Daniel Berteaud
11 years ago
commit
e7a6d9b2fc
36 changed files with 2027 additions and 0 deletions
@ -0,0 +1,21 @@ |
|||||||
|
#!/usr/bin/perl -w |
||||||
|
|
||||||
|
use esmith::Build::CreateLinks qw(:all); |
||||||
|
|
||||||
|
panel_link("userpanelaccess", "manager"); |
||||||
|
|
||||||
|
event_link("conf-userpanelsymlinks", "conf-userpanel", "20"); |
||||||
|
event_link("conf-userpanelsymlinks", "webapps-update", "20"); |
||||||
|
|
||||||
|
foreach my $event (qw/ipasserelle-update bootstrap-ldap-save webapps-update/){ |
||||||
|
event_link("ipasserelle-init-config-domain", "$event", "25"); |
||||||
|
templates2events("/etc/lemonldap-ng/lemonldap-ng-admin.ini", "$event"); |
||||||
|
templates2events("/etc/lemonldap-ng/lemonldap-ng-pki.ini", "$event"); |
||||||
|
} |
||||||
|
|
||||||
|
# Create language symlinks |
||||||
|
foreach my $lang qw(bg da de el en-us es et fr he hu id it ja nb |
||||||
|
nl pl pt pt-br ro ru sl sv th tr zh-cn zh-tw){ |
||||||
|
safe_symlink("/etc/e-smith/locale/$lang/etc/e-smith/web/functions", |
||||||
|
"root/etc/e-smith/locale/$lang/etc/e-smith/web/panels/user/cgi-bin"); |
||||||
|
} |
||||||
@ -0,0 +1,87 @@ |
|||||||
|
Summary: iPasserelle User Panel module |
||||||
|
%define name ipasserelle-userpanel |
||||||
|
Name: %{name} |
||||||
|
%define version 0.2.0 |
||||||
|
%define release 1 |
||||||
|
Version: %{version} |
||||||
|
Release: %{release}%{?dist} |
||||||
|
License: GPL |
||||||
|
URL: http://www.ipasserelle.com |
||||||
|
Group: SMEserver/addon |
||||||
|
Source: %{name}-%{version}.tar.gz |
||||||
|
|
||||||
|
BuildArch: noarch |
||||||
|
BuildRoot: /var/tmp/%{name}-%{version} |
||||||
|
|
||||||
|
Requires: e-smith-base >= 5.2.0-62 |
||||||
|
Requires: ipasserelle-base |
||||||
|
Requires: smeserver-lemonldap-ng => 0.1-15 |
||||||
|
Requires: smeserver-webapps-common >= 0.1-10 |
||||||
|
|
||||||
|
BuildRequires: e-smith-devtools |
||||||
|
|
||||||
|
Obsoletes: smeserver-userpanel |
||||||
|
Obsoletes: ipasserelle-user-portal |
||||||
|
Provides: smeserver-userpanel |
||||||
|
|
||||||
|
%description |
||||||
|
iPasserelle User Portal provides a user oriented |
||||||
|
portal where they can set their own settings |
||||||
|
Admins can also delegate panels to users |
||||||
|
This module is based on smeserver-userpanel |
||||||
|
|
||||||
|
%changelog |
||||||
|
* Tue Nov 12 2013 Daniel Berteaud <daniel@firewall-services.com> 0.2.0-1 |
||||||
|
- Import in GIT |
||||||
|
|
||||||
|
* Mon Nov 14 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-6 |
||||||
|
- create language symlinks |
||||||
|
|
||||||
|
* Tue Jul 19 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-5 |
||||||
|
- Move SetEnvIf directives |
||||||
|
- Add SSO protected access to PHPki |
||||||
|
- Don't send $cn as header as it prevent access if username contains accent |
||||||
|
|
||||||
|
* Mon Jul 18 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-4 |
||||||
|
- Rewrite userpanel-navigation (based on the current server-manager's one) |
||||||
|
|
||||||
|
* Mon Jul 11 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-3 |
||||||
|
- Add httpd-admin handler to the list of handler which need a reload |
||||||
|
|
||||||
|
* Wed Jul 06 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-2 |
||||||
|
- Expand LL::NG conf also in bootstrap-ldap-save and ipasserelle-update |
||||||
|
|
||||||
|
* Tue Jun 28 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-1 |
||||||
|
- initial release (based on smeserver-userpanel-0.9-11) |
||||||
|
|
||||||
|
|
||||||
|
%prep |
||||||
|
%setup |
||||||
|
|
||||||
|
%build |
||||||
|
perl createlinks |
||||||
|
|
||||||
|
%{__mkdir_p} root/etc/e-smith/web/panels/user/cgi-bin |
||||||
|
|
||||||
|
%install |
||||||
|
rm -rf $RPM_BUILD_ROOT |
||||||
|
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
||||||
|
rm -f %{name}-%{version}-filelist |
||||||
|
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist |
||||||
|
echo "%doc COPYING" >> %{name}-%{version}-filelist |
||||||
|
|
||||||
|
%clean |
||||||
|
cd .. |
||||||
|
rm -rf %{name}-%{version} |
||||||
|
|
||||||
|
%pre |
||||||
|
|
||||||
|
%preun |
||||||
|
|
||||||
|
%post |
||||||
|
|
||||||
|
%postun |
||||||
|
|
||||||
|
%files -f %{name}-%{version}-filelist |
||||||
|
%defattr(-,root,root) |
||||||
|
|
||||||
@ -0,0 +1,26 @@ |
|||||||
|
{ |
||||||
|
|
||||||
|
my $llng = $DB->get("lemonldap") || |
||||||
|
$DB->new_record("lemonldap", { type => "service" }); |
||||||
|
|
||||||
|
my @soapaccess = split(/[;,]/, ($llng->prop('SoapAllowFrom') || '')); |
||||||
|
my $internal = $DB->get('InternalInterface')->prop('IPAddress'); |
||||||
|
push @soapaccess, $internal if (!grep {$internal eq $_} @soapaccess); |
||||||
|
$llng->set_prop('SoapAllowFrom', join(',',@soapaccess)); |
||||||
|
|
||||||
|
# httpd-admin handler |
||||||
|
my @reload = split(/[;,]/, ($llng->prop('Reload') || '')); |
||||||
|
my $reloadurl = 'localhost:980=http://localhost:980/lm-reload'; |
||||||
|
push @reload, $reloadurl if (!grep {$reloadurl eq $_} @reload); |
||||||
|
|
||||||
|
# httpd-pki handler |
||||||
|
$reloadurl = 'localhost:940=http://localhost:940/lm-reload'; |
||||||
|
my $phpki = $DB->get('httpd-pki'); |
||||||
|
if($phpki){ |
||||||
|
my $status = $phpki->prop('status') || 'disabled'; |
||||||
|
push @reload, $reloadurl if ((!grep {$reloadurl eq $_} @reload) && ($status eq 'enabled')); |
||||||
|
} |
||||||
|
|
||||||
|
$llng->set_prop('Reload', join(',',@reload)); |
||||||
|
|
||||||
|
} |
||||||
@ -0,0 +1,92 @@ |
|||||||
|
#!/usr/bin/perl -w |
||||||
|
|
||||||
|
#---------------------------------------------------------------------- |
||||||
|
# |
||||||
|
# Copyright (c) 2001 Daniel van Raay |
||||||
|
# |
||||||
|
# This program is free software; you can redistribute it and/or modify |
||||||
|
# it under the terms of the GNU General Public License as published by |
||||||
|
# the Free Software Foundation; either version 2 of the License, or |
||||||
|
# (at your option) any later version. |
||||||
|
# |
||||||
|
# This program is distributed in the hope that it will be useful, |
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||||
|
# GNU General Public License for more details. |
||||||
|
# |
||||||
|
# You should have received a copy of the GNU General Public License |
||||||
|
# along with this program; if not, write to the Free Software |
||||||
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
||||||
|
#---------------------------------------------------------------------- |
||||||
|
|
||||||
|
package esmith; |
||||||
|
|
||||||
|
use strict; |
||||||
|
use Errno; |
||||||
|
use esmith::config; |
||||||
|
use esmith::util; |
||||||
|
use esmith::db; |
||||||
|
|
||||||
|
my %conf; |
||||||
|
tie %conf, 'esmith::config'; |
||||||
|
|
||||||
|
my %accounts; |
||||||
|
tie %accounts, 'esmith::config', '/home/e-smith/db/accounts'; |
||||||
|
|
||||||
|
#--------------------------------------------------------------------------- |
||||||
|
# clear and re-create all the user panel symlinks |
||||||
|
#--------------------------------------------------------------------------- |
||||||
|
|
||||||
|
#clear |
||||||
|
opendir (DIR, "/etc/e-smith/web/panels/user/cgi-bin/") or |
||||||
|
die "Can't open directory /etc/e-smith/web/panels/user/cgi-bin/\n"; |
||||||
|
my @symlinks = grep (!/^\./, readdir (DIR)); |
||||||
|
closedir (DIR); |
||||||
|
|
||||||
|
foreach my $link (@symlinks) |
||||||
|
{ |
||||||
|
-e "/etc/e-smith/web/panels/user/cgi-bin/$link" && unlink("/etc/e-smith/web/panels/user/cgi-bin/$link"); |
||||||
|
} |
||||||
|
|
||||||
|
#always link userpanels |
||||||
|
my %newsymlinks; |
||||||
|
opendir (DIR, "/etc/e-smith/web/functions/") or |
||||||
|
die "Can't open directory /etc/e-smith/web/functions/\n"; |
||||||
|
foreach my $userpanels ( grep (/^(userpanel-initial|userpanel-navigation|userpanel-noframes|pleasewait)$/, readdir (DIR)) ) |
||||||
|
{ |
||||||
|
$newsymlinks{$userpanels} = 'Yes'; |
||||||
|
} |
||||||
|
closedir (DIR); |
||||||
|
|
||||||
|
#also add needed panels |
||||||
|
foreach my $user (sort keys %accounts) |
||||||
|
{ |
||||||
|
my $userAdminPanels = db_get_prop(\%accounts, $user, "AdminPanels"); |
||||||
|
$userAdminPanels = '' if ! defined ($userAdminPanels); |
||||||
|
|
||||||
|
foreach my $panels (split (/,/, $userAdminPanels)) |
||||||
|
{ |
||||||
|
$newsymlinks{$panels} = 'Yes'; |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
|
foreach my $link ( sort keys %newsymlinks ) |
||||||
|
{ |
||||||
|
if ( -e "/etc/e-smith/web/functions/$link" && |
||||||
|
! -e "/etc/e-smith/web/panels/user/cgi-bin/$link" ) |
||||||
|
{ |
||||||
|
#symlink("../../../functions/$link", "/etc/e-smith/web/panels/user/cgi-bin/$link") || |
||||||
|
link("/etc/e-smith/web/functions/$link", "/etc/e-smith/web/panels/user/cgi-bin/$link") || |
||||||
|
warn "Couldn't link('functions/$link' to '/etc/e-smith/web/panels/user/cgi-bin/$link'): $!\n"; |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
|
system("/sbin/e-smith/expand-template /etc/httpd/admin-conf/httpd.conf") == 0 |
||||||
|
or warn ("Error expanding httpd.conf \n"); |
||||||
|
|
||||||
|
#system("/etc/rc.d/init.d/httpd-admin restart") == 0 |
||||||
|
# or warn ("Error occurred restarting httpd-admin \n"); |
||||||
|
esmith::util::backgroundCommand (1, "/usr/local/bin/svc", "-h", "/service/httpd-admin");# == 0 |
||||||
|
|
||||||
|
exit (0); |
||||||
|
|
||||||
@ -0,0 +1,51 @@ |
|||||||
|
#!/usr/bin/perl -w |
||||||
|
#---------------------------------------------------------------------- |
||||||
|
# copyright (C) 2011 Firewall-Services |
||||||
|
# daniel@firewall-services.com |
||||||
|
# |
||||||
|
# This program is free software; you can redistribute it and/or modify |
||||||
|
# it under the terms of the GNU General Public License as published by |
||||||
|
# the Free Software Foundation; either version 2 of the License, or |
||||||
|
# (at your option) any later version. |
||||||
|
# |
||||||
|
# This program is distributed in the hope that it will be useful, |
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||||
|
# GNU General Public License for more details. |
||||||
|
# |
||||||
|
# You should have received a copy of the GNU General Public License |
||||||
|
# along with this program; if not, write to the Free Software |
||||||
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
||||||
|
# |
||||||
|
# Technical support for this program is available from Mitel Networks |
||||||
|
# Please visit our web site www.mitel.com/sme/ for details. |
||||||
|
#---------------------------------------------------------------------- |
||||||
|
|
||||||
|
use strict; |
||||||
|
use warnings; |
||||||
|
use esmith::DomainsDB; |
||||||
|
use esmith::ConfigDB; |
||||||
|
|
||||||
|
my $d = esmith::DomainsDB->open or die "Couldn't open DomainsDB\n"; |
||||||
|
my $c = esmith::ConfigDB->open_ro() or die "Couldn't open ConfigDB\n"; |
||||||
|
|
||||||
|
my $domain = $c->get('DomainName')->value; |
||||||
|
my $vhost; |
||||||
|
|
||||||
|
$vhost = $d->get("config.$domain"); |
||||||
|
|
||||||
|
exit (0) if ($vhost); |
||||||
|
|
||||||
|
$d->new_record("config.$domain",{ |
||||||
|
type => 'domain', |
||||||
|
Content => 'Primary', |
||||||
|
Description => "Accès à la configuration de l'iPasserelle", |
||||||
|
Nameservers => 'internet', |
||||||
|
TemplatePath => 'UserManagerVirtualHost', |
||||||
|
Removable => 'no', |
||||||
|
}); |
||||||
|
|
||||||
|
unless ( system("/sbin/e-smith/signal-event", "domain-create", "config.$domain") == 0 ){ |
||||||
|
die "Failed to create domain ip.$domain\n"; |
||||||
|
} |
||||||
|
|
||||||
@ -0,0 +1,4 @@ |
|||||||
|
PERMS=0640 |
||||||
|
UID="root" |
||||||
|
GID="admin" |
||||||
|
|
||||||
@ -0,0 +1,4 @@ |
|||||||
|
PERMS=0640 |
||||||
|
UID="root" |
||||||
|
GID="phpki" |
||||||
|
|
||||||
@ -0,0 +1,8 @@ |
|||||||
|
{ |
||||||
|
my $status = $modPerl{status}; |
||||||
|
|
||||||
|
return "# modPerl disabled" unless ($status and $status eq "enabled"); |
||||||
|
|
||||||
|
return "LoadModule perl_module modules/mod_perl.so"; |
||||||
|
} |
||||||
|
|
||||||
@ -0,0 +1,20 @@ |
|||||||
|
# Load LemonLDAP::NG Handler |
||||||
|
PerlOptions +GlobalRequest |
||||||
|
PerlRequire /var/lib/lemonldap-ng/handler/MyAdminHandler.pm |
||||||
|
|
||||||
|
# Common error page and security parameters |
||||||
|
ErrorDocument 403 http://auth.{$DomainName}/?lmError=403 |
||||||
|
ErrorDocument 500 http://auth.{$DomainName}/?lmError=500 |
||||||
|
|
||||||
|
|
||||||
|
# Configuration reload mechanism (only 1 per physical server is |
||||||
|
# needed): choose your URL to avoid restarting Apache when |
||||||
|
# configuration change |
||||||
|
<Location /lm-reload> |
||||||
|
Order deny,allow |
||||||
|
Deny from all |
||||||
|
Allow from localhost |
||||||
|
PerlHeaderParserHandler My::Package->refresh |
||||||
|
Satisfy any |
||||||
|
</Location> |
||||||
|
|
||||||
@ -0,0 +1,9 @@ |
|||||||
|
|
||||||
|
# Aliases for the e-smith-user panel: |
||||||
|
|
||||||
|
ScriptAlias /user-manager/cgi-bin /etc/e-smith/web/panels/user/cgi-bin |
||||||
|
Alias /user-manager /etc/e-smith/web/panels/user/html |
||||||
|
|
||||||
|
ScriptAlias /user/cgi-bin /etc/e-smith/web/panels/user/cgi-bin |
||||||
|
Alias /user /etc/e-smith/web/panels/user/html |
||||||
|
|
||||||
@ -0,0 +1,76 @@ |
|||||||
|
#------------------------------------------------------------ |
||||||
|
# e-smith-user panel |
||||||
|
#------------------------------------------------------------ |
||||||
|
{ |
||||||
|
use esmith::AccountsDB; |
||||||
|
my $a = esmith::AccountsDB->open_ro; |
||||||
|
|
||||||
|
my %panelshash; |
||||||
|
opendir (DIR, "/etc/e-smith/web/panels/user/cgi-bin") |
||||||
|
|| die "Can't open /etc/e-smith/web/panels/user/cgi-bin directory.\n"; |
||||||
|
|
||||||
|
my @files = sort (grep (!/(^\.\.?$)|(^pleasewait$)|(^userpanel-[a-z][\-\_a-z0-9]*)/, readdir(DIR))); |
||||||
|
|
||||||
|
closedir (DIR); |
||||||
|
|
||||||
|
# TODO: globalPanels |
||||||
|
# my $globalpanels = db_get_prop(\%accounts, 'globalUP', 'AdminPanels'); |
||||||
|
# $globalpanels = '' if ( ! defined ($globalpanels) ); |
||||||
|
# my @globalpanels = split (/,/, $globalpanels, -1); |
||||||
|
|
||||||
|
foreach $file (@files){ |
||||||
|
next if ($globalpanels && grep (/^$file$/, @globalpanels)); |
||||||
|
foreach my $user ($a->users){ |
||||||
|
my $key = $user->key; |
||||||
|
push @{$panelshash{$file}}, $key |
||||||
|
if ((grep {$file eq $_} split(/[;,]/, ($user->prop('AdminPanels') || ''))) |
||||||
|
&& (!grep {$key eq $_} @{$panelshash{$file}})); |
||||||
|
} |
||||||
|
foreach my $group ($a->groups){ |
||||||
|
foreach my $member (split(/[;,]/,($group->prop('Members') || ''))){ |
||||||
|
push @{$panelshash{$file}}, $member |
||||||
|
if ((grep {$file eq $_} split(/[;,]/, ($group->prop('AdminPanels') || ''))) |
||||||
|
&& (!grep {$member eq $_} @{$panelshash{$file}})); |
||||||
|
} |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
|
$OUT .= <<HERE; |
||||||
|
|
||||||
|
<Directory \"/etc/e-smith/web/panels/user/html\" > |
||||||
|
Options Includes Indexes FollowSymLinks |
||||||
|
AllowOverride None |
||||||
|
order deny,allow |
||||||
|
deny from all |
||||||
|
allow from $localAccess |
||||||
|
PerlHeaderParserHandler My::Package |
||||||
|
Satisfy all |
||||||
|
</Directory> |
||||||
|
|
||||||
|
<Directory \"/etc/e-smith/web/panels/user/cgi-bin\" > |
||||||
|
Options Includes Indexes FollowSymLinks |
||||||
|
AllowOverride None |
||||||
|
order deny,allow |
||||||
|
deny from all |
||||||
|
allow from $localAccess |
||||||
|
PerlHeaderParserHandler My::Package |
||||||
|
Satisfy all |
||||||
|
|
||||||
|
HERE |
||||||
|
|
||||||
|
foreach my $file (@files){ |
||||||
|
next unless ( defined ($panelshash{$file}) ); |
||||||
|
foreach my $u (@{$panelshash{$file}}){ |
||||||
|
$OUT .= " SetEnvIf Auth-User \"$u\" allow_$file\n"; |
||||||
|
} |
||||||
|
$OUT .= "\n"; |
||||||
|
$OUT .= " <Files $file>\n"; |
||||||
|
$OUT .= " order deny,allow\n"; |
||||||
|
$OUT .= " deny from all\n"; |
||||||
|
$OUT .= " allow from env=allow_$file\n"; |
||||||
|
$OUT .= " </Files>\n"; |
||||||
|
} |
||||||
|
|
||||||
|
$OUT .= "</Directory>\n"; |
||||||
|
} |
||||||
|
|
||||||
@ -0,0 +1,10 @@ |
|||||||
|
{ |
||||||
|
use esmith::DomainsDB; |
||||||
|
# Convert the passed hash for the domain object back into an object. |
||||||
|
$domain = bless \%domain, 'esmith::DB::db::Record'; |
||||||
|
|
||||||
|
# Make scalars from some of the properties of the domain |
||||||
|
$virtualHost = $domain->key; |
||||||
|
$OUT = ""; |
||||||
|
} |
||||||
|
|
||||||
@ -0,0 +1 @@ |
|||||||
|
ServerName {$virtualHost} |
||||||
@ -0,0 +1,15 @@ |
|||||||
|
{ |
||||||
|
my $ssl = $domain->prop('RequireSSL') || 'disabled'; |
||||||
|
|
||||||
|
if (($modSSL{TCPPort} || "443") eq $port){ |
||||||
|
$OUT .= " SSLEngine on\n"; |
||||||
|
} |
||||||
|
else { |
||||||
|
$OUT .=<<'EOF'; |
||||||
|
RewriteEngine on |
||||||
|
RewriteRule ^/(.*|$) https://%{HTTP_HOST}/$1 [L,R] |
||||||
|
|
||||||
|
EOF |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
@ -0,0 +1,8 @@ |
|||||||
|
{ |
||||||
|
$OUT =<<'HERE'; |
||||||
|
RewriteEngine on |
||||||
|
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) |
||||||
|
RewriteRule .* - [F] |
||||||
|
HERE |
||||||
|
} |
||||||
|
|
||||||
@ -0,0 +1,3 @@ |
|||||||
|
# alias for Apache icons |
||||||
|
Alias /icons/ /var/www/icons/ |
||||||
|
|
||||||
@ -0,0 +1,18 @@ |
|||||||
|
{ |
||||||
|
|
||||||
|
$OUT .=<<"EOF"; |
||||||
|
|
||||||
|
ProxyPreserveHost on |
||||||
|
RewriteEngine on |
||||||
|
RewriteRule (^/(user/cgi-bin/.*)|(user-manager(.*)?)|(server-common/.*))\$ http://localhost:980/\$1 [P,L] |
||||||
|
RewriteRule ^/phpki(sso)?(/.*)\$ http://localhost:940/phpkisso\$2 [P,L] |
||||||
|
|
||||||
|
<Location /> |
||||||
|
Order deny,allow |
||||||
|
Deny from all |
||||||
|
Allow from $localAccess $externalSSLAccess |
||||||
|
</Location> |
||||||
|
|
||||||
|
EOF |
||||||
|
|
||||||
|
} |
||||||
@ -0,0 +1,3 @@ |
|||||||
|
|
||||||
|
<VirtualHost {$ipAddress}:{$port}> |
||||||
|
|
||||||
@ -0,0 +1,2 @@ |
|||||||
|
</VirtualHost> |
||||||
|
|
||||||
@ -0,0 +1,9 @@ |
|||||||
|
{ |
||||||
|
# vim: ft=perl: |
||||||
|
|
||||||
|
$OUT = ''; |
||||||
|
foreach $place ('user-manager','user') |
||||||
|
{ |
||||||
|
$OUT .= " RewriteRule ^/$place(/.*|\$) https://config.$DomainName/$place\$1 [L,R]\n"; |
||||||
|
} |
||||||
|
} |
||||||
@ -0,0 +1,8 @@ |
|||||||
|
{ |
||||||
|
my $status = $modPerl{status}; |
||||||
|
|
||||||
|
return "# modPerl disabled" unless ($status and $status eq "enabled"); |
||||||
|
|
||||||
|
return "LoadModule perl_module modules/mod_perl.so"; |
||||||
|
} |
||||||
|
|
||||||
@ -0,0 +1,19 @@ |
|||||||
|
# Load LemonLDAP::NG Handler |
||||||
|
PerlOptions +GlobalRequest |
||||||
|
PerlRequire /var/lib/lemonldap-ng/handler/MyPkiHandler.pm |
||||||
|
|
||||||
|
# Common error page and security parameters |
||||||
|
ErrorDocument 403 http://auth.{$DomainName}/?lmError=403 |
||||||
|
ErrorDocument 500 http://auth.{$DomainName}/?lmError=500 |
||||||
|
|
||||||
|
|
||||||
|
# Configuration reload mechanism (only 1 per physical server is |
||||||
|
# needed): choose your URL to avoid restarting Apache when |
||||||
|
# configuration change |
||||||
|
<Location /lm-reload> |
||||||
|
Order deny,allow |
||||||
|
Deny from all |
||||||
|
Allow from localhost |
||||||
|
PerlHeaderParserHandler My::Package->refresh |
||||||
|
</Location> |
||||||
|
|
||||||
@ -0,0 +1,16 @@ |
|||||||
|
|
||||||
|
Alias /phpkisso /opt/phpki/html/ |
||||||
|
|
||||||
|
<Location /phpkisso/ca> |
||||||
|
PerlHeaderParserHandler My::Package |
||||||
|
{ |
||||||
|
my @users = split(/\s/, getUsersList("phpki")); |
||||||
|
foreach my $u (@users){ |
||||||
|
$OUT .= " SetEnvIf Auth-User \"$u\" allow_phpki\n"; |
||||||
|
} |
||||||
|
} |
||||||
|
order deny,allow |
||||||
|
deny from all |
||||||
|
allow from env=allow_phpki |
||||||
|
</Location> |
||||||
|
|
||||||
@ -0,0 +1,9 @@ |
|||||||
|
[all] |
||||||
|
|
||||||
|
[configuration] |
||||||
|
type = SOAP |
||||||
|
proxy = https://lemonsoap:{$lemonldap{'SoapPassword'};}@soapsso.{$DomainName}/index.pl/config |
||||||
|
proxyOptions = \{ timeout => 5 \} |
||||||
|
localStorage=Cache::FileCache |
||||||
|
localStorageOptions=\{ 'namespace' => 'LemonLDAPngAdmin', 'default_expires_in' => 600, 'directory_umask' => '007', 'cache_root' => '/tmp', 'cache_depth' => 5, \} |
||||||
|
|
||||||
@ -0,0 +1,9 @@ |
|||||||
|
[all] |
||||||
|
|
||||||
|
[configuration] |
||||||
|
type = SOAP |
||||||
|
proxy = https://lemonsoap:{$lemonldap{'SoapPassword'};}@soapsso.{$DomainName}/index.pl/config |
||||||
|
proxyOptions = \{ timeout => 5 \} |
||||||
|
localStorage=Cache::FileCache |
||||||
|
localStorageOptions=\{ 'namespace' => 'LemonLDAPngPki', 'default_expires_in' => 600, 'directory_umask' => '007', 'cache_root' => '/tmp', 'cache_depth' => 5, \} |
||||||
|
|
||||||
@ -0,0 +1,25 @@ |
|||||||
|
{ |
||||||
|
|
||||||
|
$conf->{'locationRules'}->{"config.$domain"} = { |
||||||
|
'(?#001common)^/server-common' => 'unprotect', |
||||||
|
'(?#010phpki)^/phpkisso/ca' => '$groups =~ /\\b(equipe|admins)\\b/ and ($localAccess or $externalSSLAccess)', |
||||||
|
'default' => 'deny', |
||||||
|
'(?#005usermanager)^/user(/cgi\\-bin/|\\-manager)' => '$groups =~ /\\b(equipe|admins)\\b/ and ($localAccess or $externalSSLAccess)' |
||||||
|
} unless $conf->{'locationRules'}->{"config.$domain"}; |
||||||
|
|
||||||
|
$conf->{'exportedHeaders'}->{"config.$domain"} = { |
||||||
|
'Auth-User' => '$uid', |
||||||
|
} unless $conf->{'exportedHeaders'}->{"config.$domain"}; |
||||||
|
|
||||||
|
$conf->{'applicationList'}->{'020utils'}->{'usermanager'} = { |
||||||
|
'options' => { |
||||||
|
'logo' => 'configure.png', |
||||||
|
'name' => 'Configuration', |
||||||
|
'description' => 'Configuration iPasserelle', |
||||||
|
'uri' => "https://config.$domain/user-manager", |
||||||
|
'display' => 'auto' |
||||||
|
}, |
||||||
|
'type' => 'application' |
||||||
|
} unless $conf->{'applicationList'}->{'020utils'}->{'usermanager'}; |
||||||
|
|
||||||
|
} |
||||||
|
After Width: | Height: | Size: 14 KiB |
@ -0,0 +1,83 @@ |
|||||||
|
#!/usr/bin/perl -wT |
||||||
|
|
||||||
|
#---------------------------------------------------------------------- |
||||||
|
# |
||||||
|
# Copyright (c) 2011-2013 Firewall-Services |
||||||
|
# daniel@firewall-services.com |
||||||
|
# |
||||||
|
# This program is free software; you can redistribute it and/or modify |
||||||
|
# it under the terms of the GNU General Public License as published by |
||||||
|
# the Free Software Foundation; either version 2 of the License, or |
||||||
|
# (at your option) any later version. |
||||||
|
# |
||||||
|
# This program is distributed in the hope that it will be useful, |
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||||
|
# GNU General Public License for more details. |
||||||
|
# |
||||||
|
# You should have received a copy of the GNU General Public License |
||||||
|
# along with this program; if not, write to the Free Software |
||||||
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
||||||
|
#---------------------------------------------------------------------- |
||||||
|
|
||||||
|
package esmith; |
||||||
|
|
||||||
|
use strict; |
||||||
|
use CGI ':all'; |
||||||
|
use CGI::Carp qw(fatalsToBrowser); |
||||||
|
|
||||||
|
BEGIN |
||||||
|
{ |
||||||
|
# Clear PATH and related environment variables so that calls to |
||||||
|
# external programs do not cause results to be tainted. See |
||||||
|
# "perlsec" manual page for details. |
||||||
|
|
||||||
|
$ENV {'PATH'} = ''; |
||||||
|
$ENV {'SHELL'} = '/bin/bash'; |
||||||
|
delete $ENV {'ENV'}; |
||||||
|
} |
||||||
|
|
||||||
|
$CGI::POST_MAX=1024 * 100; # max 100K posts |
||||||
|
$CGI::DISABLE_UPLOADS = 1; # no uploads |
||||||
|
|
||||||
|
my $q = new CGI; |
||||||
|
|
||||||
|
print $q->header (-EXPIRES => '+-20y', charset => 'UTF-8'); |
||||||
|
|
||||||
|
print $q->start_html (-TITLE => 'Portail de configuration iPasserelle', |
||||||
|
-AUTHOR => 'daniel@firewall-services.com', |
||||||
|
-META => {'copyright' => 'Copyright 2011-2013 Firewall-Services'}, |
||||||
|
-CLASS => "main", |
||||||
|
-STYLE => { |
||||||
|
-code => '@import url("/server-common/css/sme_main.css");', |
||||||
|
-src => '/server-common/css/sme_core.css' |
||||||
|
}); |
||||||
|
|
||||||
|
|
||||||
|
my $user = $ENV{'REMOTE_USER'}; |
||||||
|
my $name = $ENV{'HTTP_USER_NAME'} || $user; |
||||||
|
|
||||||
|
print $q->h1("Portail de configuration iPasserelle"); |
||||||
|
print $q->h2("Bienvenue $name"); |
||||||
|
|
||||||
|
print <<"EOF"; |
||||||
|
<p><p> |
||||||
|
Vous pouvez modifier les paramètres de votre compte |
||||||
|
en cliquant sur les différents menus sur la gauche. |
||||||
|
<ul> |
||||||
|
<center> |
||||||
|
<img src=/server-common/ipasserelle_logo.jpg><p> |
||||||
|
</center> |
||||||
|
|
||||||
|
EOF |
||||||
|
|
||||||
|
print $q->endform; |
||||||
|
|
||||||
|
print $q->p |
||||||
|
($q->hr ({-CLASS => "sme-copyrightbar"}), |
||||||
|
$q->div ({-CLASS => "sme-copyright"}, |
||||||
|
"Portail de configuration iPasserelle<BR>" . |
||||||
|
"Copyright 2011-2013 Firewall-Services.<BR>")); |
||||||
|
print '</DIV>'; |
||||||
|
print $q->end_html; |
||||||
|
|
||||||
@ -0,0 +1,313 @@ |
|||||||
|
#!/usr/bin/perl -wT |
||||||
|
|
||||||
|
#---------------------------------------------------------------------- |
||||||
|
# User manager functions: navigation |
||||||
|
# |
||||||
|
# copyright (C) 2011 Firewall Services |
||||||
|
# daniel@firewall-services.com |
||||||
|
# |
||||||
|
# This program is free software; you can redistribute it and/or modify |
||||||
|
# it under the terms of the GNU General Public License as published by |
||||||
|
# the Free Software Foundation; either version 2 of the License, or |
||||||
|
# (at your option) any later version. |
||||||
|
# |
||||||
|
# This program is distributed in the hope that it will be useful, |
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||||
|
# GNU General Public License for more details. |
||||||
|
# |
||||||
|
# You should have received a copy of the GNU General Public License |
||||||
|
# along with this program; if not, write to the Free Software |
||||||
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
||||||
|
# |
||||||
|
#---------------------------------------------------------------------- |
||||||
|
package esmith; |
||||||
|
|
||||||
|
use strict; |
||||||
|
use CGI ':no_xhtml', ':all'; |
||||||
|
use CGI::Carp qw(fatalsToBrowser); |
||||||
|
|
||||||
|
use esmith::cgi; |
||||||
|
use esmith::config; |
||||||
|
use esmith::AccountsDB; |
||||||
|
use esmith::NavigationDB; |
||||||
|
use esmith::util; |
||||||
|
use esmith::I18N; |
||||||
|
|
||||||
|
sub showNavigation ($); |
||||||
|
|
||||||
|
BEGIN |
||||||
|
{ |
||||||
|
# Clear PATH and related environment variables so that calls to |
||||||
|
# external programs do not cause results to be tainted. See |
||||||
|
# "perlsec" manual page for details. |
||||||
|
|
||||||
|
$ENV {'PATH'} = ''; |
||||||
|
$ENV {'SHELL'} = '/bin/bash'; |
||||||
|
delete $ENV {'ENV'}; |
||||||
|
} |
||||||
|
|
||||||
|
esmith::util::setRealToEffective (); |
||||||
|
|
||||||
|
$CGI::POST_MAX=1024 * 100; # max 100K posts |
||||||
|
$CGI::DISABLE_UPLOADS = 1; # no uploads |
||||||
|
|
||||||
|
# Use the one script for navigation and noframes |
||||||
|
my $NO_FRAMES = ($0 =~ /noframes/); |
||||||
|
|
||||||
|
my %conf; |
||||||
|
tie %conf, 'esmith::config'; |
||||||
|
|
||||||
|
my $accdb = esmith::AccountsDB->open_ro || die "Couldn't open AccountsDB\n"; |
||||||
|
|
||||||
|
my $q = new CGI; |
||||||
|
|
||||||
|
showNavigation ($q); |
||||||
|
exit (0); |
||||||
|
|
||||||
|
#------------------------------------------------------------ |
||||||
|
# subroutine to display navigation bar |
||||||
|
#------------------------------------------------------------ |
||||||
|
|
||||||
|
sub showNavigation ($) |
||||||
|
{ |
||||||
|
my $q = shift; |
||||||
|
|
||||||
|
# enable utf8 binmode so new translations work |
||||||
|
binmode STDOUT, ":utf8"; |
||||||
|
|
||||||
|
my $acctName = $ENV{'REMOTE_USER'}; |
||||||
|
my $user = $accdb->get($acctName) || die "User $acctName not found in AccountsDB\n"; |
||||||
|
my $availablePanels = $user->prop('AdminPanels') || ''; |
||||||
|
foreach ($accdb->user_group_list($acctName)){ |
||||||
|
my $group = $accdb->get($_) || die "Group $_ not found in AccountsDB\n"; |
||||||
|
$availablePanels .= ',' . ($group->prop('AdminPanels') || ''); |
||||||
|
} |
||||||
|
my $glob = $accdb->get('globalUP'); |
||||||
|
my $globalPanels = $glob->prop('AdminPanels') || ''; |
||||||
|
|
||||||
|
my @adminpanels; |
||||||
|
if ( defined ($availablePanels) && defined ($globalPanels) ) |
||||||
|
{ |
||||||
|
@adminpanels = ((split (/,/, $availablePanels, -1)),(split (/,/, $globalPanels, -1))); |
||||||
|
} |
||||||
|
elsif ( defined ($globalPanels) ) |
||||||
|
{ |
||||||
|
@adminpanels = split (/,/, $globalPanels, -1); |
||||||
|
} |
||||||
|
elsif ( defined ($availablePanels) ) |
||||||
|
{ |
||||||
|
@adminpanels = split (/,/, $availablePanels, -1); |
||||||
|
} |
||||||
|
|
||||||
|
# Use this variable throughout to keep track of files |
||||||
|
# list of just the files |
||||||
|
my $c = "1"; |
||||||
|
my @files = (); |
||||||
|
my %files_hash = (); |
||||||
|
|
||||||
|
#----------------------------------------------------- |
||||||
|
# Determine the directory where the functions are kept |
||||||
|
#----------------------------------------------------- |
||||||
|
|
||||||
|
my $navigation_ignore = |
||||||
|
"(\.\.?|navigation|noframes|online-manual|(internal|pleasewait)(-.*)?)"; |
||||||
|
|
||||||
|
my $cgidir = '/etc/e-smith/web/panels/user/cgi-bin/'; |
||||||
|
|
||||||
|
if (opendir (DIR, $cgidir)) |
||||||
|
{ |
||||||
|
@files = grep (!/^(\..*|userpanel-navigation|userpanel-noframes|userpanel-initial|pleasewait)$/, |
||||||
|
readdir (DIR)); |
||||||
|
closedir (DIR); |
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
warn "Can't open directory $cgidir\n"; |
||||||
|
} |
||||||
|
|
||||||
|
foreach my $file (@files) |
||||||
|
{ |
||||||
|
foreach my $adminpanel (@adminpanels) |
||||||
|
{ |
||||||
|
if ( $file eq $adminpanel ) |
||||||
|
{ |
||||||
|
$files_hash{$file} = $cgidir; |
||||||
|
} |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
|
#-------------------------------------------------- |
||||||
|
# For each script, extract the description and category |
||||||
|
# information. Build up an associative array mapping headings |
||||||
|
# to heading structures. Each heading structure contains the |
||||||
|
# total weight for the heading, the number of times the heading |
||||||
|
# has been encountered, and another associative array mapping |
||||||
|
# descriptions to description structures. Each description |
||||||
|
# structure contains the filename of the particular cgi script |
||||||
|
# and a weight. |
||||||
|
#-------------------------------------------------- |
||||||
|
my %nav = (); |
||||||
|
|
||||||
|
use constant NAVIGATIONDIR => '/home/e-smith/db/navigation'; |
||||||
|
use constant WEBFUNCTIONS => '/etc/e-smith/web/functions'; |
||||||
|
|
||||||
|
my $i18n = new esmith::I18N; |
||||||
|
|
||||||
|
my $language = $i18n->preferredLanguage( $ENV{HTTP_ACCEPT_LANGUAGE} ); |
||||||
|
|
||||||
|
my $navinfo = NAVIGATIONDIR . "/navigation.$language"; |
||||||
|
|
||||||
|
my $navdb = esmith::NavigationDB->open_ro( $navinfo ) or |
||||||
|
die "Couldn't open $navinfo\n"; |
||||||
|
|
||||||
|
# Check the navdb for anything with a UrlPath, which means that it doesn't |
||||||
|
# have a cgi file to be picked up by the above code. Ideally, only pages |
||||||
|
# that exist should be in the db, but that's not the case. Anything |
||||||
|
# without a cgi file will have to remove themselves on uninstall from the |
||||||
|
# navigation dbs. |
||||||
|
foreach my $rec ($navdb->get_all) |
||||||
|
{ |
||||||
|
if ($rec->prop('UrlPath')) |
||||||
|
{ |
||||||
|
$files_hash{$rec->{key}} = $cgidir; |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
|
foreach my $file (keys %files_hash) |
||||||
|
{ |
||||||
|
my $heading = 'Unknown'; |
||||||
|
my $description = $file; |
||||||
|
my $headingWeight = 99999; |
||||||
|
my $descriptionWeight = 99999; |
||||||
|
my $urlpath = ''; |
||||||
|
|
||||||
|
my $rec = $navdb->get($file); |
||||||
|
|
||||||
|
if (defined $rec) |
||||||
|
{ |
||||||
|
$heading = $rec->prop('Heading'); |
||||||
|
$description = $rec->prop('Description'); |
||||||
|
$headingWeight = $rec->prop('HeadingWeight'); |
||||||
|
$descriptionWeight = $rec->prop('DescriptionWeight'); |
||||||
|
$urlpath = $rec->prop('UrlPath') || ''; |
||||||
|
} |
||||||
|
|
||||||
|
#-------------------------------------------------- |
||||||
|
# add heading, description and weight information to data structure |
||||||
|
#-------------------------------------------------- |
||||||
|
|
||||||
|
unless (exists $nav {$heading}) |
||||||
|
{ |
||||||
|
$nav {$heading} = { COUNT => 0, WEIGHT => 0, DESCRIPTIONS => [] }; |
||||||
|
} |
||||||
|
|
||||||
|
$nav {$heading} {'COUNT'} ++; |
||||||
|
$nav {$heading} {'WEIGHT'} += $headingWeight; |
||||||
|
|
||||||
|
# Check for manager panel, and assign the appropriate |
||||||
|
# cgi-bin prefix for the links. |
||||||
|
# Grab the last 2 directories by splitting for '/'s and |
||||||
|
# then concatenating the last 2 |
||||||
|
# probably a better way, but I don't know it. |
||||||
|
my @filename = split /\//, $files_hash{$file}; |
||||||
|
my $path = ($cgidir eq '/etc/e-smith/web/panels/user/cgi-bin/') ? |
||||||
|
"/$filename[scalar @filename - 1]" : |
||||||
|
"/$filename[scalar @filename - 2]/$filename[scalar @filename - 1]"; |
||||||
|
|
||||||
|
push @{ $nav {$heading} {'DESCRIPTIONS'} }, |
||||||
|
{ DESCRIPTION => $description, |
||||||
|
WEIGHT => $descriptionWeight, |
||||||
|
FILENAME => $urlpath ? $urlpath : "$path/$file", |
||||||
|
CGIPATH => $path |
||||||
|
}; |
||||||
|
} |
||||||
|
|
||||||
|
#-------------------------------------------------- |
||||||
|
# generate list of headings sorted by average weight |
||||||
|
#-------------------------------------------------- |
||||||
|
if ( $NO_FRAMES ) |
||||||
|
{ |
||||||
|
esmith::cgi::genNoframesHeader ($q); |
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
esmith::cgi::genNavigationHeader ($q, undef); |
||||||
|
print "\n<TABLE BORDER=\"0\" CELLSPACING=\"0\" CELLPADDING=\"0\">\n"; |
||||||
|
} |
||||||
|
|
||||||
|
print '<script language="JavaScript" type="text/javascript"> |
||||||
|
<!-- Hide script |
||||||
|
//This swap the class of the selected item. |
||||||
|
function swapClass() { |
||||||
|
var i,x,tB,j=0,tA=new Array(),arg=swapClass.arguments; |
||||||
|
if(document.getElementsByTagName){for(i=4;i<arg.length;i++){tB=document.getElementsByTagName(arg[i]); |
||||||
|
for(x=0;x<tB.length;x++){tA[j]=tB[x];j++;}}for(i=0;i<tA.length;i++){ |
||||||
|
if(tA[i].className){if(tA[i].id==arg[1]){if(arg[0]==1){ |
||||||
|
tA[i].className=(tA[i].className==arg[3])?arg[2]:arg[3];}else{tA[i].className=arg[2];} |
||||||
|
}else if(arg[0]==1 && arg[1]==\'none\'){if(tA[i].className==arg[2] || tA[i].className==arg[3]){ |
||||||
|
tA[i].className=(tA[i].className==arg[3])?arg[2]:arg[3];} |
||||||
|
}else if(tA[i].className==arg[2]){tA[i].className=arg[3];}}}}} |
||||||
|
'; |
||||||
|
print " |
||||||
|
//This swap the class of the selected item. |
||||||
|
function swapClasses() { |
||||||
|
var arg=swapClasses.arguments; |
||||||
|
swapClass(0,'none','item-current','item','a'); |
||||||
|
swapClass(0,'none','warn-current','warn','a'); |
||||||
|
swapClass(0,arg[0],'item-current','item','a'); |
||||||
|
} |
||||||
|
|
||||||
|
// End script hiding --> |
||||||
|
</script> |
||||||
|
"; |
||||||
|
|
||||||
|
foreach my $h (sort { |
||||||
|
($nav{$a}{'WEIGHT'}/$nav{$a}{'COUNT'}) <=> |
||||||
|
($nav{$b}{'WEIGHT'}/$nav{$b}{'COUNT'}) } keys %nav) |
||||||
|
{ |
||||||
|
if ( $NO_FRAMES ) |
||||||
|
{ |
||||||
|
print $q->h2 ($h); |
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
print "\n", $q->Tr ($q->td({class => "section"},$q->span({class => "section"}, $h))); |
||||||
|
} |
||||||
|
|
||||||
|
#-------------------------------------------------- |
||||||
|
# generate list of descriptions sorted by weight |
||||||
|
#-------------------------------------------------- |
||||||
|
print "<ul>\n" if ( $NO_FRAMES ); |
||||||
|
|
||||||
|
foreach (sort { $a->{'WEIGHT'} <=> $b->{'WEIGHT'} } @{$nav {$h}{'DESCRIPTIONS'}}) |
||||||
|
{ |
||||||
|
my $href = "/user-manager" . $_->{'FILENAME'}; |
||||||
|
if ( $NO_FRAMES ) |
||||||
|
{ |
||||||
|
print $q->li ($q->a ({href => "$href?noframes=1"}, $_->{'DESCRIPTION'})); |
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
print "\n",$q->Tr( |
||||||
|
$q->td ({-class => "menu-cell"}, |
||||||
|
$q->a ({-id => "sme$c", |
||||||
|
-class => "item", |
||||||
|
-onClick => "swapClasses('sme$c')", |
||||||
|
href => $href, |
||||||
|
target => 'main'}, |
||||||
|
$_->{'DESCRIPTION'}) |
||||||
|
)); |
||||||
|
} |
||||||
|
$c++; |
||||||
|
|
||||||
|
} |
||||||
|
print "</ul>\n" if ($NO_FRAMES); |
||||||
|
} |
||||||
|
|
||||||
|
unless ( $NO_FRAMES ) |
||||||
|
{ |
||||||
|
print "\n</TABLE>\n"; |
||||||
|
esmith::cgi::genNavigationFooter ($q); |
||||||
|
} |
||||||
|
} |
||||||
@ -0,0 +1,268 @@ |
|||||||
|
#!/usr/bin/perl -wT |
||||||
|
|
||||||
|
#---------------------------------------------------------------------- |
||||||
|
# user manager functions: noframes |
||||||
|
# |
||||||
|
# Copyright (c) 2001 Daniel van Raay <danielvr@caa.org.au> |
||||||
|
# |
||||||
|
# This program is free software; you can redistribute it and/or modify |
||||||
|
# it under the terms of the GNU General Public License as published by |
||||||
|
# the Free Software Foundation; either version 2 of the License, or |
||||||
|
# (at your option) any later version. |
||||||
|
# |
||||||
|
# This program is distributed in the hope that it will be useful, |
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||||
|
# GNU General Public License for more details. |
||||||
|
# |
||||||
|
# You should have received a copy of the GNU General Public License |
||||||
|
# along with this program; if not, write to the Free Software |
||||||
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
||||||
|
#---------------------------------------------------------------------- |
||||||
|
|
||||||
|
package esmith; |
||||||
|
|
||||||
|
use strict; |
||||||
|
use CGI ':all'; |
||||||
|
use CGI::Carp qw(fatalsToBrowser); |
||||||
|
|
||||||
|
use esmith::cgi; |
||||||
|
use esmith::config; |
||||||
|
use esmith::util; |
||||||
|
use esmith::db; |
||||||
|
use esmith::AccountsDB; |
||||||
|
|
||||||
|
sub showNavigation ($); |
||||||
|
sub byweight; |
||||||
|
|
||||||
|
BEGIN |
||||||
|
{ |
||||||
|
# Clear PATH and related environment variables so that calls to |
||||||
|
# external programs do not cause results to be tainted. See |
||||||
|
# "perlsec" manual page for details. |
||||||
|
|
||||||
|
$ENV {'PATH'} = ''; |
||||||
|
$ENV {'SHELL'} = '/bin/bash'; |
||||||
|
delete $ENV {'ENV'}; |
||||||
|
} |
||||||
|
|
||||||
|
esmith::util::setRealToEffective (); |
||||||
|
|
||||||
|
$CGI::POST_MAX=1024 * 100; # max 100K posts |
||||||
|
$CGI::DISABLE_UPLOADS = 1; # no uploads |
||||||
|
|
||||||
|
my %conf; |
||||||
|
tie %conf, 'esmith::config'; |
||||||
|
|
||||||
|
my %accounts; |
||||||
|
tie %accounts, 'esmith::config', '/home/e-smith/db/accounts'; |
||||||
|
|
||||||
|
my $a = esmith::AccountsDB->open_ro || die "Error opening AccountsDB\n"; |
||||||
|
|
||||||
|
my $q = new CGI; |
||||||
|
|
||||||
|
showNavigation ($q); |
||||||
|
exit (0); |
||||||
|
|
||||||
|
|
||||||
|
#------------------------------------------------------------ |
||||||
|
# subroutine to display navigation bar |
||||||
|
#------------------------------------------------------------ |
||||||
|
|
||||||
|
sub showNavigation ($) |
||||||
|
{ |
||||||
|
my $q = shift; |
||||||
|
|
||||||
|
esmith::cgi::genNoframesHeader ($q); |
||||||
|
|
||||||
|
my $acctName = $ENV{'REMOTE_USER'}; |
||||||
|
my $user = $a->get($acctName) || die "User $acctName not found in AccountsDB\n"; |
||||||
|
my $availablePanels = $user->prop('AdminPanels') || ''; |
||||||
|
foreach ($a->user_group_list($acctName)){ |
||||||
|
my $group = $a->get($_) || die "Group $_ not found in AccountsDB\n"; |
||||||
|
$availablePanels .= ','.$group->prop('AdminPanels') || ''; |
||||||
|
} |
||||||
|
my $glob = $a->get('globalUP'); |
||||||
|
my $globalPanels = $glob->prop('AdminPanels') || ''; |
||||||
|
|
||||||
|
my @adminpanels; |
||||||
|
if ( defined ($availablePanels) && defined ($globalPanels) ) |
||||||
|
{ |
||||||
|
@adminpanels = ((split (/,/, $availablePanels, -1)),(split (/,/, $globalPanels, -1))); |
||||||
|
} |
||||||
|
elsif ( defined ($globalPanels) ) |
||||||
|
{ |
||||||
|
@adminpanels = split (/,/, $globalPanels, -1); |
||||||
|
} |
||||||
|
elsif ( defined ($availablePanels) ) |
||||||
|
{ |
||||||
|
@adminpanels = split (/,/, $availablePanels, -1); |
||||||
|
} |
||||||
|
|
||||||
|
# Use this variable throughout to keep track of files |
||||||
|
# list of just the files |
||||||
|
my @files = (); |
||||||
|
my %files_hash = (); |
||||||
|
|
||||||
|
#----------------------------------------------------- |
||||||
|
# Determine the directory where the functions are kept |
||||||
|
# match available panels with delegated panels to this user |
||||||
|
#----------------------------------------------------- |
||||||
|
|
||||||
|
my $cgidir = '/etc/e-smith/web/panels/user/cgi-bin/'; |
||||||
|
|
||||||
|
if (opendir (DIR, $cgidir)) |
||||||
|
{ |
||||||
|
@files = grep (!/^(\..*|userpanel-navigation|userpanel-noframes|userpanel-initial|pleasewait)$/, |
||||||
|
readdir (DIR)); |
||||||
|
closedir (DIR); |
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
warn "Can't open directory $cgidir\n"; |
||||||
|
} |
||||||
|
|
||||||
|
foreach my $file (@files) |
||||||
|
{ |
||||||
|
foreach my $adminpanel (@adminpanels) |
||||||
|
{ |
||||||
|
if ( $file eq $adminpanel ) |
||||||
|
{ |
||||||
|
$files_hash{$file} = $cgidir; |
||||||
|
} |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
|
#-------------------------------------------------- |
||||||
|
# For each script, extract the description and category |
||||||
|
# information. Build up an associative array mapping headings |
||||||
|
# to heading structures. Each heading structure contains the |
||||||
|
# total weight for the heading, the number of times the heading |
||||||
|
# has been encountered, and another associative array mapping |
||||||
|
# descriptions to description structures. Each description |
||||||
|
# structure contains the filename of the particular cgi script |
||||||
|
# and a weight. |
||||||
|
#-------------------------------------------------- |
||||||
|
|
||||||
|
my %nav = (); |
||||||
|
|
||||||
|
foreach my $file (keys %files_hash) |
||||||
|
{ |
||||||
|
#-------------------------------------------------- |
||||||
|
# extract heading, description and weight information |
||||||
|
# from CGI script |
||||||
|
#-------------------------------------------------- |
||||||
|
my $heading = "Unknown"; |
||||||
|
my $headingWeight = 0; |
||||||
|
|
||||||
|
my $description = "Unknown"; |
||||||
|
my $descriptionWeight = 0; |
||||||
|
|
||||||
|
unless (open (RD, "$files_hash{$file}/$file")) |
||||||
|
{ |
||||||
|
warn "Can't open file $files_hash{$file}/$file: $!\n"; |
||||||
|
next; |
||||||
|
} |
||||||
|
|
||||||
|
while (<RD>) |
||||||
|
{ |
||||||
|
if (/^\s*#\s*heading\s*:\s*(.+?)\s*$/) |
||||||
|
{ |
||||||
|
$heading = $1; |
||||||
|
} |
||||||
|
|
||||||
|
if (/^\s*#\s*description\s*:\s*(.+?)\s*$/) |
||||||
|
{ |
||||||
|
$description = $1; |
||||||
|
} |
||||||
|
|
||||||
|
if (/^\s*#\s*navigation\s*:\s*(\d+?)\s+(\d+?)\s*$/) |
||||||
|
{ |
||||||
|
$headingWeight = $1; |
||||||
|
$descriptionWeight = $2; |
||||||
|
} |
||||||
|
last if ($heading ne "Unknown" && $headingWeight && $description ne "Unknown" && $descriptionWeight); |
||||||
|
} |
||||||
|
close RD; |
||||||
|
|
||||||
|
#-------------------------------------------------- |
||||||
|
# add heading, description and weight information to data structure |
||||||
|
#-------------------------------------------------- |
||||||
|
|
||||||
|
unless (exists $nav {$heading}) |
||||||
|
{ |
||||||
|
$nav {$heading} = { COUNT => 0, WEIGHT => 0, DESCRIPTIONS => [] }; |
||||||
|
} |
||||||
|
|
||||||
|
$nav {$heading} {'COUNT'} ++; |
||||||
|
$nav {$heading} {'WEIGHT'} += $headingWeight; |
||||||
|
|
||||||
|
# Check for manager panel, and assign the appropriate |
||||||
|
# cgi-bin prefix for the links. |
||||||
|
# Grab the last 2 directories by splitting for '/'s and |
||||||
|
# then concatenating the last 2 |
||||||
|
# probably a better way, but I don't know it. |
||||||
|
my @filename = split /\//, $files_hash{$file}; |
||||||
|
my $path = "/user-manager/$filename[scalar @filename - 1]"; |
||||||
|
|
||||||
|
push @{ $nav {$heading} {'DESCRIPTIONS'} }, |
||||||
|
{ DESCRIPTION => $description, |
||||||
|
WEIGHT => $descriptionWeight, |
||||||
|
FILENAME => "$path/$file", |
||||||
|
CGIPATH => $path |
||||||
|
}; |
||||||
|
} |
||||||
|
|
||||||
|
#-------------------------------------------------- |
||||||
|
# generate list of headings sorted by average weight |
||||||
|
#-------------------------------------------------- |
||||||
|
|
||||||
|
my @unsortedheadings = keys %nav; |
||||||
|
|
||||||
|
my $h; |
||||||
|
local @esmith::weights = (); |
||||||
|
foreach $h (@unsortedheadings) |
||||||
|
{ |
||||||
|
push (@esmith::weights, ($nav {$h} {'WEIGHT'} / $nav {$h} {'COUNT'})); |
||||||
|
} |
||||||
|
|
||||||
|
my @sortedheadings = @unsortedheadings [sort byweight $[..$#unsortedheadings]; |
||||||
|
|
||||||
|
foreach $h (@sortedheadings) |
||||||
|
{ |
||||||
|
print $q->h2 ($h); |
||||||
|
|
||||||
|
#-------------------------------------------------- |
||||||
|
# generate list of descriptions sorted by weight |
||||||
|
#-------------------------------------------------- |
||||||
|
|
||||||
|
my @unsorteddescriptions = @{ $nav {$h} {'DESCRIPTIONS'} }; |
||||||
|
|
||||||
|
my $d; |
||||||
|
@esmith::weights = (); |
||||||
|
foreach $d (@unsorteddescriptions) |
||||||
|
{ |
||||||
|
push (@esmith::weights, $d->{'WEIGHT'}); |
||||||
|
} |
||||||
|
|
||||||
|
my @indices = sort byweight $[..$#unsorteddescriptions; |
||||||
|
|
||||||
|
print "<ul>\n"; |
||||||
|
|
||||||
|
my $i; |
||||||
|
foreach $i (@indices) |
||||||
|
{ |
||||||
|
my $href = $unsorteddescriptions [$i]->{'FILENAME'}; |
||||||
|
print $q->li ($q->a ({href => $href}, $unsorteddescriptions [$i]->{'DESCRIPTION'})); |
||||||
|
|
||||||
|
} |
||||||
|
print "</ul>\n"; |
||||||
|
} |
||||||
|
|
||||||
|
esmith::cgi::genNavigationFooter ($q); |
||||||
|
} |
||||||
|
|
||||||
|
sub byweight |
||||||
|
{ |
||||||
|
$esmith::weights [$a] <=> $esmith::weights [$b]; |
||||||
|
} |
||||||
@ -0,0 +1,411 @@ |
|||||||
|
#!/usr/bin/perl -wT |
||||||
|
|
||||||
|
#---------------------------------------------------------------------- |
||||||
|
# heading : Security |
||||||
|
# description : User Panel Access |
||||||
|
# navigation : 1000 1300 |
||||||
|
# |
||||||
|
# Copyright (c) 2001 Daniel van Raay <danielvr@caa.org.au> |
||||||
|
# Modified (c) 2002 Stephen Noble <stephen@dungog.net> |
||||||
|
# Modified (c) 2002 Shad L. Lords <slords@mail.com> |
||||||
|
# |
||||||
|
# This program is free software; you can redistribute it and/or modify |
||||||
|
# it under the terms of the GNU General Public License as published by |
||||||
|
# the Free Software Foundation; either version 2 of the License, or |
||||||
|
# (at your option) any later version. |
||||||
|
# |
||||||
|
# This program is distributed in the hope that it will be useful, |
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||||
|
# GNU General Public License for more details. |
||||||
|
# |
||||||
|
# You should have received a copy of the GNU General Public License |
||||||
|
# along with this program; if not, write to the Free Software |
||||||
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
||||||
|
#---------------------------------------------------------------------- |
||||||
|
|
||||||
|
package esmith; |
||||||
|
|
||||||
|
use strict; |
||||||
|
use CGI ':all'; |
||||||
|
use CGI::Carp qw(fatalsToBrowser); |
||||||
|
|
||||||
|
use esmith::cgi; |
||||||
|
use esmith::config; |
||||||
|
use esmith::util; |
||||||
|
use esmith::db; |
||||||
|
use esmith::event; |
||||||
|
|
||||||
|
sub showInitial ($$); |
||||||
|
sub genPanels ($$); |
||||||
|
sub modifyAccess ($); |
||||||
|
sub performModifyAccess ($); |
||||||
|
|
||||||
|
BEGIN |
||||||
|
{ |
||||||
|
# Clear PATH and related environment variables so that calls to |
||||||
|
# external programs do not cause results to be tainted. See |
||||||
|
# "perlsec" manual page for details. |
||||||
|
|
||||||
|
$ENV {'PATH'} = ''; |
||||||
|
$ENV {'SHELL'} = '/bin/bash'; |
||||||
|
delete $ENV {'ENV'}; |
||||||
|
} |
||||||
|
|
||||||
|
esmith::util::setRealToEffective (); |
||||||
|
|
||||||
|
$CGI::POST_MAX=1024 * 100; # max 100K posts |
||||||
|
$CGI::DISABLE_UPLOADS = 1; # no uploads |
||||||
|
|
||||||
|
my %conf; |
||||||
|
tie %conf, 'esmith::config'; |
||||||
|
|
||||||
|
my %accounts; |
||||||
|
tie %accounts, 'esmith::config', '/home/e-smith/db/accounts'; |
||||||
|
|
||||||
|
#------------------------------------------------------------ |
||||||
|
# examine state parameter and display the appropriate form |
||||||
|
#------------------------------------------------------------ |
||||||
|
|
||||||
|
my $q = new CGI; |
||||||
|
|
||||||
|
if (! grep (/^state$/, $q->param)) |
||||||
|
{ |
||||||
|
showInitial ($q, ''); |
||||||
|
} |
||||||
|
|
||||||
|
elsif ($q->param ('state') eq "modifyAccess") |
||||||
|
{ |
||||||
|
modifyAccess ($q); |
||||||
|
} |
||||||
|
|
||||||
|
elsif ($q->param ('state') eq "performModifyAccess") |
||||||
|
{ |
||||||
|
performModifyAccess ($q); |
||||||
|
} |
||||||
|
|
||||||
|
else |
||||||
|
{ |
||||||
|
esmith::cgi::genStateError ($q, \%conf); |
||||||
|
} |
||||||
|
|
||||||
|
exit (0); |
||||||
|
|
||||||
|
#------------------------------------------------------------ |
||||||
|
# subroutine to display initial form |
||||||
|
#------------------------------------------------------------ |
||||||
|
|
||||||
|
sub showInitial ($$) |
||||||
|
{ |
||||||
|
my ($q, $msg) = @_; |
||||||
|
|
||||||
|
if ($msg eq '') |
||||||
|
{ |
||||||
|
esmith::cgi::genHeaderNonCacheable |
||||||
|
($q, \%conf, 'Change access to server-manager panels for user accounts'); |
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
esmith::cgi::genHeaderNonCacheable |
||||||
|
($q, \%conf, 'Operation status report'); |
||||||
|
|
||||||
|
print $q->p ($msg); |
||||||
|
print $q->hr; |
||||||
|
} |
||||||
|
|
||||||
|
my @userAccounts = ('admin'); |
||||||
|
|
||||||
|
foreach (sort keys %accounts) |
||||||
|
{ |
||||||
|
push (@userAccounts, $_) if (db_get_type(\%accounts, $_) eq "user"); |
||||||
|
} |
||||||
|
|
||||||
|
foreach (sort keys %accounts) |
||||||
|
{ |
||||||
|
push (@userAccounts, $_) if (db_get_type(\%accounts, $_) eq "group"); |
||||||
|
} |
||||||
|
|
||||||
|
unless (scalar @userAccounts) |
||||||
|
{ |
||||||
|
print $q->p ($q->b ('There are no user accounts in the system.')); |
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
my $description = <<END_TEXT; |
||||||
|
You can modify individual users access to the server-manager |
||||||
|
panels below by clicking on the link next the account. You can assign |
||||||
|
panels to the members of a group with their link. Users or Groups |
||||||
|
in red have some form of extra access. You can globally assign |
||||||
|
a panel by editing the global account |
||||||
|
END_TEXT |
||||||
|
|
||||||
|
print $q->p ($description); |
||||||
|
|
||||||
|
print $q->p ($q->b ('Current List of User Accounts')); |
||||||
|
|
||||||
|
print "<table border=1 cellspacing=1 cellpadding=4>"; |
||||||
|
|
||||||
|
print $q->Tr (esmith::cgi::genSmallCell ($q, $q->b ('Account')), |
||||||
|
esmith::cgi::genSmallCell ($q, $q->b ('Name/Description')), |
||||||
|
$q->td (' ')); |
||||||
|
|
||||||
|
my $user; |
||||||
|
|
||||||
|
foreach $user (@userAccounts) |
||||||
|
{ |
||||||
|
my $name = ''; |
||||||
|
if (db_get_type(\%accounts, $user) eq "group") |
||||||
|
{ |
||||||
|
$name =db_get_prop(\%accounts, $user, "Description"); |
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
$name =db_get_prop(\%accounts, $user, "FirstName")." ". db_get_prop(\%accounts, $user, "LastName"); |
||||||
|
} |
||||||
|
|
||||||
|
my $AdminPanels = db_get_prop(\%accounts, $user, "AdminPanels"); |
||||||
|
$AdminPanels = '' if ! defined ($AdminPanels); |
||||||
|
|
||||||
|
if ( ! $AdminPanels ) |
||||||
|
{ |
||||||
|
print $q->Tr (esmith::cgi::genSmallCell ($q, $user), |
||||||
|
esmith::cgi::genSmallCell ($q, $name), |
||||||
|
esmith::cgi::genSmallCell ($q, |
||||||
|
$q->a ({href => $q->url (-absolute => 1) |
||||||
|
. "?state=modifyAccess&acct=" |
||||||
|
. $user}, 'Change Access...'))); |
||||||
|
|
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
print $q->Tr (esmith::cgi::genSmallRedCell ($q, $user), |
||||||
|
esmith::cgi::genSmallRedCell ($q, $name), |
||||||
|
esmith::cgi::genSmallCell ($q, |
||||||
|
$q->a ({href => $q->url (-absolute => 1) |
||||||
|
. "?state=modifyAccess&acct=" |
||||||
|
. $user}, 'Change Access...'))); |
||||||
|
|
||||||
|
} |
||||||
|
|
||||||
|
} |
||||||
|
|
||||||
|
#global setting |
||||||
|
if ( ! db_get( \%accounts, 'globalUP') ) |
||||||
|
{ |
||||||
|
db_set(\%accounts, 'globalUP', 'userpanelglobal', { FirstName => 'global user', LastName => 'panel access' }); |
||||||
|
} |
||||||
|
|
||||||
|
my $AdminPanels = db_get_prop(\%accounts, 'globalUP', "AdminPanels"); |
||||||
|
$AdminPanels = '' if ! defined ($AdminPanels); |
||||||
|
|
||||||
|
if ( ! $AdminPanels ) |
||||||
|
{ |
||||||
|
print $q->Tr (esmith::cgi::genSmallCell ($q, 'Global'), |
||||||
|
esmith::cgi::genSmallCell ($q, 'every user'), |
||||||
|
esmith::cgi::genSmallCell ($q, |
||||||
|
$q->a ({href => $q->url (-absolute => 1) |
||||||
|
. "?state=modifyAccess&acct=" |
||||||
|
. 'globalUP'}, 'Change Access...'))); |
||||||
|
|
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
print $q->Tr (esmith::cgi::genSmallRedCell ($q, 'Global'), |
||||||
|
esmith::cgi::genSmallRedCell ($q, 'every user'), |
||||||
|
esmith::cgi::genSmallCell ($q, |
||||||
|
$q->a ({href => $q->url (-absolute => 1) |
||||||
|
. "?state=modifyAccess&acct=" |
||||||
|
. 'globalUP'}, 'Change Access...'))); |
||||||
|
|
||||||
|
} |
||||||
|
|
||||||
|
print '</table>'; |
||||||
|
} |
||||||
|
|
||||||
|
esmith::cgi::genFooter ($q); |
||||||
|
} |
||||||
|
|
||||||
|
sub genPanels ($$) |
||||||
|
{ |
||||||
|
my ($q, $user) = @_; |
||||||
|
|
||||||
|
my %panelshash = (); |
||||||
|
my @selected = (); |
||||||
|
my @globalselected = (); |
||||||
|
|
||||||
|
my @panels; |
||||||
|
opendir (DIR, "/etc/e-smith/web/functions") |
||||||
|
|| die "Can't open /etc/e-smith/web/functions directory.\n"; |
||||||
|
push (@panels, sort (grep (!/^(\.|userpanel-initial|userpanel-navigation|userpanel-noframes|pleasewait|index\.cgi|initial\.cgi|navigation|noframes)/, readdir(DIR)))); |
||||||
|
closedir (DIR); |
||||||
|
|
||||||
|
my $panel; |
||||||
|
foreach $panel (@panels) |
||||||
|
{ |
||||||
|
$panelshash{$panel} = "Unknown"; |
||||||
|
|
||||||
|
unless (open (RD, "/etc/e-smith/web/functions/$panel")) |
||||||
|
{ |
||||||
|
warn "Can't open file /etc/e-smith/web/functions/$panel: $!\n"; |
||||||
|
next; |
||||||
|
} |
||||||
|
|
||||||
|
while (<RD>) |
||||||
|
{ |
||||||
|
if (/^\s*#\s*description\s*:\s*(.+?)\s*$/) |
||||||
|
{ |
||||||
|
$panelshash{$panel} = $1; |
||||||
|
} |
||||||
|
|
||||||
|
last if ( $panelshash{$panel} ne "Unknown" ); |
||||||
|
} |
||||||
|
close RD; |
||||||
|
} |
||||||
|
|
||||||
|
my $userAdminPanels = db_get_prop(\%accounts, $user, 'AdminPanels'); |
||||||
|
$userAdminPanels = '' if ! defined ($userAdminPanels); |
||||||
|
@selected = split (/,/, $userAdminPanels); |
||||||
|
|
||||||
|
my $globalAdminPanels = db_get_prop(\%accounts, 'globalUP', 'AdminPanels'); |
||||||
|
$globalAdminPanels = '' if ! defined ($globalAdminPanels); |
||||||
|
@globalselected = split (/,/, $globalAdminPanels); |
||||||
|
|
||||||
|
@panels = sort @panels; |
||||||
|
my $count = scalar @panels; |
||||||
|
|
||||||
|
my $out = ''; |
||||||
|
|
||||||
|
if ($count > 0) |
||||||
|
{ |
||||||
|
$out .= '<table border=1 cellspacing=1 cellpadding=4>'; |
||||||
|
|
||||||
|
$out .= $q->Tr ($q->td (' '), |
||||||
|
esmith::cgi::genSmallCell ($q, $q->b ('Panel')), |
||||||
|
esmith::cgi::genSmallCell ($q, $q->b ('Description'))); |
||||||
|
|
||||||
|
my $panel; |
||||||
|
foreach $panel (@panels) |
||||||
|
{ |
||||||
|
my $checked = ""; |
||||||
|
if (grep (/^$panel$/, @selected) || grep (/^$panel$/, @globalselected)) |
||||||
|
{ |
||||||
|
$checked = "checked"; |
||||||
|
} |
||||||
|
|
||||||
|
if (grep (/^$panel$/, @globalselected) && ($user ne 'globalUP')) |
||||||
|
{ |
||||||
|
$out .= |
||||||
|
$q->Tr ( |
||||||
|
$q->td ( |
||||||
|
"<input type=\"checkbox\"" |
||||||
|
. " name=\"panelAccess\"" |
||||||
|
. " $checked value=\"$panel\">" |
||||||
|
), |
||||||
|
esmith::cgi::genSmallRedCell ($q, $panel), |
||||||
|
esmith::cgi::genSmallRedCell ( |
||||||
|
$q, $panelshash{$panel} . ' (Global)')); |
||||||
|
} else { |
||||||
|
$out .= |
||||||
|
$q->Tr ( |
||||||
|
$q->td ( |
||||||
|
"<input type=\"checkbox\"" |
||||||
|
. " name=\"panelAccess\"" |
||||||
|
. " $checked value=\"$panel\">" |
||||||
|
), |
||||||
|
esmith::cgi::genSmallCell ($q, $panel), |
||||||
|
esmith::cgi::genSmallCell ( |
||||||
|
$q, $panelshash{$panel})); |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
|
$out .= '</table>'; |
||||||
|
} |
||||||
|
|
||||||
|
return $out; |
||||||
|
} |
||||||
|
|
||||||
|
|
||||||
|
sub modifyAccess ($) |
||||||
|
{ |
||||||
|
my ($q) = @_; |
||||||
|
|
||||||
|
esmith::cgi::genHeaderNonCacheable ($q, \%conf, 'Modify user-manager access'); |
||||||
|
|
||||||
|
print |
||||||
|
$q->startform (-method => 'POST', -action => $q->url (-absolute => 1)); |
||||||
|
|
||||||
|
my $acct = $q->param ('acct'); |
||||||
|
|
||||||
|
my $username = ''; |
||||||
|
if (db_get_type(\%accounts, $acct) eq "group") |
||||||
|
{ |
||||||
|
$username =db_get_prop(\%accounts, $acct, "Description"); |
||||||
|
} |
||||||
|
else |
||||||
|
{ |
||||||
|
$username =db_get_prop(\%accounts, $acct, "FirstName")." ". db_get_prop(\%accounts, $acct, "LastName"); |
||||||
|
} |
||||||
|
|
||||||
|
if (db_get(\%accounts, $acct)) |
||||||
|
{ |
||||||
|
|
||||||
|
print $q->table ({border => 0, cellspacing => 0, cellpadding => 4}, |
||||||
|
|
||||||
|
$q->Tr (esmith::cgi::genCell ($q, "Account name:"), |
||||||
|
esmith::cgi::genCell ($q, $acct)), |
||||||
|
|
||||||
|
$q->Tr (esmith::cgi::genCell ($q, "Name/Description:"), |
||||||
|
esmith::cgi::genCell ($q, "$username")), |
||||||
|
|
||||||
|
$q->Tr (esmith::cgi::genCell ($q, "Accessible Panels:"), |
||||||
|
esmith::cgi::genCell ($q, genPanels ($q, $acct))), |
||||||
|
|
||||||
|
esmith::cgi::genButtonRow ($q, |
||||||
|
$q->submit (-name => 'action', |
||||||
|
-value => 'Modify'))); |
||||||
|
|
||||||
|
print $q->hidden (-name => 'acct', |
||||||
|
-override => 1, |
||||||
|
-default => $acct); |
||||||
|
|
||||||
|
print $q->hidden (-name => 'state', |
||||||
|
-override => 1, |
||||||
|
-default => 'performModifyAccess'); |
||||||
|
|
||||||
|
} |
||||||
|
|
||||||
|
print $q->endform; |
||||||
|
esmith::cgi::genFooter ($q); |
||||||
|
return; |
||||||
|
} |
||||||
|
|
||||||
|
|
||||||
|
sub performModifyAccess ($) |
||||||
|
{ |
||||||
|
my ($q) = @_; |
||||||
|
my $acct = $q->param ('acct'); |
||||||
|
|
||||||
|
my @adminPanels = $q->param ('panelAccess'); |
||||||
|
my @userPanels = (); |
||||||
|
|
||||||
|
my $globalAdminPanels = db_get_prop(\%accounts, 'globalUP', 'AdminPanels'); |
||||||
|
$globalAdminPanels = '' if ! defined ($globalAdminPanels); |
||||||
|
my @globalselected = split (/,/, $globalAdminPanels); |
||||||
|
|
||||||
|
foreach my $panel (@adminPanels) |
||||||
|
{ |
||||||
|
if ( ! grep (/^$panel$/, @globalselected) || ($acct eq 'globalUP')) |
||||||
|
{ |
||||||
|
push(@userPanels, $panel); |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
|
my $adminPanels = join (',', @userPanels); |
||||||
|
|
||||||
|
db_set_prop(\%accounts, $acct, 'AdminPanels', $adminPanels); |
||||||
|
|
||||||
|
system ("/sbin/e-smith/signal-event", "conf-userpanel") == 0 |
||||||
|
or die ("Error occurred while updating userpanel configuration.\n"); |
||||||
|
|
||||||
|
showInitial ($q, "Successfully modified user account $acct."); |
||||||
|
} |
||||||
@ -0,0 +1,3 @@ |
|||||||
|
{ |
||||||
|
} |
||||||
|
|
||||||
@ -0,0 +1,36 @@ |
|||||||
|
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN"> |
||||||
|
|
||||||
|
<HTML> |
||||||
|
|
||||||
|
<HEAD> |
||||||
|
<TITLE>SME Server / user </TITLE> |
||||||
|
</HEAD> |
||||||
|
|
||||||
|
<FRAMESET FRAMESPACING="0" COLS="170,*" FRAMEBORDER="0" BORDER="0"> |
||||||
|
|
||||||
|
<FRAME NAME="navigation" RESIZE="auto" MARGINHEIGHT="0" SRC="/user-manager/cgi-bin/userpanel-navigation" |
||||||
|
FRAMEBORDER="no" SCROLLING="auto" MARGINWIDTH="0" BORDER="0"> |
||||||
|
|
||||||
|
<FRAME NAME="main" RESIZE="auto" MARGINHEIGHT="0" SRC="/user-manager/cgi-bin/userpanel-initial" |
||||||
|
FRAMEBORDER="no" SCROLLING="auto" MARGINWIDTH="0" BORDER="0"> |
||||||
|
|
||||||
|
</FRAMESET> |
||||||
|
|
||||||
|
<NOFRAMES> |
||||||
|
<BODY> |
||||||
|
|
||||||
|
<H1>Welcome to the user manager panel</H1> |
||||||
|
|
||||||
|
<P><A HREF="/user-manager/cgi-bin/userpanel-noframes">Click here</A> for a |
||||||
|
list of available functions. |
||||||
|
|
||||||
|
<P>As part of our commitment to open-source software, you are welcome |
||||||
|
to copy and redistribute this software. |
||||||
|
|
||||||
|
<P> |
||||||
|
<HR> |
||||||
|
|
||||||
|
</BODY> |
||||||
|
</NOFRAMES> |
||||||
|
|
||||||
|
</HTML> |
||||||
@ -0,0 +1,10 @@ |
|||||||
|
package My::Package; |
||||||
|
use Lemonldap::NG::Handler::SharedConf; |
||||||
|
@ISA = qw(Lemonldap::NG::Handler::SharedConf); |
||||||
|
|
||||||
|
__PACKAGE__->init( |
||||||
|
{ |
||||||
|
configStorage => { confFile => '/etc/lemonldap-ng/lemonldap-ng-admin.ini' }, |
||||||
|
} |
||||||
|
); |
||||||
|
1; |
||||||
@ -0,0 +1,10 @@ |
|||||||
|
package My::Package; |
||||||
|
use Lemonldap::NG::Handler::SharedConf; |
||||||
|
@ISA = qw(Lemonldap::NG::Handler::SharedConf); |
||||||
|
|
||||||
|
__PACKAGE__->init( |
||||||
|
{ |
||||||
|
configStorage => { confFile => '/etc/lemonldap-ng/lemonldap-ng-pki.ini' }, |
||||||
|
} |
||||||
|
); |
||||||
|
1; |
||||||
Loading…
Reference in new issue