Subversion Repositories ALCASAR

Rev

Rev 2776 | Rev 2840 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
838 richard 1
<?php
2688 lucas.echa 2
/* written by steweb57 & Rexy */
838 richard 3
# Choice of language
4
$Language = 'en';
5
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
6
	$Langue		= explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
7
	$Language	= strtolower(substr(chop($Langue[0]),0,2)); }
8
if($Language == 'fr'){
9
	$l_services_title	= "Configuration des services";
1157 stephane 10
	$l_main_services	= "Services principaux";
1476 richard 11
	$l_filter_services	= "Services de filtrage";
1157 stephane 12
	$l_opt_services		= "Services optionnels";
838 richard 13
	$l_service_title 	= "Nom du service";
2134 richard 14
	$l_service_start 	= "Démarrer";
15
	$l_service_stop 	= "Arréter";
16
	$l_service_restart 	= "Redémarrer";
838 richard 17
	$l_service_status 	= "Status";
1006 richard 18
	$l_service_status_img_ok= "Démarré";
19
	$l_service_status_img_ko= "Arrété";
838 richard 20
	$l_service_action 	= "Actions";
21
	$l_radiusd		= "Serveur d'authentification et d'autorisation";
2531 rexy 22
	$l_chilli		= "Passerelle d'interception et serveur DHCP";
2521 armand.ito 23
	$l_e2guardian		= "Filtre d'URL et de contenu WEB";
1476 richard 24
	$l_mysqld		= "Serveur de la base des usagers";
2488 lucas.echa 25
	$l_lighttpd		= "Serveur WEB (Alcasar Control Center)";
1476 richard 26
	$l_sshd			= "Accès sécurisée distant";
2776 rexy 27
	$l_clamav_freshclam	= "Mise à jour de l'antivirus (toutes les 4 heures)";
838 richard 28
	$l_ntpd			= "Service de mise à l'heure réseau";
2531 rexy 29
	$l_fail2ban		= "Détecteur d'intrusion";
2775 rexy 30
	$l_nfcapd 		= "Collecteur de flux NetFlow";
2531 rexy 31
	$l_vnstat		= "Grapheur de flux réseau";
32
	$l_havp			= "Proxy Antivirus";
1508 richard 33
	$l_tinyproxy		= "Proxy HTTP léger";
2688 lucas.echa 34
	$l_unbound		= "Serveur DNS principal";
35
	$l_unbound_blacklist	= "Serveur DNS pour la Blacklist";
36
	$l_unbound_whitelist	= "Serveur DNS pour la Whitelist";
37
	$l_dnsmasq_whitelist	= "Serveur DNS pour la Whitelist (IPSET)";
38
	$l_unbound_blackhole	= "Serveur DNS 'trou noir'";
1484 richard 39
	$l_ulogd_ssh		= "journalisation des accès par SSH";
1476 richard 40
	$l_ulogd_ext_access	= "journalisation des tentatives d'accès externes";
41
	$l_ulogd_traceability	= "journalisation des connexions WEB filtrés";
1574 richard 42
	$l_execute		= "Exécuter";
43
	$l_stop_restart		= "Arret et redémarrage du système";
44
	$l_halt			= "Arréter le système";
45
	$l_reboot		= "Relancer le système";
2688 lucas.echa 46
 
838 richard 47
} else {
48
	$l_services_title	= "Services configuration";
1157 stephane 49
	$l_main_services	= "Main services";
1476 richard 50
	$l_filter_services	= "Filtering services";
1157 stephane 51
	$l_opt_services		= "Optional services";
838 richard 52
	$l_service_title 	= "Service name";
53
	$l_service_start 	= "Start";
54
	$l_service_stop 	= "Stop";
55
	$l_service_restart 	= "Restart";
56
	$l_service_status 	= "Status";
1006 richard 57
	$l_service_status_img_ok= "Running";
58
	$l_service_status_img_ko= "Stopped";
838 richard 59
	$l_service_action 	= "Actions";
1572 richard 60
	$l_radiusd		= "Authentication and authorisation server";
2531 rexy 61
	$l_chilli		= "Interception gateway and DHCP server";
2521 armand.ito 62
	$l_e2guardian		= "URL and WEB content filter";
838 richard 63
	$l_mysqld		= "User database server";
2488 lucas.echa 64
	$l_lighttpd		= "WEB server (ALCASAR Control Center)";
838 richard 65
	$l_sshd			= "Secure remote access";
2776 rexy 66
	$l_clamav_freshclam	= "Antivirus update process (every 4 hours)";
1572 richard 67
	$l_ntpd			= "Network time server";
2531 rexy 68
	$l_fail2ban		= "Intrusion Dectection System";
2775 rexy 69
	$l_nfcapd		= "Netflow collector";
2531 rexy 70
	$l_vnstat		= "Network grapher";
1572 richard 71
	$l_havp			= "Antivirus Proxy";
1508 richard 72
	$l_tinyproxy		= "Light HTTP Proxy";
2688 lucas.echa 73
	$l_unbound		= "Main DNS server";
74
	$l_unbound_blacklist	= "Blacklist DNS server";
75
	$l_unbound_whitelist	= "Whitelist DNS server";
76
	$l_dnsmasq_whitelist	= "Whitelist DNS server (IPSET)";
77
	$l_unbound_blackhole	= "Blackhole DNS server";
1476 richard 78
	$l_ulogd_ssh		= "SSH access logging process";
1572 richard 79
	$l_ulogd_ext_access	= "Extern access attempts logging process";
1476 richard 80
	$l_ulogd_traceability	= "Filtering WEB access logging process";
1574 richard 81
	$l_execute		= "Execute";
82
	$l_stop_restart		= "Halt and restart the system";
83
	$l_halt			= "Halt le system";
84
	$l_reboot		= "Restart the system";
838 richard 85
}
86
 
87
/****************************************************************
2531 rexy 88
*	                   CONST				*
838 richard 89
*****************************************************************/
90
define ("CONF_FILE", "/usr/local/etc/alcasar.conf");
91
 
92
/********************************************************
2531 rexy 93
*			CONF FILE test 			*
838 richard 94
*********************************************************/
95
if (!file_exists(CONF_FILE)){
96
	exit("Fichier de configuration ".CONF_FILE." non présent");
97
}
98
if (!is_readable(CONF_FILE)){
99
	exit("Vous n'avez pas les droits de lecture sur le fichier ".CONF_FILE);
100
}
101
 
2531 rexy 102
// Doing an action on a service (start,stop or restart)
838 richard 103
function serviceExec($service, $action){
104
	if (($action == "start")||($action == "stop")||($action == "restart")){
2299 tom.houday 105
		exec("sudo /usr/bin/systemctl $action ".escapeshellarg($service), $retval, $retstatus);
2531 rexy 106
		if ($service == "sshd"){ // in order to keep that conf for SSH at next reboot
2688 lucas.echa 107
			if ($action == "start"){
2299 tom.houday 108
				exec("sudo /usr/bin/systemctl enable ".escapeshellarg($service));
838 richard 109
				file_put_contents(CONF_FILE, str_replace('SSH=off', 'SSH=on', file_get_contents(CONF_FILE)));
2299 tom.houday 110
				exec("sudo /usr/local/bin/alcasar-iptables.sh");
838 richard 111
				}
112
			if ($action == "stop"){
2299 tom.houday 113
			       	exec("sudo /usr/bin/systemctl disable ".escapeshellarg($service));
838 richard 114
				file_put_contents(CONF_FILE, str_replace('SSH=on', 'SSH=off', file_get_contents(CONF_FILE)));
2299 tom.houday 115
				exec("sudo /usr/local/bin/alcasar-iptables.sh");
838 richard 116
				}
117
			}
118
		return $retstatus;
119
	} else {
120
		return false;
121
	}
122
}
2531 rexy 123
 
124
// Testing if a service is active
1006 richard 125
function checkServiceStatus($service){
838 richard 126
	$response = false;
2299 tom.houday 127
	exec("sudo /usr/bin/systemctl is-active ".escapeshellarg("$service.service"), $retval);
838 richard 128
	foreach( $retval as $val ) {
1006 richard 129
		if ($val == "active"){
838 richard 130
			$response = true;
131
			break;
132
		}
133
	}
134
	return $response;
135
}
136
 
137
//-------------------------------
1574 richard 138
// Actions on services
838 richard 139
//-------------------------------
2775 rexy 140
$autorizeService = array("radiusd","chilli","mysqld","lighttpd","unbound-forward","ulogd-ssh","ulogd-ext-access","ulogd-traceability","unbound-blacklist","unbound-whitelist","dnsmasq-whitelist","unbound-blackhole","e2guardian","havp","tinyproxy","clamav-freshclam","sshd","ntpd","fail2ban","nfcapd","vnstat");
2531 rexy 141
$autorizeAction = array("start","stop","restart");
838 richard 142
 
143
if (isset($_GET['service'])&&(in_array($_GET['service'], $autorizeService))) {
144
    if (isset($_GET['action'])&&(in_array($_GET['action'], $autorizeAction))) {
145
    	$execStatus = serviceExec($_GET['service'], $_GET['action']);
146
		// execStatus non exploité
147
	}
148
}
149
//-------------------------------
1574 richard 150
// Actions on system
151
//-------------------------------
152
if (isset($_POST['choix'])){
153
	switch ($_POST['choix']){
154
		case 'reboot' :
1827 raphael.pi 155
			exec ("sudo /usr/local/bin/alcasar-logout.sh all");
1599 richard 156
			exec ("sudo /usr/sbin/shutdown -r now");
1574 richard 157
		break;
158
		case 'halt' :
1827 raphael.pi 159
			exec ("sudo /usr/local/bin/alcasar-logout.sh all");
1599 richard 160
			exec ("sudo /usr/sbin/shutdown -h now");
1574 richard 161
		break;
162
	}
163
}
164
 
165
//-------------------------------
2531 rexy 166
// Check services status
838 richard 167
//-------------------------------
168
$MainServiceStatus = array();
2531 rexy 169
$MainServiceStatus['chilli'] = checkServiceStatus("chilli");
1006 richard 170
$MainServiceStatus['radiusd'] = checkServiceStatus("radiusd");
171
$MainServiceStatus['mysqld'] = checkServiceStatus("mysqld");
2488 lucas.echa 172
$MainServiceStatus['lighttpd'] = checkServiceStatus("lighttpd");
2724 rexy 173
$MainServiceStatus['unbound'] = checkServiceStatus("unbound");
2775 rexy 174
$MainServiceStatus['nfcapd'] = checkServiceStatus("nfcapd");
2531 rexy 175
$MainServiceStatus['ulogd_ssh'] = checkServiceStatus("ulogd-ssh");
176
$MainServiceStatus['ulogd_ext_access'] = checkServiceStatus("ulogd-ext-access");
177
$MainServiceStatus['ulogd_traceability'] = checkServiceStatus("ulogd-traceability");
838 richard 178
 
1476 richard 179
$FilterServiceStatus = array();
2688 lucas.echa 180
$FilterServiceStatus['unbound_blacklist'] = checkServiceStatus("unbound-blacklist");
181
$FilterServiceStatus['unbound_whitelist'] = checkServiceStatus("unbound-whitelist");
2531 rexy 182
$FilterServiceStatus['dnsmasq_whitelist'] = checkServiceStatus("dnsmasq-whitelist");
2688 lucas.echa 183
$FilterServiceStatus['unbound_blackhole'] = checkServiceStatus("unbound-blackhole");
2531 rexy 184
$FilterServiceStatus['e2guardian'] = checkServiceStatus("e2guardian");
1476 richard 185
$FilterServiceStatus['havp'] = checkServiceStatus("havp");
1508 richard 186
$FilterServiceStatus['tinyproxy'] = checkServiceStatus("tinyproxy");
2776 rexy 187
$FilterServiceStatus['clamav_freshclam'] = checkServiceStatus("clamav-freshclam");
1476 richard 188
 
838 richard 189
$OptServiceStatus = array();
1006 richard 190
$OptServiceStatus['sshd'] = checkServiceStatus("sshd");
191
$OptServiceStatus['ntpd'] = checkServiceStatus("ntpd");
2531 rexy 192
$OptServiceStatus['fail2ban'] = checkServiceStatus("fail2ban");
193
$OptServiceStatus['vnstat'] = checkServiceStatus("vnstat");
838 richard 194
/****************
195
*	MAIN	*
196
*****************/
197
 
198
?><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
199
<html><!-- written by steweb57 / rexy -->
200
<head>
201
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
202
<title><?php echo $l_services_title; ?></title>
2817 rexy 203
<link rel="stylesheet" href="/css/acc.css" type="text/css">
838 richard 204
</head>
205
<body>
206
<table width="100%" border="0" cellspacing="0" cellpadding="0">
207
	<tr><th><?php echo $l_main_services; ?></th></tr>
208
	<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
209
</table>
210
<TABLE width="100%" border=1 cellspacing=0 cellpadding=0>
211
	<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
212
<?php foreach( $MainServiceStatus as $serviceName => $statusOK ) { ?>
213
<tr>
214
	<?php if ($statusOK) { ?>
2531 rexy 215
	<td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
216
	<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
217
	<td width="80" align="center">---</td>
218
	<td width="80" align="center"><?php if (($serviceName != "chilli") && ($serviceName != "lighttpd")) { echo "<a href=\"".$_SERVER['PHP_SELF']."?action=stop&service=".str_replace('_','-',$serviceName)."\"> $l_service_stop</a>"; } else echo "---";?></td>
219
	<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=".str_replace('_','-',$serviceName)."\"> $l_service_restart";?></a></td>
838 richard 220
	<?php } else { ?>
2531 rexy 221
	<td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
222
	<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
223
	<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=".str_replace('_','-',$serviceName)."\"> $l_service_start";?></a></td>
224
	<td width="80" align="center">---</td>
225
	<td width="80" align="center">---</td>
838 richard 226
    <?php } ?>
227
</tr>
228
<?php } ?>
229
</table>
230
<table width="100%" border="0" cellspacing="0" cellpadding="0">
1476 richard 231
	<tr><th><?php echo $l_filter_services; ?></th></tr>
232
	<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
233
</table>
234
<TABLE width="100%" border=1 cellspacing=0 cellpadding=0>
235
	<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
2134 richard 236
<!--	<TR align="center"> -->
1476 richard 237
<?php foreach( $FilterServiceStatus as $serviceName => $statusOK ) { ?>
238
<tr>
239
	<?php if ($statusOK) { ?>
240
    <td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
2531 rexy 241
	<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
1476 richard 242
    <td width="80" align="center">---</td>
2531 rexy 243
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=stop&service=".str_replace('_','-',$serviceName)."\"> $l_service_stop";?></a></td>
244
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=".str_replace('_','-',$serviceName)."\"> $l_service_restart";?></a></td>
1476 richard 245
	<?php } else { ?>
246
    <td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
2531 rexy 247
    <td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
248
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=".str_replace('_','-',$serviceName)."\"> $l_service_start";?></a></td>
1476 richard 249
    <td width="80" align="center">---</td>
250
    <td width="80" align="center">---</td>
251
    <?php } ?>
252
</tr>
253
<?php } ?>
254
</table>
255
<table width="100%" border="0" cellspacing="0" cellpadding="0">
838 richard 256
	<tr><th><?php echo $l_opt_services; ?></th></tr>
257
	<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
258
</table>
259
<TABLE width="100%" border=1 cellspacing=0 cellpadding=0>
260
	<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
261
<?php foreach( $OptServiceStatus as $serviceName => $statusOK ) { ?>
262
<tr>
263
	<?php if ($statusOK) { ?>
264
    <td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
2531 rexy 265
	<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
838 richard 266
    <td width="80" align="center">---</td>
267
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=stop&service=$serviceName\"> $l_service_stop";?></a></td>
268
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=$serviceName\"> $l_service_restart";?></a></td>
269
	<?php } else { ?>
270
    <td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
2531 rexy 271
    <td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
838 richard 272
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=$serviceName\"> $l_service_start";?></a></td>
273
    <td width="80" align="center">---</td>
274
    <td width="80" align="center">---</td>
275
    <?php } ?>
276
</tr>
277
<?php } ?>
2134 richard 278
</table>
279
<table width="100%" border="0" cellspacing="0" cellpadding="0">
1574 richard 280
	<tr><th><? echo $l_stop_restart;?></th></tr>
281
	<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
2134 richard 282
</table>
283
<table width="100%" border=1 cellspacing=0 cellpadding=1>
1574 richard 284
	<tr><td valign="middle" align="left">
2134 richard 285
	<FORM action="services.php" method=POST>
286
		<select name='choix'>
1574 richard 287
			<option selected value="reboot"><?echo "$l_reboot";?>
288
			<option value="halt"><?echo "$l_halt";?>
289
		</select>
290
		<input type=submit value="<?echo "$l_execute";?>">
291
	</FORM>
292
	</td></tr>
2134 richard 293
</table>
838 richard 294
</body>
295
</html>