WebSVN – ALCASAR – Diff – /scripts/alcasar-condown.sh


#!/bin/sh
#
# $Id: alcasar-condown.sh 2965 2021-07-04 22:15:08Z rexy $
#
# alcasar-condown.sh
# by Rexy & Pierre RIVAULT
# This script is distributed under the Gnu General Public License (GPL)
 
# This script is started by coova after each logout
# Ce script est lancé par coova à chaque déconnexion d'usager
 
CONF_FILE="/usr/local/etc/alcasar.conf"
PASSWD_FILE="/root/ALCASAR-passwords.txt"
DB_USER=`cat $PASSWD_FILE|grep ^db_user=|cut -d'=' -f2`
DB_PASSWORD=`cat $PASSWD_FILE|grep ^db_password=|cut -d'=' -f2`
 
if [ -z $FRAMED_IP_ADDRESS ]; then
	exit 1
fi
 
# Retrieve 2 alcasar special radius attributes (search order : default group, then user's group, then user)
db_query="SELECT attribute, value FROM ( \
 	( SELECT attribute, value FROM radreply WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter')) ) UNION \
	( SELECT attribute, value FROM radgroupreply gr LEFT JOIN radusergroup ug ON gr.groupname = ug.groupname WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter')) ORDER BY ug.priority ) UNION \
	( SELECT attribute, value FROM radgroupreply WHERE groupname = 'default' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter')) ) \
) attrs GROUP BY attribute;"
db_res=$(mysql -u$DB_USER -p$DB_PASSWORD -D radius -e "$db_query" -Ns)
 
filter=$(echo "$db_res"      | awk '$1 == "Alcasar-Filter"           { print $2 }')
filterProto=$(echo "$db_res" | awk '$1 == "Alcasar-Protocols-Filter" { print $2 }')
 
if [ "$filter" == '4' ]; then	# AV_WL
	set_filter="av_wl"
elif [ "$filter" == '3' ]; then	# AV_BL
	set_filter="av_bl"
elif [ "$filter" == '2' ]; then	# AV
	set_filter="av"
else				# NOT_FILTERED
	set_filter="not_filtered"
fi
 
if [ "$filterProto" == '4' ]; then	# PROFILE 3 (Custom)
	set_filterProto="proto_3";
elif [ "$filterProto" == '3' ]; then	# PROFILE 2 (WEB + Mail + Remote access)
	set_filterProto="proto_2";
elif [ "$filterProto" == '2' ]; then	# PROFILE 1 (WEB)
	set_filterProto="proto_1";
else					# PROFILE 0 (Not filtered)
	set_filterProto="proto_0";
fi
 
# Remove user from his IPSET
ipset del $set_filter      $FRAMED_IP_ADDRESS
ipset del $set_filterProto $FRAMED_IP_ADDRESS
 
# Remove IP address from active users list
current_users_file="/tmp/current_users.txt"
[ -e $current_users_file ] && sed -i "/^$FRAMED_IP_ADDRESS:/d" $current_users_file
 
# Remove user_IP from ipset of load balancing
nb_gw=`grep ^WAN $CONF_FILE | wc -l`
for (( i = 0 ; i <= $nb_gw ; i++ ));do
	gw="gw$i"
	ipset test $gw $FRAMED_IP_ADDRESS 1>/dev/null 2>&1
	if [ $? -eq 0 ];then
		ipset del $gw $FRAMED_IP_ADDRESS
		break
	fi
done
 
#############################
## Debug : show all the coova parse variables (+ ALCASAR-Filter + ALCASAR-Protocols-Filter).
## see "/src/chilli.c" for the complete list of parse variables
#debug_file="/tmp/debug-condown.txt"
#echo "-----------------------------------------------" >> $debug_file
#echo `date` >> $debug_file
#for i in DEV NET MASK ADDR USER_NAME NAS_IP_ADDRESS SERVICE_TYPE FRAMED_IP_ADDRESS FILTER_ID STATE CLASS CUI SESSION_TIMEOUT IDLE_TIMEOUT CALLING_STATION_ID CALLED_STATION_ID NAS_ID NAS_PORT_TYPE ACCT_SESSION_ID ACCT_INTERIM_INTERVAL WISPR_LOCATION_ID WISPR_LOCATION_NAME WISPR_BANDWIDTH_MAX_UP WISPR_BANDWIDTH_MAX_DOWN COOVACHILLI_MAX_INPUT_OCTETS COOVACHILLI_MAX_OUTPUT_OCTETS COOVACHILLI_MAX_TOTAL_OCTETS INPUT_OCTETS OUTPUT_OCTETS INPUT_PACKETS OUTPUT_PACKETS SESSION_TIME IDLE_TIME LOCATION OLD_LOCATION TERMINATE_CAUSE
#do
#	echo -n "$i=" >> $debug_file
#	if [[ -v $i ]];
#	then
#		echo -n "${!i}; " >> $debug_file
#	else
#		echo -n "not defined; " >> $debug_file
#	fi
#done
#echo >> $debug_file
#echo "ALCASAR-Filter : $set_filter" >> $debug_file
#echo "ALCASAR-Protocols-Filter : $set_filterProto" >> $debug_file
## END Debug
#################################
 
 
Generated by GNU Enscript 1.6.6.
 
 
 

Subversion Repositories ALCASAR

(root)/scripts/alcasar-condown.sh @ 2692 – Rev 2956 → 2965

Rev 2956		Rev 2965
1	`#!/bin/sh`	1	`#!/bin/sh`
2	`#`	2	`#`
3	`# $Id: alcasar-condown.sh 2956 2021-05-24 19:57:17Z rexy $`	3	`# $Id: alcasar-condown.sh 2965 2021-07-04 22:15:08Z rexy $`
4	`#`	4	`#`
5	`# alcasar-condown.sh`	5	`# alcasar-condown.sh`
6	`# by Rexy & Pierre RIVAULT`	6	`# by Rexy & Pierre RIVAULT`
7	`# This script is distributed under the Gnu General Public License (GPL)`	7	`# This script is distributed under the Gnu General Public License (GPL)`
8		8
9	`# This script is started by coova after each logout`	9	`# This script is started by coova after each logout`
10	`# Ce script est lancé par coova à chaque déconnexion d'usager`	10	`# Ce script est lancé par coova à chaque déconnexion d'usager`
11		11
-		12	`CONF_FILE="/usr/local/etc/alcasar.conf"`
12	`PASSWD_FILE="/root/ALCASAR-passwords.txt"`	13	`PASSWD_FILE="/root/ALCASAR-passwords.txt"`
13	DB_USER=`cat $PASSWD_FILE\|grep ^db_user=\|cut -d'=' -f2`	14	DB_USER=`cat $PASSWD_FILE\|grep ^db_user=\|cut -d'=' -f2`
14	DB_PASSWORD=`cat $PASSWD_FILE\|grep ^db_password=\|cut -d'=' -f2`	15	DB_PASSWORD=`cat $PASSWD_FILE\|grep ^db_password=\|cut -d'=' -f2`
15		16
16	`if [ -z $FRAMED_IP_ADDRESS ]; then`	17	`if [ -z $FRAMED_IP_ADDRESS ]; then`
17	`exit 1`	18	`exit 1`
18	`fi`	19	`fi`
19		20
20	`# Retrieve 2 alcasar special radius attributes (search order : default group, then user's group, then user)`	21	`# Retrieve 2 alcasar special radius attributes (search order : default group, then user's group, then user)`
21	`db_query="SELECT attribute, value FROM ( \`	22	`db_query="SELECT attribute, value FROM ( \`
22	`( SELECT attribute, value FROM radreply WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter')) ) UNION \`	23	`( SELECT attribute, value FROM radreply WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter')) ) UNION \`
23	`( SELECT attribute, value FROM radgroupreply gr LEFT JOIN radusergroup ug ON gr.groupname = ug.groupname WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter')) ORDER BY ug.priority ) UNION \`	24	`( SELECT attribute, value FROM radgroupreply gr LEFT JOIN radusergroup ug ON gr.groupname = ug.groupname WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter')) ORDER BY ug.priority ) UNION \`
24	`( SELECT attribute, value FROM radgroupreply WHERE groupname = 'default' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter')) ) \`	25	`( SELECT attribute, value FROM radgroupreply WHERE groupname = 'default' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter')) ) \`
25	`) attrs GROUP BY attribute;"`	26	`) attrs GROUP BY attribute;"`
26	`db_res=$(mysql -u$DB_USER -p$DB_PASSWORD -D radius -e "$db_query" -Ns)`	27	`db_res=$(mysql -u$DB_USER -p$DB_PASSWORD -D radius -e "$db_query" -Ns)`
27		28
28	`filter=$(echo "$db_res" \| awk '$1 == "Alcasar-Filter" { print $2 }')`	29	`filter=$(echo "$db_res" \| awk '$1 == "Alcasar-Filter" { print $2 }')`
29	`filterProto=$(echo "$db_res" \| awk '$1 == "Alcasar-Protocols-Filter" { print $2 }')`	30	`filterProto=$(echo "$db_res" \| awk '$1 == "Alcasar-Protocols-Filter" { print $2 }')`
30		31
31	`if [ "$filter" == '4' ]; then # AV_WL`	32	`if [ "$filter" == '4' ]; then # AV_WL`
32	`set_filter="av_wl"`	33	`set_filter="av_wl"`
33	`elif [ "$filter" == '3' ]; then # AV_BL`	34	`elif [ "$filter" == '3' ]; then # AV_BL`
34	`set_filter="av_bl"`	35	`set_filter="av_bl"`
35	`elif [ "$filter" == '2' ]; then # AV`	36	`elif [ "$filter" == '2' ]; then # AV`
36	`set_filter="av"`	37	`set_filter="av"`
37	`else # NOT_FILTERED`	38	`else # NOT_FILTERED`
38	`set_filter="not_filtered"`	39	`set_filter="not_filtered"`
39	`fi`	40	`fi`
40		41
41	`if [ "$filterProto" == '4' ]; then # PROFILE 3 (Custom)`	42	`if [ "$filterProto" == '4' ]; then # PROFILE 3 (Custom)`
42	`set_filterProto="proto_3";`	43	`set_filterProto="proto_3";`
43	`elif [ "$filterProto" == '3' ]; then # PROFILE 2 (WEB + Mail + Remote access)`	44	`elif [ "$filterProto" == '3' ]; then # PROFILE 2 (WEB + Mail + Remote access)`
44	`set_filterProto="proto_2";`	45	`set_filterProto="proto_2";`
45	`elif [ "$filterProto" == '2' ]; then # PROFILE 1 (WEB)`	46	`elif [ "$filterProto" == '2' ]; then # PROFILE 1 (WEB)`
46	`set_filterProto="proto_1";`	47	`set_filterProto="proto_1";`
47	`else # PROFILE 0 (Not filtered)`	48	`else # PROFILE 0 (Not filtered)`
48	`set_filterProto="proto_0";`	49	`set_filterProto="proto_0";`
49	`fi`	50	`fi`
50		51
51	`# Remove user from his IPSET`	52	`# Remove user from his IPSET`
52	`ipset del $set_filter $FRAMED_IP_ADDRESS`	53	`ipset del $set_filter $FRAMED_IP_ADDRESS`
53	`ipset del $set_filterProto $FRAMED_IP_ADDRESS`	54	`ipset del $set_filterProto $FRAMED_IP_ADDRESS`
54		55
55	`# Remove IP address from active users list`	56	`# Remove IP address from active users list`
56	`current_users_file="/tmp/current_users.txt"`	57	`current_users_file="/tmp/current_users.txt"`
57	`[ -e $current_users_file ] && sed -i "/^$FRAMED_IP_ADDRESS:/d" $current_users_file`	58	`[ -e $current_users_file ] && sed -i "/^$FRAMED_IP_ADDRESS:/d" $current_users_file`
58		59
59	`# Remove user_IP from ipset of load balancing`	60	`# Remove user_IP from ipset of load balancing`
60	nb_gw=`grep ^WAN $CONF_FILE \| wc -l`	61	nb_gw=`grep ^WAN $CONF_FILE \| wc -l`
61	`for (( i = 0 ; i <= $nb_gw ; i++ ));do`	62	`for (( i = 0 ; i <= $nb_gw ; i++ ));do`
62	`gw="gw$i"`	63	`gw="gw$i"`
63	`ipset test $gw $FRAMED_IP_ADDRESS 1>/dev/null 2>&1`	64	`ipset test $gw $FRAMED_IP_ADDRESS 1>/dev/null 2>&1`
64	`if [ $? -eq 0 ];then`	65	`if [ $? -eq 0 ];then`
65	`ipset del $gw $FRAMED_IP_ADDRESS`	66	`ipset del $gw $FRAMED_IP_ADDRESS`
66	`break`	67	`break`
67	`fi`	68	`fi`
68	`done`	69	`done`
69		70
70	`#############################`	71	`#############################`
71	`## Debug : show all the coova parse variables (+ ALCASAR-Filter + ALCASAR-Protocols-Filter).`	72	`## Debug : show all the coova parse variables (+ ALCASAR-Filter + ALCASAR-Protocols-Filter).`
72	`## see "/src/chilli.c" for the complete list of parse variables`	73	`## see "/src/chilli.c" for the complete list of parse variables`
73	`#debug_file="/tmp/debug-condown.txt"`	74	`#debug_file="/tmp/debug-condown.txt"`
74	`#echo "-----------------------------------------------" >> $debug_file`	75	`#echo "-----------------------------------------------" >> $debug_file`
75	#echo `date` >> $debug_file	76	#echo `date` >> $debug_file
76	#for i in DEV NET MASK ADDR USER_NAME NAS_IP_ADDRESS SERVICE_TYPE FRAMED_IP_ADDRESS FILTER_ID STATE CLASS CUI SESSION_TIMEOUT IDLE_TIMEOUT CALLING_STATION_ID CALLED_STATION_ID NAS_ID NAS_PORT_TYPE ACCT_SESSION_ID ACCT_INTERIM_INTERVAL WISPR_LOCATION_ID WISPR_LOCATION_NAME WISPR_BANDWIDTH_MAX_UP WISPR_BANDWIDTH_MAX_DOWN COOVACHILLI_MAX_INPUT_OCTETS COOVACHILLI_MAX_OUTPUT_OCTETS COOVACHILLI_MAX_TOTAL_OCTETS INPUT_OCTETS OUTPUT_OCTETS INPUT_PACKETS OUTPUT_PACKETS SESSION_TIME IDLE_TIME LOCATION OLD_LOCATION TERMINATE_CAUSE	77	#for i in DEV NET MASK ADDR USER_NAME NAS_IP_ADDRESS SERVICE_TYPE FRAMED_IP_ADDRESS FILTER_ID STATE CLASS CUI SESSION_TIMEOUT IDLE_TIMEOUT CALLING_STATION_ID CALLED_STATION_ID NAS_ID NAS_PORT_TYPE ACCT_SESSION_ID ACCT_INTERIM_INTERVAL WISPR_LOCATION_ID WISPR_LOCATION_NAME WISPR_BANDWIDTH_MAX_UP WISPR_BANDWIDTH_MAX_DOWN COOVACHILLI_MAX_INPUT_OCTETS COOVACHILLI_MAX_OUTPUT_OCTETS COOVACHILLI_MAX_TOTAL_OCTETS INPUT_OCTETS OUTPUT_OCTETS INPUT_PACKETS OUTPUT_PACKETS SESSION_TIME IDLE_TIME LOCATION OLD_LOCATION TERMINATE_CAUSE
77	`#do`	78	`#do`
78	`# echo -n "$i=" >> $debug_file`	79	`# echo -n "$i=" >> $debug_file`
79	`# if [[ -v $i ]];`	80	`# if [[ -v $i ]];`
80	`# then`	81	`# then`
81	`# echo -n "${!i}; " >> $debug_file`	82	`# echo -n "${!i}; " >> $debug_file`
82	`# else`	83	`# else`
83	`# echo -n "not defined; " >> $debug_file`	84	`# echo -n "not defined; " >> $debug_file`
84	`# fi`	85	`# fi`
85	`#done`	86	`#done`
86	`#echo >> $debug_file`	87	`#echo >> $debug_file`
87	`#echo "ALCASAR-Filter : $set_filter" >> $debug_file`	88	`#echo "ALCASAR-Filter : $set_filter" >> $debug_file`
88	`#echo "ALCASAR-Protocols-Filter : $set_filterProto" >> $debug_file`	89	`#echo "ALCASAR-Protocols-Filter : $set_filterProto" >> $debug_file`
89	`## END Debug`	90	`## END Debug`
90	`#################################`	91	`#################################`
91		92
92		93
93	`Generated by GNU Enscript 1.6.6.`	94	`Generated by GNU Enscript 1.6.6.`
94		95
95		96
96		97