Subversion Repositories ALCASAR

Rev

Rev 3070 | Rev 3170 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
838 richard 1
<?php
2688 lucas.echa 2
/* written by steweb57 & Rexy */
2990 rexy 3
 
838 richard 4
# Choice of language
5
$Language = 'en';
6
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
7
	$Langue		= explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
8
	$Language	= strtolower(substr(chop($Langue[0]),0,2)); }
2853 rexy 9
if($Language == 'fr') {
838 richard 10
	$l_services_title	= "Configuration des services";
1157 stephane 11
	$l_main_services	= "Services principaux";
1476 richard 12
	$l_filter_services	= "Services de filtrage";
1157 stephane 13
	$l_opt_services		= "Services optionnels";
2926 rexy 14
	$l_service_title 	= "Rôle du service";
2134 richard 15
	$l_service_start 	= "Démarrer";
16
	$l_service_stop 	= "Arréter";
17
	$l_service_restart 	= "Redémarrer";
838 richard 18
	$l_service_status 	= "Status";
1006 richard 19
	$l_service_status_img_ok= "Démarré";
20
	$l_service_status_img_ko= "Arrété";
838 richard 21
	$l_service_action 	= "Actions";
22
	$l_radiusd		= "Serveur d'authentification et d'autorisation";
2531 rexy 23
	$l_chilli		= "Passerelle d'interception et serveur DHCP";
2521 armand.ito 24
	$l_e2guardian		= "Filtre d'URL et de contenu WEB";
1476 richard 25
	$l_mysqld		= "Serveur de la base des usagers";
2488 lucas.echa 26
	$l_lighttpd		= "Serveur WEB (Alcasar Control Center)";
1476 richard 27
	$l_sshd			= "Accès sécurisée distant";
2776 rexy 28
	$l_clamav_freshclam	= "Mise à jour de l'antivirus (toutes les 4 heures)";
2840 rexy 29
	$l_clamav_daemon	= "Antimalware";
838 richard 30
	$l_ntpd			= "Service de mise à l'heure réseau";
2990 rexy 31
	$l_postfix		= "Service de messagerie";
2531 rexy 32
	$l_fail2ban		= "Détecteur d'intrusion";
2775 rexy 33
	$l_nfcapd 		= "Collecteur de flux NetFlow";
2531 rexy 34
	$l_vnstat		= "Grapheur de flux réseau";
2688 lucas.echa 35
	$l_unbound		= "Serveur DNS principal";
36
	$l_unbound_blacklist	= "Serveur DNS pour la Blacklist";
37
	$l_unbound_whitelist	= "Serveur DNS pour la Whitelist";
38
	$l_unbound_blackhole	= "Serveur DNS 'trou noir'";
1484 richard 39
	$l_ulogd_ssh		= "journalisation des accès par SSH";
1476 richard 40
	$l_ulogd_ext_access	= "journalisation des tentatives d'accès externes";
41
	$l_ulogd_traceability	= "journalisation des connexions WEB filtrés";
2926 rexy 42
	$l_wifi4eu_id	= "Entrez votre identifiant réseau";
1574 richard 43
	$l_execute		= "Exécuter";
2926 rexy 44
	$l_stop_restart		= "Arrêt et redémarrage du système";
1574 richard 45
	$l_halt			= "Arréter le système";
46
	$l_reboot		= "Relancer le système";
2853 rexy 47
} else if($Language == 'es') {
48
	$l_services_title	= "Configuración de Servicios";
49
	$l_main_services	= "Servicios Principales";
50
	$l_filter_services	= "Servicios de Filtrado";
51
	$l_opt_services		= "Servicios Opcionales";
2926 rexy 52
	$l_service_title 	= "función del servicio";
2853 rexy 53
	$l_service_start 	= "Iniciar";
54
	$l_service_stop 	= "Detener";
55
	$l_service_restart 	= "Reiniciar";
56
	$l_service_status 	= "Estado";
57
	$l_service_status_img_ok= "Corriendo";
58
	$l_service_status_img_ko= "Detenido";
59
	$l_service_action 	= "Acciones";
60
	$l_radiusd		= "Servidor de autenticación y autorización.";
61
	$l_chilli		= "Pasarela de interceptación y servidor DHCP";
62
	$l_e2guardian		= "Filtro de contenidos URL y WEB";
63
	$l_mysqld		= "Motor de base de datos para usuarios";
64
	$l_lighttpd		= "Servidor WEB (ALCASAR Control Center)";
65
	$l_sshd			= "Servidor Seguro Acceso Remoto";
66
	$l_clamav_freshclam		= "Proceso de actualización Antivirus (cada 4 horas)";
67
	$l_clamav_daemon	= "Antimalware";
68
	$l_ntpd			= "Servidor de hora";
3070 rexy 69
	$l_postfix		= "Servicio de correo electrónico";
2853 rexy 70
	$l_fail2ban		= "Sistema de Detección de Intrusos";
71
	$l_nfcapd		= "Colector de flujo NetFlow";
72
	$l_vnstat		= "Graficador de tráfico de red";
73
	$l_unbound		= "Servidor DNS principal ";
74
	$l_unbound_blacklist	= "Servidor DNS de Lista Negra";
75
	$l_unbound_whitelist	= "Servidor DNS de Lista Blanca";
76
	$l_unbound_blackhole	= "Agujero negro DNS";
77
	$l_ulogd_ssh		= "Proceso de registro para accesos SSH";
78
	$l_ulogd_ext_access	= "Proceso de registro de intentos de accesos externos";
79
	$l_ulogd_traceability	= "Proceso de registro de acceso WEB";
2926 rexy 80
	$l_wifi4eu_id	= "Introduzca su identificador de red";
2853 rexy 81
	$l_execute		= "Ejecutar";
82
	$l_stop_restart		= "Apagado y Reinicio del sistema";
83
	$l_halt			= "Apagar el sistema";
84
	$l_reboot		= "Reiniciar el sistema";
838 richard 85
} else {
86
	$l_services_title	= "Services configuration";
1157 stephane 87
	$l_main_services	= "Main services";
1476 richard 88
	$l_filter_services	= "Filtering services";
1157 stephane 89
	$l_opt_services		= "Optional services";
2926 rexy 90
	$l_service_title 	= "Role of the service";
838 richard 91
	$l_service_start 	= "Start";
92
	$l_service_stop 	= "Stop";
93
	$l_service_restart 	= "Restart";
94
	$l_service_status 	= "Status";
1006 richard 95
	$l_service_status_img_ok= "Running";
96
	$l_service_status_img_ko= "Stopped";
838 richard 97
	$l_service_action 	= "Actions";
1572 richard 98
	$l_radiusd		= "Authentication and authorisation server";
2531 rexy 99
	$l_chilli		= "Interception gateway and DHCP server";
2521 armand.ito 100
	$l_e2guardian		= "URL and WEB content filter";
838 richard 101
	$l_mysqld		= "User database server";
2488 lucas.echa 102
	$l_lighttpd		= "WEB server (ALCASAR Control Center)";
838 richard 103
	$l_sshd			= "Secure remote access";
2776 rexy 104
	$l_clamav_freshclam	= "Antivirus update process (every 4 hours)";
2840 rexy 105
	$l_clamav_daemon= "Antimalware";
1572 richard 106
	$l_ntpd			= "Network time server";
3070 rexy 107
	$l_postfix		= "E-mail service";
2531 rexy 108
	$l_fail2ban		= "Intrusion Dectection System";
2775 rexy 109
	$l_nfcapd		= "Netflow collector";
2531 rexy 110
	$l_vnstat		= "Network grapher";
2688 lucas.echa 111
	$l_unbound		= "Main DNS server";
112
	$l_unbound_blacklist	= "Blacklist DNS server";
113
	$l_unbound_whitelist	= "Whitelist DNS server";
114
	$l_unbound_blackhole	= "Blackhole DNS server";
1476 richard 115
	$l_ulogd_ssh		= "SSH access logging process";
1572 richard 116
	$l_ulogd_ext_access	= "Extern access attempts logging process";
1476 richard 117
	$l_ulogd_traceability	= "Filtering WEB access logging process";
2926 rexy 118
	$l_wifi4eu_id	= "Enter your network identifier";
1574 richard 119
	$l_execute		= "Execute";
120
	$l_stop_restart		= "Halt and restart the system";
121
	$l_halt			= "Halt le system";
122
	$l_reboot		= "Restart the system";
838 richard 123
}
124
 
125
/****************************************************************
2531 rexy 126
*	                   CONST				*
838 richard 127
*****************************************************************/
128
define ("CONF_FILE", "/usr/local/etc/alcasar.conf");
129
 
130
/********************************************************
2531 rexy 131
*			CONF FILE test 			*
838 richard 132
*********************************************************/
133
if (!file_exists(CONF_FILE)){
134
	exit("Fichier de configuration ".CONF_FILE." non présent");
135
}
136
if (!is_readable(CONF_FILE)){
137
	exit("Vous n'avez pas les droits de lecture sur le fichier ".CONF_FILE);
138
}
2926 rexy 139
$file_conf = fopen(CONF_FILE, 'r');
140
if (!$file_conf) {
141
	exit('Error opening the file '.CONF_FILE);
142
}
143
while (!feof($file_conf)) {
144
	$buffer = fgets($file_conf, 4096);
145
	if ((strpos($buffer, '=') !== false) && (substr($buffer, 0, 1) !== '#')) {
146
		$tmp = explode('=', $buffer, 2);
147
		$conf[trim($tmp[0])] = trim($tmp[1]);
148
	}
149
}
150
fclose($file_conf);
151
$wifi4eu = $conf['WIFI4EU'];
152
$wifi4eu_code = $conf['WIFI4EU_CODE'];
2531 rexy 153
// Doing an action on a service (start,stop or restart)
838 richard 154
function serviceExec($service, $action){
155
	if (($action == "start")||($action == "stop")||($action == "restart")){
2934 rexy 156
		exec("sudo /usr/bin/systemctl $action ".escapeshellarg($service), $retval, $retstatus);
838 richard 157
		return $retstatus;
158
	} else {
159
		return false;
160
	}
161
}
2531 rexy 162
 
163
// Testing if a service is active
1006 richard 164
function checkServiceStatus($service){
838 richard 165
	$response = false;
2299 tom.houday 166
	exec("sudo /usr/bin/systemctl is-active ".escapeshellarg("$service.service"), $retval);
838 richard 167
	foreach( $retval as $val ) {
1006 richard 168
		if ($val == "active"){
838 richard 169
			$response = true;
170
			break;
171
		}
172
	}
173
	return $response;
174
}
175
 
176
//-------------------------------
2926 rexy 177
// WIFI4EU
178
//-------------------------------
179
if (isset($_POST['wifi4eu'])){
2934 rexy 180
	switch ($_POST['wifi4eu']){
181
		case 'on' :
2935 rexy 182
			$network_code = trim($_POST['wifi4eu_id']);
183
		        if ($network_code == '') {
184
				$network_code = '123e4567-e89b-12d3-a456-426655440000'; // WIFI4EU test code
185
			}
186
			file_put_contents(CONF_FILE, preg_replace('/WIFI4EU_CODE=.*/', 'WIFI4EU_CODE='.$network_code, file_get_contents(CONF_FILE)));
2934 rexy 187
			exec("sudo /usr/local/bin/alcasar-wifi4eu.sh -on");
188
		break;
189
		case 'off' :
190
			exec("sudo /usr/local/bin/alcasar-wifi4eu.sh -off");
191
		break;
192
	}
193
	header('Location: '.$_SERVER['PHP_SELF']);
2926 rexy 194
}
2934 rexy 195
 
2926 rexy 196
//-------------------------------
2934 rexy 197
// Stop/restart system
1574 richard 198
//-------------------------------
2934 rexy 199
if (isset($_POST['system'])){
200
	switch ($_POST['system']){
1574 richard 201
		case 'reboot' :
1827 raphael.pi 202
			exec ("sudo /usr/local/bin/alcasar-logout.sh all");
1599 richard 203
			exec ("sudo /usr/sbin/shutdown -r now");
1574 richard 204
		break;
205
		case 'halt' :
1827 raphael.pi 206
			exec ("sudo /usr/local/bin/alcasar-logout.sh all");
1599 richard 207
			exec ("sudo /usr/sbin/shutdown -h now");
1574 richard 208
		break;
209
	}
210
}
211
 
212
//-------------------------------
2934 rexy 213
// Actions on services
214
//-------------------------------
3099 rexy 215
$autorizeService = array("radiusd","chilli","mysqld","lighttpd","unbound-forward","ulogd-ssh","ulogd-ext-access","ulogd-traceability","unbound-blacklist","unbound-whitelist","unbound-blackhole","e2guardian","clamav-daemon","clamav-freshclam","sshd","ntpd","fail2ban","nfcapd","vnstat","postfix");
2934 rexy 216
$autorizeAction = array("start","stop","restart");
217
 
218
if (isset($_GET['service'])&&(in_array($_GET['service'], $autorizeService))) {
219
    if (isset($_GET['action'])&&(in_array($_GET['action'], $autorizeAction))) {
220
    	$execStatus = serviceExec($_GET['service'], $_GET['action']);
221
		// execStatus non exploité
222
	}
223
}
224
 
225
//-------------------------------
2531 rexy 226
// Check services status
838 richard 227
//-------------------------------
228
$MainServiceStatus = array();
2531 rexy 229
$MainServiceStatus['chilli'] = checkServiceStatus("chilli");
1006 richard 230
$MainServiceStatus['radiusd'] = checkServiceStatus("radiusd");
231
$MainServiceStatus['mysqld'] = checkServiceStatus("mysqld");
2488 lucas.echa 232
$MainServiceStatus['lighttpd'] = checkServiceStatus("lighttpd");
2724 rexy 233
$MainServiceStatus['unbound'] = checkServiceStatus("unbound");
2775 rexy 234
$MainServiceStatus['nfcapd'] = checkServiceStatus("nfcapd");
2531 rexy 235
$MainServiceStatus['ulogd_ssh'] = checkServiceStatus("ulogd-ssh");
236
$MainServiceStatus['ulogd_ext_access'] = checkServiceStatus("ulogd-ext-access");
237
$MainServiceStatus['ulogd_traceability'] = checkServiceStatus("ulogd-traceability");
2926 rexy 238
$MainServiceStatus['sshd'] = checkServiceStatus("sshd");
239
$MainServiceStatus['ntpd'] = checkServiceStatus("ntpd");
240
$MainServiceStatus['fail2ban'] = checkServiceStatus("fail2ban");
241
$MainServiceStatus['vnstat'] = checkServiceStatus("vnstat");
2990 rexy 242
$MainServiceStatus['postfix'] = checkServiceStatus("postfix");
838 richard 243
 
1476 richard 244
$FilterServiceStatus = array();
2688 lucas.echa 245
$FilterServiceStatus['unbound_blacklist'] = checkServiceStatus("unbound-blacklist");
246
$FilterServiceStatus['unbound_whitelist'] = checkServiceStatus("unbound-whitelist");
247
$FilterServiceStatus['unbound_blackhole'] = checkServiceStatus("unbound-blackhole");
2531 rexy 248
$FilterServiceStatus['e2guardian'] = checkServiceStatus("e2guardian");
2840 rexy 249
$FilterServiceStatus['clamav_daemon'] = checkServiceStatus("clamav-daemon");
2776 rexy 250
$FilterServiceStatus['clamav_freshclam'] = checkServiceStatus("clamav-freshclam");
1476 richard 251
 
838 richard 252
/****************
253
*	MAIN	*
254
*****************/
255
 
2926 rexy 256
?><!DOCTYPE HTML>
257
<html>
838 richard 258
<head>
2926 rexy 259
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
260
	<title><?php echo $l_services_title; ?></title>
261
	<link rel="stylesheet" href="/css/acc.css" type="text/css">
2990 rexy 262
	<script type="text/javascript" src="/js/jquery.min.js"></script>
838 richard 263
</head>
264
<body>
3028 rexy 265
<div id="ldoverlay" class="overlay">
266
	<div class="lds-spinner" id="spinner"><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div></div>
267
</div>
2926 rexy 268
<div class="panel">
269
	<div class="panel-header"><?= $l_main_services ?></div>
270
	<div class="panel-row">
271
	<table width="100%" border=0 cellspacing=0 cellpadding=0>
272
		<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
273
		<?php foreach( $MainServiceStatus as $serviceName => $statusOK ) { ?>
274
		<tr>
2991 rexy 275
		<?php if ($statusOK) { ?>
2926 rexy 276
			<td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
277
			<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
278
			<td width="80" align="center">---</td>
279
			<td width="80" align="center"><?php if (($serviceName != "chilli") && ($serviceName != "lighttpd")) { echo "<a href=\"".$_SERVER['PHP_SELF']."?action=stop&service=".str_replace('_','-',$serviceName)."\"> $l_service_stop</a>"; } else echo "---";?></td>
280
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=".str_replace('_','-',$serviceName)."\"> $l_service_restart";?></a></td>
281
		<?php } else { ?>
282
			<td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
283
			<td align="center"><?php $comment="l_$serviceName"; echo "$serviceName</td><td>${$comment}" ;?> </td>
284
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=".str_replace('_','-',$serviceName)."\"> $l_service_start";?></a></td>
285
			<td width="80" align="center">---</td>
286
			<td width="80" align="center">---</td>
287
		<?php } ?>
288
		</tr>
2991 rexy 289
		<?php } ?>
2926 rexy 290
	</table>
291
	</div>
292
</div>
293
<div class="panel">
294
	<div class="panel-header"><?= $l_filter_services ?></div>
295
	<div class="panel-row">
296
	<table width="100%" border=0 cellspacing=0 cellpadding=0>
297
		<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
298
		<!--	<TR align="center"> -->
299
		<?php foreach( $FilterServiceStatus as $serviceName => $statusOK ) { ?>
300
		<tr>
301
		<?php if ($statusOK) { ?>
302
			<td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
303
			<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
304
			<td width="80" align="center">---</td>
305
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=stop&service=".str_replace('_','-',$serviceName)."\"> $l_service_stop";?></a></td>
306
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=".str_replace('_','-',$serviceName)."\"> $l_service_restart";?></a></td>
307
			<?php } else { ?>
308
			<td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
309
			<td align="center"><?php $comment="l_$serviceName"; echo "$serviceName</td><td>${$comment}" ;?> </td>
310
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=".str_replace('_','-',$serviceName)."\"> $l_service_start";?></a></td>
311
			<td width="80" align="center">---</td>
312
			<td width="80" align="center">---</td>
313
			<?php } ?>
314
		</tr>
315
		<?php } ?>
316
	</table>
317
	</div>
318
</div>
319
<div class="panel">
320
	<div class="panel-header"><?= $l_opt_services ?></div>
321
	<div class="panel-row">
2991 rexy 322
	<form action="<?php echo $_SERVER['PHP_SELF']?>" method=POST>
2926 rexy 323
	<table width="100%" border=0 cellspacing=0 cellpadding=0>
324
		<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"> </td><td colspan="3"><?php echo $l_service_action;?></td></tr>
325
		<tr>
326
			<?php if ($wifi4eu == "on") { ?>
327
			<td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
328
			<td align="center"><b>WIFI4EU</b></td><td><?php echo "network ID : $wifi4eu_code"; ?></td>
329
			<td width="80" align="center">---</td>
3028 rexy 330
			<td width="80" align="center"><input type="submit" onClick="document.getElementById('ldoverlay').style.display='block';" value="<?echo $l_service_stop;?>"><input type=hidden name="wifi4eu" value="off"></td>
2926 rexy 331
			<td width="80" align="center">---</td>
332
			<?php } else { ?>
333
			<td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko; ?>"></td>
2935 rexy 334
			<td align="center">WIFI4EU</td><td><?php echo $l_wifi4eu_id; ?> : <input type ="text" name="wifi4eu_id" value="<?php echo $wifi4eu_code; ?>" size="40"></td>
3028 rexy 335
			<td width="80" align="center"><input type="submit" onClick="document.getElementById('ldoverlay').style.display='block';" value="<?echo $l_service_start;?>"><input type=hidden name="wifi4eu" value="on"></td>
2926 rexy 336
			<td width="80" align="center">---</td>
337
			<td width="80" align="center">---</td>
338
			<?php } ?>
339
		</tr>
340
	</table>
2991 rexy 341
	</form>
2926 rexy 342
	</div>
343
</div>
344
<div class="panel">
345
	<div class="panel-header"><?= $l_stop_restart ?></div>
346
	<div class="panel-row">
347
	<table width="100%" border=0 cellspacing=0 cellpadding=1>
348
		<tr><td valign="middle" align="left">
349
			<form action="<?php echo $_SERVER['PHP_SELF']?>" method=POST>
2934 rexy 350
			<select name='system'>
2926 rexy 351
				<option selected value="reboot"><?echo "$l_reboot";?>
352
				<option value="halt"><?echo "$l_halt";?>
353
			</select>
3028 rexy 354
			<input type="submit" onClick="document.getElementById('ldoverlay').style.display='block';" value="<?echo "$l_execute";?>">
2926 rexy 355
			</form>
356
		</td></tr>
357
	</table>
358
	</div>
359
</div>
838 richard 360
</body>
2991 rexy 361
</html>