| <?php |
| |
| require('config.php'); |
| |
| $db = new PDO($osu_db); |
| if (!$db) { |
| die($sqliteerror); |
| } |
| |
| if (isset($_GET["id"])) { |
| $id = $_GET["id"]; |
| if (!is_numeric($id)) |
| $id = 0; |
| } else |
| $id = 0; |
| if (isset($_GET["cmd"])) |
| $cmd = $_GET["cmd"]; |
| else |
| $cmd = ''; |
| |
| if ($cmd == 'eventlog' && $id > 0) { |
| $row = $db->query("SELECT dump FROM eventlog WHERE rowid=$id")->fetch(); |
| $dump = $row['dump']; |
| if ($dump[0] == '<') { |
| header("Content-type: text/xml"); |
| echo "<?xml version=\"1.0\"?>\n"; |
| echo $dump; |
| } else { |
| header("Content-type: text/plain"); |
| echo $dump; |
| } |
| exit; |
| } |
| |
| if ($cmd == 'mo' && $id > 0) { |
| $mo = $_GET["mo"]; |
| if (!isset($mo)) |
| exit; |
| if ($mo != "devinfo" && $mo != "devdetail" && $mo != "pps") |
| exit; |
| $row = $db->query("SELECT $mo FROM users WHERE rowid=$id")->fetch(); |
| header("Content-type: text/xml"); |
| echo "<?xml version=\"1.0\"?>\n"; |
| echo $row[$mo]; |
| exit; |
| } |
| |
| if ($cmd == 'cert' && $id > 0) { |
| $row = $db->query("SELECT cert_pem FROM users WHERE rowid=$id")->fetch(); |
| header("Content-type: text/plain"); |
| echo $row['cert_pem']; |
| exit; |
| } |
| |
| ?> |
| |
| <html> |
| <head><title>HS 2.0 users</title></head> |
| <body> |
| |
| <?php |
| |
| if ($cmd == 'subrem-clear' && $id > 0) { |
| $db->exec("UPDATE users SET remediation='' WHERE rowid=$id"); |
| } |
| if ($cmd == 'subrem-add-user' && $id > 0) { |
| $db->exec("UPDATE users SET remediation='user' WHERE rowid=$id"); |
| } |
| if ($cmd == 'subrem-add-machine' && $id > 0) { |
| $db->exec("UPDATE users SET remediation='machine' WHERE rowid=$id"); |
| } |
| if ($cmd == 'subrem-add-policy' && $id > 0) { |
| $db->exec("UPDATE users SET remediation='policy' WHERE rowid=$id"); |
| } |
| if ($cmd == 'subrem-add-free' && $id > 0) { |
| $db->exec("UPDATE users SET remediation='free' WHERE rowid=$id"); |
| } |
| if ($cmd == 'fetch-pps-on' && $id > 0) { |
| $db->exec("UPDATE users SET fetch_pps=1 WHERE rowid=$id"); |
| } |
| if ($cmd == 'fetch-pps-off' && $id > 0) { |
| $db->exec("UPDATE users SET fetch_pps=0 WHERE rowid=$id"); |
| } |
| if ($cmd == 'reset-pw' && $id > 0) { |
| $db->exec("UPDATE users SET password='ChangeMe' WHERE rowid=$id"); |
| } |
| if ($cmd == "policy" && $id > 0 && isset($_GET["policy"])) { |
| $policy = $_GET["policy"]; |
| if ($policy == "no-policy" || |
| is_readable("$osu_root/spp/policy/$policy.xml")) { |
| $db->exec("UPDATE users SET policy='$policy' WHERE rowid=$id"); |
| } |
| } |
| if ($cmd == "account-type" && $id > 0 && isset($_GET["type"])) { |
| $type = $_GET["type"]; |
| if ($type == "shared") |
| $db->exec("UPDATE users SET shared=1 WHERE rowid=$id"); |
| if ($type == "default") |
| $db->exec("UPDATE users SET shared=0 WHERE rowid=$id"); |
| } |
| |
| if ($cmd == "set-osu-cred" && $id > 0) { |
| $osu_user = $_POST["osu_user"]; |
| $osu_password = $_POST["osu_password"]; |
| if (strlen($osu_user) == 0) |
| $osu_password = ""; |
| $db->exec("UPDATE users SET osu_user='$osu_user', osu_password='$osu_password' WHERE rowid=$id"); |
| } |
| |
| $dump = 0; |
| |
| if ($id > 0) { |
| |
| if (isset($_GET["dump"])) { |
| $dump = $_GET["dump"]; |
| if (!is_numeric($dump)) |
| $dump = 0; |
| } else |
| $dump = 0; |
| |
| echo "[<a href=\"users.php\">All users</a>] "; |
| if ($dump == 0) |
| echo "[<a href=\"users.php?id=$id&dump=1\">Include debug dump</a>] "; |
| else |
| echo "[<a href=\"users.php?id=$id\">Without debug dump</a>] "; |
| echo "<br>\n"; |
| |
| $row = $db->query("SELECT rowid,* FROM users WHERE rowid=$id")->fetch(); |
| |
| echo "<H3>" . $row['identity'] . "@" . $row['realm'] . "</H3>\n"; |
| |
| echo "MO: "; |
| if (strlen($row['devinfo']) > 0) { |
| echo "[<a href=\"users.php?cmd=mo&id=$id&mo=devinfo\">DevInfo</a>]\n"; |
| } |
| if (strlen($row['devdetail']) > 0) { |
| echo "[<a href=\"users.php?cmd=mo&id=$id&mo=devdetail\">DevDetail</a>]\n"; |
| } |
| if (strlen($row['pps']) > 0) { |
| echo "[<a href=\"users.php?cmd=mo&id=$id&mo=pps\">PPS</a>]\n"; |
| } |
| if (strlen($row['cert_pem']) > 0) { |
| echo "[<a href=\"users.php?cmd=cert&id=$id\">Certificate</a>]\n"; |
| } |
| echo "<BR>\n"; |
| |
| echo "Fetch PPS MO: "; |
| if ($row['fetch_pps'] == "1") { |
| echo "On next connection " . |
| "[<a href=\"users.php?cmd=fetch-pps-off&id=$id\">" . |
| "do not fetch</a>]<br>\n"; |
| } else { |
| echo "Do not fetch " . |
| "[<a href=\"users.php?cmd=fetch-pps-on&id=$id\">" . |
| "request fetch</a>]<br>\n"; |
| } |
| |
| $cert = $row['cert']; |
| if (strlen($cert) > 0) { |
| echo "Certificate fingerprint: $cert<br>\n"; |
| } |
| |
| echo "Remediation: "; |
| $rem = $row['remediation']; |
| if ($rem == "") { |
| echo "Not required"; |
| echo " [<a href=\"users.php?cmd=subrem-add-user&id=" . |
| $row['rowid'] . "\">add:user</a>]"; |
| echo " [<a href=\"users.php?cmd=subrem-add-machine&id=" . |
| $row['rowid'] . "\">add:machine</a>]"; |
| echo " [<a href=\"users.php?cmd=subrem-add-policy&id=" . |
| $row['rowid'] . "\">add:policy</a>]"; |
| echo " [<a href=\"users.php?cmd=subrem-add-free&id=" . |
| $row['rowid'] . "\">add:free</a>]"; |
| } else if ($rem == "user") { |
| echo "User [<a href=\"users.php?cmd=subrem-clear&id=" . |
| $row['rowid'] . "\">clear</a>]"; |
| } else if ($rem == "policy") { |
| echo "Policy [<a href=\"users.php?cmd=subrem-clear&id=" . |
| $row['rowid'] . "\">clear</a>]"; |
| } else if ($rem == "free") { |
| echo "Free [<a href=\"users.php?cmd=subrem-clear&id=" . |
| $row['rowid'] . "\">clear</a>]"; |
| } else { |
| echo "Machine [<a href=\"users.php?cmd=subrem-clear&id=" . |
| $row['rowid'] . "\">clear</a>]"; |
| } |
| echo "<br>\n"; |
| |
| echo "<form>Policy: <select name=\"policy\" " . |
| "onChange=\"window.location='users.php?cmd=policy&id=" . |
| $row['rowid'] . "&policy=' + this.value;\">\n"; |
| echo "<option value=\"" . $row['policy'] . "\" selected>" . $row['policy'] . |
| "</option>\n"; |
| $files = scandir("$osu_root/spp/policy"); |
| foreach ($files as $file) { |
| if (!preg_match("/.xml$/", $file)) |
| continue; |
| if ($file == $row['policy'] . ".xml") |
| continue; |
| $p = substr($file, 0, -4); |
| echo "<option value=\"$p\">$p</option>\n"; |
| } |
| echo "<option value=\"no-policy\">no policy</option>\n"; |
| echo "</select></form>\n"; |
| |
| echo "<form>Account type: <select name=\"type\" " . |
| "onChange=\"window.location='users.php?cmd=account-type&id=" . |
| $row['rowid'] . "&type=' + this.value;\">\n"; |
| if ($row['shared'] > 0) { |
| $default_sel = ""; |
| $shared_sel = " selected"; |
| } else { |
| $default_sel = " selected"; |
| $shared_sel = ""; |
| } |
| echo "<option value=\"default\"$default_sel>default</option>\n"; |
| echo "<option value=\"shared\"$shared_sel>shared</option>\n"; |
| echo "</select></form>\n"; |
| |
| echo "Phase 2 method(s): " . $row['methods'] . "<br>\n"; |
| |
| echo "<br>\n"; |
| echo "<a href=\"users.php?cmd=reset-pw&id=" . |
| $row['rowid'] . "\">Reset AAA password</a><br>\n"; |
| |
| echo "<br>\n"; |
| echo "<form action=\"users.php?cmd=set-osu-cred&id=" . $row['rowid'] . |
| "\" method=\"POST\">\n"; |
| echo "OSU credentials (if username empty, AAA credentials are used):<br>\n"; |
| echo "username: <input type=\"text\" name=\"osu_user\" value=\"" . |
| $row['osu_user'] . "\">\n"; |
| echo "password: <input type=\"password\" name=\"osu_password\">\n"; |
| echo "<input type=\"submit\" value=\"Set OSU credentials\">\n"; |
| echo "</form>\n"; |
| |
| echo "<hr>\n"; |
| |
| $user = $row['identity']; |
| $osu_user = $row['osu_user']; |
| $realm = $row['realm']; |
| } |
| |
| if ($id > 0 || ($id == 0 && $cmd == 'eventlog')) { |
| |
| if ($id == 0) { |
| echo "[<a href=\"users.php\">All users</a>] "; |
| echo "<br>\n"; |
| } |
| |
| echo "<table border=1>\n"; |
| echo "<tr>"; |
| if ($id == 0) { |
| echo "<th>user<th>realm"; |
| } |
| echo "<th>time<th>address<th>sessionID<th>notes"; |
| if ($dump > 0) |
| echo "<th>dump"; |
| echo "\n"; |
| if (isset($_GET["limit"])) { |
| $limit = $_GET["limit"]; |
| if (!is_numeric($limit)) |
| $limit = 20; |
| } else |
| $limit = 20; |
| if ($id == 0) |
| $res = $db->query("SELECT rowid,* FROM eventlog ORDER BY timestamp DESC LIMIT $limit"); |
| else if (strlen($osu_user) > 0) |
| $res = $db->query("SELECT rowid,* FROM eventlog WHERE (user='$user' OR user='$osu_user') AND realm='$realm' ORDER BY timestamp DESC LIMIT $limit"); |
| else |
| $res = $db->query("SELECT rowid,* FROM eventlog WHERE user='$user' AND realm='$realm' ORDER BY timestamp DESC LIMIT $limit"); |
| foreach ($res as $row) { |
| echo "<tr>"; |
| if ($id == 0) { |
| echo "<td>" . $row['user'] . "\n"; |
| echo "<td>" . $row['realm'] . "\n"; |
| } |
| echo "<td>" . $row['timestamp'] . "\n"; |
| echo "<td>" . $row['addr'] . "\n"; |
| echo "<td>" . $row['sessionid'] . "\n"; |
| echo "<td>" . $row['notes'] . "\n"; |
| $d = $row['dump']; |
| if (strlen($d) > 0) { |
| echo "[<a href=\"users.php?cmd=eventlog&id=" . $row['rowid'] . |
| "\">"; |
| if ($d[0] == '<') |
| echo "XML"; |
| else |
| echo "txt"; |
| echo "</a>]\n"; |
| if ($dump > 0) |
| echo "<td>" . htmlspecialchars($d) . "\n"; |
| } |
| } |
| echo "</table>\n"; |
| |
| } |
| |
| |
| if ($id == 0 && $cmd != 'eventlog') { |
| |
| echo "[<a href=\"users.php?cmd=eventlog&limit=50\">Eventlog</a>] "; |
| echo "<br>\n"; |
| |
| echo "<table border=1>\n"; |
| echo "<tr><th>User<th>Realm<th>Remediation<th>Policy<th>Account type<th>Phase 2 method(s)<th>DevId\n"; |
| |
| $res = $db->query('SELECT rowid,* FROM users WHERE phase2=1'); |
| foreach ($res as $row) { |
| echo "<tr><td><a href=\"users.php?id=" . $row['rowid'] . "\"> " . |
| $row['identity'] . " </a>"; |
| echo "<td>" . $row['realm']; |
| $rem = $row['remediation']; |
| echo "<td>"; |
| if ($rem == "") { |
| echo "Not required"; |
| } else if ($rem == "user") { |
| echo "User"; |
| } else if ($rem == "policy") { |
| echo "Policy"; |
| } else if ($rem == "free") { |
| echo "Free"; |
| } else { |
| echo "Machine"; |
| } |
| echo "<td>" . $row['policy']; |
| if ($row['shared'] > 0) |
| echo "<td>shared"; |
| else |
| echo "<td>default"; |
| echo "<td>" . $row['methods']; |
| echo "<td>"; |
| $xml = xml_parser_create(); |
| xml_parse_into_struct($xml, $row['devinfo'], $devinfo); |
| foreach($devinfo as $k) { |
| if ($k['tag'] == 'DEVID') { |
| echo $k['value']; |
| break; |
| } |
| } |
| echo "\n"; |
| } |
| echo "</table>\n"; |
| |
| } |
| |
| ?> |
| |
| </html> |
