEN; + } else { + my $now = time; + my ($start,$end) = split(/\./,$env{'user.role.'.$env{'form.role'}}); + if (($start && $start > $now) || ($end && $end < $now)) { + return FORBIDDEN; + } elsif ($env{'form.role'} eq 'au./'.$env{'user.domain'}.'/') { + if (&Apache::lonnet::homeserver($env{'user.name'},$env{'user.domain'}) eq $env{'form.otherserver'}) { + $skip_canhost_check = 1; + } + } elsif ($env{'form.role'} =~ m{^[ac]a\./($match_domain)/($match_username)/$}) { + if (&Apache::lonnet::homeserver($2,$1) eq $env{'form.otherserver'}) { + $skip_canhost_check = 1; + } + } + } + } + + unless ($skip_canhost_check) { + my $canhost = 1; + my $uprimary_id = &Apache::lonnet::domain($env{'user.domain'},'primary'); + my $uint_dom = &Apache::lonnet::internet_dom($uprimary_id); + my @intdoms; + my $internet_names = &Apache::lonnet::get_internet_names($env{'form.otherserver'}); + if (ref($internet_names) eq 'ARRAY') { + @intdoms = @{$internet_names}; + } + unless ($uint_dom ne '' && grep(/^\Q$uint_dom\E$/,@intdoms)) { + my $serverhomeID = &Apache::lonnet::get_server_homeID($switch_to); + my $serverhomedom = &Apache::lonnet::host_domain($serverhomeID); + my %defdomdefaults = &Apache::lonnet::get_domain_defaults($serverhomedom); + my %udomdefaults = &Apache::lonnet::get_domain_defaults($env{'user.domain'}); + my $remoterev = &Apache::lonnet::get_server_loncaparev($env{'user.domain'},$env{'form.otherserver'}); + $canhost = + &Apache::lonnet::can_host_session($env{'user.domain'}, + $env{'form.otherserver'}, + $remoterev, + $udomdefaults{'remotesessions'}, + $defdomdefaults{'hostedsessions'}); + } + unless ($canhost) { return FORBIDDEN; } + } #remove session env, and log event - unlink($r->dir_config('lonIDsDir')."/$handle.id"); + unlink($handle); my %temp=('switchserver' => time.':'.$env{'form.otherserver'}, $env{'form.role'}); &Apache::lonnet::put('email_status',\%temp); @@ -79,31 +160,48 @@ sub handler { "Switch Server to $env{'form.otherserver'} with role $env{'form.role'} $ENV{'REMOTE_ADDR'}"); &Apache::loncommon::content_type($r,'text/html'); - $r->send_http_header; - return OK if $r->header_only; + + #expire the cookie + my $c = new CGI::Cookie(-name => 'lonID', + -value => '', + -expires => '-10y',); + $r->header_out('Set-cookie' => $c); + + if ($r->header_only) { + $r->send_http_header; + return OK; + } # -------------------------------------------------------- Menu script and info - - my $windowinfo=&Apache::lonmenu::close(); - $windowinfo.=&Apache::lonnavmaps::close(); + + my $windowinfo= + &Apache::lonmenu::close(). + &Apache::lonnavmaps::close(); # ---------------------------------------------------------------- Get handover - my $token = &Apache::lonnet::reply('tmpput:'.join('&',$ENV{'REMOTE_ADDR'},$env{'user.domain'},$env{'user.name'},$env{'form.role'}),$env{'form.otherserver'}); - my $switch=''; - my $bodytag=&Apache::loncommon::bodytag('Switching Server ...'); + my %info=('ip' => $ENV{'REMOTE_ADDR'}, + 'domain' => $env{'user.domain'}, + 'username' => $env{'user.name'}, + 'role' => $env{'form.role'}, + 'server' => $r->dir_config('lonHostID')); + if ($env{'form.origurl'}) { + $info{'origurl'} = $env{'form.origurl'}; + } + if ($env{'form.symb'}) { + $info{'symb'} = $env{'form.symb'}; + } + if ($env{'request.sso.login'}) { + $info{'sso.login'} = $env{'request.sso.login'}; + } + if ($env{'request.sso.reloginserver'}) { + $info{'sso.reloginserver'} = $env{'request.sso.reloginserver'}; + } + my $token = &Apache::lonnet::tmpput(\%info,$env{'form.otherserver'}); + my $url ='http://'.$switch_to.'/adm/login?'. + 'domain='.$env{'user.domain'}. + '&username='.$env{'user.name'}. + '&token='.$token; # --------------------------------------------------------------- Screen Output - $r->print(< - The LearningOnline Network with CAPA Logout - $switch - - $bodytag - $windowinfo - - -ENDDOCUMENT - - &Apache::lonnet::flushcourselogs(); - return OK; + return &do_redirect($r,$url,0,$windowinfo); } 1;