Subversion Repositories ALCASAR

Rev

Rev 2411 | Rev 2770 | Go to most recent revision | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 2411 Rev 2450
1
<?php
1
<?php
2
/********************
2
/********************
3
* READ CONF FILES   *
3
* READ CONF FILES   *
4
*********************/
4
*********************/
5
define("CONF_FILE", "/usr/local/etc/alcasar.conf");
5
define("CONF_FILE", "/usr/local/etc/alcasar.conf");
6
define("ETHERS_INFO_FILE", "/usr/local/etc/alcasar-ethers-info");
6
define("ETHERS_INFO_FILE", "/usr/local/etc/alcasar-ethers-info");
7
$conf_files=array(CONF_FILE,ETHERS_INFO_FILE);
7
$conf_files=array(CONF_FILE,ETHERS_INFO_FILE);
8
foreach ($conf_files as $file) {
8
foreach ($conf_files as $file) {
9
	if (!file_exists($file)) {
9
	if (!file_exists($file)) {
10
		exit("Requested file ".$file." isn't present");
10
		exit("Requested file ".$file." isn't present");
11
	}
11
	}
12
	if (!is_readable($file)) {
12
	if (!is_readable($file)) {
13
		exit("Can't read the file ".$file);
13
		exit("Can't read the file ".$file);
14
	}
14
	}
15
}
15
}
16
 
16
 
17
$alcasar_conf_file = '/usr/local/etc/alcasar.conf';
17
$alcasar_conf_file = '/usr/local/etc/alcasar.conf';
18
$file_conf = fopen($alcasar_conf_file, 'r');
18
$file_conf = fopen($alcasar_conf_file, 'r');
19
if (!$file_conf) {
19
if (!$file_conf) {
20
	exit('Error opening the file '.$alcasar_conf_file);
20
	exit('Error opening the file '.$alcasar_conf_file);
21
}
21
}
22
while (!feof($file_conf)) {
22
while (!feof($file_conf)) {
23
	$buffer = fgets($file_conf, 4096);
23
	$buffer = fgets($file_conf, 4096);
24
	if ((strpos($buffer, '=') !== false) && (substr($buffer, 0, 1) !== '#')) {
24
	if ((strpos($buffer, '=') !== false) && (substr($buffer, 0, 1) !== '#')) {
25
		$tmp = explode('=', $buffer);
25
		$tmp = explode('=', $buffer, 2);
26
		$conf[trim($tmp[0])] = trim($tmp[1]);
26
		$conf[trim($tmp[0])] = trim($tmp[1]);
27
	}
27
	}
28
}
28
}
29
fclose($file_conf);
29
fclose($file_conf);
30
 
30
 
31
$tmp = explode("/",$conf["PRIVATE_IP"]);
31
$tmp = explode("/",$conf["PRIVATE_IP"]);
32
$intif = $conf["INTIF"];
32
$intif = $conf["INTIF"];
33
$private_ip=$tmp[0];
33
$private_ip=$tmp[0];
34
require('/etc/freeradius-web/config.php');
34
require('/etc/freeradius-web/config.php');
35
# Choice of language
35
# Choice of language
36
$Language = 'en';
36
$Language = 'en';
37
if (isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])) {
37
if (isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])) {
38
	$Langue = explode(',', $_SERVER['HTTP_ACCEPT_LANGUAGE']);
38
	$Langue = explode(',', $_SERVER['HTTP_ACCEPT_LANGUAGE']);
39
	$Language = strtolower(substr(chop($Langue[0]), 0, 2));
39
	$Language = strtolower(substr(chop($Langue[0]), 0, 2));
40
}
40
}
41
if ($Language === 'fr') {
41
if ($Language === 'fr') {
42
	$l_activity = "Activité sur le réseau de consultation";
42
	$l_activity = "Activité sur le réseau de consultation";
43
	$l_ip_adr = "Adresse IP";
43
	$l_ip_adr = "Adresse IP";
44
	$l_mac_adr = "Adresse MAC";
44
	$l_mac_adr = "Adresse MAC";
45
	$l_user = "Usager";
45
	$l_user = "Usager";
46
	$l_mac_allowed = "@MAC autorisée";
46
	$l_mac_allowed = "@MAC autorisée";
47
	$l_mac_temporarily_allowed = "@MAC autorisée temporairement";
47
	$l_mac_temporarily_allowed = "@MAC autorisée temporairement";
48
	$l_action = "Action";
48
	$l_action = "Action";
49
	$l_dissociate = "Dissocier @IP";
49
	$l_dissociate = "Dissocier @IP";
50
	$l_disconnect = "Déconnecter";
50
	$l_disconnect = "Déconnecter";
51
	$l_refresh = "Cette page est rafraichie toutes les 30 secondes";
51
	$l_refresh = "Cette page est rafraichie toutes les 30 secondes";
52
	$l_edit_user = "Editer l'utilisateur"; 
52
	$l_edit_user = "Editer l'utilisateur"; 
53
	$l_connect = "Autoriser temporairement";
53
	$l_connect = "Autoriser temporairement";
54
} else {
54
} else {
55
	$l_activity = "Activity on the consultation LAN";
55
	$l_activity = "Activity on the consultation LAN";
56
	$l_ip_adr = "IP Adress";
56
	$l_ip_adr = "IP Adress";
57
	$l_mac_adr = "MAC Adress";
57
	$l_mac_adr = "MAC Adress";
58
	$l_user = "User";
58
	$l_user = "User";
59
	$l_mac_allowed = "@MAC allowed";
59
	$l_mac_allowed = "@MAC allowed";
60
	$l_mac_temporarily_allowed = "@MAC temporarily allowed";
60
	$l_mac_temporarily_allowed = "@MAC temporarily allowed";
61
	$l_action = "Action";
61
	$l_action = "Action";
62
	$l_dissociate = "Dissociate @IP";
62
	$l_dissociate = "Dissociate @IP";
63
	$l_disconnect = "Disconnect";
63
	$l_disconnect = "Disconnect";
64
	$l_refresh = "This frame is refreshed every 30'";
64
	$l_refresh = "This frame is refreshed every 30'";
65
	$l_edit_user = "Edit user"; 
65
	$l_edit_user = "Edit user"; 
66
	$l_connect = "Temporarily authorize";
66
	$l_connect = "Temporarily authorize";
67
}
67
}
68
 
68
 
69
if (isset($_POST['action'])){
69
if (isset($_POST['action'])){
70
	switch ($_POST['action']){
70
	switch ($_POST['action']){
71
		case "$l_disconnect" :
71
		case "$l_disconnect" :
72
			exec("sudo /usr/sbin/chilli_query logout ".escapeshellarg($_POST['mac_addr']));
72
			exec("sudo /usr/sbin/chilli_query logout ".escapeshellarg($_POST['mac_addr']));
73
			unset($_POST['mac_addr']);
73
			unset($_POST['mac_addr']);
74
		break;
74
		break;
75
		case "$l_dissociate" :
75
		case "$l_dissociate" :
76
			exec("sudo /usr/sbin/chilli_query dhcp-release ".escapeshellarg($_POST['mac_addr']));
76
			exec("sudo /usr/sbin/chilli_query dhcp-release ".escapeshellarg($_POST['mac_addr']));
77
			unset($_POST['mac_addr']);
77
			unset($_POST['mac_addr']);
78
		break;
78
		break;
79
		case "$l_connect" :
79
		case "$l_connect" :
80
			exec("sudo /usr/sbin/chilli_query authorize mac ".escapeshellarg($_POST['mac_addr']));
80
			exec("sudo /usr/sbin/chilli_query authorize mac ".escapeshellarg($_POST['mac_addr']));
81
			unset($_POST['mac_addr']);
81
			unset($_POST['mac_addr']);
82
		break;
82
		break;
83
	}
83
	}
84
}
84
}
85
?>
85
?>
86
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
86
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
87
<HTML><!-- written by Rexy -->
87
<HTML><!-- written by Rexy -->
88
<head>
88
<head>
89
<META HTTP-EQUIV="Refresh" CONTENT="30">
89
<META HTTP-EQUIV="Refresh" CONTENT="30">
90
<meta http-equiv="Content-Type" content="text/html; charset=<?= $config['general_charset'] ?>">
90
<meta http-equiv="Content-Type" content="text/html; charset=<?= $config['general_charset'] ?>">
91
<title>Activity</title>
91
<title>Activity</title>
92
<link rel="stylesheet" type="text/css" href="/css/style.css">
92
<link rel="stylesheet" type="text/css" href="/css/style.css">
93
</head>
93
</head>
94
<body>
94
<body>
95
<table width="100%" border="0" cellspacing="0" cellpadding="0">
95
<table width="100%" border="0" cellspacing="0" cellpadding="0">
96
<tr><th><?= $l_activity ?></th></tr>
96
<tr><th><?= $l_activity ?></th></tr>
97
<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
97
<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
98
</table>
98
</table>
99
<table width="100%" border=1 cellspacing=0 cellpadding=1>
99
<table width="100%" border=1 cellspacing=0 cellpadding=1>
100
	<tr><td valign="middle" align="center"><?= $l_refresh ?><br>
100
	<tr><td valign="middle" align="center"><?= $l_refresh ?><br>
101
	<table border=1 width="80%" cellpadding=2 cellspacing=0>
101
	<table border=1 width="80%" cellpadding=2 cellspacing=0>
102
		<tr>
102
		<tr>
103
			<th>#</th>
103
			<th>#</th>
104
			<th><?= $l_ip_adr ?></th>
104
			<th><?= $l_ip_adr ?></th>
105
			<th><?= $l_mac_adr ?></th>
105
			<th><?= $l_mac_adr ?></th>
106
			<th><?= $l_user ?></th>
106
			<th><?= $l_user ?></th>
107
			<th><?= $l_action ?></th>
107
			<th><?= $l_action ?></th>
108
		</tr>
108
		</tr>
109
		<?php
109
		<?php
110
		$output = array(); $detail = array(); $nb_ligne = 0;
110
		$output = array(); $detail = array(); $nb_ligne = 0;
111
		exec("sudo /sbin/ip link show ".escapeshellarg($intif), $output); // retrieve ALCASAR MAC address
111
		exec("sudo /sbin/ip link show ".escapeshellarg($intif), $output); // retrieve ALCASAR MAC address
112
		$detail = explode (" " , $output[1]);
112
		$detail = explode (" " , $output[1]);
113
		$intif_mac_addr=strtoupper(str_replace(":","-",$detail[5]));
113
		$intif_mac_addr=strtoupper(str_replace(":","-",$detail[5]));
114
		unset ($output);unset ($detail);
114
		unset ($output);unset ($detail);
115
		exec ('sudo /usr/sbin/chilli_query list|sort -k5 -r', $output); 
115
		exec ('sudo /usr/sbin/chilli_query list|sort -k5 -r', $output); 
116
		while (list(,$ligne) = each($output)){
116
		while (list(,$ligne) = each($output)){
117
			$detail = explode (" ", $ligne);
117
			$detail = explode (" ", $ligne);
118
			$nb_ligne ++;
118
			$nb_ligne ++;
119
			echo "<tr valign=\"middle\">";
119
			echo "<tr valign=\"middle\">";
120
			echo "<td>".$nb_ligne."</td>";
120
			echo "<td>".$nb_ligne."</td>";
121
			echo "<td>".$detail[1]."</td>";
121
			echo "<td>".$detail[1]."</td>";
122
			if(file_exists('/usr/share/arp-scan/ieee-oui.txt')) // for each device on LAN, retrieve the MAC manufacturer
122
			if(file_exists('/usr/share/arp-scan/ieee-oui.txt')) // for each device on LAN, retrieve the MAC manufacturer
123
			{
123
			{
124
				$oui_id = substr(str_replace("-","",$detail[0]),0,6);
124
				$oui_id = substr(str_replace("-","",$detail[0]),0,6);
125
				exec ("grep $oui_id /usr/share/arp-scan/ieee-oui.txt | cut -f2", $mac_manufacturer);
125
				exec ("grep $oui_id /usr/share/arp-scan/ieee-oui.txt | cut -f2", $mac_manufacturer);
126
				if(empty($mac_manufacturer[0]))
126
				if(empty($mac_manufacturer[0]))
127
				{
127
				{
128
					$mac_manufacturer[0] = "Unknown";
128
					$mac_manufacturer[0] = "Unknown";
129
				}
129
				}
130
				echo "<td>$detail[0] <font size=\"1\">($mac_manufacturer[0])</font>";
130
				echo "<td>$detail[0] <font size=\"1\">($mac_manufacturer[0])</font>";
131
				unset($mac_manufacturer);
131
				unset($mac_manufacturer);
132
			}
132
			}
133
			else
133
			else
134
			{
134
			{
135
				echo "<td>$detail[0]";
135
				echo "<td>$detail[0]";
136
			}
136
			}
137
			exec ("grep $detail[0] /usr/local/etc/alcasar-ethers-info |cut -d' ' -f3", $mac_in_ether_file);
137
			exec ("grep $detail[0] /usr/local/etc/alcasar-ethers-info |cut -d' ' -f3", $mac_in_ether_file);
138
			if (!empty($mac_in_ether_file[0]))
138
			if (!empty($mac_in_ether_file[0]))
139
			{
139
			{
140
				echo " - <b>" . ltrim($mac_in_ether_file[0],'#') . "</b>";
140
				echo " - <b>" . ltrim($mac_in_ether_file[0],'#') . "</b>";
141
			}
141
			}
142
			echo "</td><td>";
142
			echo "</td><td>";
143
			if ($detail[4] == "1"){ // authenticated equipment
143
			if ($detail[4] == "1"){ // authenticated equipment
144
				$login = $detail[5];
144
				$login = $detail[5];
145
				unset ($found_users); unset ($cn);
145
				unset ($found_users); unset ($cn);
146
				$search = $login; $search_IN = 'username'; // is user in database ?
146
				$search = $login; $search_IN = 'username'; // is user in database ?
147
				if (is_file("../lib/sql/find.php"))
147
				if (is_file("../lib/sql/find.php"))
148
					include("../lib/sql/find.php");
148
					include("../lib/sql/find.php");
149
				if (isset ($found_users)) // user is in database
149
				if (isset ($found_users)) // user is in database
150
				{
150
				{
151
					if (is_file("../lib/sql/user_info.php")) //retrieve user info (especialy $cn)
151
					if (is_file("../lib/sql/user_info.php")) //retrieve user info (especialy $cn)
152
						include("../lib/sql/user_info.php");
152
						include("../lib/sql/user_info.php");
153
				}
153
				}
154
				if (! isset ($cn)){ $cn='-';}
154
				if (! isset ($cn)){ $cn='-';}
155
				# The user is an allowed MAC address
155
				# The user is an allowed MAC address
156
					if ($detail[5] == $detail[0]){
156
					if ($detail[5] == $detail[0]){
157
						if (isset ($found_users)) { #MAC is in database
157
						if (isset ($found_users)) { #MAC is in database
158
							echo "<a href=\"/acc/manager/htdocs/user_admin.php?login=$detail[5]\" title=\"$l_edit_user\">$l_mac_allowed";if ($cn != '-'){ echo " ($cn)";};echo "</a>";
158
							echo "<a href=\"/acc/manager/htdocs/user_admin.php?login=$detail[5]\" title=\"$l_edit_user\">$l_mac_allowed";if ($cn != '-'){ echo " ($cn)";};echo "</a>";
159
							echo "</td><td>";
159
							echo "</td><td>";
160
						}
160
						}
161
						else { #MAC is temporarily allowed
161
						else { #MAC is temporarily allowed
162
							echo "<b>$l_mac_temporarily_allowed</b>";
162
							echo "<b>$l_mac_temporarily_allowed</b>";
163
							echo "</td><td>";
163
							echo "</td><td>";
164
							echo "<FORM action=\"".$_SERVER['PHP_SELF']."\" method=\"POST\">";
164
							echo "<FORM action=\"".$_SERVER['PHP_SELF']."\" method=\"POST\">";
165
							echo "<INPUT type=\"hidden\" name=\"mac_addr\" value=\"$detail[0]\">";
165
							echo "<INPUT type=\"hidden\" name=\"mac_addr\" value=\"$detail[0]\">";
166
							echo "<INPUT type=\"submit\" name=\"action\" value=\"$l_disconnect\">";
166
							echo "<INPUT type=\"submit\" name=\"action\" value=\"$l_disconnect\">";
167
							echo "</FORM></TD>";
167
							echo "</FORM></TD>";
168
						}
168
						}
169
						# Disable temporarily @MAC access
169
						# Disable temporarily @MAC access
170
					}
170
					}
171
				# The user is a humanoide ;-)
171
				# The user is a humanoide ;-)
172
					else {
172
					else {
173
						if ($cn != '-') { echo "<a href=\"/acc/manager/htdocs/user_admin.php?login=$detail[5]\" title=\"$l_edit_user $detail[5]\">$detail[5] ($cn)</a>";}
173
						if ($cn != '-') { echo "<a href=\"/acc/manager/htdocs/user_admin.php?login=$detail[5]\" title=\"$l_edit_user $detail[5]\">$detail[5] ($cn)</a>";}
174
						else { echo "<a href=\"/acc/manager/htdocs/user_admin.php?login=$detail[5]\" title=\"$l_edit_user $detail[5]\">$detail[5]</a>";}
174
						else { echo "<a href=\"/acc/manager/htdocs/user_admin.php?login=$detail[5]\" title=\"$l_edit_user $detail[5]\">$detail[5]</a>";}
175
						echo "<TD>";
175
						echo "<TD>";
176
						echo "<FORM action=\"".$_SERVER['PHP_SELF']."\" method=\"POST\">";
176
						echo "<FORM action=\"".$_SERVER['PHP_SELF']."\" method=\"POST\">";
177
						echo "<INPUT type=\"hidden\" name=\"mac_addr\" value=\"$detail[0]\">";
177
						echo "<INPUT type=\"hidden\" name=\"mac_addr\" value=\"$detail[0]\">";
178
						echo "<INPUT type=\"submit\" name=\"action\" value=\"$l_disconnect\">";
178
						echo "<INPUT type=\"submit\" name=\"action\" value=\"$l_disconnect\">";
179
						echo "</FORM></TD>";
179
						echo "</FORM></TD>";
180
						}
180
						}
181
					}
181
					}
182
			# equipment without authenticated user
182
			# equipment without authenticated user
183
			else if (($detail[0] == $intif_mac_addr) || ($detail[1] == $private_ip)){
183
			else if (($detail[0] == $intif_mac_addr) || ($detail[1] == $private_ip)){
184
				echo "ALCASAR system";
184
				echo "ALCASAR system";
185
				echo "<TD>";
185
				echo "<TD>";
186
				echo "&nbsp;";
186
				echo "&nbsp;";
187
				echo "</TD>";
187
				echo "</TD>";
188
				}	
188
				}	
189
			else {  
189
			else {  
190
				echo "&nbsp;";
190
				echo "&nbsp;";
191
				echo "<TD>";		
191
				echo "<TD>";		
192
				echo "<FORM action=\"".$_SERVER['PHP_SELF']."\" method=\"POST\">";
192
				echo "<FORM action=\"".$_SERVER['PHP_SELF']."\" method=\"POST\">";
193
				# Dissociate user (... or other) who is not connected yet
193
				# Dissociate user (... or other) who is not connected yet
194
				echo "<INPUT type=\"hidden\" name=\"mac_addr\" value=\"$detail[0]\">";
194
				echo "<INPUT type=\"hidden\" name=\"mac_addr\" value=\"$detail[0]\">";
195
				exec ("grep $detail[0] /usr/local/etc/alcasar-ethers-info", $mac_in_ether_file);
195
				exec ("grep $detail[0] /usr/local/etc/alcasar-ethers-info", $mac_in_ether_file);
196
				if (empty($mac_in_ether_file[1]))
196
				if (empty($mac_in_ether_file[1]))
197
				{
197
				{
198
					echo "<INPUT type=\"submit\" name=\"action\" value=\"$l_dissociate\">"; // Dissociate only MAC not in ether file (dhcp)
198
					echo "<INPUT type=\"submit\" name=\"action\" value=\"$l_dissociate\">"; // Dissociate only MAC not in ether file (dhcp)
199
				}
199
				}
200
				echo "<INPUT type=\"submit\" name=\"action\" value=\"$l_connect\">"; // Enable temporarily @MAC access
200
				echo "<INPUT type=\"submit\" name=\"action\" value=\"$l_connect\">"; // Enable temporarily @MAC access
201
				echo "</FORM></TD>";
201
				echo "</FORM></TD>";
202
			}
202
			}
203
			unset ($mac_in_ether_file);
203
			unset ($mac_in_ether_file);
204
			echo "</tr>";
204
			echo "</tr>";
205
		}
205
		}
206
		?>
206
		?>
207
	</table>
207
	</table>
208
	</td></tr>
208
	</td></tr>
209
</table>
209
</table>
210
</html>
210
</html>
211
 
211
 
212
 
212