mod_userdir.c revision b980ad7fdc218b4855cde9f75a747527f50c554d
3802a3d3d7af51ddff31943d5514382f01265770Lennart Poettering/* ====================================================================
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * The Apache Software License, Version 1.1
12b42c76672a66c2d4ea7212c14f8f1b5a62b78dTom Gundersen *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * Copyright (c) 2000 The Apache Software Foundation. All rights
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * reserved.
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * Redistribution and use in source and binary forms, with or without
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek * modification, are permitted provided that the following conditions
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * are met:
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek *
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek * 1. Redistributions of source code must retain the above copyright
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek * notice, this list of conditions and the following disclaimer.
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * 2. Redistributions in binary form must reproduce the above copyright
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek * notice, this list of conditions and the following disclaimer in
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek * the documentation and/or other materials provided with the
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek * distribution.
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * 3. The end-user documentation included with the redistribution,
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek * if any, must include the following acknowledgment:
5de0ccffcc4a5a946102a14e0b0e681d964e3225Zbigniew Jędrzejewski-Szmek * "This product includes software developed by the
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * Apache Software Foundation (http://www.apache.org/)."
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * Alternately, this acknowledgment may appear in the software itself,
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * if and wherever such third-party acknowledgments normally appear.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * 4. The names "Apache" and "Apache Software Foundation" must
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * not be used to endorse or promote products derived from this
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * software without prior written permission. For written
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * permission, please contact apache@apache.org.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * 5. Products derived from this software may not be called "Apache",
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * nor may "Apache" appear in their name, without prior written
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * permission of the Apache Software Foundation.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * DISCLAIMED. IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * SUCH DAMAGE.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * ====================================================================
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * This software consists of voluntary contributions made by many
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * individuals on behalf of the Apache Software Foundation. For more
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * information on the Apache Software Foundation, please see
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * <http://www.apache.org/>.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * Portions of this software are based upon public domain software
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * originally written at the National Center for Supercomputing Applications,
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * University of Illinois, Urbana-Champaign.
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering */
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering/*
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * mod_userdir... implement the UserDir command. Broken away from the
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * Alias stuff for a couple of good and not-so-good reasons:
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering *
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * 1) It shows a real minimal working example of how to do something like
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * this.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * 2) I know people who are actually interested in changing this *particular*
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * aspect of server functionality without changing the rest of it. That's
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * what this whole modular arrangement is supposed to be good at...
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * Modified by Alexei Kosut to support the following constructs
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * (server running at www.foo.com, request for /~bar/one/two.html)
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * UserDir public_html -> ~bar/public_html/one/two.html
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * UserDir /usr/web -> /usr/web/bar/one/two.html
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * UserDir /home/ * /www -> /home/bar/www/one/two.html
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * NOTE: theses ^ ^ space only added allow it to work in a comment, ignore
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * UserDir http://x/users -> (302) http://x/users/bar/one/two.html
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * UserDir http://x/ * /y -> (302) http://x/bar/y/one/two.html
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * NOTE: here also ^ ^
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * In addition, you can use multiple entries, to specify alternate
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * user directories (a la Directory Index). For example:
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * UserDir public_html /usr/web http://www.xyz.com/users
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * Modified by Ken Coar to provide for the following:
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * UserDir disable[d] username ...
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * UserDir enable[d] username ...
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering *
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * If "disabled" has no other arguments, *all* ~<username> references are
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * disabled, except those explicitly turned on with the "enabled" keyword.
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering */
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#if !defined(WIN32) && !defined(OS2) && !defined(BEOS)
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#define HAVE_UNIX_SUEXEC
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#endif
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#include "apr_strings.h"
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#include "apr_user.h"
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#include "ap_config.h"
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#include "httpd.h"
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#include "http_config.h"
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#include "http_request.h"
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek#ifdef HAVE_UNIX_SUEXEC
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#include "unixd.h" /* Contains the suexec_identity hook used on Unix */
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#endif
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#ifdef HAVE_UNISTD_H
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#include <unistd.h>
922d948b9f9dc4b90ac70d729d87fe505a58481fSusant Sahani#endif
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek#ifdef HAVE_STRINGS_H
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek#include <strings.h>
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#endif
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering/* The default directory in user's home dir */
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek#ifndef DEFAULT_USER_DIR
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek#define DEFAULT_USER_DIR "public_html"
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#endif
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmekmodule userdir_module;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poetteringtypedef struct userdir_config {
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering int globally_disabled;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering char *userdir;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering apr_table_t *enabled_users;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering apr_table_t *disabled_users;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering} userdir_config;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering/*
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * Server config for this module: global disablement flag, a list of usernames
7f3fdb7f19a109fa3d1be92926bfe4cea1817da5Jakub Wilk * ineligible for UserDir access, a list of those immune to global (but not
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * explicit) disablement, and the replacement string for all others.
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering */
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poetteringstatic void *create_userdir_config(apr_pool_t *p, server_rec *s)
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering{
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering userdir_config
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * newcfg = (userdir_config *) apr_pcalloc(p, sizeof(userdir_config));
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering newcfg->globally_disabled = 0;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering newcfg->userdir = DEFAULT_USER_DIR;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering newcfg->enabled_users = apr_make_table(p, 4);
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering newcfg->disabled_users = apr_make_table(p, 4);
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering return (void *) newcfg;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering}
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#define O_DEFAULT 0
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#define O_ENABLE 1
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering#define O_DISABLE 2
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poetteringstatic const char *set_user_dir(cmd_parms *cmd, void *dummy, const char *arg)
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek{
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering userdir_config
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering * s_cfg = (userdir_config *) ap_get_module_config
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek (
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek cmd->server->module_config,
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering &userdir_module
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering );
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek char *username;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek const char
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek *usernames = arg;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek char *kw = ap_getword_conf(cmd->pool, &usernames);
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek apr_table_t *usertable;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek /*
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * Let's do the comparisons once.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek */
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek if ((!strcasecmp(kw, "disable")) || (!strcasecmp(kw, "disabled"))) {
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek /*
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * If there are no usernames specified, this is a global disable - we
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * need do no more at this point than record the fact.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek */
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek if (strlen(usernames) == 0) {
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek s_cfg->globally_disabled = 1;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek return NULL;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek }
8474b70c3a3842cdf3d51f331dd117ab6421f6d0Zbigniew Jędrzejewski-Szmek usertable = s_cfg->disabled_users;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek }
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek else if ((!strcasecmp(kw, "enable")) || (!strcasecmp(kw, "enabled"))) {
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek /*
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * The "disable" keyword can stand alone or take a list of names, but
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * the "enable" keyword requires the list. Whinge if it doesn't have
8474b70c3a3842cdf3d51f331dd117ab6421f6d0Zbigniew Jędrzejewski-Szmek * it.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek */
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek if (strlen(usernames) == 0) {
cc98b3025eeb89addb76a27390cb2baca4eab8b9Torstein Husebø return "UserDir \"enable\" keyword requires a list of usernames";
f131770b1465fbf423881f16ba85523a05f846feVeres Lajos }
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek usertable = s_cfg->enabled_users;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek }
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek else {
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek /*
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * If the first (only?) value isn't one of our keywords, just copy
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * the string to the userdir string.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek */
8474b70c3a3842cdf3d51f331dd117ab6421f6d0Zbigniew Jędrzejewski-Szmek s_cfg->userdir = apr_pstrdup(cmd->pool, arg);
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek return NULL;
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt }
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering /*
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * Now we just take each word in turn from the command line and add it to
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * the appropriate table.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek */
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek while (*usernames) {
8474b70c3a3842cdf3d51f331dd117ab6421f6d0Zbigniew Jędrzejewski-Szmek username = ap_getword_conf(cmd->pool, &usernames);
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek apr_table_setn(usertable, username, kw);
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek }
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek return NULL;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek}
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmekstatic const command_rec userdir_cmds[] = {
8474b70c3a3842cdf3d51f331dd117ab6421f6d0Zbigniew Jędrzejewski-Szmek AP_INIT_RAW_ARGS("UserDir", set_user_dir, NULL, RSRC_CONF,
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek "the public subdirectory in users' home directories, or "
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek "'disabled', or 'disabled username username...', or "
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek "'enabled username username...'"),
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek {NULL}
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek};
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poetteringstatic int translate_userdir(request_rec *r)
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek{
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering void *server_conf = r->server->module_config;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering const userdir_config *s_cfg =
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek (userdir_config *) ap_get_module_config(server_conf, &userdir_module);
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering char *name = r->uri;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek const char *userdirs = s_cfg->userdir;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek const char *w, *dname;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering char *redirect;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering char *x = NULL;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek apr_finfo_t statbuf;
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek /*
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * If the URI doesn't match our basic pattern, we've nothing to do with
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * it.
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek */
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek if (
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering (s_cfg->userdir == NULL) ||
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering (name[0] != '/') ||
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek (name[1] != '~')
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek ) {
4dfefc1914bad6a025e2d6738999e45b74715002Zbigniew Jędrzejewski-Szmek return DECLINED;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering }
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering dname = name + 2;
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering w = ap_getword(r->pool, &dname, '/');
dc83f27a7cf03757dec11a69ec18504ad4ea8f89Lennart Poettering
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek /*
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * The 'dname' funny business involves backing it up to capture the '/'
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * delimiting the "/~user" part from the rest of the URL, in case there
edf2573743b25273bee020230a60f1a054b8ec60Zbigniew Jędrzejewski-Szmek * was one (the case where there wasn't being just "GET /~user HTTP/1.0",
* for which we don't want to tack on a '/' onto the filename).
*/
if (dname[-1] == '/') {
--dname;
}
/*
* If there's no username, it's not for us. Ignore . and .. as well.
*/
if (w[0] == '\0' || (w[1] == '.' && (w[2] == '\0' || (w[2] == '.' && w[3] == '\0')))) {
return DECLINED;
}
/*
* Nor if there's an username but it's in the disabled list.
*/
if (apr_table_get(s_cfg->disabled_users, w) != NULL) {
return DECLINED;
}
/*
* If there's a global interdiction on UserDirs, check to see if this
* name is one of the Blessed.
*/
if (
s_cfg->globally_disabled &&
(apr_table_get(s_cfg->enabled_users, w) == NULL)
) {
return DECLINED;
}
/*
* Special cases all checked, onward to normal substitution processing.
*/
while (*userdirs) {
const char *userdir = ap_getword_conf(r->pool, &userdirs);
char *filename = NULL;
if (ap_strchr_c(userdir, '*'))
x = ap_getword(r->pool, &userdir, '*');
if (userdir[0] == '\0' || ap_os_is_path_absolute(userdir)) {
if (x) {
#ifdef HAVE_DRIVE_LETTERS
/*
* Crummy hack. Need to figure out whether we have been
* redirected to a URL or to a file on some drive. Since I
* know of no protocols that are a single letter, ignore
* a : as the first or second character, and assume a file
* was specified
*
* XXX: Still no good for NETWARE, since : is embedded (sys:/home)
*/
if (strchr(x + 2, ':'))
#else
if (strchr(x, ':'))
#endif /* HAVE_DRIVE_LETTERS */
{
redirect = apr_pstrcat(r->pool, x, w, userdir, dname, NULL);
apr_table_setn(r->headers_out, "Location", redirect);
return HTTP_MOVED_TEMPORARILY;
}
else
filename = apr_pstrcat(r->pool, x, w, userdir, NULL);
}
else
filename = apr_pstrcat(r->pool, userdir, "/", w, NULL);
}
else if (ap_strchr_c(userdir, ':')) {
redirect = apr_pstrcat(r->pool, userdir, "/", w, dname, NULL);
apr_table_setn(r->headers_out, "Location", redirect);
return HTTP_MOVED_TEMPORARILY;
}
else {
#if APR_HAS_USER
char *homedir;
if (apr_get_home_directory(&homedir, w, r->pool) == APR_SUCCESS) {
#ifdef OS2 /* XXX should this OS/2 logic move to APR? */
/* Need to manually add user name for OS/2 */
filename = apr_pstrcat(r->pool, homedir, w, "/", userdir, NULL);
#else
filename = apr_pstrcat(r->pool, homedir, "/", userdir, NULL);
#endif
}
else {
/* XXX old code ignored this error... */
}
#else
return DECLINED;
#endif
}
/*
* Now see if it exists, or we're at the last entry. If we are at the
* last entry, then use the filename generated (if there is one)
* anyway, in the hope that some handler might handle it. This can be
* used, for example, to run a CGI script for the user.
*/
if (filename && (!*userdirs ||
apr_stat(&statbuf, filename, r->pool) == APR_SUCCESS)) {
r->filename = apr_pstrcat(r->pool, filename, dname, NULL);
/* when statbuf contains info on r->filename we can save a syscall
* by copying it to r->finfo
*/
if (*userdirs && dname[0] == 0)
r->finfo = statbuf;
/* For use in the get_suexec_identity phase */
apr_table_setn(r->notes, "mod_userdir_user", w);
return OK;
}
}
return DECLINED;
}
#ifdef HAVE_UNIX_SUEXEC
static ap_unix_identity_t *get_suexec_id_doer(const request_rec *r)
{
const char *username = apr_table_get(r->notes, "mod_userdir_user");
struct passwd *pw = NULL;
ap_unix_identity_t *ugid = NULL;
if (username == NULL) {
return NULL;
}
if ((ugid = apr_palloc(r->pool, sizeof(ap_unix_identity_t *))) == NULL) {
return NULL;
}
ugid->uid = pw->pw_uid;
ugid->gid = pw->pw_gid;
return ugid;
}
#endif /* HAVE_UNIX_SUEXEC */
static void register_hooks(apr_pool_t *p)
{
static const char * const aszSucc[]={ "mod_alias.c",NULL };
ap_hook_translate_name(translate_userdir,NULL,aszSucc,APR_HOOK_MIDDLE);
#ifdef HAVE_UNIX_SUEXEC
ap_hook_get_suexec_identity(get_suexec_id_doer,NULL,NULL,APR_HOOK_MIDDLE);
#endif
}
module userdir_module = {
STANDARD20_MODULE_STUFF,
NULL, /* dir config creater */
NULL, /* dir merger --- default is to override */
create_userdir_config, /* server config */
NULL, /* merge server config */
userdir_cmds, /* command apr_table_t */
register_hooks /* register hooks */
};