[BACK]Return to lonpreferences.pm CVS log [TXT] [DIR] Up to [LON-CAPA] / loncom / interface

Diff for /loncom/interface/lonpreferences.pm between versions 1.1 and 1.5

version 1.1, 2001/01/03 16:20:59 version 1.5, 2002/03/30 17:59:34
Line 1 Line 1
 # The LearningOnline Network  # The LearningOnline Network
 # Preferences  # Preferences
 #  #
   # $Id$
   #
   # Copyright Michigan State University Board of Trustees
   #
   # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
   #
   # LON-CAPA is free software; you can redistribute it and/or modify
   # it under the terms of the GNU General Public License as published by
   # the Free Software Foundation; either version 2 of the License, or
   # (at your option) any later version.
   #
   # LON-CAPA is distributed in the hope that it will be useful,
   # but WITHOUT ANY WARRANTY; without even the implied warranty of
   # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   # GNU General Public License for more details.
   #
   # You should have received a copy of the GNU General Public License
   # along with LON-CAPA; if not, write to the Free Software
   # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
   #
   # /home/httpd/html/adm/gpl.txt
   #
   # http://www.lon-capa.org/
   #
 # (Internal Server Error Handler  # (Internal Server Error Handler
 #  #
 # (Login Screen  # (Login Screen
Line 11 Line 35
 #  #
 # 3/1 Gerd Kortemeyer  # 3/1 Gerd Kortemeyer
 #  #
   # 2/13/02 2/14 2/15 Matthew Hall
   #
   # This package uses the "londes.js" javascript code. 
   #
   # TODOs that have to be completed:
   #    interface with lonnet to change the password
    
 package Apache::lonpreferences;  package Apache::lonpreferences;
   
 use strict;  use strict;
 use Apache::Constants qw(:common);  use Apache::Constants qw(:common);
   use Apache::File;
   use Crypt::DES;
   use DynaLoader; # for Crypt::DES version
   use Apache::loncommon();
   
   #
   # Write lonnet::passwd to do the call below.
   # Use:
   #   my $answer=reply("encrypt:passwd:$udom:$uname:$upass",$tryserver);
   #
   ##################################################
   #          password associated functions         #
   ##################################################
   sub des_keys {
       # Make a new key for DES encryption.
       # Each key has two parts which are returned seperately.
       # Please note:  Each key must be passed through the &hex function
       # before it is output to the web browser.  The hex versions cannot
       # be used to decrypt.
       my @hexstr=('0','1','2','3','4','5','6','7',
                   '8','9','a','b','c','d','e','f');
       my $lkey='';
       for (0..7) {
           $lkey.=$hexstr[rand(15)];
       }
       my $ukey='';
       for (0..7) {
           $ukey.=$hexstr[rand(15)];
       }
       return ($lkey,$ukey);
   }
   
   sub des_decrypt {
       my ($key,$cyphertext) = @_;
       my $keybin=pack("H16",$key);
       my $cypher;
       if ($Crypt::DES::VERSION>=2.03) {
           $cypher=new Crypt::DES $keybin;
       } else {
           $cypher=new DES $keybin;
       }
       my $plaintext=
    $cypher->decrypt(unpack("a8",pack("H16",substr($cyphertext,0,16))));
       $plaintext.=
    $cypher->decrypt(unpack("a8",pack("H16",substr($cyphertext,16,16))));
       $plaintext=substr($plaintext,1,ord(substr($plaintext,0,1)) );
       return $plaintext;
   }
   
   ################################################################
   #                       Handler subroutines                    #
   ################################################################
   sub screennamechanger {
       my $r = shift;
       my $errormessage = shift;
       $errormessage = ($errormessage || '');
       my $user       = $ENV{'user.name'};
       my $domain     = $ENV{'user.domain'};
       my $homeserver = $ENV{'user.home'};
       $r->print(<<ENDSCREEN);
   <html>
   <body bgcolor="#FFFFFF">
   <h1>Preferences for $user</h1>
   <h3>$user is a member of domain $domain</h3>
   $errormessage
   <p>
   Change anonymous discussion screen name for $user
   </p>
   </body>
   </html>
   ENDSCREEN
   }
   ######################################################
   #            password handler subroutines            #
   ######################################################
   sub passwordchanger {
       # This function is a bit of a mess....
       # Passwords are encrypted using londes.js (DES encryption)
       my $r = shift;
       my $errormessage = shift;
       $errormessage = ($errormessage || '');
       my $user       = $ENV{'user.name'};
       my $domain     = $ENV{'user.domain'};
       my $homeserver = $ENV{'user.home'};
       my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
       # Check for authentication types that allow changing of the password.
       return if ($currentauth !~ /^(unix|internal):/);
       #
       # Generate keys
       my ($lkey_cpass ,$ukey_cpass ) = &des_keys();
       my ($lkey_npass1,$ukey_npass1) = &des_keys();
       my ($lkey_npass2,$ukey_npass2) = &des_keys();
       # Store the keys in the log files
       my $lonhost = $r->dir_config('lonHostID');
       my $logtoken=Apache::lonnet::reply('tmpput:'
          .$ukey_cpass  . $lkey_cpass .'&'
          .$ukey_npass1 . $lkey_npass1.'&'
          .$ukey_npass2 . $lkey_npass2,
          $lonhost);
       # Hexify the keys for output as javascript variables
       $ukey_cpass = hex($ukey_cpass);
       $lkey_cpass = hex($lkey_cpass);
       $ukey_npass1= hex($ukey_npass1);
       $lkey_npass1= hex($lkey_npass1);
       $ukey_npass2= hex($ukey_npass2);
       $lkey_npass2= hex($lkey_npass2);
       # Output javascript to deal with passwords
       # Output DES javascript
       {
    my $include = $r->dir_config('lonIncludes');
    my $jsh=Apache::File->new($include."/londes.js");
    $r->print(<$jsh>);
       }
       $r->print(<<ENDFORM);
   
   <body bgcolor="#FFFFFF" onLoad="init();">
   
   <script language="JavaScript">
   
       function send() {
           uextkey=this.document.client.elements.ukey_cpass.value;
           lextkey=this.document.client.elements.lkey_cpass.value;
           initkeys();
   
           this.document.server.elements.currentpass.value
               =crypted(this.document.client.elements.currentpass.value);
   
           uextkey=this.document.client.elements.ukey_npass1.value;
           lextkey=this.document.client.elements.lkey_npass1.value;
           initkeys();
           this.document.server.elements.newpass_1.value
               =crypted(this.document.client.elements.newpass_1.value);
   
           uextkey=this.document.client.elements.ukey_npass2.value;
           lextkey=this.document.client.elements.lkey_npass2.value;
           initkeys();
           this.document.server.elements.newpass_2.value
               =crypted(this.document.client.elements.newpass_2.value);
   
           this.document.server.submit();
       }
   
   </script>
   <h1>Preferences for $user</h1>
   <h3>$user is a member of domain $domain</h3>
   $errormessage
   <p>
   Change password for $user
   </p>
   <p>
   <!-- We seperate the forms into 'server' and 'client' in order to
        ensure that unencrypted passwords will not be sent out by a
        crappy browser -->
   
   <form name="server" action="/adm/preferences" method="post">
   <input type="hidden" name="logtoken"    value="$logtoken" />
   <input type="hidden" name="action"      value="verify_and_change_pass" />
   <input type="hidden" name="currentpass" value="" />
   <input type="hidden" name="newpass_1"   value="" />
   <input type="hidden" name="newpass_2"   value="" />
   </form>
   
   <form name="client" >
   <table>
   <tr><td align="right"> Current password:                      </td>
       <td><input type="password" name="currentpass" size="10"/> </td></tr>
   <tr><td align="right"> New password:                          </td>
       <td><input type="password" name="newpass_1" size="10"  /> </td></tr>
   <tr><td align="right"> Confirm password:                      </td>
       <td><input type="password" name="newpass_2" size="10"  /> </td></tr>
   <tr><td colspan="2" align="center">
       <input type="button" value="Change Password" onClick="send();">
   </table>
   <input type="hidden" name="ukey_cpass"  value="$ukey_cpass" />
   <input type="hidden" name="lkey_cpass"  value="$lkey_cpass" />
   <input type="hidden" name="ukey_npass1" value="$ukey_npass1" />
   <input type="hidden" name="lkey_npass1" value="$lkey_npass1" />
   <input type="hidden" name="ukey_npass2" value="$ukey_npass2" />
   <input type="hidden" name="lkey_npass2" value="$lkey_npass2" />
   </form>
   </p>
   ENDFORM
       #
       return;
   }
   
   sub verify_and_change_password {
       my $r = shift;
       my $user       = $ENV{'user.name'};
       my $domain     = $ENV{'user.domain'};
       my $homeserver = $ENV{'user.home'};
       my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
       # Check for authentication types that allow changing of the password.
       return if ($currentauth !~ /^(unix|internal):/);
       #
       $r->print(<<ENDHEADER);
   <html>
   <head>
   <title>LON-CAPA Preferences:  Change password for $user</title>
   </head>
   ENDHEADER
       #
       my $currentpass = $ENV{'form.currentpass'}; 
       my $newpass1    = $ENV{'form.newpass_1'}; 
       my $newpass2    = $ENV{'form.newpass_2'};
       my $logtoken    = $ENV{'form.logtoken'};
       # Check for empty data 
       unless (defined($currentpass) && 
       defined($newpass1)    && 
       defined($newpass2)    ){
    &passwordchanger($r,"<p>\n<font color='#ff0000'>ERROR</font>".
    "Password data was blank.\n</p>");
    return;
       }
       # Get the keys
       my $lonhost = $r->dir_config('lonHostID');
       my $tmpinfo = Apache::lonnet::reply('tmpget:'.$logtoken,$lonhost);
       if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost')) {
           # I do not a have a better idea about how to handle this
    $r->print(<<ENDERROR);
   <p>
   <font color="#ff0000">ERROR:</font> Unable to retrieve stored token for
   password decryption.  Please log out and try again.
   </p>
   ENDERROR
           # Probably should log an error here
           return;
       }
       my ($ckey,$n1key,$n2key)=split(/&/,$tmpinfo);
       # 
       my $currentpass = &des_decrypt($ckey ,$currentpass);
       my $newpass1    = &des_decrypt($n1key,$newpass1);
       my $newpass2    = &des_decrypt($n2key,$newpass2);
       # 
       if ($newpass1 ne $newpass2) {
    &passwordchanger($r,
    '<font color="#ff0000">ERROR:</font>'.
    'The new passwords you entered do not match.  '.
    'Please try again.');
    return;
       }
       if (length($newpass1) < 7) {
    &passwordchanger($r,
    '<font color="#ff0000">ERROR:</font>'.
    'Passwords must be a minimum of 7 characters long.  '.
    'Please try again.');
    return;
       }
       #
       # Check for bad characters
       my $badpassword = 0;
       foreach (split(//,$newpass1)) {
    $badpassword = 1 if ((ord($_)<32)||(ord($_)>126));
       }
       if ($badpassword) {
    # I can't figure out how to enter bad characters on my browser.
    &passwordchanger($r,<<ENDERROR);
   <font color="#ff0000">ERROR:</font>
   The password you entered contained illegal characters.<br />
   Valid characters are: space and <br />
   <pre>
   !&quot;\#$%&amp;\'()*+,-./0123456789:;&lt;=&gt;?\@
   ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_\`abcdefghijklmnopqrstuvwxyz{|}~
   </pre>
   ENDERROR
       }
       # 
       # Change the password (finally)
       my $result = &Apache::lonnet::changepass
    ($user,$domain,$currentpass,$newpass1,$homeserver);
       # Inform the user the password has (not?) been changed
       if ($result =~ /^ok$/) {
    $r->print(<<"ENDTEXT");
   <h2>Password for $user was successfully changed</h2>
   ENDTEXT
       } else {
    # error error: run in circles, scream and shout
           $r->print(<<ENDERROR);
   <h2><font color="#ff0000">Password for $user was not changed</font></h2>
   There was an internal error when attempting to change your password.
   Please contact your instructor or the domain coordinator.
   ENDERROR
       }
       return;
   }
   
   ######################################################
   #            other handler subroutines               #
   ######################################################
   
   
   ################################################################
   #                          Main handler                        #
   ################################################################
 sub handler {  sub handler {
     my $r = shift;      my $r = shift;
       my $user = $ENV{'user.name'};
       my $domain = $ENV{'user.domain'};
     $r->content_type('text/html');      $r->content_type('text/html');
       # Some pages contain DES keys and should not be cached.
       &Apache::loncommon::no_cache($r);
     $r->send_http_header;      $r->send_http_header;
     return OK if $r->header_only;      return OK if $r->header_only;
       # Spit out the header
 # --------------------------------------------------- Print login screen header      if ($ENV{'form.action'} eq 'changepass') {
     $r->print(<<ENDDOCUMENT);   &passwordchanger($r);
       } elsif ($ENV{'form.action'} eq 'verify_and_change_pass') {
    &verify_and_change_password($r);
       } elsif ($ENV{'form.action'} eq 'changescreenname') {
           &screennamechanger($r);
       } else {
    $r->print(<<ENDHEADER);
 <html>  <html>
 <head>  <head>
 <title>The LearningOnline Network with CAPA</title>  <title>LON-CAPA Preferences</title>
 </head>  </head>
 <body bgcolor="#FFFFFF">  <body bgcolor="#FFFFFF" >
 <h1>Preferences</h1>  <h1>Preferences for $user</h1>
 <img src="/adm/lonKaputt/lonconstruct.gif">  <h3>$user is a member of domain $domain</h3>
   ENDHEADER
    # Determine current authentication method
    my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
    if ($currentauth =~ /^(unix|internal):/) {
       $r->print(<<ENDPASSWORDFORM);
   <form name="client" action="/adm/preferences" method="post">
   <input type="hidden" name="action" value="changepass">
   <input type="submit" value="Change password">
   </form>
   ENDPASSWORDFORM
   # Change screen name
       $r->print(<<ENDSCREENNAMEFORM);
   <form name="client" action="/adm/preferences" method="post">
   <input type="hidden" name="action" value="changescreenname">
   <input type="submit" value="Change anonymous discussion screen name">
   </form>
   ENDSCREENNAMEFORM
               # Other preference setting code should be added here
    }
       }
       $r->print(<<ENDFOOTER);
 </body>  </body>
 </html>  </html>
 ENDDOCUMENT  ENDFOOTER
     return OK;      return OK;
 }   } 
   
Removed from v.1.1  
changed lines
  Added in v.1.5

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>