1: # The LearningOnline Network
2: # Access Handler for File Transfers
3: #
4: # $Id: lonracc.pm,v 1.11 2004/03/31 17:42:21 raeburn Exp $
5: #
6: # Copyright Michigan State University Board of Trustees
7: #
8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
9: #
10: # LON-CAPA is free software; you can redistribute it and/or modify
11: # it under the terms of the GNU General Public License as published by
12: # the Free Software Foundation; either version 2 of the License, or
13: # (at your option) any later version.
14: #
15: # LON-CAPA is distributed in the hope that it will be useful,
16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18: # GNU General Public License for more details.
19: #
20: # You should have received a copy of the GNU General Public License
21: # along with LON-CAPA; if not, write to the Free Software
22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
23: #
24: # /home/httpd/html/adm/gpl.txt
25: #
26: # http://www.lon-capa.org/
27: #
28: # (lonacc: Cookie Based Access Handler
29: # 5/21/99,5/22,5/29,5/31,6/15 Gerd Kortemeyer)
30: # 6/16,6/18,7/3,
31: # 6/30/00 Gerd Kortemeyer
32:
33: package Apache::lonracc;
34:
35: use strict;
36: use Apache::Constants qw(:common :remotehost);
37: use Apache::lonnet();
38: use Apache::File();
39:
40: sub subscribed {
41: my ($filename,$id) = @_;
42: my $found=0;
43: my $expr='^'.$id.':'.$Apache::lonnet::hostip{$id}.':';
44: $expr =~ s/\./\\\./g;
45: my $sh;
46: if ($sh=Apache::File->new("$filename.subscription")) {
47: while (my $subline=<$sh>) { if ($subline =~ /$expr/) { $found=1; } }
48: $sh->close();
49: }
50: return $found;
51: }
52:
53: sub handler {
54: my $r = shift;
55: my $reqhost = $r->get_remote_host(REMOTE_DOUBLE_REV);
56: if (!$reqhost && $r->get_remote_host(REMOTE_NOLOOKUP) eq $r->get_server_name()) {
57: $reqhost = $r->get_server_name();
58: }
59: unless ($reqhost) {
60: $r->log_reason("Spoof request from ".$ENV{'REMOTE_ADDR'});
61: return FORBIDDEN;
62: }
63: my $readline;
64: my $lontabdir=$r->dir_config('lonTabDir');
65: {
66: my $fh;
67: unless ($fh=Apache::File->new("$lontabdir/hosts.tab")) {
68: $r->log_reason("Could not find host tab file");
69: return FORBIDDEN;
70: }
71: my $return;
72: my @ids=();
73: while ($readline=<$fh>) {
74: my ($id,$domain,$role,$name,$ip)=split(/:/,$readline);
75: if ($name =~ /$reqhost/i) {
76: my $filename=$r->filename;
77: my $uri =$r->uri;
78: if ((-e "$filename.$id") ||
79: &subscribed($filename,$id) ||
80: ($filename=~/\.meta$/) ||
81: ($uri=~m|^/raw/uploaded|)) {
82: return OK;
83: } else {
84: $return=FORBIDDEN;
85: push(@ids,$id);
86: }
87: }
88: }
89: if ($return == FORBIDDEN) {
90: $r->log_reason(join(':',@ids)." not subscribed", $r->filename);
91: return FORBIDDEN;
92: }
93: }
94: $r->log_reason("Invalid request for file transfer from $reqhost",
95: $r->filename);
96: return FORBIDDEN;
97: }
98:
99: 1;
100: __END__
101:
102: =head1 NAME
103:
104: Apache::lonracc - Access Handler for File Transfers
105:
106: =head1 SYNOPSIS
107:
108: Invoked by /etc/httpd/conf/loncapa.conf:
109:
110: <LocationMatch "^/raw.*">
111: PerlAccessHandler Apache::lonracc
112: </LocationMatch>
113:
114: =head1 INTRODUCTION
115:
116: This module enables authentication for file transfers and works
117: against the /res tree.
118:
119: Only lond invokes the /raw namespace through its subscribe function.
120:
121: This is part of the LearningOnline Network with CAPA project
122: described at http://www.lon-capa.org.
123:
124: =head1 HANDLER SUBROUTINE
125:
126: This routine is called by Apache and mod_perl.
127:
128: =over 4
129:
130: =item *
131:
132: Determine requesting host
133:
134: =item *
135:
136: See whether or not the requesting host is subscribed.
137:
138: =item *
139:
140: Respond with status of request and make log entry in case of unallowed
141: access.
142:
143: =back
144:
145: =cut
146:
147:
148:
149:
150:
151:
152:
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>