Subversion Repositories ALCASAR

Rev

Rev 3028 | Rev 3070 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
838 richard 1
<?php
2688 lucas.echa 2
/* written by steweb57 & Rexy */
2990 rexy 3
 
838 richard 4
# Choice of language
5
$Language = 'en';
6
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
7
	$Langue		= explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
8
	$Language	= strtolower(substr(chop($Langue[0]),0,2)); }
2853 rexy 9
if($Language == 'fr') {
838 richard 10
	$l_services_title	= "Configuration des services";
1157 stephane 11
	$l_main_services	= "Services principaux";
1476 richard 12
	$l_filter_services	= "Services de filtrage";
1157 stephane 13
	$l_opt_services		= "Services optionnels";
2926 rexy 14
	$l_service_title 	= "Rôle du service";
2134 richard 15
	$l_service_start 	= "Démarrer";
16
	$l_service_stop 	= "Arréter";
17
	$l_service_restart 	= "Redémarrer";
838 richard 18
	$l_service_status 	= "Status";
1006 richard 19
	$l_service_status_img_ok= "Démarré";
20
	$l_service_status_img_ko= "Arrété";
838 richard 21
	$l_service_action 	= "Actions";
22
	$l_radiusd		= "Serveur d'authentification et d'autorisation";
2531 rexy 23
	$l_chilli		= "Passerelle d'interception et serveur DHCP";
2521 armand.ito 24
	$l_e2guardian		= "Filtre d'URL et de contenu WEB";
1476 richard 25
	$l_mysqld		= "Serveur de la base des usagers";
2488 lucas.echa 26
	$l_lighttpd		= "Serveur WEB (Alcasar Control Center)";
1476 richard 27
	$l_sshd			= "Accès sécurisée distant";
2776 rexy 28
	$l_clamav_freshclam	= "Mise à jour de l'antivirus (toutes les 4 heures)";
2840 rexy 29
	$l_clamav_daemon	= "Antimalware";
838 richard 30
	$l_ntpd			= "Service de mise à l'heure réseau";
2990 rexy 31
	$l_postfix		= "Service de messagerie";
2531 rexy 32
	$l_fail2ban		= "Détecteur d'intrusion";
2775 rexy 33
	$l_nfcapd 		= "Collecteur de flux NetFlow";
2531 rexy 34
	$l_vnstat		= "Grapheur de flux réseau";
2688 lucas.echa 35
	$l_unbound		= "Serveur DNS principal";
36
	$l_unbound_blacklist	= "Serveur DNS pour la Blacklist";
37
	$l_unbound_whitelist	= "Serveur DNS pour la Whitelist";
38
	$l_dnsmasq_whitelist	= "Serveur DNS pour la Whitelist (IPSET)";
39
	$l_unbound_blackhole	= "Serveur DNS 'trou noir'";
1484 richard 40
	$l_ulogd_ssh		= "journalisation des accès par SSH";
1476 richard 41
	$l_ulogd_ext_access	= "journalisation des tentatives d'accès externes";
42
	$l_ulogd_traceability	= "journalisation des connexions WEB filtrés";
2926 rexy 43
	$l_wifi4eu_id	= "Entrez votre identifiant réseau";
1574 richard 44
	$l_execute		= "Exécuter";
2926 rexy 45
	$l_stop_restart		= "Arrêt et redémarrage du système";
1574 richard 46
	$l_halt			= "Arréter le système";
47
	$l_reboot		= "Relancer le système";
2853 rexy 48
} else if($Language == 'es') {
49
	$l_services_title	= "Configuración de Servicios";
50
	$l_main_services	= "Servicios Principales";
51
	$l_filter_services	= "Servicios de Filtrado";
52
	$l_opt_services		= "Servicios Opcionales";
2926 rexy 53
	$l_service_title 	= "función del servicio";
2853 rexy 54
	$l_service_start 	= "Iniciar";
55
	$l_service_stop 	= "Detener";
56
	$l_service_restart 	= "Reiniciar";
57
	$l_service_status 	= "Estado";
58
	$l_service_status_img_ok= "Corriendo";
59
	$l_service_status_img_ko= "Detenido";
60
	$l_service_action 	= "Acciones";
61
	$l_radiusd		= "Servidor de autenticación y autorización.";
62
	$l_chilli		= "Pasarela de interceptación y servidor DHCP";
63
	$l_e2guardian		= "Filtro de contenidos URL y WEB";
64
	$l_mysqld		= "Motor de base de datos para usuarios";
65
	$l_lighttpd		= "Servidor WEB (ALCASAR Control Center)";
66
	$l_sshd			= "Servidor Seguro Acceso Remoto";
67
	$l_clamav_freshclam		= "Proceso de actualización Antivirus (cada 4 horas)";
68
	$l_clamav_daemon	= "Antimalware";
69
	$l_ntpd			= "Servidor de hora";
70
	$l_fail2ban		= "Sistema de Detección de Intrusos";
71
	$l_nfcapd		= "Colector de flujo NetFlow";
72
	$l_vnstat		= "Graficador de tráfico de red";
73
	$l_unbound		= "Servidor DNS principal ";
74
	$l_unbound_blacklist	= "Servidor DNS de Lista Negra";
75
	$l_unbound_whitelist	= "Servidor DNS de Lista Blanca";
76
	$l_dnsmasq_whitelist	= "Servidor DNS de Lista Blanca (IPSET)";
77
	$l_unbound_blackhole	= "Agujero negro DNS";
78
	$l_ulogd_ssh		= "Proceso de registro para accesos SSH";
79
	$l_ulogd_ext_access	= "Proceso de registro de intentos de accesos externos";
80
	$l_ulogd_traceability	= "Proceso de registro de acceso WEB";
2926 rexy 81
	$l_wifi4eu_id	= "Introduzca su identificador de red";
2853 rexy 82
	$l_execute		= "Ejecutar";
83
	$l_stop_restart		= "Apagado y Reinicio del sistema";
84
	$l_halt			= "Apagar el sistema";
85
	$l_reboot		= "Reiniciar el sistema";
838 richard 86
} else {
87
	$l_services_title	= "Services configuration";
1157 stephane 88
	$l_main_services	= "Main services";
1476 richard 89
	$l_filter_services	= "Filtering services";
1157 stephane 90
	$l_opt_services		= "Optional services";
2926 rexy 91
	$l_service_title 	= "Role of the service";
838 richard 92
	$l_service_start 	= "Start";
93
	$l_service_stop 	= "Stop";
94
	$l_service_restart 	= "Restart";
95
	$l_service_status 	= "Status";
1006 richard 96
	$l_service_status_img_ok= "Running";
97
	$l_service_status_img_ko= "Stopped";
838 richard 98
	$l_service_action 	= "Actions";
1572 richard 99
	$l_radiusd		= "Authentication and authorisation server";
2531 rexy 100
	$l_chilli		= "Interception gateway and DHCP server";
2521 armand.ito 101
	$l_e2guardian		= "URL and WEB content filter";
838 richard 102
	$l_mysqld		= "User database server";
2488 lucas.echa 103
	$l_lighttpd		= "WEB server (ALCASAR Control Center)";
838 richard 104
	$l_sshd			= "Secure remote access";
2776 rexy 105
	$l_clamav_freshclam	= "Antivirus update process (every 4 hours)";
2840 rexy 106
	$l_clamav_daemon= "Antimalware";
1572 richard 107
	$l_ntpd			= "Network time server";
2531 rexy 108
	$l_fail2ban		= "Intrusion Dectection System";
2775 rexy 109
	$l_nfcapd		= "Netflow collector";
2531 rexy 110
	$l_vnstat		= "Network grapher";
2688 lucas.echa 111
	$l_unbound		= "Main DNS server";
112
	$l_unbound_blacklist	= "Blacklist DNS server";
113
	$l_unbound_whitelist	= "Whitelist DNS server";
114
	$l_dnsmasq_whitelist	= "Whitelist DNS server (IPSET)";
115
	$l_unbound_blackhole	= "Blackhole DNS server";
1476 richard 116
	$l_ulogd_ssh		= "SSH access logging process";
1572 richard 117
	$l_ulogd_ext_access	= "Extern access attempts logging process";
1476 richard 118
	$l_ulogd_traceability	= "Filtering WEB access logging process";
2926 rexy 119
	$l_wifi4eu_id	= "Enter your network identifier";
1574 richard 120
	$l_execute		= "Execute";
121
	$l_stop_restart		= "Halt and restart the system";
122
	$l_halt			= "Halt le system";
123
	$l_reboot		= "Restart the system";
838 richard 124
}
125
 
126
/****************************************************************
2531 rexy 127
*	                   CONST				*
838 richard 128
*****************************************************************/
129
define ("CONF_FILE", "/usr/local/etc/alcasar.conf");
130
 
131
/********************************************************
2531 rexy 132
*			CONF FILE test 			*
838 richard 133
*********************************************************/
134
if (!file_exists(CONF_FILE)){
135
	exit("Fichier de configuration ".CONF_FILE." non présent");
136
}
137
if (!is_readable(CONF_FILE)){
138
	exit("Vous n'avez pas les droits de lecture sur le fichier ".CONF_FILE);
139
}
2926 rexy 140
$file_conf = fopen(CONF_FILE, 'r');
141
if (!$file_conf) {
142
	exit('Error opening the file '.CONF_FILE);
143
}
144
while (!feof($file_conf)) {
145
	$buffer = fgets($file_conf, 4096);
146
	if ((strpos($buffer, '=') !== false) && (substr($buffer, 0, 1) !== '#')) {
147
		$tmp = explode('=', $buffer, 2);
148
		$conf[trim($tmp[0])] = trim($tmp[1]);
149
	}
150
}
151
fclose($file_conf);
152
$wifi4eu = $conf['WIFI4EU'];
153
$wifi4eu_code = $conf['WIFI4EU_CODE'];
2531 rexy 154
// Doing an action on a service (start,stop or restart)
838 richard 155
function serviceExec($service, $action){
156
	if (($action == "start")||($action == "stop")||($action == "restart")){
2934 rexy 157
		exec("sudo /usr/bin/systemctl $action ".escapeshellarg($service), $retval, $retstatus);
838 richard 158
		return $retstatus;
159
	} else {
160
		return false;
161
	}
162
}
2531 rexy 163
 
164
// Testing if a service is active
1006 richard 165
function checkServiceStatus($service){
838 richard 166
	$response = false;
2299 tom.houday 167
	exec("sudo /usr/bin/systemctl is-active ".escapeshellarg("$service.service"), $retval);
838 richard 168
	foreach( $retval as $val ) {
1006 richard 169
		if ($val == "active"){
838 richard 170
			$response = true;
171
			break;
172
		}
173
	}
174
	return $response;
175
}
176
 
177
//-------------------------------
2926 rexy 178
// WIFI4EU
179
//-------------------------------
180
if (isset($_POST['wifi4eu'])){
2934 rexy 181
	switch ($_POST['wifi4eu']){
182
		case 'on' :
2935 rexy 183
			$network_code = trim($_POST['wifi4eu_id']);
184
		        if ($network_code == '') {
185
				$network_code = '123e4567-e89b-12d3-a456-426655440000'; // WIFI4EU test code
186
			}
187
			file_put_contents(CONF_FILE, preg_replace('/WIFI4EU_CODE=.*/', 'WIFI4EU_CODE='.$network_code, file_get_contents(CONF_FILE)));
2934 rexy 188
			exec("sudo /usr/local/bin/alcasar-wifi4eu.sh -on");
189
		break;
190
		case 'off' :
191
			exec("sudo /usr/local/bin/alcasar-wifi4eu.sh -off");
192
		break;
193
	}
194
	header('Location: '.$_SERVER['PHP_SELF']);
2926 rexy 195
}
2934 rexy 196
 
2926 rexy 197
//-------------------------------
2934 rexy 198
// Stop/restart system
1574 richard 199
//-------------------------------
2934 rexy 200
if (isset($_POST['system'])){
201
	switch ($_POST['system']){
1574 richard 202
		case 'reboot' :
1827 raphael.pi 203
			exec ("sudo /usr/local/bin/alcasar-logout.sh all");
1599 richard 204
			exec ("sudo /usr/sbin/shutdown -r now");
1574 richard 205
		break;
206
		case 'halt' :
1827 raphael.pi 207
			exec ("sudo /usr/local/bin/alcasar-logout.sh all");
1599 richard 208
			exec ("sudo /usr/sbin/shutdown -h now");
1574 richard 209
		break;
210
	}
211
}
212
 
213
//-------------------------------
2934 rexy 214
// Actions on services
215
//-------------------------------
2990 rexy 216
$autorizeService = array("radiusd","chilli","mysqld","lighttpd","unbound-forward","ulogd-ssh","ulogd-ext-access","ulogd-traceability","unbound-blacklist","unbound-whitelist","dnsmasq-whitelist","unbound-blackhole","e2guardian","clamav-daemon","clamav-freshclam","sshd","ntpd","fail2ban","nfcapd","vnstat","postfix");
2934 rexy 217
$autorizeAction = array("start","stop","restart");
218
 
219
if (isset($_GET['service'])&&(in_array($_GET['service'], $autorizeService))) {
220
    if (isset($_GET['action'])&&(in_array($_GET['action'], $autorizeAction))) {
221
    	$execStatus = serviceExec($_GET['service'], $_GET['action']);
222
		// execStatus non exploité
223
	}
224
}
225
 
226
//-------------------------------
2531 rexy 227
// Check services status
838 richard 228
//-------------------------------
229
$MainServiceStatus = array();
2531 rexy 230
$MainServiceStatus['chilli'] = checkServiceStatus("chilli");
1006 richard 231
$MainServiceStatus['radiusd'] = checkServiceStatus("radiusd");
232
$MainServiceStatus['mysqld'] = checkServiceStatus("mysqld");
2488 lucas.echa 233
$MainServiceStatus['lighttpd'] = checkServiceStatus("lighttpd");
2724 rexy 234
$MainServiceStatus['unbound'] = checkServiceStatus("unbound");
2775 rexy 235
$MainServiceStatus['nfcapd'] = checkServiceStatus("nfcapd");
2531 rexy 236
$MainServiceStatus['ulogd_ssh'] = checkServiceStatus("ulogd-ssh");
237
$MainServiceStatus['ulogd_ext_access'] = checkServiceStatus("ulogd-ext-access");
238
$MainServiceStatus['ulogd_traceability'] = checkServiceStatus("ulogd-traceability");
2926 rexy 239
$MainServiceStatus['sshd'] = checkServiceStatus("sshd");
240
$MainServiceStatus['ntpd'] = checkServiceStatus("ntpd");
241
$MainServiceStatus['fail2ban'] = checkServiceStatus("fail2ban");
242
$MainServiceStatus['vnstat'] = checkServiceStatus("vnstat");
2990 rexy 243
$MainServiceStatus['postfix'] = checkServiceStatus("postfix");
838 richard 244
 
1476 richard 245
$FilterServiceStatus = array();
2688 lucas.echa 246
$FilterServiceStatus['unbound_blacklist'] = checkServiceStatus("unbound-blacklist");
247
$FilterServiceStatus['unbound_whitelist'] = checkServiceStatus("unbound-whitelist");
2531 rexy 248
$FilterServiceStatus['dnsmasq_whitelist'] = checkServiceStatus("dnsmasq-whitelist");
2688 lucas.echa 249
$FilterServiceStatus['unbound_blackhole'] = checkServiceStatus("unbound-blackhole");
2531 rexy 250
$FilterServiceStatus['e2guardian'] = checkServiceStatus("e2guardian");
2840 rexy 251
$FilterServiceStatus['clamav_daemon'] = checkServiceStatus("clamav-daemon");
2776 rexy 252
$FilterServiceStatus['clamav_freshclam'] = checkServiceStatus("clamav-freshclam");
1476 richard 253
 
838 richard 254
/****************
255
*	MAIN	*
256
*****************/
257
 
2926 rexy 258
?><!DOCTYPE HTML>
259
<html>
838 richard 260
<head>
2926 rexy 261
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
262
	<title><?php echo $l_services_title; ?></title>
263
	<link rel="stylesheet" href="/css/acc.css" type="text/css">
2990 rexy 264
	<script type="text/javascript" src="/js/jquery.min.js"></script>
838 richard 265
</head>
266
<body>
3028 rexy 267
<div id="ldoverlay" class="overlay">
268
	<div class="lds-spinner" id="spinner"><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div></div>
269
</div>
2926 rexy 270
<div class="panel">
271
	<div class="panel-header"><?= $l_main_services ?></div>
272
	<div class="panel-row">
273
	<table width="100%" border=0 cellspacing=0 cellpadding=0>
274
		<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
275
		<?php foreach( $MainServiceStatus as $serviceName => $statusOK ) { ?>
276
		<tr>
2991 rexy 277
		<?php if ($statusOK) { ?>
2926 rexy 278
			<td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
279
			<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
280
			<td width="80" align="center">---</td>
281
			<td width="80" align="center"><?php if (($serviceName != "chilli") && ($serviceName != "lighttpd")) { echo "<a href=\"".$_SERVER['PHP_SELF']."?action=stop&service=".str_replace('_','-',$serviceName)."\"> $l_service_stop</a>"; } else echo "---";?></td>
282
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=".str_replace('_','-',$serviceName)."\"> $l_service_restart";?></a></td>
283
		<?php } else { ?>
284
			<td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
285
			<td align="center"><?php $comment="l_$serviceName"; echo "$serviceName</td><td>${$comment}" ;?> </td>
286
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=".str_replace('_','-',$serviceName)."\"> $l_service_start";?></a></td>
287
			<td width="80" align="center">---</td>
288
			<td width="80" align="center">---</td>
289
		<?php } ?>
290
		</tr>
2991 rexy 291
		<?php } ?>
2926 rexy 292
	</table>
293
	</div>
294
</div>
295
<div class="panel">
296
	<div class="panel-header"><?= $l_filter_services ?></div>
297
	<div class="panel-row">
298
	<table width="100%" border=0 cellspacing=0 cellpadding=0>
299
		<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
300
		<!--	<TR align="center"> -->
301
		<?php foreach( $FilterServiceStatus as $serviceName => $statusOK ) { ?>
302
		<tr>
303
		<?php if ($statusOK) { ?>
304
			<td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
305
			<td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
306
			<td width="80" align="center">---</td>
307
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=stop&service=".str_replace('_','-',$serviceName)."\"> $l_service_stop";?></a></td>
308
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=".str_replace('_','-',$serviceName)."\"> $l_service_restart";?></a></td>
309
			<?php } else { ?>
310
			<td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
311
			<td align="center"><?php $comment="l_$serviceName"; echo "$serviceName</td><td>${$comment}" ;?> </td>
312
			<td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=".str_replace('_','-',$serviceName)."\"> $l_service_start";?></a></td>
313
			<td width="80" align="center">---</td>
314
			<td width="80" align="center">---</td>
315
			<?php } ?>
316
		</tr>
317
		<?php } ?>
318
	</table>
319
	</div>
320
</div>
321
<div class="panel">
322
	<div class="panel-header"><?= $l_opt_services ?></div>
323
	<div class="panel-row">
2991 rexy 324
	<form action="<?php echo $_SERVER['PHP_SELF']?>" method=POST>
2926 rexy 325
	<table width="100%" border=0 cellspacing=0 cellpadding=0>
326
		<tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"> </td><td colspan="3"><?php echo $l_service_action;?></td></tr>
327
		<tr>
328
			<?php if ($wifi4eu == "on") { ?>
329
			<td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
330
			<td align="center"><b>WIFI4EU</b></td><td><?php echo "network ID : $wifi4eu_code"; ?></td>
331
			<td width="80" align="center">---</td>
3028 rexy 332
			<td width="80" align="center"><input type="submit" onClick="document.getElementById('ldoverlay').style.display='block';" value="<?echo $l_service_stop;?>"><input type=hidden name="wifi4eu" value="off"></td>
2926 rexy 333
			<td width="80" align="center">---</td>
334
			<?php } else { ?>
335
			<td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko; ?>"></td>
2935 rexy 336
			<td align="center">WIFI4EU</td><td><?php echo $l_wifi4eu_id; ?> : <input type ="text" name="wifi4eu_id" value="<?php echo $wifi4eu_code; ?>" size="40"></td>
3028 rexy 337
			<td width="80" align="center"><input type="submit" onClick="document.getElementById('ldoverlay').style.display='block';" value="<?echo $l_service_start;?>"><input type=hidden name="wifi4eu" value="on"></td>
2926 rexy 338
			<td width="80" align="center">---</td>
339
			<td width="80" align="center">---</td>
340
			<?php } ?>
341
		</tr>
342
	</table>
2991 rexy 343
	</form>
2926 rexy 344
	</div>
345
</div>
346
<div class="panel">
347
	<div class="panel-header"><?= $l_stop_restart ?></div>
348
	<div class="panel-row">
349
	<table width="100%" border=0 cellspacing=0 cellpadding=1>
350
		<tr><td valign="middle" align="left">
351
			<form action="<?php echo $_SERVER['PHP_SELF']?>" method=POST>
2934 rexy 352
			<select name='system'>
2926 rexy 353
				<option selected value="reboot"><?echo "$l_reboot";?>
354
				<option value="halt"><?echo "$l_halt";?>
355
			</select>
3028 rexy 356
			<input type="submit" onClick="document.getElementById('ldoverlay').style.display='block';" value="<?echo "$l_execute";?>">
2926 rexy 357
			</form>
358
		</td></tr>
359
	</table>
360
	</div>
361
</div>
838 richard 362
</body>
2991 rexy 363
</html>