Subversion Repositories ALCASAR

Rev

Rev 595 | Rev 612 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
318 richard 1 
<?php
2 
/* written by steweb57 */
3 
 
4 
# Choice of language
5 
$Language = 'en';
6 
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
7 
	$Langue		= explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
8 
	$Language	= strtolower(substr(chop($Langue[0]),0,2)); }
9 
if($Language == 'fr'){
10 
	$l_network_title	= "Configuration réseau";
361 franck 11 
	$l_main_services	= "Services réseau principaux";
356 richard 12 
	$l_opt_services		= "Services réseau optionnels";
318 richard 13 
	$l_eth0_legend		= "Eth0 (Interface connectée à Internet)";
14 
	$l_eth1_legend		= "Eth1 (Réseau de consultation)";
15 
	$l_internet_legend	= "INTERNET";
16 
	$l_ip_adr		= "Adresse IP";
17 
	$l_ip_mask		= "Masque";
18 
	$l_ip_router		= "Passerelle";
19 
	$l_ip_public		= "Adresse IP public";
20 
	$l_ip_dns1		= "DNS1";
21 
	$l_ip_dns2		= "DNS2";
353 richard 22 
	$l_service_title 	= "Nom du service";
318 richard 23 
	$l_service_start 	= "D&eacute;marrer";
24 
	$l_service_stop 	= "Arr&ecirc;ter";
25 
	$l_service_restart 	= "Red&eacute;marrer";
26 
	$l_service_status 	= "Status";
27 
	$l_service_action 	= "Actions";
28 
	$l_enable		= "actif";
29 
	$l_disable		= "inactif";
353 richard 30 
	$l_radiusd		= "Serveur d'authentification et d'autorisation";
31 
	$l_chilli		= "Passerelle d'interception";
32 
	$l_dansguardian		= "Filtre d'URL et de contenu WEB";
33 
	$l_mysqld		= "Serveur de la base de données usager";
356 richard 34 
	$l_squid		= "Serveur de cache WEB";
353 richard 35 
	$l_dnsmasq		= "Serveur DNS et filtre de domaine";
36 
	$l_httpd		= "Serveur WEB (Centre de Gestion d'ALCASAR)";
37 
	$l_havp			= "Filtre antivirus WEB";
38 
	$l_sshd			= "Accès sécurisée à distance";
356 richard 39 
	$l_freshclam		= "Mise à jour de l'antivirus toutes les 2 heures";
40 
	$l_ntpd			= "Service de mise à l'heure réseau";
318 richard 41 
} else {
42 
	$l_network_title	= "Network configuration";
356 richard 43 
	$l_main_services	= "Main network services";
44 
	$l_opt_services		= "Optional network services";
318 richard 45 
	$l_eth0_legend		= "Eth0 (Internet connected interface)";
46 
	$l_eth1_legend		= "Eth1 (Private network)";
47 
	$l_internet_legend	= "INTERNET";
48 
	$l_ip_adr		= "IP Address";
49 
	$l_ip_mask		= "Mask";
50 
	$l_ip_router		= "Router";
51 
	$l_ip_public		= "Public IP address";
52 
	$l_ip_dns1		= "DNS1 :";
53 
	$l_ip_dns2		= "DNS2";
353 richard 54 
	$l_service_title 	= "Service name";
318 richard 55 
	$l_service_start 	= "Start";
56 
	$l_service_stop 	= "Stop";
57 
	$l_service_restart 	= "Restart";
58 
	$l_service_status 	= "Status";
59 
	$l_service_action 	= "Actions";
60 
	$l_enable		= "enable";
61 
	$l_disable		= "disable";
353 richard 62 
	$l_radiusd		= "Authentication and authorisation serveur";
63 
	$l_chilli		= "Interception gateway";
64 
	$l_dansguardian		= "URL and WEB content filter";
65 
	$l_mysqld		= "User database server";
66 
	$l_squid		= "Proxy Cache WEB";
67 
	$l_dnsmasq		= "DNS and domain name filter";
68 
	$l_httpd		= "WEB server (ALCASAR Control Center)";
69 
	$l_havp			= "WEB antivirus filter";
70 
	$l_sshd			= "Secure remote access";
356 richard 71 
	$l_freshclam		= "WEB antivirus update (every 2 hours)";
72 
	$l_ntpd			= "Network time";
318 richard 73 
}
74 
 
75 
/********************************************************************
76 
*	CONSTANTES AVEC CHEMINS DES FICHIERS DE CONFIGURATION			*
77 
*********************************************************************/
78 
 
355 richard 79 
define ("ALCASAR_CHILLI", "/etc/chilli.conf");
318 richard 80 
define ("ALCASAR_ETH0", "/etc/sysconfig/network-scripts/default-ifcfg-eth0");
81 
define ("ALCASAR_ETH1", "/etc/sysconfig/network-scripts/ifcfg-eth1");
595 richard 82 
define ("ALCASAR_NETWORK", "/usr/local/etc/alcasar-network");
318 richard 83 
/********************************************************************
84 
*				TEST DES FICHIERS DE CONFIGURATION					*
85 
*********************************************************************/
86 
 
87 
//Test de présence et des droits en lecture des fichiers de configuration.
88 
if (!file_exists(ALCASAR_CHILLI)){
89 
	exit("Fichier de configuration ".ALCASAR_CHILLI." non présent");
90 
}
91 
if (!file_exists(ALCASAR_ETH0)){
92 
	exit("Fichier de configuration ".ALCASAR_ETH0." non présent");
93 
}
355 richard 94 
if (!file_exists(ALCASAR_ETH1)){
318 richard 95 
	exit("Fichier de configuration ".ALCASAR_ETH1." non présent");
96 
}
97 
if (!is_readable(ALCASAR_ETH0)){
98 
	exit("Vous n'avez pas les droits de lecture sur le fichier ".ALCASAR_ETH0);
99 
}
355 richard 100 
if (!is_readable(ALCASAR_ETH1)){
318 richard 101 
	exit("Vous n'avez pas les droits de lecture sur le fichier ".ALCASAR_ETH1);
102 
}
103 
 
104 
//fonction pour faire une action (start,stop,restart) sur un service
105 
function serviceExec($service, $action){
106 
	if (($action == "start")||($action == "stop")||($action == "restart")){
107 
		exec("sudo /sbin/service $service $action",$retval, $retstatus);
434 richard 108 
		if ($service == "sshd"){
595 richard 109 
			if ($action == "start"){
110 
				exec("sudo /sbin/chkconfig --add $service");
111 
				file_put_contents(ALCASAR_NETWORK, str_replace('SSH=off', 'SSH=on', file_get_contents(ALCASAR_NETWORK)));
604 richard 112 
				exec ("sudo /usr/local/bin/alcasar-iptables.sh");
595 richard 113 
				}
114 
			if ($action == "stop"){
115 
			       	exec("sudo /sbin/chkconfig --del $service");
116 
				file_put_contents(ALCASAR_NETWORK, str_replace('SSH=on', 'SSH=off', file_get_contents(ALCASAR_NETWORK)));
604 richard 117 
				exec ("sudo /usr/local/bin/alcasar-iptables.sh");
595 richard 118 
				}
434 richard 119 
			}
318 richard 120 
		return $retstatus;
121 
	} else {
122 
		return false;
123 
	}
124 
}
125 
//fonction définissant le status d'un service
126 
//(en fonction de la présence d'un mot clé dans la valeur de status)
127 
function checkServiceStatus($service, $strMatch){
128 
	$response = false;
129 
	exec("sudo /sbin/service $service status",$retval);
130 
	foreach( $retval as $val ) {
131 
		if (strpos($val,$strMatch)){
132 
			$response = true;
133 
			break;
134 
		}
135 
	}
136 
	return $response;
137 
}
138 
 
139 
//-------------------------------
140 
// Les actions sur un service
141 
//-------------------------------
142 
//sécurité sur les actions à réaliser
356 richard 143 
$autorizeService = array("radiusd","chilli","dansguardian","mysqld","squid","dnsmasq","httpd","havp","sshd","freshclam","ntpd");
318 richard 144 
$autorizeAction = array("start","stop","restart");
145 
 
146 
if (isset($_GET['service'])&&(in_array($_GET['service'], $autorizeService))) {
147 
    if (isset($_GET['action'])&&(in_array($_GET['action'], $autorizeAction))) {
148 
    	$execStatus = serviceExec($_GET['service'], $_GET['action']);
149 
		// execStatus non exploité
150 
	}
151 
}
152 
//-------------------------------
153 
//recherche du status des services
154 
//-------------------------------
356 richard 155 
$MainServiceStatus = array();
156 
$MainServiceStatus['radiusd'] = checkServiceStatus("radiusd","pid");
157 
$MainServiceStatus['chilli'] = checkServiceStatus("chilli","pid");
158 
$MainServiceStatus['dansguardian'] = checkServiceStatus("dansguardian","pid");
159 
$MainServiceStatus['mysqld'] = checkServiceStatus("mysqld","OK");
160 
$MainServiceStatus['squid'] = checkServiceStatus("squid","pid");
161 
$MainServiceStatus['dnsmasq'] = checkServiceStatus("dnsmasq","pid");
162 
$MainServiceStatus['httpd'] = checkServiceStatus("httpd","pid");
163 
$MainServiceStatus['havp'] = checkServiceStatus("havp","pid");
318 richard 164 
 
356 richard 165 
$OptServiceStatus = array();
166 
$OptServiceStatus['sshd'] = checkServiceStatus("sshd","pid");
167 
$OptServiceStatus['freshclam'] = checkServiceStatus("freshclam","pid");
168 
$OptServiceStatus['ntpd'] = checkServiceStatus("ntpd","pid");
169 
 
318 richard 170 
// Fonction de test de connectivité internet
171 
function internetTest(){
360 richard 172 
	$host = "74.125.230.83"; #www.google.fr
318 richard 173 
	$port = "80";
174 
	//var $num;	//non utilisé
175 
	//var $error;	//non utilisé
176 
 
177 
	if (! $sock = @fsockopen($host, $port, $num, $error, 5)) {
178 
		return false;
179 
	} else {
180 
		fclose($sock);
181 
		return true;
182 
	}
183 
}
184 
/********************************************************************
185 
*			Lecture du fichier ALCASAR_CHILLI						*
186 
*********************************************************************/
187 
$ouvre=fopen(ALCASAR_CHILLI,"r");
188 
if ($ouvre){
189 
	while (!feof ($ouvre))
190 
	{
191 
		$tampon = fgets($ouvre, 4096);
192 
		if (strpos($tampon,"=")!==false){
193 
			$tmp = explode("=",$tampon);
194 
			$chilli[$tmp[0]] = $tmp[1];
195 
		}
196 
	}
197 
}else{
198 
	exit("Erreur d'ouverture du fichier ".ALCASAR_CHILLI);
199 
}
200 
fclose($ouvre);
201 
 
202 
/********************************************************************
203 
*			Lecture du fichier ALCASAR_ETH0							*
204 
*********************************************************************/
205 
$ouvre=fopen(ALCASAR_ETH0,"r");
206 
if ($ouvre){
207 
	while (!feof ($ouvre))
208 
	{
209 
		$tampon = fgets($ouvre, 4096);
210 
		if (strpos($tampon,"=")!==false){
211 
			$tmp = explode("=",$tampon);
212 
			$eth0[$tmp[0]] = $tmp[1];
213 
		}
214 
	}
215 
}else{
216 
	exit("Erreur d'ouverture du fichier ".ALCASAR_ETH0);
217 
}
218 
fclose($ouvre);
219 
 
220 
/********************************************************************
221 
*			Lecture du fichier ALCASAR_ETH1							*
222 
*********************************************************************/
223 
$ouvre=fopen(ALCASAR_ETH1,"r");
224 
if ($ouvre){
225 
	while (!feof ($ouvre))
226 
	{
227 
		$tampon = fgets($ouvre, 4096);
228 
		if (strpos($tampon,"=")!==false){
229 
			$tmp = explode("=",$tampon);
230 
			$eth1[$tmp[0]] = $tmp[1];
231 
		}
232 
	}
233 
}else{
234 
	exit("Erreur d'ouverture du fichier ".ALCASAR_ETH1);
235 
}
236 
fclose($ouvre);
237 
 
238 
/************************
239 
*	TO DO		*
240 
*************************/
241 
//modification de la conf réseau, cmd : ifconfig eth0 .....
242 
//synchro de la modification réseau dans les différentes couches d'alcasar
243 
//gestion du dhcp (affichage,modification, ajout @static)
244 
 
245 
?><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
246 
<html><!-- written by steweb57 / rexy -->
247 
<head>
248 
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
249 
<title><?php echo $l_network_title; ?></title>
335 richard 250 
<link rel="stylesheet" href="/css/style.css" type="text/css">
318 richard 251 
</head>
252 
<body>
253 
<table width="100%" border="0" cellspacing="0" cellpadding="0">
353 richard 254 
	<tr><th><?php echo $l_network_title; ?></th></tr>
318 richard 255 
	<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
256 
</table>
257 
<TABLE width="100%" border=1 cellspacing=0 cellpadding=1>
258 
	<tr><td valign="middle" align="left">
259 
	<fieldset>
260 
	<legend><?php echo $l_internet_legend;
261 
 	if (InternetTest()){
262 
		echo " <img src='/images/state_ok.gif'> $l_enable";
263 
		$IP_PUB = exec ("wget http://checkip.dyndns.org/ -O - -o /dev/null | cut -d: -f 2 | cut -d\< -f 1");}
264 
	else 	{
265 
		echo " <img src='/images/state_error.gif'> $l_disable";
266 
		$IP_PUB = "-.-.-.-";}
267 
	?></legend>
268 
	<table>
269 
		<tr><td><?php echo $l_ip_public." : </td><td>".$IP_PUB;?></td></tr>
270 
		<tr><td><?php echo $l_ip_dns1." : </td><td>".$eth0["DNS1"];?></td></tr>
271 
		<tr><td><?php echo $l_ip_dns2." : </td><td>".$eth0["DNS2"];?></td></tr>
272 
	</table>
273 
	</fieldset>
274 
	</td><td>
275 
	<fieldset>
276 
	<legend><?php echo $l_eth0_legend; ?></legend>
277 
	<table>
278 
		<tr><td><?php echo $l_ip_adr." : </td><td>".$eth0["IPADDR"];?></td></tr>
279 
		<tr><td><?php echo $l_ip_mask." : </td><td>".$eth0["NETMASK"];?></td></tr>
280 
		<tr><td><?php echo $l_ip_router." : </td><td>".$eth0["GATEWAY"];?></td></tr>
281 
	</table>
282 
	</fieldset>
283 
	</td><td>
284 
	<fieldset>
285 
	<legend><?php echo $l_eth1_legend; ?></legend>
286 
	<table>
287 
		<tr><td><?php echo $l_ip_adr." : </td><td>".$eth1["IPADDR"];?></td></tr>
288 
		<tr><td><?php echo $l_ip_mask." : </td><td>".$eth1["NETMASK"];?></td></tr>
289 
	</table>
290 
	</fieldset>
291 
	</td></tr>
292 
</table>
353 richard 293 
<table width="100%" border="0" cellspacing="0" cellpadding="0">
356 richard 294 
	<tr><th><?php echo $l_main_services; ?></th></tr>
353 richard 295 
	<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
318 richard 296 
</table>
297 
<TABLE width="100%" border=1 cellspacing=0 cellpadding=0>
353 richard 298 
	<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
318 richard 299 
	<TR align="center">
356 richard 300 
<?php foreach( $MainServiceStatus as $serviceName => $statusOK ) { ?>
318 richard 301 
<tr>
302 
	<?php if ($statusOK) { ?>
303 
    <td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
353 richard 304 
	<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
318 richard 305 
    <td width="80" align="center">---</td>
306 
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=stop&service=$serviceName\"> $l_service_stop";?></a></td>
307 
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=$serviceName\"> $l_service_restart";?></a></td>
308 
	<?php } else { ?>
309 
    <td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
353 richard 310 
    <td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
318 richard 311 
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=$serviceName\"> $l_service_start";?></a></td>
312 
    <td width="80" align="center">---</td>
313 
    <td width="80" align="center">---</td>
314 
    <?php } ?>
315 
</tr>
316 
<?php } ?>
353 richard 317 
</td></tr>
318 richard 318 
</table>
356 richard 319 
<table width="100%" border="0" cellspacing="0" cellpadding="0">
320 
	<tr><th><?php echo $l_opt_services; ?></th></tr>
321 
	<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
322 
</table>
323 
<TABLE width="100%" border=1 cellspacing=0 cellpadding=0>
324 
	<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
325 
	<TR align="center">
326 
<?php foreach( $OptServiceStatus as $serviceName => $statusOK ) { ?>
327 
<tr>
328 
	<?php if ($statusOK) { ?>
329 
    <td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
330 
	<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
331 
    <td width="80" align="center">---</td>
332 
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=stop&service=$serviceName\"> $l_service_stop";?></a></td>
333 
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=$serviceName\"> $l_service_restart";?></a></td>
334 
	<?php } else { ?>
335 
    <td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
336 
    <td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
337 
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=$serviceName\"> $l_service_start";?></a></td>
338 
    <td width="80" align="center">---</td>
339 
    <td width="80" align="center">---</td>
340 
    <?php } ?>
341 
</tr>
342 
<?php } ?>
343 
</td></tr>
344 
</table>
318 richard 345 
</body>
346 
</html>