WebSVN – ALCASAR – Diff – /scripts/alcasar-conup.sh


#!/bin/sh
#
# $Id: alcasar-conup.sh 2884 2020-11-16 22:12:53Z rexy $
#
# alcasar-conup.sh
# by Rexy
# This script is distributed under the Gnu General Public License (GPL)
 
# This script is launched by coova after each successfull login
# Ce script est lancé par coova à chaque connexion d'usager (authentification réussi)
 
 
PASSWD_FILE="/root/ALCASAR-passwords.txt"
 
if [ -z $FRAMED_IP_ADDRESS ]; then
	exit 1
fi
 
# Retrieve alcasar special radius attributes 
db_query_additionalGroups=''
[ -n "$FILTER_ID" ] && db_query_additionalGroups="( SELECT attribute, value FROM radgroupreply WHERE groupname = '$FILTER_ID' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ) UNION "
db_query="SELECT attribute, value FROM ( \
	( SELECT attribute, value FROM radreply WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ) UNION \
	( SELECT attribute, value FROM radgroupreply gr LEFT JOIN radusergroup ug ON gr.groupname = ug.groupname WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ORDER BY ug.priority ) UNION \
	$db_query_additionalGroups \
	( SELECT attribute, value FROM radgroupreply WHERE groupname = 'default' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ) \
) attrs GROUP BY attribute;"
db_res=$(mysql -u root -p$(cat $PASSWD_FILE | grep ^db_root= | cut -d'=' -f2-) -D radius -e "$db_query" -Ns)
 
filter=$(echo "$db_res"             | awk '$1 == "Alcasar-Filter"                     { print $2 }')
filterProto=$(echo "$db_res"        | awk '$1 == "Alcasar-Protocols-Filter"           { print $2 }')
statusPageRequired=$(echo "$db_res" | awk '$1 == "Alcasar-Status-Page-Must-Stay-Open" { print $2 }')
 
 
# Add user to his IPSET
if [ "$filter" == '4' ]; then	# AV_WL
	set_filter="av_wl"
elif [ "$filter" == '3' ]; then	# AV_BL
	set_filter="av_bl"
elif [ "$filter" == '2' ]; then	# AV
	set_filter="av"
else				# NOT_FILTERED
	set_filter="not_filtered"
fi
 
if [ "$filterProto" == '4' ]; then	# PROFILE 3 (Custom)
	set_filterProto="proto_3";
elif [ "$filterProto" == '3' ]; then	# PROFILE 2 (WEB + Mail + Remote access)
	set_filterProto="proto_2";
elif [ "$filterProto" == '2' ]; then	# PROFILE 1 (WEB)
	set_filterProto="proto_1";
else					# PROFILE 0 (Not filtered)
	set_filterProto="proto_0";
fi
 
ipset add $set_filter      $FRAMED_IP_ADDRESS
ipset add $set_filterProto $FRAMED_IP_ADDRESS
 
# If status page isn't required, add user_IP with flag PERM in /tmp/current_users.txt
if [ "$statusPageRequired" == '2' ]; then	# Status page is not required
	current_users_file="/tmp/current_users.txt"
	if [ ! -e $current_users_file ]; then
		touch $current_users_file && chown root:apache $current_users_file && chmod 660 $current_users_file
    fi
	echo "$FRAMED_IP_ADDRESS:PERM" >> $current_users_file
fi
 
#############################
## Debug : show all the coova parse variables (+ $set_filter + $set_filterProto).
## see "/src/chilli.c" for the complete list of parse variables
#debug_file="/tmp/debug-conup.txt"
#echo "-----------------------------------------------" >> $debug_file
#echo `date` >> $debug_file
#for i in DEV NET MASK ADDR USER_NAME NAS_IP_ADDRESS SERVICE_TYPE FRAMED_IP_ADDRESS FILTER_ID STATE CLASS CUI SESSION_TIMEOUT IDLE_TIMEOUT CALLING_STATION_ID CALLED_STATION_ID NAS_ID NAS_PORT_TYPE ACCT_SESSION_ID ACCT_INTERIM_INTERVAL WISPR_LOCATION_ID WISPR_LOCATION_NAME WISPR_BANDWIDTH_MAX_UP WISPR_BANDWIDTH_MAX_DOWN COOVACHILLI_MAX_INPUT_OCTETS COOVACHILLI_MAX_OUTPUT_OCTETS COOVACHILLI_MAX_TOTAL_OCTETS INPUT_OCTETS OUTPUT_OCTETS INPUT_PACKETS OUTPUT_PACKETS SESSION_TIME IDLE_TIME LOCATION OLD_LOCATION TERMINATE_CAUSE
#do
#	echo -n "$i=" >> $debug_file
#	if [[ -v $i ]];
#	then
#		echo -n "${!i}; " >> $debug_file
#	else
#		echo -n "not defined; " >> $debug_file
#	fi
#done
#echo >> $debug_file
#echo "set_filter : $set_filter" >> $debug_file
#echo "set_filterProto : $set_filterProto" >> $debug_file
#echo "statusPageRequired : $statusPageRequired" >> $debug_file
## END DEBUG
#################################
 
 
Generated by GNU Enscript 1.6.6.
 
 
 

Subversion Repositories ALCASAR

(root)/scripts/alcasar-conup.sh @ 2886 – Rev 2883 → 2884

Rev 2883		Rev 2884
1	`#!/bin/sh`	1	`#!/bin/sh`
2	`#`	2	`#`
3	`# $Id: alcasar-conup.sh 2883 2020-11-15 21:14:52Z rexy $`	3	`# $Id: alcasar-conup.sh 2884 2020-11-16 22:12:53Z rexy $`
4	`#`	4	`#`
5	`# alcasar-conup.sh`	5	`# alcasar-conup.sh`
6	`# by Rexy`	6	`# by Rexy`
7	`# This script is distributed under the Gnu General Public License (GPL)`	7	`# This script is distributed under the Gnu General Public License (GPL)`
8		8
9	`# This script is launched by coova after each successfull login`	9	`# This script is launched by coova after each successfull login`
10	`# Ce script est lancé par coova à chaque connexion d'usager (authentification réussi)`	10	`# Ce script est lancé par coova à chaque connexion d'usager (authentification réussi)`
11		11
12		12
13	`PASSWD_FILE="/root/ALCASAR-passwords.txt"`	13	`PASSWD_FILE="/root/ALCASAR-passwords.txt"`
14		14
15	`if [ -z $FRAMED_IP_ADDRESS ]; then`	15	`if [ -z $FRAMED_IP_ADDRESS ]; then`
16	`exit 1`	16	`exit 1`
17	`fi`	17	`fi`
18		18
19	`# Retrieve alcasar special radius attributes`	19	`# Retrieve alcasar special radius attributes`
20	`db_query_additionalGroups=''`	20	`db_query_additionalGroups=''`
21	`[ -n "$FILTER_ID" ] && db_query_additionalGroups="( SELECT attribute, value FROM radgroupreply WHERE groupname = '$FILTER_ID' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ) UNION "`	21	`[ -n "$FILTER_ID" ] && db_query_additionalGroups="( SELECT attribute, value FROM radgroupreply WHERE groupname = '$FILTER_ID' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ) UNION "`
22	`db_query="SELECT attribute, value FROM ( \`	22	`db_query="SELECT attribute, value FROM ( \`
23	`( SELECT attribute, value FROM radreply WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ) UNION \`	23	`( SELECT attribute, value FROM radreply WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ) UNION \`
24	`( SELECT attribute, value FROM radgroupreply gr LEFT JOIN radusergroup ug ON gr.groupname = ug.groupname WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ORDER BY ug.priority ) UNION \`	24	`( SELECT attribute, value FROM radgroupreply gr LEFT JOIN radusergroup ug ON gr.groupname = ug.groupname WHERE username = '$USER_NAME' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ORDER BY ug.priority ) UNION \`
25	`$db_query_additionalGroups \`	25	`$db_query_additionalGroups \`
26	`( SELECT attribute, value FROM radgroupreply WHERE groupname = 'default' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ) \`	26	`( SELECT attribute, value FROM radgroupreply WHERE groupname = 'default' AND (attribute IN ('Alcasar-Filter', 'Alcasar-Protocols-Filter', 'Alcasar-Status-Page-Must-Stay-Open')) ) \`
27	`) attrs GROUP BY attribute;"`	27	`) attrs GROUP BY attribute;"`
28	`db_res=$(mysql -u root -p$(cat $PASSWD_FILE \| grep ^db_root= \| cut -d'=' -f2-) -D radius -e "$db_query" -Ns)`	28	`db_res=$(mysql -u root -p$(cat $PASSWD_FILE \| grep ^db_root= \| cut -d'=' -f2-) -D radius -e "$db_query" -Ns)`
29		29
30	`filter=$(echo "$db_res" \| awk '$1 == "Alcasar-Filter" { print $2 }')`	30	`filter=$(echo "$db_res" \| awk '$1 == "Alcasar-Filter" { print $2 }')`
31	`filterProto=$(echo "$db_res" \| awk '$1 == "Alcasar-Protocols-Filter" { print $2 }')`	31	`filterProto=$(echo "$db_res" \| awk '$1 == "Alcasar-Protocols-Filter" { print $2 }')`
32	`statusPageRequired=$(echo "$db_res" \| awk '$1 == "Alcasar-Status-Page-Must-Stay-Open" { print $2 }')`	32	`statusPageRequired=$(echo "$db_res" \| awk '$1 == "Alcasar-Status-Page-Must-Stay-Open" { print $2 }')`
33		33
34		34
35	`# Add user to his IPSET`	35	`# Add user to his IPSET`
36	`if [ "$filter" == '4' ]; then # AV_WL`	36	`if [ "$filter" == '4' ]; then # AV_WL`
37	`set_filter="av_wl"`	37	`set_filter="av_wl"`
38	`elif [ "$filter" == '3' ]; then # AV_BL`	38	`elif [ "$filter" == '3' ]; then # AV_BL`
39	`set_filter="av_bl"`	39	`set_filter="av_bl"`
40	`elif [ "$filter" == '2' ]; then # AV`	40	`elif [ "$filter" == '2' ]; then # AV`
41	`set_filter="av"`	41	`set_filter="av"`
42	`else # NOT_FILTERED`	42	`else # NOT_FILTERED`
43	`set_filter="not_filtered"`	43	`set_filter="not_filtered"`
44	`fi`	44	`fi`
45		45
46	`if [ "$filterProto" == '4' ]; then # PROFILE 3 (Custom)`	46	`if [ "$filterProto" == '4' ]; then # PROFILE 3 (Custom)`
47	`set_filterProto="proto_3";`	47	`set_filterProto="proto_3";`
48	`elif [ "$filterProto" == '3' ]; then # PROFILE 2 (WEB + Mail + Remote access)`	48	`elif [ "$filterProto" == '3' ]; then # PROFILE 2 (WEB + Mail + Remote access)`
49	`set_filterProto="proto_2";`	49	`set_filterProto="proto_2";`
50	`elif [ "$filterProto" == '2' ]; then # PROFILE 1 (WEB)`	50	`elif [ "$filterProto" == '2' ]; then # PROFILE 1 (WEB)`
51	`set_filterProto="proto_1";`	51	`set_filterProto="proto_1";`
52	`else # PROFILE 0 (Not filtered)`	52	`else # PROFILE 0 (Not filtered)`
53	`set_filterProto="proto_0";`	53	`set_filterProto="proto_0";`
54	`fi`	54	`fi`
55		55
56	`ipset add $set_filter $FRAMED_IP_ADDRESS`	56	`ipset add $set_filter $FRAMED_IP_ADDRESS`
57	`ipset add $set_filterProto $FRAMED_IP_ADDRESS`	57	`ipset add $set_filterProto $FRAMED_IP_ADDRESS`
58		58
59	`# If status page isn't required, add user_IP with flag PERM in /tmp/current_users.txt`	59	`# If status page isn't required, add user_IP with flag PERM in /tmp/current_users.txt`
60	`if [ "$statusPageRequired" == '2' ]; then # Status page is not required`	60	`if [ "$statusPageRequired" == '2' ]; then # Status page is not required`
-		61	`current_users_file="/tmp/current_users.txt"`
61	`if [ ! -e /tmp/current_users.txt ]; then`	62	`if [ ! -e $current_users_file ]; then`
62	`touch /tmp/current_users.txt && chown apache:apache /tmp/current_users.txt`	63	`touch $current_users_file && chown root:apache $current_users_file && chmod 660 $current_users_file`
63	`fi`	64	`fi`
64	`echo "$FRAMED_IP_ADDRESS:PERM" >> /tmp/current_users.txt`	65	`echo "$FRAMED_IP_ADDRESS:PERM" >> $current_users_file`
65	`fi`	66	`fi`
66		67
67	`#############################`	68	`#############################`
68	`## Debug : show all the coova parse variables (+ $set_filter + $set_filterProto).`	69	`## Debug : show all the coova parse variables (+ $set_filter + $set_filterProto).`
69	`## see "/src/chilli.c" for the complete list of parse variables`	70	`## see "/src/chilli.c" for the complete list of parse variables`
70	`#debug_file="/tmp/debug-conup.txt"`	71	`#debug_file="/tmp/debug-conup.txt"`
71	`#echo "-----------------------------------------------" >> $debug_file`	72	`#echo "-----------------------------------------------" >> $debug_file`
72	#echo `date` >> $debug_file	73	#echo `date` >> $debug_file
73	#for i in DEV NET MASK ADDR USER_NAME NAS_IP_ADDRESS SERVICE_TYPE FRAMED_IP_ADDRESS FILTER_ID STATE CLASS CUI SESSION_TIMEOUT IDLE_TIMEOUT CALLING_STATION_ID CALLED_STATION_ID NAS_ID NAS_PORT_TYPE ACCT_SESSION_ID ACCT_INTERIM_INTERVAL WISPR_LOCATION_ID WISPR_LOCATION_NAME WISPR_BANDWIDTH_MAX_UP WISPR_BANDWIDTH_MAX_DOWN COOVACHILLI_MAX_INPUT_OCTETS COOVACHILLI_MAX_OUTPUT_OCTETS COOVACHILLI_MAX_TOTAL_OCTETS INPUT_OCTETS OUTPUT_OCTETS INPUT_PACKETS OUTPUT_PACKETS SESSION_TIME IDLE_TIME LOCATION OLD_LOCATION TERMINATE_CAUSE	74	#for i in DEV NET MASK ADDR USER_NAME NAS_IP_ADDRESS SERVICE_TYPE FRAMED_IP_ADDRESS FILTER_ID STATE CLASS CUI SESSION_TIMEOUT IDLE_TIMEOUT CALLING_STATION_ID CALLED_STATION_ID NAS_ID NAS_PORT_TYPE ACCT_SESSION_ID ACCT_INTERIM_INTERVAL WISPR_LOCATION_ID WISPR_LOCATION_NAME WISPR_BANDWIDTH_MAX_UP WISPR_BANDWIDTH_MAX_DOWN COOVACHILLI_MAX_INPUT_OCTETS COOVACHILLI_MAX_OUTPUT_OCTETS COOVACHILLI_MAX_TOTAL_OCTETS INPUT_OCTETS OUTPUT_OCTETS INPUT_PACKETS OUTPUT_PACKETS SESSION_TIME IDLE_TIME LOCATION OLD_LOCATION TERMINATE_CAUSE
74	`#do`	75	`#do`
75	`# echo -n "$i=" >> $debug_file`	76	`# echo -n "$i=" >> $debug_file`
76	`# if [[ -v $i ]];`	77	`# if [[ -v $i ]];`
77	`# then`	78	`# then`
78	`# echo -n "${!i}; " >> $debug_file`	79	`# echo -n "${!i}; " >> $debug_file`
79	`# else`	80	`# else`
80	`# echo -n "not defined; " >> $debug_file`	81	`# echo -n "not defined; " >> $debug_file`
81	`# fi`	82	`# fi`
82	`#done`	83	`#done`
83	`#echo >> $debug_file`	84	`#echo >> $debug_file`
84	`#echo "set_filter : $set_filter" >> $debug_file`	85	`#echo "set_filter : $set_filter" >> $debug_file`
85	`#echo "set_filterProto : $set_filterProto" >> $debug_file`	86	`#echo "set_filterProto : $set_filterProto" >> $debug_file`
86	`#echo "statusPageRequired : $statusPageRequired" >> $debug_file`	87	`#echo "statusPageRequired : $statusPageRequired" >> $debug_file`
87	`## END DEBUG`	88	`## END DEBUG`
88	`#################################`	89	`#################################`
89		90
90		91
91	`Generated by GNU Enscript 1.6.6.`	92	`Generated by GNU Enscript 1.6.6.`
92		93
93		94
94		95