Subversion Repositories ALCASAR

Rev

Rev 2394 | Rev 2505 | Go to most recent revision | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 2394 Rev 2402
1
#!/bin/sh
1
#!/bin/sh
2
#
2
#
3
# $Id: alcasar-conup.sh 2394 2017-08-27 13:28:59Z tom.houdayer $
3
# $Id: alcasar-conup.sh 2402 2017-08-28 18:06:19Z tom.houdayer $
4
#
4
#
5
# alcasar-conup.sh
5
# alcasar-conup.sh
6
# by Rexy
6
# by Rexy
7
# This script is distributed under the Gnu General Public License (GPL)
7
# This script is distributed under the Gnu General Public License (GPL)
8
 
8
 
9
# This script is launched by coova after each successfull login
9
# This script is launched by coova after each successfull login
10
# Ce script est lancé par coova à chaque connexion d'usager (authentification réussi)
10
# Ce script est lancé par coova à chaque connexion d'usager (authentification réussi)
11
 
11
 
12
if [ -z $FRAMED_IP_ADDRESS ]; then
12
if [ -z $FRAMED_IP_ADDRESS ]; then
13
	exit 1
13
	exit 1
14
fi
14
fi
15
 
15
 
16
# Add user to his IPSET (depending on FILTER_ID)
16
# Add user to his IPSET (depending on FILTER_ID)
17
 
17
 
18
# FilterID Byte N°0 to 7
18
# FilterID Byte N°0 to 7
19
#  0: profile_1 (WEB)
19
#  0: profile_1 (WEB)
20
#  1: profile_2 (WEB + Mail + Remote access)
20
#  1: profile_2 (WEB + Mail + Remote access)
21
#  2: profile_3 (Custom)
21
#  2: profile_3 (Custom)
22
#  3: warn_user (if imputability report has been generated)
22
#  3: warn_user (if imputability report has been generated)
23
#  4: status_open_required (check user activity through status page)
23
#  4: status_open_required (check user activity through status page)
24
#  5: WL
24
#  5: WL
25
#  6: BL
25
#  6: BL
26
#  7: HAVP
26
#  7: HAVP
27
 
27
 
28
if [ ${FILTER_ID:5:1} == '1' ]; then	# HAVP_WL
28
if [ ${FILTER_ID:5:1} == '1' ]; then	# HAVP_WL
29
	set_filter="havp_wl"
29
	set_filter="havp_wl"
30
elif [ ${FILTER_ID:6:1} == '1' ]; then	# HAVP_BL
30
elif [ ${FILTER_ID:6:1} == '1' ]; then	# HAVP_BL
31
	set_filter="havp_bl"
31
	set_filter="havp_bl"
32
elif [ ${FILTER_ID:7:1} == '1' ]; then	# HAVP
32
elif [ ${FILTER_ID:7:1} == '1' ]; then	# HAVP
33
	set_filter="havp"
33
	set_filter="havp"
34
else					# NOT_FILTERED
34
else					# NOT_FILTERED
35
	set_filter="not_filtered"
35
	set_filter="not_filtered"
36
fi
36
fi
37
 
37
 
38
if [ ${FILTER_ID:2:1} == '1' ]; then	# PROFILE 3 (Custom)
38
if [ ${FILTER_ID:2:1} == '1' ]; then	# PROFILE 3 (Custom)
39
	set_proto="proto_3";
39
	set_proto="proto_3";
40
elif [ ${FILTER_ID:1:1} == '1' ]; then	# PROFILE 2 (WEB + Mail + Remote access)
40
elif [ ${FILTER_ID:1:1} == '1' ]; then	# PROFILE 2 (WEB + Mail + Remote access)
41
	set_proto="proto_2";
41
	set_proto="proto_2";
42
elif [ ${FILTER_ID:0:1} == '1' ]; then	# PROFILE 1 (WEB)
42
elif [ ${FILTER_ID:0:1} == '1' ]; then	# PROFILE 1 (WEB)
43
	set_proto="proto_1";
43
	set_proto="proto_1";
44
else					# PROFILE 0 (Not filtered)
44
else					# PROFILE 0 (Not filtered)
45
	set_proto="proto_0";
45
	set_proto="proto_0";
46
fi
46
fi
47
 
47
 
48
ipset add $set_filter $FRAMED_IP_ADDRESS
48
ipset add $set_filter $FRAMED_IP_ADDRESS
49
ipset add $set_proto $FRAMED_IP_ADDRESS
49
ipset add $set_proto $FRAMED_IP_ADDRESS
50
 
50
 
51
# Add user IP permanently to current_users.txt if no status_open_required
51
# Add user IP permanently to current_users.txt if no status_open_required
52
current_users_file="/var/tmp/havp/current_users.txt"
52
current_users_file="/var/tmp/havp/current_users.txt"
53
[ ! -e $current_users_file ] && touch $current_users_file && chown apache:apache $current_users_file
53
[ ! -e $current_users_file ] && touch $current_users_file && chown apache:apache $current_users_file
54
if [ ${FILTER_ID:4:1} == '0' ]; then	# no status_open_required
54
if [ ${FILTER_ID:4:1} == '1' ]; then	# no status_open_required
55
	echo "$FRAMED_IP_ADDRESS:PERM" >> $current_users_file
55
	echo "$FRAMED_IP_ADDRESS:PERM" >> $current_users_file
56
fi
56
fi
57
 
57
 
58
# Debug : show all the coova parse variables (+ $set_filter + $set_proto).
58
# Debug : show all the coova parse variables (+ $set_filter + $set_proto).
59
# see "/src/chilli.c" for the complete list of parse variables
59
# see "/src/chilli.c" for the complete list of parse variables
60
#echo "-----------------------------------------------" >> /tmp/debug-conup.txt
60
#echo "-----------------------------------------------" >> /tmp/debug-conup.txt
61
#echo `date` >> /tmp/debug-conup.txt
61
#echo `date` >> /tmp/debug-conup.txt
62
#for i in LAYER3 DEV NET MASK ADDR USER_NAME NAS_IP_ADDRESS SERVICE_TYPE FRAMED_IP_ADDRESS FILTER_ID STATE CLASS CUI SESSION_TIMEOUT IDLE_TIMEOUT CALLING_STATION_ID CALLED_STATION_ID NAS_ID NAS_PORT_TYPE ACCT_SESSION_ID ACCT_INTERIM_INTERVAL WISPR_LOCATION_ID WISPR_LOCATION_NAME WISPR_BANDWIDTH_MAX_UP WISPR_BANDWIDTH_MAX_DOWN WISPR-SESSION_TERMINATE_TIME CHILLISPOT_MAX_INPUT_OCTETS CHILLISPOT_MAX_OUTPUT_OCTETS CHILLISPOT_MAX_TOTAL_OCTETS INPUT_OCTETS OUTPUT_OCTETS SESSION_TIME IDLE_TIME LOCATION OLD_LOCATION TERMINATE_CAUSE
62
#for i in LAYER3 DEV NET MASK ADDR USER_NAME NAS_IP_ADDRESS SERVICE_TYPE FRAMED_IP_ADDRESS FILTER_ID STATE CLASS CUI SESSION_TIMEOUT IDLE_TIMEOUT CALLING_STATION_ID CALLED_STATION_ID NAS_ID NAS_PORT_TYPE ACCT_SESSION_ID ACCT_INTERIM_INTERVAL WISPR_LOCATION_ID WISPR_LOCATION_NAME WISPR_BANDWIDTH_MAX_UP WISPR_BANDWIDTH_MAX_DOWN WISPR-SESSION_TERMINATE_TIME CHILLISPOT_MAX_INPUT_OCTETS CHILLISPOT_MAX_OUTPUT_OCTETS CHILLISPOT_MAX_TOTAL_OCTETS INPUT_OCTETS OUTPUT_OCTETS SESSION_TIME IDLE_TIME LOCATION OLD_LOCATION TERMINATE_CAUSE
63
#do
63
#do
64
#	echo "$i : ${!i}" >> /tmp/debug-conup.txt
64
#	echo "$i : ${!i}" >> /tmp/debug-conup.txt
65
#done
65
#done
66
#echo "set_filter : $set_filter" >> /tmp/debug-conup.txt
66
#echo "set_filter : $set_filter" >> /tmp/debug-conup.txt
67
#echo "set_proto : $set_proto" >> /tmp/debug-conup.txt
67
#echo "set_proto : $set_proto" >> /tmp/debug-conup.txt
68
 
68
 
69
 
69