File:
[LON-CAPA] /
loncom /
auth /
migrateuser.pm
Revision
1.10:
download - view:
text,
annotated -
select for diffs
Fri Jan 12 15:44:27 2007 UTC (17 years, 8 months ago) by
raeburn
Branches:
MAIN
CVS tags:
version_2_5_1,
version_2_5_0,
version_2_4_X,
version_2_4_99_0,
version_2_4_2,
version_2_4_1,
version_2_4_0,
version_2_3_X,
version_2_3_99_0,
version_2_3_2,
version_2_3_1,
HEAD
Look for lonSSOReloginServer set in an apache conf file (e.g., sentinel.conf at MSU), so the "login again" link displayed on logout points to a SSO-enabled server if the user's login was originally SSO-authenticated.
1: # The LearningOnline Network
2: # Starts a user off based of an existing token.
3: #
4: # $Id: migrateuser.pm,v 1.10 2007/01/12 15:44:27 raeburn Exp $
5: #
6: # Copyright Michigan State University Board of Trustees
7: #
8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
9: #
10: # LON-CAPA is free software; you can redistribute it and/or modify
11: # it under the terms of the GNU General Public License as published by
12: # the Free Software Foundation; either version 2 of the License, or
13: # (at your option) any later version.
14: #
15: # LON-CAPA is distributed in the hope that it will be useful,
16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18: # GNU General Public License for more details.
19: #
20: # You should have received a copy of the GNU General Public License
21: # along with LON-CAPA; if not, write to the Free Software
22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
23: #
24: # /home/httpd/html/adm/gpl.txt
25: #
26: # http://www.lon-capa.org/
27: #
28:
29: package Apache::migrateuser;
30:
31: use strict;
32: use LONCAPA;
33: use Apache::Constants qw(:common :http :methods);
34: use Apache::lonauth;
35: use Apache::lonnet;
36: use Apache::lonlocal;
37:
38: sub goto_login {
39: my ($r) = @_;
40: &Apache::loncommon::content_type($r,'text/html');
41: $r->send_http_header;
42: $r->print(&Apache::loncommon::start_page('Going to login',undef,
43: {'redirect' =>
44: [0,'/adm/login'],}).
45: '<h1>'.&mt('One moment please...').'</h1>'.
46: '<p>'.&mt('Transferring to login page.').'</p>'.
47: &Apache::loncommon::end_page());
48: return OK;
49: }
50:
51:
52: sub sso_check {
53: my ($data) = @_;
54: my %extra_env;
55: if ($data->{'sso.login'}) {
56: $extra_env{'request.sso.login'} = $data->{'sso.login'};
57: }
58: if ($data->{'sso.reloginserver'}) {
59: $extra_env{'request.sso.reloginserver'} =
60: $data->{'sso.reloginserver'};
61: }
62: return \%extra_env;
63: }
64:
65: sub handler {
66: my ($r) = @_;
67:
68: &Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'},['token']);
69: my %data = &Apache::lonnet::tmpget($env{'form.token'});
70: my $delete = &Apache::lonnet::tmpdel($env{'form.token'});
71:
72: &Apache::lonlocal::get_language_handle($r);
73:
74: if ($delete ne 'ok') {
75: return &goto_login($r);
76: }
77:
78: if ($data{'ip'} ne $ENV{'REMOTE_ADDR'} || !defined($data{'username'}) ||
79: !defined($data{'domain'}) ) {
80: return &goto_login($r);
81: }
82:
83: &Apache::lonnet::logthis("Allowing access for $data{'username'}\@$data{'domain'} to $data{'role'}");
84: my $home=&Apache::lonnet::homeserver($data{'username'},$data{'domain'});
85: if ($home =~ /(con_lost|no_such_host)/) { return &goto_login($r); }
86:
87: my $extra_env = &sso_check(\%data);
88:
89: if (!$data{'role'}) {
90: &Apache::lonauth::success($r,$data{'username'},$data{'domain'},
91: $home,'/adm/roles',$extra_env);
92: return OK;
93: }
94:
95: my $next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1';
96:
97:
98: &Apache::lonauth::success($r,$data{'username'},$data{'domain'},$home,
99: $next_url,$extra_env);
100: return OK;
101: }
102:
103: 1;
104: __END__
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>