Gitiles
Code Review Sign In
gerrit.omnirom.org / android_external_wpa_supplicant_8 / 39ba6fcb78dfa7d870cf9cd34cef8ed9ffe65f6f / . / hs20 / server / www / users.php
blob: f546de3a95de5bd40b75b3e8938ab36ffe457031 [file] [log] [blame]
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700[diff] [blame]1<?php
2
3require('config.php');
4
5$db = new PDO($osu_db);
6if (!$db) {
7 die($sqliteerror);
8}
9
10if (isset($_GET["id"])) {
11 $id = $_GET["id"];
12 if (!is_numeric($id))
13 $id = 0;
14} else
15 $id = 0;
16if (isset($_GET["cmd"]))
17 $cmd = $_GET["cmd"];
18else
19 $cmd = '';
20
21if ($cmd == 'eventlog' && $id > 0) {
22 $row = $db->query("SELECT dump FROM eventlog WHERE rowid=$id")->fetch();
23 $dump = $row['dump'];
24 if ($dump[0] == '<') {
25 header("Content-type: text/xml");
26 echo "<?xml version=\"1.0\"?>\n";
27 echo $dump;
28 } else {
29 header("Content-type: text/plain");
30 echo $dump;
31 }
32 exit;
33}
34
35if ($cmd == 'mo' && $id > 0) {
36 $mo = $_GET["mo"];
37 if (!isset($mo))
38 exit;
39 if ($mo != "devinfo" && $mo != "devdetail" && $mo != "pps")
40 exit;
41 $row = $db->query("SELECT $mo FROM users WHERE rowid=$id")->fetch();
42 header("Content-type: text/xml");
43 echo "<?xml version=\"1.0\"?>\n";
44 echo $row[$mo];
45 exit;
46}
47
48if ($cmd == 'cert' && $id > 0) {
49 $row = $db->query("SELECT cert_pem FROM users WHERE rowid=$id")->fetch();
50 header("Content-type: text/plain");
51 echo $row['cert_pem'];
52 exit;
53}
54
55?>
56
57<html>
58<head><title>HS 2.0 users</title></head>
59<body>
60
61<?php
62
63if ($cmd == 'subrem-clear' && $id > 0) {
64 $db->exec("UPDATE users SET remediation='' WHERE rowid=$id");
65}
66if ($cmd == 'subrem-add-user' && $id > 0) {
67 $db->exec("UPDATE users SET remediation='user' WHERE rowid=$id");
68}
69if ($cmd == 'subrem-add-machine' && $id > 0) {
70 $db->exec("UPDATE users SET remediation='machine' WHERE rowid=$id");
71}
72if ($cmd == 'subrem-add-policy' && $id > 0) {
73 $db->exec("UPDATE users SET remediation='policy' WHERE rowid=$id");
74}
75if ($cmd == 'subrem-add-free' && $id > 0) {
76 $db->exec("UPDATE users SET remediation='free' WHERE rowid=$id");
77}
78if ($cmd == 'fetch-pps-on' && $id > 0) {
79 $db->exec("UPDATE users SET fetch_pps=1 WHERE rowid=$id");
80}
81if ($cmd == 'fetch-pps-off' && $id > 0) {
82 $db->exec("UPDATE users SET fetch_pps=0 WHERE rowid=$id");
83}
84if ($cmd == 'reset-pw' && $id > 0) {
85 $db->exec("UPDATE users SET password='ChangeMe' WHERE rowid=$id");
86}
87if ($cmd == "policy" && $id > 0 && isset($_GET["policy"])) {
88 $policy = $_GET["policy"];
89 if ($policy == "no-policy" ||
90 is_readable("$osu_root/spp/policy/$policy.xml")) {
91 $db->exec("UPDATE users SET policy='$policy' WHERE rowid=$id");
92 }
93}
94if ($cmd == "account-type" && $id > 0 && isset($_GET["type"])) {
95 $type = $_GET["type"];
96 if ($type == "shared")
97 $db->exec("UPDATE users SET shared=1 WHERE rowid=$id");
98 if ($type == "default")
99 $db->exec("UPDATE users SET shared=0 WHERE rowid=$id");
100}
101
102if ($cmd == "set-osu-cred" && $id > 0) {
103 $osu_user = $_POST["osu_user"];
104 $osu_password = $_POST["osu_password"];
105 if (strlen($osu_user) == 0)
106 $osu_password = "";
107 $db->exec("UPDATE users SET osu_user='$osu_user', osu_password='$osu_password' WHERE rowid=$id");
108}
109
Roshan Pius3a1667e2018-07-03 15:17:14 -0700[diff] [blame]110if ($cmd == 'clear-t-c' && $id > 0) {
111 $db->exec("UPDATE users SET t_c_timestamp=NULL WHERE rowid=$id");
112}
113
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700[diff] [blame]114$dump = 0;
115
116if ($id > 0) {
117
118if (isset($_GET["dump"])) {
119 $dump = $_GET["dump"];
120 if (!is_numeric($dump))
121 $dump = 0;
122} else
123 $dump = 0;
124
125echo "[<a href=\"users.php\">All users</a>] ";
126if ($dump == 0)
127 echo "[<a href=\"users.php?id=$id&dump=1\">Include debug dump</a>] ";
128else
129 echo "[<a href=\"users.php?id=$id\">Without debug dump</a>] ";
130echo "<br>\n";
131
132$row = $db->query("SELECT rowid,* FROM users WHERE rowid=$id")->fetch();
133
134echo "<H3>" . $row['identity'] . "@" . $row['realm'] . "</H3>\n";
135
136echo "MO: ";
137if (strlen($row['devinfo']) > 0) {
138 echo "[<a href=\"users.php?cmd=mo&id=$id&mo=devinfo\">DevInfo</a>]\n";
139}
140if (strlen($row['devdetail']) > 0) {
141 echo "[<a href=\"users.php?cmd=mo&id=$id&mo=devdetail\">DevDetail</a>]\n";
142}
143if (strlen($row['pps']) > 0) {
144 echo "[<a href=\"users.php?cmd=mo&id=$id&mo=pps\">PPS</a>]\n";
145}
146if (strlen($row['cert_pem']) > 0) {
147 echo "[<a href=\"users.php?cmd=cert&id=$id\">Certificate</a>]\n";
148}
149echo "<BR>\n";
150
151echo "Fetch PPS MO: ";
152if ($row['fetch_pps'] == "1") {
153 echo "On next connection " .
154 "[<a href=\"users.php?cmd=fetch-pps-off&id=$id\">" .
155 "do not fetch</a>]<br>\n";
156} else {
157 echo "Do not fetch " .
158 "[<a href=\"users.php?cmd=fetch-pps-on&id=$id\">" .
159 "request fetch</a>]<br>\n";
160}
161
162$cert = $row['cert'];
163if (strlen($cert) > 0) {
164 echo "Certificate fingerprint: $cert<br>\n";
165}
166
167echo "Remediation: ";
168$rem = $row['remediation'];
169if ($rem == "") {
170 echo "Not required";
171 echo " [<a href=\"users.php?cmd=subrem-add-user&id=" .
172 $row['rowid'] . "\">add:user</a>]";
173 echo " [<a href=\"users.php?cmd=subrem-add-machine&id=" .
174 $row['rowid'] . "\">add:machine</a>]";
175 echo " [<a href=\"users.php?cmd=subrem-add-policy&id=" .
176 $row['rowid'] . "\">add:policy</a>]";
177 echo " [<a href=\"users.php?cmd=subrem-add-free&id=" .
178 $row['rowid'] . "\">add:free</a>]";
179} else if ($rem == "user") {
180 echo "User [<a href=\"users.php?cmd=subrem-clear&id=" .
181 $row['rowid'] . "\">clear</a>]";
182} else if ($rem == "policy") {
183 echo "Policy [<a href=\"users.php?cmd=subrem-clear&id=" .
184 $row['rowid'] . "\">clear</a>]";
185} else if ($rem == "free") {
186 echo "Free [<a href=\"users.php?cmd=subrem-clear&id=" .
187 $row['rowid'] . "\">clear</a>]";
188} else {
189 echo "Machine [<a href=\"users.php?cmd=subrem-clear&id=" .
190 $row['rowid'] . "\">clear</a>]";
191}
192echo "<br>\n";
193
Hai Shalom39ba6fc2019-01-22 12:40:38 -0800[diff] [blame^]194if (strncmp($row['identity'], "cert-", 5) != 0)
195 echo "Machine managed: " . ($row['machine_managed'] == "1" ? "TRUE" : "FALSE") . "<br>\n";
196
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700[diff] [blame]197echo "<form>Policy: <select name=\"policy\" " .
198 "onChange=\"window.location='users.php?cmd=policy&id=" .
199 $row['rowid'] . "&policy=' + this.value;\">\n";
200echo "<option value=\"" . $row['policy'] . "\" selected>" . $row['policy'] .
201 "</option>\n";
202$files = scandir("$osu_root/spp/policy");
203foreach ($files as $file) {
204 if (!preg_match("/.xml$/", $file))
205 continue;
206 if ($file == $row['policy'] . ".xml")
207 continue;
208 $p = substr($file, 0, -4);
209 echo "<option value=\"$p\">$p</option>\n";
210}
211echo "<option value=\"no-policy\">no policy</option>\n";
212echo "</select></form>\n";
213
214echo "<form>Account type: <select name=\"type\" " .
215 "onChange=\"window.location='users.php?cmd=account-type&id=" .
216 $row['rowid'] . "&type=' + this.value;\">\n";
217if ($row['shared'] > 0) {
218 $default_sel = "";
219 $shared_sel = " selected";
220} else {
221 $default_sel = " selected";
222 $shared_sel = "";
223}
224echo "<option value=\"default\"$default_sel>default</option>\n";
225echo "<option value=\"shared\"$shared_sel>shared</option>\n";
226echo "</select></form>\n";
227
228echo "Phase 2 method(s): " . $row['methods'] . "<br>\n";
229
230echo "<br>\n";
231echo "<a href=\"users.php?cmd=reset-pw&id=" .
232 $row['rowid'] . "\">Reset AAA password</a><br>\n";
233
234echo "<br>\n";
235echo "<form action=\"users.php?cmd=set-osu-cred&id=" . $row['rowid'] .
236 "\" method=\"POST\">\n";
237echo "OSU credentials (if username empty, AAA credentials are used):<br>\n";
238echo "username: <input type=\"text\" name=\"osu_user\" value=\"" .
239 $row['osu_user'] . "\">\n";
240echo "password: <input type=\"password\" name=\"osu_password\">\n";
241echo "<input type=\"submit\" value=\"Set OSU credentials\">\n";
242echo "</form>\n";
243
Roshan Pius3a1667e2018-07-03 15:17:14 -0700[diff] [blame]244if (strlen($row['t_c_timestamp']) > 0) {
245 echo "<br>\n";
246 echo "<a href=\"users.php?cmd=clear-t-c&id=" .
247 $row['rowid'] .
248 "\">Clear Terms and Conditions acceptance</a><br>\n";
249}
250
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700[diff] [blame]251echo "<hr>\n";
252
253$user = $row['identity'];
254$osu_user = $row['osu_user'];
255$realm = $row['realm'];
256}
257
258if ($id > 0 || ($id == 0 && $cmd == 'eventlog')) {
259
260 if ($id == 0) {
261 echo "[<a href=\"users.php\">All users</a>] ";
262 echo "<br>\n";
263 }
264
265echo "<table border=1>\n";
266echo "<tr>";
267if ($id == 0) {
268 echo "<th>user<th>realm";
269}
270echo "<th>time<th>address<th>sessionID<th>notes";
271if ($dump > 0)
272 echo "<th>dump";
273echo "\n";
274if (isset($_GET["limit"])) {
275 $limit = $_GET["limit"];
276 if (!is_numeric($limit))
277 $limit = 20;
278} else
279 $limit = 20;
280if ($id == 0)
281 $res = $db->query("SELECT rowid,* FROM eventlog ORDER BY timestamp DESC LIMIT $limit");
282else if (strlen($osu_user) > 0)
283 $res = $db->query("SELECT rowid,* FROM eventlog WHERE (user='$user' OR user='$osu_user') AND realm='$realm' ORDER BY timestamp DESC LIMIT $limit");
284else
285 $res = $db->query("SELECT rowid,* FROM eventlog WHERE user='$user' AND realm='$realm' ORDER BY timestamp DESC LIMIT $limit");
286foreach ($res as $row) {
287 echo "<tr>";
288 if ($id == 0) {
289 echo "<td>" . $row['user'] . "\n";
290 echo "<td>" . $row['realm'] . "\n";
291 }
292 echo "<td>" . $row['timestamp'] . "\n";
293 echo "<td>" . $row['addr'] . "\n";
294 echo "<td>" . $row['sessionid'] . "\n";
295 echo "<td>" . $row['notes'] . "\n";
296 $d = $row['dump'];
297 if (strlen($d) > 0) {
298 echo "[<a href=\"users.php?cmd=eventlog&id=" . $row['rowid'] .
299 "\">";
300 if ($d[0] == '<')
301 echo "XML";
302 else
303 echo "txt";
304 echo "</a>]\n";
305 if ($dump > 0)
306 echo "<td>" . htmlspecialchars($d) . "\n";
307 }
308}
309echo "</table>\n";
310
311}
312
313
314if ($id == 0 && $cmd != 'eventlog') {
315
316echo "[<a href=\"users.php?cmd=eventlog&limit=50\">Eventlog</a>] ";
317echo "<br>\n";
318
Hai Shalom39ba6fc2019-01-22 12:40:38 -0800[diff] [blame^]319echo "<table border=1 cellspacing=0 cellpadding=0>\n";
320echo "<tr><th>User<th>Realm<th><small>Remediation</small><th>Policy<th><small>Account type</small><th><small>Phase 2 method(s)</small><th>DevId<th>MAC Address<th>T&C\n";
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700[diff] [blame]321
Hai Shalom39ba6fc2019-01-22 12:40:38 -0800[diff] [blame^]322$res = $db->query('SELECT rowid,* FROM users WHERE phase2=1 ORDER BY identity');
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700[diff] [blame]323foreach ($res as $row) {
324 echo "<tr><td><a href=\"users.php?id=" . $row['rowid'] . "\"> " .
325 $row['identity'] . " </a>";
326 echo "<td>" . $row['realm'];
327 $rem = $row['remediation'];
328 echo "<td>";
329 if ($rem == "") {
Hai Shalom39ba6fc2019-01-22 12:40:38 -0800[diff] [blame^]330 echo "-";
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700[diff] [blame]331 } else if ($rem == "user") {
332 echo "User";
333 } else if ($rem == "policy") {
334 echo "Policy";
335 } else if ($rem == "free") {
336 echo "Free";
337 } else {
338 echo "Machine";
339 }
340 echo "<td>" . $row['policy'];
341 if ($row['shared'] > 0)
342 echo "<td>shared";
343 else
344 echo "<td>default";
Hai Shalom39ba6fc2019-01-22 12:40:38 -0800[diff] [blame^]345 echo "<td><small>" . $row['methods'] . "</small>";
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700[diff] [blame]346 echo "<td>";
347 $xml = xml_parser_create();
348 xml_parse_into_struct($xml, $row['devinfo'], $devinfo);
349 foreach($devinfo as $k) {
350 if ($k['tag'] == 'DEVID') {
Hai Shalom39ba6fc2019-01-22 12:40:38 -0800[diff] [blame^]351 echo "<small>" . $k['value'] . "</small>";
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700[diff] [blame]352 break;
353 }
354 }
Hai Shalom39ba6fc2019-01-22 12:40:38 -0800[diff] [blame^]355 echo "<td><small>" . $row['mac_addr'] . "</small>";
356 echo "<td><small>" . $row['t_c_timestamp'] . "</small>";
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700[diff] [blame]357 echo "\n";
358}
359echo "</table>\n";
360
361}
362
363?>
364
365</html>