initial commit of file from CVS for smeserver-manager on Fri Mar 22 14:54:28 AEDT 2024
This commit is contained in:
Trevor Batley
577
root/usr/share/smanager/lib/SrvMngr/Controller/Ibays.pm
Normal file
577
root/usr/share/smanager/lib/SrvMngr/Controller/Ibays.pm
Normal file
@@ -0,0 +1,577 @@
|
||||
package SrvMngr::Controller::Ibays;
|
||||
|
||||
#----------------------------------------------------------------------
|
||||
# heading : Network
|
||||
# description : Shared areas (was ibays)
|
||||
# navigation : 6000 100
|
||||
#
|
||||
#
|
||||
# routes : end
|
||||
#----------------------------------------------------------------------
|
||||
use strict;
|
||||
use warnings;
|
||||
use Mojo::Base 'Mojolicious::Controller';
|
||||
|
||||
use Locale::gettext;
|
||||
use SrvMngr::I18N;
|
||||
use SrvMngr qw( theme_list init_session is_normal_password );
|
||||
|
||||
use esmith::AccountsDB;
|
||||
use esmith::ConfigDB;
|
||||
use esmith::DomainsDB;
|
||||
|
||||
#use esmith::FormMagick::Panel::ibays;
|
||||
|
||||
our $adb = esmith::AccountsDB->open || die "Couldn't open accounts db";
|
||||
our $cdb = esmith::ConfigDB->open() || die "Couldn't open config db";
|
||||
|
||||
sub main {
|
||||
|
||||
my $c = shift;
|
||||
$c->app->log->info($c->log_req);
|
||||
|
||||
my %iba_datas = ();
|
||||
my $title = $c->l('iba_FORM_TITLE');
|
||||
|
||||
$iba_datas{'trt'} = 'LIST';
|
||||
|
||||
my @ibays;
|
||||
if ($adb)
|
||||
{
|
||||
@ibays = $adb->ibays();
|
||||
}
|
||||
|
||||
$c->stash( title => $title, iba_datas => \%iba_datas, ibays => \@ibays );
|
||||
$c->render(template => 'ibays');
|
||||
|
||||
};
|
||||
|
||||
|
||||
sub do_display {
|
||||
|
||||
my $c = shift;
|
||||
|
||||
my $rt = $c->current_route;
|
||||
my $trt = ($c->param('trt') || 'LIST');
|
||||
my $ibay = $c->param('ibay') || '';
|
||||
|
||||
#$trt = 'DEL' if ( $ibay );
|
||||
#$trt = 'ADD' if ( $rt eq 'ibayadd' );
|
||||
|
||||
my %iba_datas = ();
|
||||
my $title = $c->l('iba_FORM_TITLE');
|
||||
my $modul = '';
|
||||
|
||||
$iba_datas{'trt'} = $trt;
|
||||
|
||||
if ( $trt eq 'ADD' ) {
|
||||
|
||||
$iba_datas{ibay} = '';
|
||||
$iba_datas{description} = '';
|
||||
$iba_datas{group} = '';
|
||||
$iba_datas{userAccess} = '';
|
||||
$iba_datas{publicAccess} = '';
|
||||
$iba_datas{CgiBin} = '';
|
||||
$iba_datas{SSL} = '';
|
||||
|
||||
}
|
||||
|
||||
if ( $trt eq 'UPD' ) {
|
||||
|
||||
my $rec = $adb->get($ibay);
|
||||
if ($rec and $rec->prop('type') eq 'ibay') {
|
||||
$iba_datas{ibay} = $ibay;
|
||||
$iba_datas{description} = $rec->prop('Name') || '';
|
||||
$iba_datas{group} = $rec->prop('Group') || '';
|
||||
$iba_datas{userAccess} = $rec->prop('UserAccess') || '';
|
||||
$iba_datas{publicAccess} = $rec->prop('PublicAccess') || '';
|
||||
$iba_datas{CgiBin} = $rec->prop('CgiBin') || 'disabled';
|
||||
$iba_datas{SSL} = $rec->prop('SSL') || 'disabled';
|
||||
}
|
||||
}
|
||||
|
||||
if ( $trt eq 'DEL' ) {
|
||||
|
||||
my $rec = $adb->get($ibay);
|
||||
if ($rec and $rec->prop('type') eq 'ibay') {
|
||||
$iba_datas{ibay} = $ibay;
|
||||
$iba_datas{description} = $rec->prop('Name') || '';
|
||||
$modul .= print_vhost_message( $c, $ibay );
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
if ( $trt eq 'PWD' ) {
|
||||
|
||||
my $rec = $adb->get($ibay);
|
||||
if ($rec and $rec->prop('type') eq 'ibay') {
|
||||
$iba_datas{ibay} = $ibay;
|
||||
$iba_datas{description} = $rec->prop('Name') || '';
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
if ( $trt eq 'LIST' ) {
|
||||
my @ibays;
|
||||
$adb = esmith::AccountsDB->open || die "Couldn't open accounts db";
|
||||
if ($adb)
|
||||
{
|
||||
@ibays = $adb->ibays();
|
||||
}
|
||||
$c->stash( ibays => \@ibays );
|
||||
|
||||
}
|
||||
|
||||
$c->stash( title => $title, modul => $modul, iba_datas => \%iba_datas );
|
||||
$c->render( template => 'ibays' );
|
||||
|
||||
};
|
||||
|
||||
|
||||
sub do_update {
|
||||
|
||||
my $c = shift;
|
||||
$c->app->log->info($c->log_req);
|
||||
|
||||
my $rt = $c->current_route;
|
||||
my $trt = ($c->param('trt') || 'LIST');
|
||||
|
||||
my %iba_datas = ();
|
||||
my $title = $c->l('iba_FORM_TITLE');
|
||||
|
||||
$iba_datas{'trt'} = $trt;
|
||||
|
||||
my $result = '';
|
||||
my $res;
|
||||
|
||||
if ( $trt eq 'ADD' ) {
|
||||
|
||||
my $name = ($c->param('ibay') || '');
|
||||
|
||||
# controls
|
||||
$res = validate_ibay( $c, $name );
|
||||
$result .= $res unless $res eq 'OK';
|
||||
|
||||
if ( ! $result ) {
|
||||
$res = create_ibay( $c, $name );
|
||||
$result .= $res unless $res eq 'OK';
|
||||
if ( ! $result ) {
|
||||
$result = $c->l('iba_SUCCESSFULLY_CREATED_IBAY') . ' ' . $name;
|
||||
$iba_datas{trt} = 'LST';
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ( $trt eq 'UPD' ) {
|
||||
|
||||
my $name = ($c->param('ibay') || '');
|
||||
|
||||
# controls
|
||||
$res = '';
|
||||
|
||||
if ( ! $result ) {
|
||||
$res = modify_ibay( $c, $name );
|
||||
$result .= $res unless $res eq 'OK';
|
||||
if ( ! $result ) {
|
||||
$result = $c->l('iba_SUCCESSFULLY_MODIFIED_IBAY') . ' ' . $name;
|
||||
$iba_datas{trt} = 'LST';
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ( $trt eq 'PWD' ) {
|
||||
|
||||
my $ibay = ($c->param('ibay') || '');
|
||||
my $pass1 = ($c->param('newPass') || '');
|
||||
my $pass2 = ($c->param('newPassVerify') || '');
|
||||
|
||||
# controls
|
||||
unless ($pass1 eq $pass2) {
|
||||
$result .= $c->l('iba_IBAY_PASSWD_VERIFY_ERROR') . ' - ';
|
||||
}
|
||||
|
||||
$res = check_password( $c, $pass1 );
|
||||
$result .= $res unless $res eq 'OK';
|
||||
|
||||
if ( ! $result ) {
|
||||
$res = reset_password( $c, $ibay, $pass1 );
|
||||
$result .= $res unless $res eq 'OK';
|
||||
if ( ! $result ) {
|
||||
$result = $c->l('iba_SUCCESSFULLY_RESET_PASSWORD') . ' ' . $ibay;
|
||||
$iba_datas{trt} = 'LST';
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ( $trt eq 'DEL' ) {
|
||||
|
||||
my $ibay = $c->param ('ibay');
|
||||
|
||||
if ($ibay =~ /^([a-z][a-z0-9]*)$/) {
|
||||
$ibay = $1;
|
||||
} else {
|
||||
$result .= $c->l('iba_ERR_INTERNAL_FAILURE') . ':' . $ibay;
|
||||
}
|
||||
|
||||
if ( ! $result ) {
|
||||
$res = remove_ibay( $c, $ibay );
|
||||
$result .= $res unless $res eq 'OK';
|
||||
if ( ! $result ) {
|
||||
$result = $c->l('iba_SUCCESSFULLY_DELETED_IBAY') . ' ' . $ibay;
|
||||
$iba_datas{trt} = 'LST';
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# common parts
|
||||
|
||||
if ($res ne 'OK') {
|
||||
$c->stash( error => $result );
|
||||
$c->stash( title => $title, iba_datas => \%iba_datas );
|
||||
return $c->render('ibays');
|
||||
}
|
||||
|
||||
my $message = "'Ibays' updates ($trt) DONE";
|
||||
$c->app->log->info($message);
|
||||
$c->flash( success => $result );
|
||||
|
||||
$c->redirect_to('/ibays');
|
||||
};
|
||||
|
||||
|
||||
sub validate_ibay {
|
||||
|
||||
my ($c, $name) = @_;
|
||||
|
||||
my $msg = validate_name($c, $name);
|
||||
unless ($msg eq "OK")
|
||||
{
|
||||
return ($msg);
|
||||
}
|
||||
|
||||
$msg = max_ibay_name_length($c, $name);
|
||||
unless ($msg eq "OK")
|
||||
{
|
||||
return ($msg);
|
||||
}
|
||||
|
||||
$msg = conflict_check($c, $name);
|
||||
unless ($msg eq "OK")
|
||||
{
|
||||
return ($msg);
|
||||
}
|
||||
|
||||
return ('OK');
|
||||
}
|
||||
|
||||
|
||||
sub create_ibay {
|
||||
|
||||
my ($c, $name) = @_;
|
||||
|
||||
my $msg;
|
||||
my $uid = $adb->get_next_uid();
|
||||
if (my $acct = $adb->new_record($name, {
|
||||
Name => $c->param('ibayDesc'),
|
||||
CgiBin => $c->param('CgiBin'),
|
||||
Group => $c->param('group'),
|
||||
PublicAccess => $c->param('publicAccess'),
|
||||
SSL => $c->param('SSL'),
|
||||
UserAccess => $c->param('userAccess'),
|
||||
Uid => $uid,
|
||||
Gid => $uid,
|
||||
PasswordSet => 'no',
|
||||
type => 'ibay',
|
||||
}) )
|
||||
{
|
||||
# Untaint $name before use in system()
|
||||
$name =~ /(.+)/; $name = $1;
|
||||
if (system ("/sbin/e-smith/signal-event", "ibay-create", $name) == 0) {
|
||||
$msg = 'OK';
|
||||
} else {
|
||||
$msg = $c->l('iba_ERROR_WHILE_CREATING_IBAY');
|
||||
}
|
||||
} else {
|
||||
$msg = $c->l('iba_CANT_CREATE_IBAY');
|
||||
}
|
||||
return $msg;
|
||||
|
||||
}
|
||||
|
||||
|
||||
sub modify_ibay {
|
||||
my ($c, $name) = @_;
|
||||
|
||||
my $msg;
|
||||
if (my $acct = $adb->get($name)) {
|
||||
if ($acct->prop('type') eq 'ibay') {
|
||||
$acct->merge_props(
|
||||
Name => $c->param('ibayDesc'),
|
||||
CgiBin => $c->param('CgiBin'),
|
||||
Group => $c->param('group'),
|
||||
PublicAccess => $c->param('publicAccess'),
|
||||
SSL => $c->param('SSL'),
|
||||
UserAccess => $c->param('userAccess'),
|
||||
);
|
||||
|
||||
# Untaint $name before use in system()
|
||||
$name =~ /(.+)/; $name = $1;
|
||||
if (system ("/sbin/e-smith/signal-event", "ibay-modify",
|
||||
$name) == 0)
|
||||
{
|
||||
$msg = 'OK';
|
||||
} else {
|
||||
$msg = $c->l('iba_ERROR_WHILE_MODIFYING_IBAY');
|
||||
}
|
||||
} else {
|
||||
$msg = $c->l('iba_CANT_FIND_IBAY');
|
||||
}
|
||||
} else {
|
||||
$msg = $c->l('iba_CANT_FIND_IBAY');
|
||||
}
|
||||
|
||||
return $msg;
|
||||
|
||||
}
|
||||
|
||||
|
||||
sub print_vhost_message {
|
||||
my $c = shift;
|
||||
my $name = $c->param('ibay');
|
||||
|
||||
my $result = '';
|
||||
|
||||
my $domaindb = esmith::DomainsDB->open();
|
||||
my @domains = $domaindb->get_all_by_prop(Content => $name);
|
||||
my $vhostListItems = join "\n",
|
||||
(map ($_->key." ".$_->prop('Description'), @domains));
|
||||
if ($vhostListItems)
|
||||
{
|
||||
$result = $c->l('iba_VHOST_MESSAGE') . "<br><ul>";
|
||||
foreach ( $vhostListItems ) {
|
||||
$result .= "<li> $_ </li>";
|
||||
}
|
||||
$result .= '</ul>'
|
||||
}
|
||||
return $result;
|
||||
}
|
||||
|
||||
|
||||
sub remove_ibay {
|
||||
my ($c, $name) = @_;
|
||||
|
||||
my $msg = '';
|
||||
if (my $acct = $adb->get($name)) {
|
||||
if ($acct->prop('type') eq 'ibay') {
|
||||
$acct->set_prop('type', 'ibay-deleted');
|
||||
|
||||
my $domains_db = esmith::DomainsDB->open();
|
||||
my @domains = $domains_db->get_all_by_prop(Content=>$name);
|
||||
foreach my $d (@domains) {
|
||||
$d->set_prop(Content => 'Primary');
|
||||
}
|
||||
|
||||
# Untaint $name before use in system()
|
||||
$name =~ /(.+)/; $name = $1;
|
||||
if (system ("/sbin/e-smith/signal-event", "ibay-delete",
|
||||
$name) == 0)
|
||||
{
|
||||
$msg = 'OK';
|
||||
$acct->delete();
|
||||
} else {
|
||||
$msg = $c->l('iba_ERROR_WHILE_DELETING_IBAY');
|
||||
}
|
||||
} else {
|
||||
$msg = $c->l('iba_CANT_FIND_IBAY');
|
||||
}
|
||||
|
||||
} else {
|
||||
$msg = $c->l('iba_CANT_FIND_IBAY');
|
||||
}
|
||||
return $msg;
|
||||
}
|
||||
|
||||
|
||||
sub reset_password {
|
||||
my ($c, $name, $newPass) = @_;
|
||||
|
||||
my ($msg, $acct);
|
||||
|
||||
if (($acct = $adb->get($name)) && ($acct->prop('type') eq 'ibay')) {
|
||||
esmith::util::setIbayPassword ($acct->key, $newPass);
|
||||
$acct->set_prop('PasswordSet', 'yes');
|
||||
# Untaint $name before use in system()
|
||||
$name =~ /(.+)/; $name = $1;
|
||||
if (system ("/sbin/e-smith/signal-event", "password-modify",
|
||||
$name) == 0)
|
||||
{
|
||||
$msg = 'OK';
|
||||
} else {
|
||||
$msg = $c->l('iba_ERROR_WHILE_RESETTING_PASSWORD');
|
||||
}
|
||||
} else {
|
||||
$msg = $c->l('iba_CANT_FIND_IBAY');
|
||||
}
|
||||
return $msg;
|
||||
}
|
||||
|
||||
|
||||
sub check_password {
|
||||
my ($c, $password) = @_;
|
||||
|
||||
my $strength;
|
||||
|
||||
my $rec = $cdb->get('passwordstrength');
|
||||
$strength = ($rec ? ($rec->prop('Ibays') || 'none') : 'none');
|
||||
|
||||
return validate_password( $c, $strength, $password );
|
||||
}
|
||||
|
||||
|
||||
sub validate_password {
|
||||
|
||||
my ($c, $strength, $pass) = @_;
|
||||
|
||||
use Crypt::Cracklib;
|
||||
|
||||
my $reason;
|
||||
|
||||
if ($strength eq "none") {
|
||||
return $c->l("Passwords must be at least 7 characters long") unless (length($pass) > 6);
|
||||
return "OK";
|
||||
}
|
||||
|
||||
$reason = is_normal_password($c, $pass, undef);
|
||||
return $reason unless ($reason eq "OK");
|
||||
return "OK" unless ($strength eq "strong");
|
||||
|
||||
if ( -f '/usr/lib64/cracklib_dict.pwd' ) {
|
||||
$reason = fascist_check($pass, '/usr/lib64/cracklib_dict');
|
||||
} else {
|
||||
$reason = fascist_check($pass, '/usr/lib/cracklib_dict');
|
||||
}
|
||||
$reason ||= "Software error: password check failed";
|
||||
|
||||
return "OK" if ($reason eq "ok");
|
||||
|
||||
return $c->l("Bad Password Choice") . ": "
|
||||
. $c->l("The password you have chosen is not a good choice, because")
|
||||
. " " . $c->($reason) . ".";
|
||||
}
|
||||
|
||||
|
||||
=head2 group_list()
|
||||
|
||||
Returns a hash of groups for the Create/Modify screen's group field's
|
||||
drop down list.
|
||||
|
||||
=cut
|
||||
|
||||
sub group_list_m {
|
||||
|
||||
my @groups = $adb->groups();
|
||||
|
||||
my @grps = ( ['Admin' => 'admin'], ['Everyone' => 'shared']);
|
||||
|
||||
foreach my $g (@groups) {
|
||||
push @grps, [ $g->prop('Description')." (". $g->key.")", $g->key() ];
|
||||
}
|
||||
|
||||
return \@grps;
|
||||
}
|
||||
|
||||
|
||||
=head2 userAccess_list
|
||||
|
||||
Returns the hash of user access settings for showing in the user access
|
||||
drop down list.
|
||||
|
||||
=cut
|
||||
|
||||
sub userAccess_list_m {
|
||||
|
||||
my $c = shift;
|
||||
return [[ $c->l('WARG') => 'wr-admin-rd-group'],
|
||||
[ $c->l('WGRE') => 'wr-group-rd-everyone'],
|
||||
[ $c->l('WGRG') => 'wr-group-rd-group']];
|
||||
|
||||
}
|
||||
|
||||
=head2 publicAccess_list
|
||||
|
||||
Returns the hash of public access settings for showing in the public
|
||||
access drop down list.
|
||||
|
||||
=cut
|
||||
|
||||
sub publicAccess_list_m {
|
||||
|
||||
my $c = shift;
|
||||
return [[ $c->l('NONE') => 'none'],
|
||||
[ $c->l('LOCAL_NETWORK_NO_PASSWORD') => 'local'],
|
||||
[ $c->l('LOCAL_NETWORK_PASSWORD') => 'local-pw'],
|
||||
[ $c->l('ENTIRE_INTERNET_NO_PASSWORD') => 'global'],
|
||||
[ $c->l('ENTIRE_INTERNET_PASSWORD') => 'global-pw'],
|
||||
[ $c->l('ENTIRE_INTERNET_PASSWORD_REMOTE') => 'global-pw-remote']];
|
||||
}
|
||||
|
||||
|
||||
sub max_ibay_name_length {
|
||||
|
||||
my ($c, $data) = @_;
|
||||
$cdb->reload();
|
||||
my $max = $cdb->get('maxIbayNameLength')->value;
|
||||
|
||||
if (length($data) <= $max) {
|
||||
return "OK";
|
||||
} else {
|
||||
return $c->l('iba_MAX_IBAY_NAME_LENGTH_ERROR', $data, $max, $max);
|
||||
# {acctName => $data,
|
||||
# maxIbayNameLength => $max,
|
||||
# maxLength => $max});
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
sub conflict_check {
|
||||
|
||||
my ($c, $name) = @_;
|
||||
my $rec = $adb->get($name);
|
||||
|
||||
my $type;
|
||||
if (defined $rec)
|
||||
{
|
||||
my $type = $rec->prop('type');
|
||||
if ($type eq "pseudonym")
|
||||
{
|
||||
my $acct = $rec->prop("Account");
|
||||
my $acct_type = $adb->get($acct)->prop('type');
|
||||
|
||||
return $c->l('iba_ACCT_CLASHES_WITH_PSEUDONYM', $name, $acct_type, $acct);
|
||||
}
|
||||
}
|
||||
elsif (defined getpwnam($name) || defined getgrnam($name))
|
||||
{
|
||||
$type = 'system';
|
||||
}
|
||||
else
|
||||
{
|
||||
# No account record and no account
|
||||
return 'OK';
|
||||
}
|
||||
return $c->l('iba_ACCOUNT_EXISTS', $name, $type);
|
||||
}
|
||||
|
||||
sub validate_name {
|
||||
|
||||
my ($c, $acctName) = @_;
|
||||
|
||||
unless ($acctName =~ /^([a-z][\_\.\-a-z0-9]*)$/)
|
||||
{
|
||||
return $c->l('iba_ACCT_NAME_HAS_INVALID_CHARS', $acctName);
|
||||
}
|
||||
return "OK";
|
||||
}
|
||||
|
||||
|
||||
1
|
||||
Reference in New Issue
Block a user