Subversion Repositories ALCASAR

Rev

Details | Last modification | View Log

Rev Author Line No. Line
2088 raphael.pi 1
#!/bin/sh
2
 
3
#Le script 'macdown' est appelé par coovachilli pendant le DHCP down (release)
4
#Depuis la version 3.1 de ALCASAR, le système d'interception a changé.
5
#Pour une adresse mac authorisée pour laquelle coovachilli effectue un DHCP release, l'@IP sera retiré de l'ipset 'not_filtered'
6
 
7
chilli_current_mac=$(chilli_query list | grep $CALLING_STATION_ID)
8
is_connected=$(echo $chilli_current_mac | cut -d' ' -f5)
9
current_mac=$(echo $chilli_current_mac | cut -d' ' -f1)
10
current_name=$(echo $chilli_current_mac | cut -d' ' -f6)
11
current_ip=$(echo $chilli_current_mac | cut -d' ' -f2)
12
 
13
if [ $is_connected == "1" ] && [ $current_mac == $current_name ]; then
2094 raphael.pi 14
	#Lecture du Filter-Id de l'équipement authentifié afin de le retirer de son ipset
15
	PASSWD_FILE="/root/ALCASAR-passwords.txt"
16
	QUERY="SELECT value from radreply where username='$current_mac'"
17
	FILTER_ID=$(mysql -D radius -u root -p$(cat $PASSWD_FILE | grep "root /" | rev | cut -d' '  -f1 | rev)<<<"$QUERY" | tail -1)
18
 
19
	#Valeur de FILTER-ID : 12345678
20
	#1-> profile1
21
	#2-> profile2
22
	#3-> profile3
23
	#4-> warn_user (if imputability report has been generated)
24
	#6-> WL + HAVP
25
	#7-> BL + HAVP
26
	#8-> HAVP
27
 
28
	if [ ${FILTER_ID:7:1} -eq '1' ] #HAVP
29
	then 
30
		set="havp"
31
		if [ ${FILTER_ID:0:1} -eq '1' ]
32
		then 
33
			set_proto="proto_1";
34
		fi
35
 
36
		if [ ${FILTER_ID:1:1} -eq '1' ]
37
		then 
38
			set_proto="proto_2";
39
		fi
40
 
41
		if [ ${FILTER_ID:2:1} -eq '1' ]
42
		then 
43
			set_proto="proto_3";
44
		fi
45
 
46
		if [ -z "$set_proto"  ]
47
		then 
48
			set_proto="proto_0";
49
		fi
50
	fi
51
 
52
 
53
	if [ ${FILTER_ID:6:1} -eq '1' ] #HAVP_BL
54
	then 
55
		set="havp_bl"
56
		if [ ${FILTER_ID:0:1} -eq '1' ]
57
		then 
58
			set_proto="proto_1";
59
		fi
60
 
61
		if [ ${FILTER_ID:1:1} -eq '1' ]
62
		then 
63
			set_proto="proto_2";
64
		fi
65
 
66
		if [ ${FILTER_ID:2:1} -eq '1' ]
67
		then 
68
			set_proto="proto_3";
69
		fi
70
 
71
		if [ -z "$set_proto"  ]
72
		then 
73
			set_proto="proto_0";
74
		fi
75
	fi
76
 
77
	if [ ${FILTER_ID:5:1} -eq '1' ] #HAVP_WL
78
	then 
79
		set="havp_wl"
80
		if [ ${FILTER_ID:0:1} -eq '1' ]
81
		then 
82
			set_proto="proto_1";
83
		fi
84
 
85
		if [ ${FILTER_ID:1:1} -eq '1' ]
86
		then 
87
			set_proto="proto_2";
88
		fi
89
 
90
		if [ ${FILTER_ID:2:1} -eq '1' ]
91
		then 
92
			set_proto="proto_3";
93
		fi
94
 
95
		if [ -z "$set_proto"  ]
96
		then 
97
			set_proto="proto_0";
98
		fi
99
	fi
100
 
101
 
102
 
103
	if [ -z "$set"  ] #NOT_FILTERED
104
	then 
105
		set="not_filtered"
106
		if [ ${FILTER_ID:0:1} -eq '1' ]
107
		then 
108
			set_proto="proto_1";
109
		fi
110
 
111
		if [ ${FILTER_ID:1:1} -eq '1' ]
112
		then 
113
			set_proto="proto_2";
114
		fi
115
 
116
		if [ ${FILTER_ID:2:1} -eq '1' ]
117
		then 
118
			set_proto="proto_3";
119
		fi
120
 
121
		if [ -z "$set_proto"  ]
122
		then 
123
			set_proto="proto_0";
124
		fi
125
	fi
126
 
127
 
128
	ipset del $set $current_ip
129
	ipset del $set_proto $current_ip
130
 
2088 raphael.pi 131
fi
132