1055 lines
31 KiB
Perl
1055 lines
31 KiB
Perl
## @file
|
|
# Session explorer
|
|
|
|
## @class
|
|
# Session explorer.
|
|
# Synopsis:
|
|
# * build a new Lemonldap::NG::Manager::Sessions object
|
|
# * insert tree() result in HTML
|
|
#
|
|
# tree() loads on of the tree methods.
|
|
# new() manage ajax requests (inserted in HTML tree)
|
|
package Lemonldap::NG::Manager::Sessions;
|
|
|
|
use strict;
|
|
use Lemonldap::NG::Handler::CGI qw(:tsv);
|
|
use Lemonldap::NG::Common::Session;
|
|
use Lemonldap::NG::Common::Apache::Session; #inherits
|
|
use Lemonldap::NG::Common::Conf; #link protected conf Configuration
|
|
use Lemonldap::NG::Common::Conf::Constants; #inherits
|
|
require Lemonldap::NG::Manager::_i18n; #inherits
|
|
use utf8;
|
|
|
|
#inherits Apache::Session
|
|
|
|
#our $whatToTrace;
|
|
#*whatToTrace = \$Lemonldap::NG::Handler::_CGI::whatToTrace;
|
|
|
|
our $VERSION = '2.0.0';
|
|
|
|
our @ISA = qw(
|
|
Lemonldap::NG::Handler::CGI
|
|
Lemonldap::NG::Manager::_i18n
|
|
);
|
|
|
|
## @cmethod Lemonldap::NG::Manager::Sessions new(hashRef args)
|
|
# Constructor.
|
|
# @param $args Arguments for Lemonldap::NG::Handler::CGI::new()
|
|
# @return New Lemonldap::NG::Manager::Sessions object
|
|
sub new {
|
|
my ( $class, $args ) = @_;
|
|
|
|
# Output UTF-8
|
|
binmode( STDOUT, ':utf8' );
|
|
|
|
# Try to get configuration values from global configuration
|
|
my $conf = Lemonldap::NG::Common::Conf->new( $args->{configStorage} )
|
|
or Lemonldap::NG::Handler::CGI->abort( 'Unable to get configuration',
|
|
$Lemonldap::NG::Common::Conf::msg );
|
|
|
|
if ( my $globalconf = $conf->getConf() ) {
|
|
$args->{$_} ||= $globalconf->{$_}
|
|
foreach (qw/portal hiddenAttributes /);
|
|
}
|
|
|
|
# Configuration from MANAGER section
|
|
if ( my $localconf = $conf->getLocalConf(MANAGERSECTION) ) {
|
|
$args->{$_} ||= $localconf->{$_} foreach ( keys %$localconf );
|
|
}
|
|
|
|
# Configuration from SESSIONSEXPLORER section
|
|
if ( my $localconfse = $conf->getLocalConf(SESSIONSEXPLORERSECTION) ) {
|
|
$args->{$_} ||= $localconfse->{$_} foreach ( keys %$localconfse );
|
|
}
|
|
|
|
my $self = $class->SUPER::new($args)
|
|
or $class->abort( 'Unable to start ' . __PACKAGE__,
|
|
'See Apache logs for more' );
|
|
|
|
# Local args prepends global args
|
|
$self->{$_} = $args->{$_} foreach ( keys %$args );
|
|
|
|
# Load default skin if no other specified
|
|
$self->{managerSkin} ||= 'default';
|
|
|
|
# IP field
|
|
$self->{ipField} = "ipAddr";
|
|
|
|
# Multi values separator
|
|
$self->{multiValuesSeparator} ||= '; ';
|
|
|
|
# Attributes to hide
|
|
$self->{hiddenAttributes} = "_password"
|
|
unless defined $self->{hiddenAttributes};
|
|
|
|
# Now we're ready to display sessions. Choose display type:
|
|
# case AJAX request
|
|
if ( my ($k) = grep /^(?:uid(?:ByIp)?|session|delete|letter|id|p)$/,
|
|
$self->param() )
|
|
{
|
|
print $self->header( -type => 'text/html;charset=utf-8' );
|
|
$self->lmLog( "Ajax request: $k", 'debug' );
|
|
print $self->$k( $self->param($k) );
|
|
$self->quit();
|
|
}
|
|
|
|
# case else : store tree type choosen to use it later in tree()
|
|
( $self->{_tree} ) = grep /^(?:full(?:uid|ip)|ipclasses|doubleIp)$/,
|
|
$self->param();
|
|
|
|
# default display : list by uid
|
|
$self->{_tree} ||= 'list';
|
|
$self->lmLog( "Session display type: $self->{_tree}", 'debug' );
|
|
|
|
return $self;
|
|
}
|
|
|
|
## @method string tree()
|
|
# Launch required tree builder. It can be one of :
|
|
# * doubleIp()
|
|
# * fullip()
|
|
# * fulluid()
|
|
# * ipclasses()
|
|
# * list() (default)
|
|
# @return string XML tree
|
|
sub tree {
|
|
my $self = shift;
|
|
|
|
my $sub = $self->{_tree};
|
|
$self->lmLog( "Building chosen tree: $sub", 'debug' );
|
|
my ( $r, $legend ) = $self->$sub( $self->param($sub) );
|
|
return
|
|
qq{<ul class="simpleTree"><li class="root" id="root"><span>$legend</span><ul>$r</ul></li></ul>};
|
|
}
|
|
|
|
################
|
|
# TREE METHODS #
|
|
################
|
|
|
|
## @method protected string list()
|
|
# Build default tree (by letter)
|
|
# @return string XML tree
|
|
sub list {
|
|
my $self = shift;
|
|
my ( $byUid, $count, $res );
|
|
$count = 0;
|
|
|
|
# Parse all sessions to store first letter
|
|
my $moduleOptions = $tsv->{sessionStorageOptions} || {};
|
|
$moduleOptions->{backend} = $tsv->{sessionStorageModule};
|
|
my $module = "Lemonldap::NG::Common::Apache::Session";
|
|
$res =
|
|
$module->get_key_from_all_sessions( $moduleOptions,
|
|
[ '_httpSessionType', $tsv->{whatToTrace} ] );
|
|
while ( my ( $id, $entry ) = each %$res ) {
|
|
next if ( $entry->{_httpSessionType} );
|
|
next unless $entry->{ $tsv->{whatToTrace} } =~ /^(\w)/;
|
|
$byUid->{$1}++;
|
|
$count++;
|
|
}
|
|
$res = '';
|
|
|
|
# Build tree sorted by first letter
|
|
foreach my $letter ( sort keys %$byUid ) {
|
|
$res .= $self->ajaxNode(
|
|
|
|
# ID
|
|
"li_$letter",
|
|
|
|
# Legend
|
|
"$letter <i><small>($byUid->{$letter} "
|
|
. (
|
|
$byUid->{$letter} == 1
|
|
? $self->translate('session')
|
|
: $self->translate('sessions')
|
|
)
|
|
. ")</small></i>",
|
|
|
|
# Next request
|
|
"letter=$letter"
|
|
);
|
|
}
|
|
return (
|
|
$res,
|
|
"$count "
|
|
. (
|
|
$count == 1
|
|
? $self->translate('session')
|
|
: $self->translate('sessions')
|
|
)
|
|
);
|
|
}
|
|
|
|
## @method protected string doubleIp()
|
|
# Build tree with users connected from more than 1 IP
|
|
# @return string XML tree
|
|
sub doubleIp {
|
|
my $self = shift;
|
|
my ( $byUid, $byIp, $res, $count );
|
|
|
|
# Parse all sessions
|
|
my $moduleOptions = $tsv->{sessionStorageOptions} || {};
|
|
$moduleOptions->{backend} = $tsv->{sessionStorageModule};
|
|
my $module = "Lemonldap::NG::Common::Apache::Session";
|
|
$res = $module->get_key_from_all_sessions(
|
|
$moduleOptions,
|
|
[
|
|
'_httpSessionType', $tsv->{whatToTrace},
|
|
$self->{ipField}, 'startTime'
|
|
]
|
|
);
|
|
while ( my ( $id, $entry ) = each %$res ) {
|
|
next if ( $entry->{_httpSessionType} );
|
|
push @{ $byUid->{ $entry->{ $tsv->{whatToTrace} } }
|
|
->{ $entry->{ $self->{ipField} } } },
|
|
{ id => $id, startTime => $entry->{startTime} };
|
|
}
|
|
$res = '';
|
|
|
|
# Build tree sorted by uid (or other field chosen in whatToTrace parameter)
|
|
foreach my $uid (
|
|
sort { ( keys %{ $byUid->{$b} } ) <=> ( keys %{ $byUid->{$a} } ) }
|
|
keys %$byUid
|
|
)
|
|
{
|
|
|
|
# Parse only uid that are connected from more than 1 IP
|
|
last if ( ( keys %{ $byUid->{$uid} } ) == 1 );
|
|
$count++;
|
|
|
|
# Build UID node with IP as sub node
|
|
$res .= "<li id=\"di$uid\" class=\"closed\"><span>$uid</span><ul>";
|
|
foreach my $ip ( sort keys %{ $byUid->{$uid} } ) {
|
|
$res .= "<li class=\"open\" id=\"di$ip\"><span>$ip</span><ul>";
|
|
|
|
# For each IP node, store sessions sorted by start time
|
|
foreach my $session ( sort { $a->{startTime} <=> $b->{startTime} }
|
|
@{ $byUid->{$uid}->{$ip} } )
|
|
{
|
|
$res .=
|
|
"<li id=\"di$session->{id}\"><span onclick=\"displaySession('$session->{id}');\">"
|
|
. $self->_stToStr( $session->{startTime} )
|
|
. "</span></li>";
|
|
}
|
|
$res .= "</ul></li>";
|
|
}
|
|
$res .= "</ul></li>";
|
|
}
|
|
|
|
return (
|
|
$res,
|
|
"$count "
|
|
. (
|
|
$count == 1
|
|
? $self->translate('user')
|
|
: $self->translate('users')
|
|
)
|
|
);
|
|
}
|
|
|
|
## @method protected string fullip(string req)
|
|
# Build single IP tree
|
|
# @param $req Optional IP request (127* for example)
|
|
# @return string XML tree
|
|
sub fullip {
|
|
my ( $self, $req ) = splice @_;
|
|
my ( $byUid, $res );
|
|
|
|
# Parse sessions and store only if IP match regexp
|
|
my $moduleOptions = $tsv->{sessionStorageOptions} || {};
|
|
$moduleOptions->{backend} = $tsv->{sessionStorageModule};
|
|
my $module = "Lemonldap::NG::Common::Apache::Session";
|
|
$res =
|
|
$module->searchOnExpr( $moduleOptions, $self->{ipField}, $req,
|
|
$tsv->{whatToTrace}, 'startTime', $self->{ipField},
|
|
'_httpSessionType' );
|
|
while ( my ( $id, $entry ) = each %$res ) {
|
|
next if ( $entry->{_httpSessionType} );
|
|
push @{ $byUid->{ $entry->{ $self->{ipField} } }
|
|
->{ $entry->{ $tsv->{whatToTrace} } } },
|
|
{ id => $id, startTime => $entry->{startTime} };
|
|
}
|
|
$res = '';
|
|
|
|
# Build tree sorted by IP
|
|
foreach my $ip ( sort keys %$byUid ) {
|
|
$res .= "<li id=\"fi$ip\"><span>$ip</span><ul>";
|
|
foreach my $uid ( sort keys %{ $byUid->{$ip} } ) {
|
|
$res .= $self->ajaxNode(
|
|
$uid,
|
|
$uid
|
|
. (
|
|
@{ $byUid->{$ip}->{$uid} } > 1
|
|
? " <i><u><small>("
|
|
. @{ $byUid->{$ip}->{$uid} }
|
|
. " sessions)</small></u></i>"
|
|
: ''
|
|
),
|
|
"uid=$uid"
|
|
);
|
|
}
|
|
$res .= "</ul></li>";
|
|
}
|
|
return $res;
|
|
}
|
|
|
|
## @method protected string fulluid(string req)
|
|
# Build single uid tree
|
|
# @param $req request (examples: foo*, foo.bar)
|
|
# @return string XML tree
|
|
sub fulluid {
|
|
my ( $self, $req ) = splice @_;
|
|
my ( $byUid, $res );
|
|
|
|
# Parse sessions to find user that match regexp
|
|
my $moduleOptions = $tsv->{sessionStorageOptions} || {};
|
|
$moduleOptions->{backend} = $tsv->{sessionStorageModule};
|
|
my $module = "Lemonldap::NG::Common::Apache::Session";
|
|
$res = $module->searchOnExpr(
|
|
$moduleOptions, $tsv->{whatToTrace},
|
|
$req, $tsv->{whatToTrace},
|
|
'startTime', '_httpSessionType'
|
|
);
|
|
while ( my ( $id, $entry ) = each %$res ) {
|
|
next if ( $entry->{_httpSessionType} );
|
|
push @{ $byUid->{ $entry->{ $tsv->{whatToTrace} } } },
|
|
{ id => $id, startTime => $entry->{startTime} };
|
|
}
|
|
$res = '';
|
|
|
|
# Build tree sorted by uid
|
|
$res .= "<li id=\"re\"><span>$req</span><ul>";
|
|
foreach my $uid ( sort keys %$byUid ) {
|
|
$res .= $self->ajaxNode(
|
|
$uid,
|
|
$uid
|
|
. (
|
|
@{ $byUid->{$uid} } > 1
|
|
? " <i><u><small>("
|
|
. @{ $byUid->{$uid} }
|
|
. " sessions)</small></u></i>"
|
|
: ''
|
|
),
|
|
"uid=$uid"
|
|
);
|
|
}
|
|
$res .= "</ul></li>";
|
|
}
|
|
|
|
## @method protected string ipclasses()
|
|
# Build IP classes tree (call _ipclasses())
|
|
# @return string XML tree
|
|
sub ipclasses {
|
|
my $self = shift;
|
|
return $self->_ipclasses();
|
|
}
|
|
|
|
##################
|
|
# AJAX RESPONSES #
|
|
##################
|
|
|
|
## @method protected string delete(string id)
|
|
# Delete a session
|
|
# @param id Session identifier
|
|
# @return string XML tree
|
|
sub delete {
|
|
my ( $self, $id ) = splice @_;
|
|
my %h;
|
|
|
|
# Try to read session
|
|
my $apacheSession = Lemonldap::NG::Common::Session->new(
|
|
{
|
|
storageModule => $tsv->{sessionStorageModule},
|
|
storageModuleOptions => $tsv->{sessionStorageOptions},
|
|
cacheModule => $tsv->{sessionCacheModule},
|
|
cacheModuleOptions => $tsv->{sessionCacheOptions},
|
|
id => $id,
|
|
kind => "SSO",
|
|
}
|
|
);
|
|
|
|
if ( $apacheSession->error ) {
|
|
$self->lmLog( "Unable to open session $id", 'error' );
|
|
$self->lmLog( $apacheSession->error, 'error' );
|
|
return $self->displayError( $apacheSession->error );
|
|
}
|
|
|
|
else {
|
|
|
|
if ( my $id2 = $apacheSession->data->{_httpSession} ) {
|
|
my $apacheSession2 = Lemonldap::NG::Common::Session->new(
|
|
{
|
|
storageModule => $tsv->{sessionStorageModule},
|
|
storageModuleOptions => $tsv->{sessionStorageOptions},
|
|
cacheModule => $tsv->{sessionCacheModule},
|
|
cacheModuleOptions => $tsv->{sessionCacheOptions},
|
|
id => $id2,
|
|
kind => "SSO",
|
|
}
|
|
);
|
|
|
|
if ( $apacheSession2->data ) {
|
|
unless ( $apacheSession2->remove ) {
|
|
$self->lmLog( "Unable to remove session $id2", 'error' );
|
|
$self->lmLog( $apacheSession2->error, 'error' );
|
|
}
|
|
}
|
|
else {
|
|
$self->lmLog( "Unable to open session $id2", 'error' );
|
|
$self->lmLog( $apacheSession2->error, 'error' );
|
|
}
|
|
}
|
|
|
|
if ( $apacheSession->remove ) {
|
|
$self->lmLog( "Session $id deleted", 'info' );
|
|
return $self->displayMessage( $self->translate('sessionDeleted') );
|
|
}
|
|
else {
|
|
$self->lmLog( "Unable to remove session $id", 'error' );
|
|
$self->lmLog( $apacheSession->error, 'error' );
|
|
return $self->displayError( $apacheSession->error );
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
## @method protected string session()
|
|
# Build session dump.
|
|
# @return string XML tree
|
|
sub session {
|
|
my ( $self, $id ) = splice @_;
|
|
my ( %h, $res );
|
|
|
|
# Try to read session
|
|
my $apacheSession = Lemonldap::NG::Common::Session->new(
|
|
{
|
|
storageModule => $tsv->{sessionStorageModule},
|
|
storageModuleOptions => $tsv->{sessionStorageOptions},
|
|
cacheModule => $tsv->{sessionCacheModule},
|
|
cacheModuleOptions => $tsv->{sessionCacheOptions},
|
|
id => $id,
|
|
kind => "SSO",
|
|
}
|
|
);
|
|
|
|
if ( $apacheSession->error ) {
|
|
$self->lmLog( "Unable to open session $id", 'error' );
|
|
$self->lmLog( $apacheSession->error, 'error' );
|
|
return $self->displayError( $apacheSession->error );
|
|
}
|
|
|
|
# Session is available, print content
|
|
my %session = %{ $apacheSession->data };
|
|
|
|
# General informations
|
|
$res .= '<div class="panel-heading">';
|
|
|
|
$res .= '<h1 class="panel-title text-center">';
|
|
$res .= $self->translate('sessionTitle');
|
|
$res .= '</h1>';
|
|
$res .= '</div>';
|
|
$res .= '<div class="panel-body">';
|
|
|
|
$res .=
|
|
"<div class=\"alert alert-info\"><strong>"
|
|
. $self->translate('sessionStartedAt')
|
|
. "</strong> "
|
|
. $self->_stToStr( $session{startTime} )
|
|
. "</div>";
|
|
|
|
# Transform values
|
|
# -> split multiple values
|
|
# -> decode UTF8
|
|
# -> Manage dates
|
|
# -> Hide password
|
|
# -> quote HTML
|
|
foreach ( keys %session ) {
|
|
|
|
# Don't touch references
|
|
next if ref $session{$_};
|
|
|
|
# Remove empty value
|
|
delete $session{$_} unless ( length $session{$_} );
|
|
|
|
# Quote HTML
|
|
my $value = htmlquote( $session{$_} );
|
|
|
|
# Values in sessions are UTF8
|
|
utf8::decode($value);
|
|
|
|
# Multiple values
|
|
if ( $value =~ m/$self->{multiValuesSeparator}/ ) {
|
|
my $newvalue = '<ul>';
|
|
$newvalue .= "<li>$_</li>"
|
|
foreach ( split( $self->{multiValuesSeparator}, $value ) );
|
|
$newvalue .= '</ul>';
|
|
$value = $newvalue;
|
|
}
|
|
|
|
# Hide attributes
|
|
$value = '****' if ( $self->{hiddenAttributes} =~ /\b$_\b/ );
|
|
|
|
# Manage timestamp
|
|
if ( $_ =~ /^(_utime|_lastAuthnUTime)$/ ) {
|
|
$value = "$value (" . localtime($value) . ")";
|
|
}
|
|
|
|
# Manage dates
|
|
if ( $_ =~ /^(startTime|updateTime)$/ ) {
|
|
$value = "$value (" . $self->_stToStr($value) . ")";
|
|
}
|
|
|
|
# Register value
|
|
$session{$_} = $value;
|
|
}
|
|
|
|
# Map attributes to categories
|
|
my $categories = {
|
|
'dateTitle' => [qw(_utime startTime updateTime _lastAuthnUTime)],
|
|
'connectionTitle' => [qw(ipAddr _timezone _url)],
|
|
'authenticationTitle' =>
|
|
[qw(_session_id _user _password authenticationLevel)],
|
|
'modulesTitle' => [qw(_auth _userDB _passwordDB _issuerDB _authChoice)],
|
|
'saml' => [
|
|
qw(_idp _idpConfKey _samlToken _lassoSessionDump _lassoIdentityDump)
|
|
],
|
|
'groups' => [qw(groups)],
|
|
'ldap' => [qw(dn)],
|
|
'BrowserID' => [qw(_browserIdAnswer _browserIdAnswerRaw)],
|
|
};
|
|
|
|
# Display categories
|
|
foreach my $category ( sort keys %$categories ) {
|
|
|
|
# Test if category is not empty
|
|
my $empty = 1;
|
|
foreach ( @{ $categories->{$category} } ) {
|
|
$empty = 0 if exists $session{$_};
|
|
}
|
|
next if ($empty);
|
|
|
|
# Display category
|
|
$res .= '<div class="panel panel-default">';
|
|
$res .= '<div class="panel-heading">';
|
|
$res .= '<h2 class="panel-title text-center">'
|
|
. $self->translate($category) . '</h2>';
|
|
$res .= '</div>';
|
|
$res .= '<div class="panel-body">';
|
|
$res .= '<ul>';
|
|
|
|
foreach my $attribute ( @{ $categories->{$category} } ) {
|
|
|
|
# Hide empty attributes
|
|
next unless exists $session{$attribute};
|
|
|
|
# Display attribute
|
|
$res .=
|
|
'<li><strong>'
|
|
. $self->translate($attribute)
|
|
. '</strong> (<tt>$'
|
|
. $attribute
|
|
. '</tt>): '
|
|
. $session{$attribute} . '</li>';
|
|
|
|
# Delete attribute, to hide it
|
|
delete $session{$attribute};
|
|
}
|
|
$res .= '</ul>';
|
|
$res .= '</div>';
|
|
$res .= '</div>';
|
|
}
|
|
|
|
# OpenID
|
|
my $openidempty = 1;
|
|
foreach ( keys %session ) {
|
|
$openidempty = 0 if $_ =~ /^_openid/;
|
|
}
|
|
unless ($openidempty) {
|
|
$res .= '<div class="panel panel-default">';
|
|
$res .= '<div class="panel-heading">';
|
|
$res .= '<h2 class="panel-title text-center">' . 'OpenID' . '</h2>';
|
|
$res .= '</div>';
|
|
$res .= '<div class="panel-body">';
|
|
$res .= '<ul>';
|
|
|
|
foreach ( keys %session ) {
|
|
next if $_ !~ /^_openid/;
|
|
$res .=
|
|
'<li><strong>' . $_ . '</strong>: ' . $session{$_} . '</li>';
|
|
|
|
# Delete attribute, to hide it
|
|
delete $session{$_};
|
|
}
|
|
|
|
$res .= '</ul>';
|
|
$res .= '</div>';
|
|
$res .= '</div>';
|
|
}
|
|
|
|
# Notifications
|
|
my $notifempty = 1;
|
|
foreach ( keys %session ) {
|
|
$notifempty = 0 if $_ =~ /^notification_/;
|
|
}
|
|
unless ($notifempty) {
|
|
$res .= '<div class="panel panel-default">';
|
|
$res .= '<div class="panel-heading">';
|
|
$res .= '<h2 class="panel-title text-center">'
|
|
. ucfirst $self->translate('notificationsDone') . '</h2>';
|
|
$res .= '</div>';
|
|
$res .= '<div class="panel-body">';
|
|
$res .= '<ul>';
|
|
|
|
foreach ( keys %session ) {
|
|
next if $_ !~ /^notification_(.+)/;
|
|
$res .=
|
|
'<li><strong>'
|
|
. $1
|
|
. '</strong>: '
|
|
. $session{$_} . " ("
|
|
. localtime( $session{$_} ) . ")";
|
|
|
|
# Delete attribute, to hide it
|
|
delete $session{$_};
|
|
}
|
|
|
|
$res .= '</ul>';
|
|
$res .= '</div>';
|
|
$res .= '</div>';
|
|
}
|
|
|
|
# Login history
|
|
if ( defined $session{loginHistory} ) {
|
|
$res .= '<div class="panel panel-default">';
|
|
$res .= '<div class="panel-heading">';
|
|
$res .= '<h2 class="panel-title text-center">'
|
|
. ucfirst $self->translate('loginHistory') . '</h2>';
|
|
$res .= '</div>';
|
|
$res .= '<div class="panel-body">';
|
|
$res .= '<ul>';
|
|
|
|
# Get all login records
|
|
my $loginRecords = {};
|
|
|
|
if ( defined $session{loginHistory}->{successLogin} ) {
|
|
foreach ( @{ $session{loginHistory}->{successLogin} } ) {
|
|
$loginRecords->{ $_->{_utime} } =
|
|
"Success (IP " . $_->{ipAddr} . ")";
|
|
}
|
|
}
|
|
|
|
if ( defined $session{loginHistory}->{failedLogin} ) {
|
|
foreach ( @{ $session{loginHistory}->{failedLogin} } ) {
|
|
$loginRecords->{ $_->{_utime} } =
|
|
$_->{error} . " (IP " . $_->{ipAddr} . ")";
|
|
}
|
|
}
|
|
|
|
# Display records sorted by date
|
|
foreach my $utime ( sort keys %{$loginRecords} ) {
|
|
|
|
$res .=
|
|
"<li><strong>"
|
|
. localtime($utime)
|
|
. "</strong>: "
|
|
. $loginRecords->{$utime} . "</li>";
|
|
}
|
|
|
|
delete $session{loginHistory};
|
|
$res .= '</ul>';
|
|
$res .= '</div>';
|
|
$res .= '</div>';
|
|
}
|
|
|
|
# Other attributes
|
|
$res .= '<div class="panel panel-default">';
|
|
$res .= '<div class="panel-heading">';
|
|
$res .= '<h2 class="panel-title text-center">'
|
|
. $self->translate('attributesAndMacros') . '</h2>';
|
|
$res .= '</div>';
|
|
$res .= '<div class="panel-body">';
|
|
$res .= '<ul>';
|
|
|
|
foreach my $attribute (
|
|
sort {
|
|
return $a cmp $b
|
|
if ( ( $a =~ /^_/ and $b =~ /^_/ )
|
|
or ( $a !~ /^_/ and $b !~ /^_/ ) );
|
|
return $b cmp $a
|
|
} keys %session
|
|
)
|
|
{
|
|
|
|
# Display attribute
|
|
$res .=
|
|
'<li><strong>'
|
|
. $attribute
|
|
. '</strong>: '
|
|
. $session{$attribute} . '</li>';
|
|
}
|
|
|
|
$res .= '</ul>';
|
|
$res .= '</div>';
|
|
$res .= '</div>';
|
|
|
|
# Delete button
|
|
$res .= '<div class="text-center">';
|
|
$res .=
|
|
"<input type=\"button\" onclick=\"del('$id');\""
|
|
. ' class="btn btn-danger"'
|
|
. " value=\""
|
|
. $self->translate('deleteSession') . "\" />";
|
|
$res .= '</div>';
|
|
|
|
$res .= '</div>';
|
|
return $res;
|
|
}
|
|
|
|
## @method protected string uidByIp()
|
|
# Build single IP tree
|
|
# @return string XML tree
|
|
sub uidByIp {
|
|
my ( $self, $ip ) = splice @_;
|
|
my ( $byUser, $res );
|
|
|
|
my $moduleOptions = $tsv->{sessionStorageOptions} || {};
|
|
$moduleOptions->{backend} = $tsv->{sessionStorageModule};
|
|
my $module = "Lemonldap::NG::Common::Apache::Session";
|
|
$res =
|
|
$module->searchOn( $moduleOptions, $self->{ipField}, $ip,
|
|
'_httpSessionType', $tsv->{whatToTrace}, $self->{ipField},
|
|
'startTime' );
|
|
while ( my ( $id, $entry ) = each(%$res) ) {
|
|
next if ( $entry->{_httpSessionType} );
|
|
if ( $entry->{ $self->{ipField} } eq $ip ) {
|
|
push @{ $byUser->{ $entry->{ $tsv->{whatToTrace} } } },
|
|
{ id => $id, startTime => $entry->{startTime} };
|
|
}
|
|
}
|
|
$res = '';
|
|
foreach my $user ( sort keys %$byUser ) {
|
|
$res .= "<li id=\"ip$user\"><span>$user</span><ul>";
|
|
foreach my $session ( sort { $a->{startTime} <=> $b->{startTime} }
|
|
@{ $byUser->{$user} } )
|
|
{
|
|
$res .=
|
|
"<li id=\"ip$session->{id}\"><span onclick=\"displaySession('$session->{id}');\">"
|
|
. $self->_stToStr( $session->{startTime} )
|
|
. "</span></li>";
|
|
}
|
|
$res .= "</ul></li>";
|
|
}
|
|
return $res;
|
|
}
|
|
|
|
## @method protected string uid()
|
|
# Build single UID tree part
|
|
# @return string XML tree
|
|
sub uid {
|
|
my ( $self, $uid ) = splice @_;
|
|
my ( $byIp, $res );
|
|
|
|
my $moduleOptions = $tsv->{sessionStorageOptions} || {};
|
|
$moduleOptions->{backend} = $tsv->{sessionStorageModule};
|
|
my $module = "Lemonldap::NG::Common::Apache::Session";
|
|
$res =
|
|
$module->searchOn( $moduleOptions, $tsv->{whatToTrace}, $uid,
|
|
'_httpSessionType', $tsv->{whatToTrace}, $self->{ipField},
|
|
'startTime' );
|
|
while ( my ( $id, $entry ) = each(%$res) ) {
|
|
next if ( $entry->{_httpSessionType} );
|
|
if ( $entry->{ $tsv->{whatToTrace} } eq $uid ) {
|
|
push @{ $byIp->{ $entry->{ $self->{ipField} } } },
|
|
{ id => $id, startTime => $entry->{startTime} };
|
|
}
|
|
}
|
|
$res = '';
|
|
foreach my $ip ( sort keys %$byIp ) {
|
|
$res .= "<li class=\"open\" id=\"uid$ip\"><span>$ip</span><ul>";
|
|
foreach my $session ( sort { $a->{startTime} <=> $b->{startTime} }
|
|
@{ $byIp->{$ip} } )
|
|
{
|
|
$res .=
|
|
"<li id=\"uid$session->{id}\"><span onclick=\"displaySession('$session->{id}');\">"
|
|
. $self->_stToStr( $session->{startTime} )
|
|
. "</span></li>";
|
|
}
|
|
$res .= "</ul></li>";
|
|
}
|
|
return $res;
|
|
}
|
|
|
|
# Ajax request to list users starting by a letter
|
|
## @method protected string letter()
|
|
# Build letter XML part
|
|
# @return string XML tree
|
|
sub letter {
|
|
my $self = shift;
|
|
my $letter = $self->param('letter');
|
|
my ( $byUid, $res );
|
|
|
|
my $moduleOptions = $tsv->{sessionStorageOptions} || {};
|
|
$moduleOptions->{backend} = $tsv->{sessionStorageModule};
|
|
my $module = "Lemonldap::NG::Common::Apache::Session";
|
|
$res = $module->searchOnExpr(
|
|
$moduleOptions, $tsv->{whatToTrace},
|
|
"${letter}*", '_httpSessionType',
|
|
$tsv->{whatToTrace}
|
|
);
|
|
while ( my ( $id, $entry ) = each %$res ) {
|
|
next if ( $entry->{_httpSessionType} );
|
|
$byUid->{ $entry->{ $tsv->{whatToTrace} } }++;
|
|
}
|
|
$res = '';
|
|
foreach my $uid ( sort keys %$byUid ) {
|
|
$res .= $self->ajaxNode(
|
|
$uid,
|
|
$uid
|
|
. (
|
|
$byUid->{$uid} > 1
|
|
? " <i><u><small>($byUid->{$uid} "
|
|
. (
|
|
$byUid->{$uid} == 1
|
|
? $self->translate('session')
|
|
: $self->translate('sessions')
|
|
)
|
|
. ")</small></u></i>"
|
|
: ''
|
|
),
|
|
"uid=$uid"
|
|
);
|
|
}
|
|
return $res;
|
|
}
|
|
|
|
## @method protected string p()
|
|
# Build IP classes sub tree (call _ipclasses())
|
|
# @return string XML tree
|
|
sub p {
|
|
my $self = shift;
|
|
my @t = $self->_ipclasses(@_);
|
|
return $t[0];
|
|
}
|
|
|
|
## @method private string _ipclasses()
|
|
# Build IP classes (sub) tree
|
|
# @return string XML tree
|
|
sub _ipclasses {
|
|
my ( $self, $p ) = splice @_;
|
|
my $partial = $p ? "$p." : '';
|
|
my $repartial = quotemeta($partial);
|
|
my ( $byIp, $count, $res );
|
|
|
|
my $moduleOptions = $tsv->{sessionStorageOptions} || {};
|
|
$moduleOptions->{backend} = $tsv->{sessionStorageModule};
|
|
my $module = "Lemonldap::NG::Common::Apache::Session";
|
|
$res = $module->searchOnExpr(
|
|
$moduleOptions, $self->{ipField},
|
|
"${partial}*", '_httpSessionType',
|
|
$self->{ipField}
|
|
);
|
|
|
|
while ( my ( $id, $entry ) = each %$res ) {
|
|
next if ( $entry->{_httpSessionType} );
|
|
$entry->{ $self->{ipField} } =~ /^$repartial(\d+)/ or next;
|
|
$byIp->{$1}++;
|
|
$count++;
|
|
}
|
|
$res = '';
|
|
foreach my $ip ( sort { $a <=> $b } keys %$byIp ) {
|
|
$res .= $self->ajaxNode(
|
|
"$partial$ip",
|
|
"$partial$ip <i><small>($byIp->{$ip} "
|
|
. (
|
|
$byIp->{$ip} == 1 ? $self->translate('session')
|
|
: $self->translate('sessions')
|
|
)
|
|
. ")</small></i>",
|
|
(
|
|
$partial !~ /^\d+\.\d+\.\d+/ ? "ipclasses=1&p=$partial$ip"
|
|
: "uidByIp=$partial$ip"
|
|
)
|
|
);
|
|
}
|
|
return (
|
|
$res,
|
|
"$count "
|
|
. (
|
|
$count == 1
|
|
? $self->translate('session')
|
|
: $self->translate('sessions')
|
|
)
|
|
);
|
|
|
|
#return $res;
|
|
}
|
|
|
|
## @fn protected string htmlquote(string s)
|
|
# Change <, > and & to HTML encoded values in the string
|
|
# @param $s HTML string
|
|
# @return HTML string
|
|
sub htmlquote {
|
|
my $s = shift;
|
|
$s =~ s/&/&/g;
|
|
$s =~ s/</</g;
|
|
$s =~ s/>/>/g;
|
|
return $s;
|
|
}
|
|
|
|
## @method private void ajaxnode(string id, string text, string param)
|
|
# Display tree node with Ajax functions inside for opening the node.
|
|
# @param $id HTML id of the element.
|
|
# @param $text text to display
|
|
# @param $param Parameters for the Ajax query
|
|
sub ajaxNode {
|
|
my ( $self, $id, $text, $param ) = @_;
|
|
return
|
|
"<li id=\"$id\"><span>$text</span>\n<ul class=\"ajax\"><li id=\"sub_$id\">{url:$ENV{SCRIPT_NAME}?$param}</li></ul></li>\n";
|
|
}
|
|
|
|
## @method private string _stToStr(string)
|
|
# Transform a utime string into readeable string (ex: "2010-08-18 13:03:13")
|
|
# @return Formated string
|
|
sub _stToStr {
|
|
shift;
|
|
return
|
|
sprintf( '%d-%02d-%02d %d:%02d:%02d', unpack( 'a4a2a2a2a2a2', shift ) );
|
|
}
|
|
|
|
## @method private string displayError(string error)
|
|
# Display HTML error
|
|
# @param error Error message
|
|
# @return HTML data
|
|
sub displayError {
|
|
my ( $self, $error ) = @_;
|
|
my $html;
|
|
$html .= '<div class="panel-body">';
|
|
$html .= '<div class="alert alert-danger">';
|
|
$html .= $error;
|
|
$html .= '</div>';
|
|
$html .= '</div>';
|
|
return $html;
|
|
}
|
|
|
|
## @method private string displayMessage(string message)
|
|
# Display HTML message
|
|
# @param message Message
|
|
# @return HTML data
|
|
sub displayMessage {
|
|
my ( $self, $message ) = @_;
|
|
my $html;
|
|
$html .= '<div class="panel-body">';
|
|
$html .= '<div class="alert alert-info">';
|
|
$html .= $message;
|
|
$html .= '</div>';
|
|
$html .= '</div>';
|
|
return $html;
|
|
}
|
|
|
|
1;
|
|
__END__
|
|
|
|
=encoding utf8
|
|
|
|
=head1 NAME
|
|
|
|
Lemonldap::NG::Manager::Sessions - Perl extension to manage Lemonldap::NG
|
|
sessions
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
#!/usr/bin/perl
|
|
|
|
use strict;
|
|
use Lemonldap::NG::Manager::Sessions;
|
|
our $cgi ||= Lemonldap::NG::Manager::Sessions->new({
|
|
localStorage => "Cache::FileCache",
|
|
localStorageOptions => {
|
|
'namespace' => 'lemonldap-ng-config',
|
|
'default_expires_in' => 600,
|
|
'directory_umask' => '007',
|
|
'cache_root' => '/tmp',
|
|
'cache_depth' => 5,
|
|
},
|
|
configStorage => $Lemonldap::NG::Common::configStorage,
|
|
configStorage=>{
|
|
type=>'File',
|
|
dirName=>"/tmp/",
|
|
},
|
|
https => 1,
|
|
jqueryUri => '/js/jquery/jquery.js',
|
|
imagePath => '/js/jquery.simple.tree/',
|
|
# Optionnal
|
|
protection => 'rule: $uid eq "admin"',
|
|
# Or to use rules from manager
|
|
protection => 'manager',
|
|
# Or just to authenticate without managing authorization
|
|
protection => 'authenticate',
|
|
});
|
|
$cgi->process();
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
Lemonldap::NG::Manager::Sessions provides a web interface to manage
|
|
Lemonldap::NG sessions.
|
|
|
|
It inherits from L<Lemonldap::NG::Handler::CGI>, so see this manpage to
|
|
understand how arguments passed to the constructor.
|
|
|
|
=head1 SEE ALSO
|
|
|
|
L<Lemonldap::NG::Handler::CGI>, L<Lemonldap::NG::Manager>
|
|
|
|
=head1 AUTHOR
|
|
|
|
=over
|
|
|
|
=item Clement Oudot, E<lt>clem.oudot@gmail.comE<gt>
|
|
|
|
=item François-Xavier Deltombe, E<lt>fxdeltombe@gmail.com.E<gt>
|
|
|
|
=item Xavier Guimard, E<lt>x.guimard@free.frE<gt>
|
|
|
|
=item Thomas Chemineau, E<lt>thomas.chemineau@gmail.comE<gt>
|
|
|
|
=back
|
|
|
|
=head1 BUG REPORT
|
|
|
|
Use OW2 system to report bug or ask for features:
|
|
L<http://jira.ow2.org>
|
|
|
|
=head1 DOWNLOAD
|
|
|
|
Lemonldap::NG is available at
|
|
L<http://forge.objectweb.org/project/showfiles.php?group_id=274>
|
|
|
|
=head1 COPYRIGHT AND LICENSE
|
|
|
|
=over
|
|
|
|
=item Copyright (C) 2008, 2009, 2010, 2013 by Xavier Guimard, E<lt>x.guimard@free.frE<gt>
|
|
|
|
=item Copyright (C) 2012 by François-Xavier Deltombe, E<lt>fxdeltombe@gmail.com.E<gt>
|
|
|
|
=item Copyright (C) 2009, 2010, 2011, 2012 by Clement Oudot, E<lt>clem.oudot@gmail.comE<gt>
|
|
|
|
=item Copyright (C) 2010, 2011 by Thomas Chemineau, E<lt>thomas.chemineau@gmail.comE<gt>
|
|
|
|
=back
|
|
|
|
This library is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2, or (at your option)
|
|
any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see L<http://www.gnu.org/licenses/>.
|
|
|
|
=cut
|