--- loncom/auth/lontokacc.pm 2005/02/05 22:20:56 1.11 +++ loncom/auth/lontokacc.pm 2005/03/03 05:44:51 1.15 @@ -1,7 +1,7 @@ # The LearningOnline Network # Access Handler for User File Transfers # -# $Id: lontokacc.pm,v 1.11 2005/02/05 22:20:56 albertel Exp $ +# $Id: lontokacc.pm,v 1.15 2005/03/03 05:44:51 albertel Exp $ # # Copyright Michigan State University Board of Trustees # @@ -32,12 +32,19 @@ use strict; use Apache::Constants qw(:common :remotehost); use Apache::lonnet(); use Apache::File(); - +use IO::Socket; sub handler { my $r = shift; - my $reqhost = $r->get_remote_host(REMOTE_HOST); - if ($reqhost eq 'localhost.localdomain') { + my $reqhost = $r->get_remote_host(REMOTE_NOLOOKUP); + my %iphost=&Apache::lonnet::get_iphost(); + my $hostids=$iphost{$reqhost}; + if (!$hostids && $reqhost ne '127.0.0.1' ) { + $r->log_reason("Unable to find a host for ". + $r->get_remote_host(REMOTE_NOLOOKUP)); + return FORBIDDEN; + } + if ($reqhost eq '127.0.0.1') { return OK; } my $readline; @@ -51,13 +58,16 @@ sub handler { while ($readline=<$fh>) { $readline=~s/\s*$//; my ($id,$domain,$role,$name)=split(/:/,$readline); - if ($name =~ /\Q$reqhost\E/i) { - return OK; + foreach my $hostid (@{$hostids}) { + my $hostname=$Apache::lonnet::hostname{$hostid}; + if ($name =~ /^\Q$hostname\E$/i) { + return OK; + } } } } - $r->log_reason("Invalid request for user file transfer from $reqhost", + $r->log_reason("Invalid request for user file transfer from $reqhost (".join(",",@{$hostids}).")", $r->filename); return FORBIDDEN; }