1	# =====================================================================
     2	# editUser.awk: RPC I/O function for rpclib/editUser.
     3	#
     4	# Copyright (c) 2007,2008,2009,2010 Carlo Strozzi
     5	#
     6	# This program is free software; you can redistribute it and/or modify
     7	# it under the terms of the GNU General Public License as published by
     8	# the Free Software Foundation; version 2 dated June, 1991.
     9	#
    10	# This program is distributed in the hope that it will be useful,
    11	# but WITHOUT ANY WARRANTY; without even the implied warranty of
    12	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    13	# GNU General Public License for more details.
    14	#
    15	# You should have received a copy of the GNU General Public License
    16	# along with this program; if not, write to the Free Software
    17	# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
    18	#
    19	# =====================================================================
    20	
    21	# =====================================================================
    22	# void _userproc(int mode)
    23	# =====================================================================
    24	
    25	function _userproc(mode,			       value,tmp,len) {
    26	
    27	   if (mode == _O_REQUEST) {				# request.
    28	
    29	      # target group
    30	      value = _request("1",1)
    31	
    32	      # group must not be null and it may not contain the
    33	      # unescaped ``.'' character.
    34	
    35	      if (value != _NULL && value !~ /\./) {
    36		 _rcset("cgi.group",unixify(value))
    37		 _rcset("cgi.group.literal",value)
    38	      }
    39	
    40	      # target account.
    41	      len = length((value=_request("2",1)))
    42	
    43	      if (value ~ /^[a-z][-_a-z0-9.]*$/ && len > 4 && len < 17) {
    44		 _rcset("cgi.auth.user",value)
    45	
    46		 # escape grep(1) regexp chars in user-id.
    47		 #gsub(/[][\\^$.*|()]/,"\\\&",value)
    48		 gsub(/[][\\^$.*|()]/,"\\&",value)
    49		 _rcset("cgi.grep.user",value)
    50	      }
    51	
    52	      # The following test is necessary since the address could,
    53	      # at least in theory, have been set to any string by the
    54	      # remote user, due to how it is handled to cope with stunnel(8)
    55	      # and the lack of transproxy support in kernel 2.4.x.
    56	
    57	      if (_isipaddr(ENVIRON["REMOTE_ADDR"]) == _TRUE)
    58					value = ENVIRON["REMOTE_ADDR"]
    59	      else value = "0.0.0.0"
    60	
    61	      _rcset("REMOTE_ADDR",value)
    62	   }
    63	
    64	   else {					# response.
    65	
    66	      # handle conditionals in templates.
    67	
    68	      ifsections()
    69	
    70	      # Strip leading and trailing commas from group names.
    71	      value = _rcget("tpl.var.tw.auth.group",1)
    72	      sub(/^,+/,"",value); sub(/,+$/,"",value)
    73	      _response("tpl.var.tw.auth.group",value)
    74	   }
    75	} 
    76	
    77	# EOF