Subversion Repositories ALCASAR

Rev

Rev 2934 | Rev 2990 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
838 richard 1
<?php
2688 lucas.echa 2
/* written by steweb57 & Rexy */
838 richard 3
# Choice of language
4
$Language = 'en';
5
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
6
	$Langue		= explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
7
	$Language	= strtolower(substr(chop($Langue[0]),0,2)); }
2853 rexy 8
if($Language == 'fr') {
838 richard 9
	$l_services_title	= "Configuration des services";
1157 stephane 10
	$l_main_services	= "Services principaux";
1476 richard 11
	$l_filter_services	= "Services de filtrage";
1157 stephane 12
	$l_opt_services		= "Services optionnels";
2926 rexy 13
	$l_service_title 	= "Rôle du service";
2134 richard 14
	$l_service_start 	= "Démarrer";
15
	$l_service_stop 	= "Arréter";
16
	$l_service_restart 	= "Redémarrer";
838 richard 17
	$l_service_status 	= "Status";
1006 richard 18
	$l_service_status_img_ok= "Démarré";
19
	$l_service_status_img_ko= "Arrété";
838 richard 20
	$l_service_action 	= "Actions";
21
	$l_radiusd		= "Serveur d'authentification et d'autorisation";
2531 rexy 22
	$l_chilli		= "Passerelle d'interception et serveur DHCP";
2521 armand.ito 23
	$l_e2guardian		= "Filtre d'URL et de contenu WEB";
1476 richard 24
	$l_mysqld		= "Serveur de la base des usagers";
2488 lucas.echa 25
	$l_lighttpd		= "Serveur WEB (Alcasar Control Center)";
1476 richard 26
	$l_sshd			= "Accès sécurisée distant";
2776 rexy 27
	$l_clamav_freshclam	= "Mise à jour de l'antivirus (toutes les 4 heures)";
2840 rexy 28
	$l_clamav_daemon	= "Antimalware";
838 richard 29
	$l_ntpd			= "Service de mise à l'heure réseau";
2531 rexy 30
	$l_fail2ban		= "Détecteur d'intrusion";
2775 rexy 31
	$l_nfcapd 		= "Collecteur de flux NetFlow";
2531 rexy 32
	$l_vnstat		= "Grapheur de flux réseau";
2688 lucas.echa 33
	$l_unbound		= "Serveur DNS principal";
34
	$l_unbound_blacklist	= "Serveur DNS pour la Blacklist";
35
	$l_unbound_whitelist	= "Serveur DNS pour la Whitelist";
36
	$l_dnsmasq_whitelist	= "Serveur DNS pour la Whitelist (IPSET)";
37
	$l_unbound_blackhole	= "Serveur DNS 'trou noir'";
1484 richard 38
	$l_ulogd_ssh		= "journalisation des accès par SSH";
1476 richard 39
	$l_ulogd_ext_access	= "journalisation des tentatives d'accès externes";
40
	$l_ulogd_traceability	= "journalisation des connexions WEB filtrés";
2926 rexy 41
	$l_wifi4eu_id	= "Entrez votre identifiant réseau";
1574 richard 42
	$l_execute		= "Exécuter";
2926 rexy 43
	$l_stop_restart		= "Arrêt et redémarrage du système";
1574 richard 44
	$l_halt			= "Arréter le système";
45
	$l_reboot		= "Relancer le système";
2853 rexy 46
} else if($Language == 'es') {
47
	$l_services_title	= "Configuración de Servicios";
48
	$l_main_services	= "Servicios Principales";
49
	$l_filter_services	= "Servicios de Filtrado";
50
	$l_opt_services		= "Servicios Opcionales";
2926 rexy 51
	$l_service_title 	= "función del servicio";
2853 rexy 52
	$l_service_start 	= "Iniciar";
53
	$l_service_stop 	= "Detener";
54
	$l_service_restart 	= "Reiniciar";
55
	$l_service_status 	= "Estado";
56
	$l_service_status_img_ok= "Corriendo";
57
	$l_service_status_img_ko= "Detenido";
58
	$l_service_action 	= "Acciones";
59
	$l_radiusd		= "Servidor de autenticación y autorización.";
60
	$l_chilli		= "Pasarela de interceptación y servidor DHCP";
61
	$l_e2guardian		= "Filtro de contenidos URL y WEB";
62
	$l_mysqld		= "Motor de base de datos para usuarios";
63
	$l_lighttpd		= "Servidor WEB (ALCASAR Control Center)";
64
	$l_sshd			= "Servidor Seguro Acceso Remoto";
65
	$l_clamav_freshclam		= "Proceso de actualización Antivirus (cada 4 horas)";
66
	$l_clamav_daemon	= "Antimalware";
67
	$l_ntpd			= "Servidor de hora";
68
	$l_fail2ban		= "Sistema de Detección de Intrusos";
69
	$l_nfcapd		= "Colector de flujo NetFlow";
70
	$l_vnstat		= "Graficador de tráfico de red";
71
	$l_unbound		= "Servidor DNS principal ";
72
	$l_unbound_blacklist	= "Servidor DNS de Lista Negra";
73
	$l_unbound_whitelist	= "Servidor DNS de Lista Blanca";
74
	$l_dnsmasq_whitelist	= "Servidor DNS de Lista Blanca (IPSET)";
75
	$l_unbound_blackhole	= "Agujero negro DNS";
76
	$l_ulogd_ssh		= "Proceso de registro para accesos SSH";
77
	$l_ulogd_ext_access	= "Proceso de registro de intentos de accesos externos";
78
	$l_ulogd_traceability	= "Proceso de registro de acceso WEB";
2926 rexy 79
	$l_wifi4eu_id	= "Introduzca su identificador de red";
2853 rexy 80
	$l_execute		= "Ejecutar";
81
	$l_stop_restart		= "Apagado y Reinicio del sistema";
82
	$l_halt			= "Apagar el sistema";
83
	$l_reboot		= "Reiniciar el sistema";
838 richard 84
} else {
85
	$l_services_title	= "Services configuration";
1157 stephane 86
	$l_main_services	= "Main services";
1476 richard 87
	$l_filter_services	= "Filtering services";
1157 stephane 88
	$l_opt_services		= "Optional services";
2926 rexy 89
	$l_service_title 	= "Role of the service";
838 richard 90
	$l_service_start 	= "Start";
91
	$l_service_stop 	= "Stop";
92
	$l_service_restart 	= "Restart";
93
	$l_service_status 	= "Status";
1006 richard 94
	$l_service_status_img_ok= "Running";
95
	$l_service_status_img_ko= "Stopped";
838 richard 96
	$l_service_action 	= "Actions";
1572 richard 97
	$l_radiusd		= "Authentication and authorisation server";
2531 rexy 98
	$l_chilli		= "Interception gateway and DHCP server";
2521 armand.ito 99
	$l_e2guardian		= "URL and WEB content filter";
838 richard 100
	$l_mysqld		= "User database server";
2488 lucas.echa 101
	$l_lighttpd		= "WEB server (ALCASAR Control Center)";
838 richard 102
	$l_sshd			= "Secure remote access";
2776 rexy 103
	$l_clamav_freshclam	= "Antivirus update process (every 4 hours)";
2840 rexy 104
	$l_clamav_daemon= "Antimalware";
1572 richard 105
	$l_ntpd			= "Network time server";
2531 rexy 106
	$l_fail2ban		= "Intrusion Dectection System";
2775 rexy 107
	$l_nfcapd		= "Netflow collector";
2531 rexy 108
	$l_vnstat		= "Network grapher";
2688 lucas.echa 109
	$l_unbound		= "Main DNS server";
110
	$l_unbound_blacklist	= "Blacklist DNS server";
111
	$l_unbound_whitelist	= "Whitelist DNS server";
112
	$l_dnsmasq_whitelist	= "Whitelist DNS server (IPSET)";
113
	$l_unbound_blackhole	= "Blackhole DNS server";
1476 richard 114
	$l_ulogd_ssh		= "SSH access logging process";
1572 richard 115
	$l_ulogd_ext_access	= "Extern access attempts logging process";
1476 richard 116
	$l_ulogd_traceability	= "Filtering WEB access logging process";
2926 rexy 117
	$l_wifi4eu_id	= "Enter your network identifier";
1574 richard 118
	$l_execute		= "Execute";
119
	$l_stop_restart		= "Halt and restart the system";
120
	$l_halt			= "Halt le system";
121
	$l_reboot		= "Restart the system";
838 richard 122
}
123
 
124
/****************************************************************
2531 rexy 125
*	                   CONST				*
838 richard 126
*****************************************************************/
127
define ("CONF_FILE", "/usr/local/etc/alcasar.conf");
128
 
129
/********************************************************
2531 rexy 130
*			CONF FILE test 			*
838 richard 131
*********************************************************/
132
if (!file_exists(CONF_FILE)){
133
	exit("Fichier de configuration ".CONF_FILE." non présent");
134
}
135
if (!is_readable(CONF_FILE)){
136
	exit("Vous n'avez pas les droits de lecture sur le fichier ".CONF_FILE);
137
}
2926 rexy 138
$file_conf = fopen(CONF_FILE, 'r');
139
if (!$file_conf) {
140
	exit('Error opening the file '.CONF_FILE);
141
}
142
while (!feof($file_conf)) {
143
	$buffer = fgets($file_conf, 4096);
144
	if ((strpos($buffer, '=') !== false) && (substr($buffer, 0, 1) !== '#')) {
145
		$tmp = explode('=', $buffer, 2);
146
		$conf[trim($tmp[0])] = trim($tmp[1]);
147
	}
148
}
149
fclose($file_conf);
150
$wifi4eu = $conf['WIFI4EU'];
151
$wifi4eu_code = $conf['WIFI4EU_CODE'];
2531 rexy 152
// Doing an action on a service (start,stop or restart)
838 richard 153
function serviceExec($service, $action){
154
	if (($action == "start")||($action == "stop")||($action == "restart")){
2934 rexy 155
		exec("sudo /usr/bin/systemctl $action ".escapeshellarg($service), $retval, $retstatus);
2926 rexy 156
		if ($service == "sshd"){ 
2688 lucas.echa 157
			if ($action == "start"){
2931 rexy 158
				//exec("sudo /usr/bin/systemctl enable ".escapeshellarg($service));
159
				file_put_contents(CONF_FILE, str_replace('SSH=off', 'SSH=on', file_get_contents(CONF_FILE))); // in order to keep that conf for SSH at next reboot
2299 tom.houday 160
				exec("sudo /usr/local/bin/alcasar-iptables.sh");
838 richard 161
				}
162
			if ($action == "stop"){
2931 rexy 163
				//exec("sudo /usr/bin/systemctl disable ".escapeshellarg($service));
838 richard 164
				file_put_contents(CONF_FILE, str_replace('SSH=on', 'SSH=off', file_get_contents(CONF_FILE)));
2299 tom.houday 165
				exec("sudo /usr/local/bin/alcasar-iptables.sh");
838 richard 166
				}
167
			}
168
		return $retstatus;
169
	} else {
170
		return false;
171
	}
172
}
2531 rexy 173
 
174
// Testing if a service is active
1006 richard 175
function checkServiceStatus($service){
838 richard 176
	$response = false;
2299 tom.houday 177
	exec("sudo /usr/bin/systemctl is-active ".escapeshellarg("$service.service"), $retval);
838 richard 178
	foreach( $retval as $val ) {
1006 richard 179
		if ($val == "active"){
838 richard 180
			$response = true;
181
			break;
182
		}
183
	}
184
	return $response;
185
}
186
 
187
//-------------------------------
2926 rexy 188
// WIFI4EU
189
//-------------------------------
190
if (isset($_POST['wifi4eu'])){
2934 rexy 191
	switch ($_POST['wifi4eu']){
192
		case 'on' :
2935 rexy 193
			$network_code = trim($_POST['wifi4eu_id']);
194
		        if ($network_code == '') {
195
				$network_code = '123e4567-e89b-12d3-a456-426655440000'; // WIFI4EU test code
196
			}
197
			file_put_contents(CONF_FILE, preg_replace('/WIFI4EU_CODE=.*/', 'WIFI4EU_CODE='.$network_code, file_get_contents(CONF_FILE)));
2934 rexy 198
			exec("sudo /usr/local/bin/alcasar-wifi4eu.sh -on");
199
		break;
200
		case 'off' :
201
			exec("sudo /usr/local/bin/alcasar-wifi4eu.sh -off");
202
		break;
203
	}
204
	header('Location: '.$_SERVER['PHP_SELF']);
2926 rexy 205
}
2934 rexy 206
 
2926 rexy 207
//-------------------------------
2934 rexy 208
// Stop/restart system
1574 richard 209
//-------------------------------
2934 rexy 210
if (isset($_POST['system'])){
211
	switch ($_POST['system']){
1574 richard 212
		case 'reboot' :
1827 raphael.pi 213
			exec ("sudo /usr/local/bin/alcasar-logout.sh all");
1599 richard 214
			exec ("sudo /usr/sbin/shutdown -r now");
1574 richard 215
		break;
216
		case 'halt' :
1827 raphael.pi 217
			exec ("sudo /usr/local/bin/alcasar-logout.sh all");
1599 richard 218
			exec ("sudo /usr/sbin/shutdown -h now");
1574 richard 219
		break;
220
	}
221
}
222
 
223
//-------------------------------
2934 rexy 224
// Actions on services
225
//-------------------------------
226
$autorizeService = array("radiusd","chilli","mysqld","lighttpd","unbound-forward","ulogd-ssh","ulogd-ext-access","ulogd-traceability","unbound-blacklist","unbound-whitelist","dnsmasq-whitelist","unbound-blackhole","e2guardian","clamav-daemon","clamav-freshclam","sshd","ntpd","fail2ban","nfcapd","vnstat");
227
$autorizeAction = array("start","stop","restart");
228
 
229
if (isset($_GET['service'])&&(in_array($_GET['service'], $autorizeService))) {
230
    if (isset($_GET['action'])&&(in_array($_GET['action'], $autorizeAction))) {
231
    	$execStatus = serviceExec($_GET['service'], $_GET['action']);
232
		// execStatus non exploité
233
	}
234
}
235
 
236
//-------------------------------
2531 rexy 237
// Check services status
838 richard 238
//-------------------------------
239
$MainServiceStatus = array();
2531 rexy 240
$MainServiceStatus['chilli'] = checkServiceStatus("chilli");
1006 richard 241
$MainServiceStatus['radiusd'] = checkServiceStatus("radiusd");
242
$MainServiceStatus['mysqld'] = checkServiceStatus("mysqld");
2488 lucas.echa 243
$MainServiceStatus['lighttpd'] = checkServiceStatus("lighttpd");
2724 rexy 244
$MainServiceStatus['unbound'] = checkServiceStatus("unbound");
2775 rexy 245
$MainServiceStatus['nfcapd'] = checkServiceStatus("nfcapd");
2531 rexy 246
$MainServiceStatus['ulogd_ssh'] = checkServiceStatus("ulogd-ssh");
247
$MainServiceStatus['ulogd_ext_access'] = checkServiceStatus("ulogd-ext-access");
248
$MainServiceStatus['ulogd_traceability'] = checkServiceStatus("ulogd-traceability");
2926 rexy 249
$MainServiceStatus['sshd'] = checkServiceStatus("sshd");
250
$MainServiceStatus['ntpd'] = checkServiceStatus("ntpd");
251
$MainServiceStatus['fail2ban'] = checkServiceStatus("fail2ban");
252
$MainServiceStatus['vnstat'] = checkServiceStatus("vnstat");
838 richard 253
 
1476 richard 254
$FilterServiceStatus = array();
2688 lucas.echa 255
$FilterServiceStatus['unbound_blacklist'] = checkServiceStatus("unbound-blacklist");
256
$FilterServiceStatus['unbound_whitelist'] = checkServiceStatus("unbound-whitelist");
2531 rexy 257
$FilterServiceStatus['dnsmasq_whitelist'] = checkServiceStatus("dnsmasq-whitelist");
2688 lucas.echa 258
$FilterServiceStatus['unbound_blackhole'] = checkServiceStatus("unbound-blackhole");
2531 rexy 259
$FilterServiceStatus['e2guardian'] = checkServiceStatus("e2guardian");
2840 rexy 260
$FilterServiceStatus['clamav_daemon'] = checkServiceStatus("clamav-daemon");
2776 rexy 261
$FilterServiceStatus['clamav_freshclam'] = checkServiceStatus("clamav-freshclam");
1476 richard 262
 
838 richard 263
/****************
264
*	MAIN	*
265
*****************/
266
 
2926 rexy 267
?><!DOCTYPE HTML>
268
<html>
838 richard 269
<head>
2926 rexy 270
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
271
	<title><?php echo $l_services_title; ?></title>
272
	<link rel="stylesheet" href="/css/acc.css" type="text/css">
838 richard 273
</head>
274
<body>
2926 rexy 275
<div class="panel">
276
	<div class="panel-header"><?= $l_main_services ?></div>
277
	<div class="panel-row">
278
	<table width="100%" border=0 cellspacing=0 cellpadding=0>
279
		<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
280
		<?php foreach( $MainServiceStatus as $serviceName => $statusOK ) { ?>
281
		<tr>
282
		<?php if ($statusOK) { ?>
283
			<td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
284
			<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
285
			<td width="80" align="center">---</td>
286
			<td width="80" align="center"><?php if (($serviceName != "chilli") && ($serviceName != "lighttpd")) { echo "<a href=\"".$_SERVER['PHP_SELF']."?action=stop&service=".str_replace('_','-',$serviceName)."\"> $l_service_stop</a>"; } else echo "---";?></td>
287
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=".str_replace('_','-',$serviceName)."\"> $l_service_restart";?></a></td>
288
		<?php } else { ?>
289
			<td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
290
			<td align="center"><?php $comment="l_$serviceName"; echo "$serviceName</td><td>${$comment}" ;?> </td>
291
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=".str_replace('_','-',$serviceName)."\"> $l_service_start";?></a></td>
292
			<td width="80" align="center">---</td>
293
			<td width="80" align="center">---</td>
294
		<?php } ?>
295
		</tr>
296
		<?php } ?>
297
	</table>
298
	</div>
299
</div>
300
<div class="panel">
301
	<div class="panel-header"><?= $l_filter_services ?></div>
302
	<div class="panel-row">
303
	<table width="100%" border=0 cellspacing=0 cellpadding=0>
304
		<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
305
		<!--	<TR align="center"> -->
306
		<?php foreach( $FilterServiceStatus as $serviceName => $statusOK ) { ?>
307
		<tr>
308
		<?php if ($statusOK) { ?>
309
			<td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
310
			<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
311
			<td width="80" align="center">---</td>
312
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=stop&service=".str_replace('_','-',$serviceName)."\"> $l_service_stop";?></a></td>
313
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=".str_replace('_','-',$serviceName)."\"> $l_service_restart";?></a></td>
314
			<?php } else { ?>
315
			<td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
316
			<td align="center"><?php $comment="l_$serviceName"; echo "$serviceName</td><td>${$comment}" ;?> </td>
317
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=".str_replace('_','-',$serviceName)."\"> $l_service_start";?></a></td>
318
			<td width="80" align="center">---</td>
319
			<td width="80" align="center">---</td>
320
			<?php } ?>
321
		</tr>
322
		<?php } ?>
323
	</table>
324
	</div>
325
</div>
326
<div class="panel">
327
	<div class="panel-header"><?= $l_opt_services ?></div>
328
	<div class="panel-row">
329
	<form action="<?php echo $_SERVER['PHP_SELF']?>" method=POST>
330
	<table width="100%" border=0 cellspacing=0 cellpadding=0>
331
		<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"> </td><td colspan="3"><?php echo $l_service_action;?></td></tr>
332
		<tr>
333
			<?php if ($wifi4eu == "on") { ?>
334
			<td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
335
			<td align="center"><b>WIFI4EU</b></td><td><?php echo "network ID : $wifi4eu_code"; ?></td>
336
			<td width="80" align="center">---</td>
2934 rexy 337
			<td width="80" align="center"><input type=submit value="<?echo $l_service_stop;?>"><input type=hidden name="wifi4eu" value="off"></td>
2926 rexy 338
			<td width="80" align="center">---</td>
339
			<?php } else { ?>
340
			<td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko; ?>"></td>
2935 rexy 341
			<td align="center">WIFI4EU</td><td><?php echo $l_wifi4eu_id; ?> : <input type ="text" name="wifi4eu_id" value="<?php echo $wifi4eu_code; ?>" size="40"></td>
2934 rexy 342
			<td width="80" align="center"><input type=submit value="<?echo $l_service_start;?>"><input type=hidden name="wifi4eu" value="on"></td>
2926 rexy 343
			<td width="80" align="center">---</td>
344
			<td width="80" align="center">---</td>
345
			<?php } ?>
346
		</tr>
347
	</table>
348
	</form>
349
	</div>
350
</div>
351
<div class="panel">
352
	<div class="panel-header"><?= $l_stop_restart ?></div>
353
	<div class="panel-row">
354
	<table width="100%" border=0 cellspacing=0 cellpadding=1>
355
		<tr><td valign="middle" align="left">
356
			<form action="<?php echo $_SERVER['PHP_SELF']?>" method=POST>
2934 rexy 357
			<select name='system'>
2926 rexy 358
				<option selected value="reboot"><?echo "$l_reboot";?>
359
				<option value="halt"><?echo "$l_halt";?>
360
			</select>
361
			<input type=submit value="<?echo "$l_execute";?>">
362
			</form>
363
		</td></tr>
364
	</table>
365
	</div>
366
</div>
838 richard 367
</body>
368
</html>