[BACK]Return to lonpreferences.pm CVS log [TXT] [DIR] Up to [LON-CAPA] / loncom / interface

Diff for /loncom/interface/lonpreferences.pm between versions 1.2 and 1.3

version 1.2, 2001/12/19 17:17:46 version 1.3, 2002/02/15 22:04:39
Line 35 Line 35
 #  #
 # 3/1 Gerd Kortemeyer  # 3/1 Gerd Kortemeyer
 #  #
   # 2/13/02 2/14 2/15 Matthew Hall
   #
   # This package uses the "londes.js" javascript code. 
   #
   # TODOs that have to be completed:
   #    interface with lonnet to change the password
    
 package Apache::lonpreferences;  package Apache::lonpreferences;
   
 use strict;  use strict;
 use Apache::Constants qw(:common);  use Apache::Constants qw(:common);
   use Apache::File;
   use Crypt::DES;
   use DynaLoader; # for Crypt::DES version
   
   #------------------- forms to be output
   my $passwordform =<<ENDPASSWORDFORM;
   <form name="client" action="/adm/preferences" method="post">
   <input type="hidden" name="action" value="changepass">
   <input type="submit" value="Change password">
   </form>
   ENDPASSWORDFORM
   
   my $environmentform = <<ENDENVIRONMENTFORM;
   <p>
   There are currently no environment variables you can change.
   </p>
   <!----
       You may set the following environment variables:
       <table>
       <tr><th>Environment Setting</th><th>Current Value</th></tr>
       <tr>
           <td colspan="2">
           <font color="#ff0000">No variables currently set up</font>
           </td>
       </tr>
       </table>
    -->
   ENDENVIRONMENTFORM
   #------------------ end of forms to be output
   
   ################################################################
   #                       Handler subroutines                    #
   ################################################################
   #
   # Write lonnet::passwd to do the call below.
   # Use:
   #   my $answer=reply("encrypt:passwd:$udom:$uname:$upass",$tryserver);
   #
   # I really should write some javascript to check on the client side for
   # mismatched passwords, but other problems are more pressing
   #
   ##################################################
   #          password associated functions         #
   ##################################################
   sub des_keys {
       # Make a new key for DES encryption
       # Each key has two parts which are returned seperately
       my @hexstr=('0','1','2','3','4','5','6','7',
                   '8','9','a','b','c','d','e','f');
       my $lkey='';
       for (0..7) {
           $lkey.=$hexstr[rand(15)];
       }
       my $ukey='';
       for (0..7) {
           $ukey.=$hexstr[rand(15)];
       }
       return ($lkey,$ukey);
   }
   
   sub des_decrypt {
       my ($key,$cyphertext) = @_;
       my $keybin=pack("H16",$key);
       my $cypher;
       if ($Crypt::DES::VERSION>=2.03) {
           $cypher=new Crypt::DES $keybin;
       } else {
           $cypher=new DES $keybin;
       }
       my $plaintext=
    $cypher->decrypt(unpack("a8",pack("H16",substr($cyphertext,0,16))));
       $plaintext.=
    $cypher->decrypt(unpack("a8",pack("H16",substr($cyphertext,16,16))));
       $plaintext=unpack("a8",$plaintext);
       $plaintext=substr($plaintext,1,ord(substr($plaintext,0,1)));
       unpack("a8",$plaintext);
       return $plaintext;
   }
   
   sub passwordchanger {
       # Passwords are encrypted using londes.js (DES encryption)
       #
       my $r = shift;
       my $user       = $ENV{'user.name'};
       my $domain     = $ENV{'user.domain'};
       my $homeserver = $ENV{'user.home'};
       my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
       # Check for authentication types that allow changing of the password.
       return if ($currentauth !~ /^(unix|internal):/);
       #
       # Generate keys
       my ($lkey_cpass ,$ukey_cpass ) = &des_keys();
       my ($lkey_npass1,$ukey_npass1) = &des_keys();
       my ($lkey_npass2,$ukey_npass2) = &des_keys();
       # Store the keys
       my $lonhost = $r->dir_config('lonHostID');
       my $logtoken=Apache::lonnet::reply('tmpput:'
          .$ukey_cpass  . $lkey_cpass .'&'
          .$ukey_npass1 . $lkey_npass1.'&'
          .$ukey_npass2 . $lkey_npass2,
          $lonhost);
       # Hexify these keys
       $ukey_cpass = hex($ukey_cpass);
       $lkey_cpass = hex($lkey_cpass);
       $ukey_npass1= hex($ukey_npass1);
       $lkey_npass1= hex($lkey_npass1);
       $ukey_npass2= hex($ukey_npass2);
       $lkey_npass2= hex($lkey_npass2);
       # Output javascript to deal with passwords
       $r->print(<<ENDHEADER);
   <html>
   <head>
   <title>The LearningOnline Network with CAPA</title>
   </head>
   ENDHEADER
      # Output DES javascript
       {
    my $include = $r->dir_config('lonIncludes');
    my $jsh=Apache::File->new($include."/londes.js");
    $r->print(<$jsh>);
       }
       $r->print(<<ENDFORM);
   
   <body bgcolor="#FFFFFF" onLoad="init();">
   
   <script language="JavaScript">
   
       function send() {
           uextkey=this.document.client.elements.ukey_cpass.value;
           lextkey=this.document.client.elements.lkey_cpass.value;
           initkeys();
   
           this.document.server.elements.currentpass.value
               =crypted(this.document.client.elements.currentpass.value);
   
           uextkey=this.document.client.elements.ukey_npass1.value;
           lextkey=this.document.client.elements.lkey_npass1.value;
           initkeys();
           this.document.server.elements.newpass_1.value
               =crypted(this.document.client.elements.newpass_1.value);
   
           uextkey=this.document.client.elements.ukey_npass2.value;
           lextkey=this.document.client.elements.lkey_npass2.value;
           initkeys();
           this.document.server.elements.newpass_2.value
               =crypted(this.document.client.elements.newpass_2.value);
   
           this.document.server.submit();
       }
   
   </script>
   <h1>Preferences for $user</h1>
   <h3>$user is a member of domain $domain</h3>
   <p>
   Change password for $user
   </p>
   <p>
   <!-- We seperate the forms into 'server' and 'client' in order to
        ensure that unencrypted passwords will not be sent out by a
        crappy browser -->
   
   <form name="server" action="/adm/preferences" method="post">
   <input type="hidden" name="logtoken"    value="$logtoken" />
   <input type="hidden" name="action"      value="verify_and_change_pass" />
   <input type="hidden" name="currentpass" value="" />
   <input type="hidden" name="newpass_1"    value="" />
   <input type="hidden" name="newpass_2"    value="" />
   </form>
   
   <form name="client" >
   <table>
   <tr><td align="right"> Current password:             </td>
       <td><input type="password" name="currentpass" /> </td></tr>
   <tr><td align="right"> New password:                 </td>
       <td><input type="password" name="newpass_1" />    </td></tr>
   <tr><td align="right"> Confirm password:             </td>
       <td><input type="password" name="newpass_2" />    </td></tr>
   <tr><td colspan="2" align="center">
       <input type="button" value="Change Password" onClick="send();">
   </table>
   <input type="hidden" name="ukey_cpass"   value="$ukey_cpass" />
   <input type="hidden" name="lkey_cpass"   value="$lkey_cpass" />
   <input type="hidden" name="ukey_npass1" value="$ukey_npass1" />
   <input type="hidden" name="lkey_npass1" value="$lkey_npass1" />
   <input type="hidden" name="ukey_npass2" value="$ukey_npass2" />
   <input type="hidden" name="lkey_npass2" value="$lkey_npass2" />
   </form>
   </p>
   ENDFORM
       #
       return;
   }
   
   sub verify_and_change_password {
       my $r = shift;
       my $user       = $ENV{'user.name'};
       my $domain     = $ENV{'user.domain'};
       my $homeserver = $ENV{'user.home'};
       my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
       #
       $r->print("<h1>verify and change password</h1>\n");
       #
       my $currentpass = $ENV{'form.currentpass'}; 
       my $newpass1    = $ENV{'form.newpass_1'}; 
       my $newpass2    = $ENV{'form.newpass_2'};
       my $logtoken    = $ENV{'form.logtoken'};
       # Check for empty data 
       if (!(defined($currentpass) && 
     defined($newpass1)    && 
     defined($newpass2))){
    $r->print("<font color='#ff0000'>ERROR</font> Password data was ".
     "blank.\n");
    return;
       }
       # Get the keys
       my $lonhost = $r->dir_config('lonHostID');
       my $tmpinfo = Apache::lonnet::reply('tmpget:'.$logtoken,$lonhost);
       if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost')) {
    $r->print(<<ENDERROR);
   <p>
   <font color="#ff0000">ERROR:</font> Unable to retrieve stored token for
   password decryption.  
   </p>
   ENDERROR
           return;
       }
       my ($ckey,$n1key,$n2key)=split(/&/,$tmpinfo);
       # decrypt
       my $currentpass = &des_decrypt($ckey ,$currentpass);
       my $newpass1    = &des_decrypt($n1key,$newpass1);
       my $newpass2    = &des_decrypt($n2key,$newpass2);
       # Sanity check
       if ($newpass1 ne $newpass2) {
    $r->print('<font color="#ff0000">ERROR:</font>The new passwords you '.
     'entered do not match.  Please try again.');
    &passwordchanger($r);
    return;
       }
   }
   
   ################################################################
   #                          Main handler                        #
   ################################################################
 sub handler {  sub handler {
     my $r = shift;      my $r = shift;
       my $user = $ENV{'user.name'};
       my $domain = $ENV{'user.domain'};
     $r->content_type('text/html');      $r->content_type('text/html');
     $r->send_http_header;      $r->send_http_header;
     return OK if $r->header_only;      return OK if $r->header_only;
       # Spit out the header
 # --------------------------------------------------- Print login screen header      if ($ENV{'form.action'} eq 'changepass') {
     $r->print(<<ENDDOCUMENT);   &passwordchanger($r);
       } elsif ($ENV{'form.action'} eq 'verify_and_change_pass') {
    &verify_and_change_password($r);
       } else {
    $r->print(<<ENDHEADER);
 <html>  <html>
 <head>  <head>
 <title>The LearningOnline Network with CAPA</title>  <title>The LearningOnline Network with CAPA</title>
 </head>  </head>
 <body bgcolor="#FFFFFF">  <body bgcolor="#FFFFFF" >
 <h1>Preferences</h1>  <h1>Preferences for $user</h1>
 <img src="/adm/lonKaputt/lonconstruct.gif">  <h3>$user is a member of domain $domain</h3>
   ENDHEADER
    # Determine current authentication method
    my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
    if ($currentauth =~ /^(unix|internal):/) {
       $r->print($passwordform);
    }
    $r->print($environmentform);
       }
       # Spit out the footer
       $r->print(<<ENDFOOTER);
 </body>  </body>
 </html>  </html>
 ENDDOCUMENT  ENDFOOTER
     return OK;      return OK;
 }   } 
   
Removed from v.1.2  
changed lines
  Added in v.1.3

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>