| 1 | #!/usr/bin/perl | 
|---|
| 2 | # ipdb/cgi-bin/admin.cgi | 
|---|
| 3 | # Hack interface to make specific changes to IPDB that (for one reason | 
|---|
| 4 | # or another) can't be made through the main interface. | 
|---|
| 5 | ### | 
|---|
| 6 | # SVN revision info | 
|---|
| 7 | # $Date$ | 
|---|
| 8 | # SVN revision $Rev$ | 
|---|
| 9 | # Last update by $Author$ | 
|---|
| 10 | ### | 
|---|
| 11 |  | 
|---|
| 12 | use strict; | 
|---|
| 13 | use warnings; | 
|---|
| 14 | use CGI::Carp qw(fatalsToBrowser); | 
|---|
| 15 | use DBI; | 
|---|
| 16 | use CommonWeb qw(:ALL); | 
|---|
| 17 | use IPDB qw(:ALL); | 
|---|
| 18 | #use POSIX qw(ceil); | 
|---|
| 19 | use NetAddr::IP; | 
|---|
| 20 |  | 
|---|
| 21 | use Sys::Syslog; | 
|---|
| 22 |  | 
|---|
| 23 | openlog "IPDB-admin","pid","local2"; | 
|---|
| 24 |  | 
|---|
| 25 | # Collect the username from HTTP auth.  If undefined, we're in a test environment. | 
|---|
| 26 | my $authuser; | 
|---|
| 27 | if (!defined($ENV{'REMOTE_USER'})) { | 
|---|
| 28 | $authuser = '__temptest'; | 
|---|
| 29 | } else { | 
|---|
| 30 | $authuser = $ENV{'REMOTE_USER'}; | 
|---|
| 31 | } | 
|---|
| 32 |  | 
|---|
| 33 | if ($authuser !~ /^(kdeugau|jodyh|__temptest)$/) { | 
|---|
| 34 | print "Content-Type: text/html\n\n". | 
|---|
| 35 | "<html><head><title>Access denied</title></head><body>\n". | 
|---|
| 36 | 'Access to this tool is restricted.  Contact <a href="mailto:kdeugau@vianet.ca">Kris</a> '. | 
|---|
| 37 | "for more information.</body></html>\n"; | 
|---|
| 38 | exit; | 
|---|
| 39 | } | 
|---|
| 40 |  | 
|---|
| 41 | syslog "debug", "$authuser active"; | 
|---|
| 42 |  | 
|---|
| 43 | my %webvar = parse_post(); | 
|---|
| 44 | cleanInput(\%webvar); | 
|---|
| 45 |  | 
|---|
| 46 | my %full_alloc_types = ( | 
|---|
| 47 | "ci","Cable pool IP", | 
|---|
| 48 | "di","DSL pool IP", | 
|---|
| 49 | "si","Server pool IP", | 
|---|
| 50 | "mi","Static dialup IP", | 
|---|
| 51 | "wi","Static wireless IP", | 
|---|
| 52 | "cp","Cable pool", | 
|---|
| 53 | "dp","DSL pool", | 
|---|
| 54 | "sp","Server pool", | 
|---|
| 55 | "mp","Static dialup pool", | 
|---|
| 56 | "wp","Static wireless pool", | 
|---|
| 57 | "dn","Dialup netblock", | 
|---|
| 58 | "dy","Dynamic DSL netblock", | 
|---|
| 59 | "dc","Dynamic cable netblock", | 
|---|
| 60 | "cn","Customer netblock", | 
|---|
| 61 | "ee","End-use netblock", | 
|---|
| 62 | "rr","Routed netblock", | 
|---|
| 63 | "ii","Internal netblock", | 
|---|
| 64 | "mm","Master block" | 
|---|
| 65 | ); | 
|---|
| 66 |  | 
|---|
| 67 | my $ip_dbh = connectDB; | 
|---|
| 68 | my $sth; | 
|---|
| 69 |  | 
|---|
| 70 | print "Content-type: text/html\n\n". | 
|---|
| 71 | "<html>\n<head>\n\t<title>TEST [IPDB admin tools] TEST</title>\n</head>\n<body>\n". | 
|---|
| 72 | "<h2>IPDB - Administrative Tools</h2>\n<hr>\n"; | 
|---|
| 73 |  | 
|---|
| 74 | if(!defined($webvar{action})) { | 
|---|
| 75 | $webvar{action} = "<NULL>";   #shuts up the warnings. | 
|---|
| 76 | print qq(WARNING:  There are FAR fewer controls on what you can do here.  Use the | 
|---|
| 77 | main interface if at all possible. | 
|---|
| 78 | <hr><form action="admin.cgi" method="POST"> | 
|---|
| 79 | <input type=hidden name=action value=alloc> | 
|---|
| 80 | Allocate block from this /24: <input name=allocfrom> | 
|---|
| 81 | <input type=submit value="List available free blocks"> | 
|---|
| 82 | </form> | 
|---|
| 83 | <hr><form action="admin.cgi" method="POST"> | 
|---|
| 84 | <input type=hidden name=action value=alloctweak> | 
|---|
| 85 | Manually update allocation data in this /24: <input name=allocfrom> | 
|---|
| 86 | <input type=submit value="Show allocations"> | 
|---|
| 87 | ); | 
|---|
| 88 | } else { | 
|---|
| 89 | print '<a href="/ip/cgi-bin/admin.cgi">Back</a> to main<hr>'; | 
|---|
| 90 | } | 
|---|
| 91 |  | 
|---|
| 92 | if ($webvar{action} eq 'alloc') { | 
|---|
| 93 | fix_allocfrom(); | 
|---|
| 94 | showfree($webvar{allocfrom}); | 
|---|
| 95 | } elsif ($webvar{action} eq 'alloctweak') { | 
|---|
| 96 | fix_allocfrom(); | 
|---|
| 97 | showAllocs($webvar{allocfrom}); | 
|---|
| 98 | } elsif ($webvar{action} eq 'update') { | 
|---|
| 99 | update(); | 
|---|
| 100 | } elsif ($webvar{action} eq 'assign') { | 
|---|
| 101 | # Display a list of possible blocks within the requested block. | 
|---|
| 102 | open (HTML, "../admin_alloc.html") | 
|---|
| 103 | or croak "Could not open admin_alloc.html :$!"; | 
|---|
| 104 | my $html = join('', <HTML>); | 
|---|
| 105 | $html =~ s/\$\$MASK\$\$/$webvar{masklen}/g; | 
|---|
| 106 | $html =~ s/\$\$ALLOCFROM\$\$/$webvar{allocfrom}/g; | 
|---|
| 107 |  | 
|---|
| 108 | my $from = new NetAddr::IP $webvar{allocfrom}; | 
|---|
| 109 | my @blocklist = $from->split($webvar{masklen}); | 
|---|
| 110 | my $availblocks; | 
|---|
| 111 | foreach (@blocklist) { | 
|---|
| 112 | $availblocks .= qq(<tr><td colspan=2 align=center><input type=radio name=block value="$_">$_</td></tr>\n); | 
|---|
| 113 | } | 
|---|
| 114 | $html =~ s/\$\$BLOCKLIST\$\$/$availblocks/g; | 
|---|
| 115 |  | 
|---|
| 116 | print $html; | 
|---|
| 117 | } elsif ($webvar{action} eq 'confirm') { | 
|---|
| 118 | print "Assigning $webvar{block} to $webvar{custid} (\"$webvar{desc}\")...\n"; | 
|---|
| 119 | allocBlock($ip_dbh, $webvar{allocfrom}, $webvar{block}, $webvar{alloctype}, | 
|---|
| 120 | $webvar{custid}, $webvar{city}, $webvar{desc}, $webvar{notes}); | 
|---|
| 121 | #my ($dbh,from,block,$type,$custid,$city,$desc,$notes) = @_; | 
|---|
| 122 | } else { | 
|---|
| 123 | print "webvar{action} check failed"; | 
|---|
| 124 | } | 
|---|
| 125 |  | 
|---|
| 126 | # Hokay.  This is a little different.  We have a few specific functions here: | 
|---|
| 127 | #  -> Assign arbitrary subnet from arbitrary free space | 
|---|
| 128 | #  -> Tweak individual DB fields | 
|---|
| 129 | # | 
|---|
| 130 |  | 
|---|
| 131 |  | 
|---|
| 132 | printFooter; | 
|---|
| 133 |  | 
|---|
| 134 | $ip_dbh->disconnect; | 
|---|
| 135 |  | 
|---|
| 136 | exit; | 
|---|
| 137 |  | 
|---|
| 138 |  | 
|---|
| 139 | # Tweak allocfrom into shape. | 
|---|
| 140 | sub fix_allocfrom { | 
|---|
| 141 | if ($webvar{allocfrom} =~ /^(\d+\.){2}\d+$/) { | 
|---|
| 142 | # 3-octet class C specified | 
|---|
| 143 | $webvar{allocfrom} .= ".0/24"; | 
|---|
| 144 | } elsif ($webvar{allocfrom} =~ /^(\d+\.){3}\d+$/) { | 
|---|
| 145 | # 4-octet IP specified; | 
|---|
| 146 | $webvar{allocfrom} .= "/24"; | 
|---|
| 147 | } | 
|---|
| 148 | } | 
|---|
| 149 |  | 
|---|
| 150 |  | 
|---|
| 151 | # Do the gruntwork of allocating a block.  This should really be in IPDB.pm. | 
|---|
| 152 | sub allocBlock($$$$$$$$) { | 
|---|
| 153 | my ($dbh,undef,undef,$type,$custid,$city,$desc,$notes) = @_; | 
|---|
| 154 | my $from = new NetAddr::IP $_[1]; | 
|---|
| 155 | my $block = new NetAddr::IP $_[2]; | 
|---|
| 156 |  | 
|---|
| 157 | # First, figure out what free blocks will get mangled. | 
|---|
| 158 | if ($from eq $block) { | 
|---|
| 159 | # Whee!  Easy.  Just allocate the block | 
|---|
| 160 | } else { | 
|---|
| 161 | # The complex case.  An allocation from a larger block. | 
|---|
| 162 |  | 
|---|
| 163 | # Gotta snag the free blocks left over. | 
|---|
| 164 | my $wantmaskbits = $block->masklen; | 
|---|
| 165 | my $maskbits = $from->masklen; | 
|---|
| 166 |  | 
|---|
| 167 | my @newfreeblocks;  # Holds free blocks generated from splitting the source freeblock. | 
|---|
| 168 |  | 
|---|
| 169 | my $i=0; | 
|---|
| 170 | my $tmp_from = $from;       # So we don't munge $from | 
|---|
| 171 | while ($maskbits++ < $wantmaskbits) { | 
|---|
| 172 | my @subblocks = $tmp_from->split($maskbits); | 
|---|
| 173 | $newfreeblocks[$i++] = (($block->within($subblocks[0])) ? $subblocks[1] : $subblocks[0]); | 
|---|
| 174 | $tmp_from = ( ($block->within($subblocks[0])) ? $subblocks[0] : $subblocks[1] ); | 
|---|
| 175 | } # while | 
|---|
| 176 |  | 
|---|
| 177 | # insert the data here.  Woo. | 
|---|
| 178 | # Begin SQL transaction block | 
|---|
| 179 | eval { | 
|---|
| 180 | # Delete old freeblocks entry | 
|---|
| 181 | $sth = $ip_dbh->prepare("delete from freeblocks where cidr='$from'"); | 
|---|
| 182 | $sth->execute(); | 
|---|
| 183 |  | 
|---|
| 184 | # Insert the new freeblocks entries | 
|---|
| 185 | $sth = $ip_dbh->prepare("insert into freeblocks values (?, ?, ". | 
|---|
| 186 | "(select city from routed where cidr >>= '$block'),'y')"); | 
|---|
| 187 | foreach my $block (@newfreeblocks) { | 
|---|
| 188 | $sth->execute("$block", $block->masklen); | 
|---|
| 189 | } | 
|---|
| 190 | # Insert the allocations entry | 
|---|
| 191 | $sth = $ip_dbh->prepare("insert into allocations values ('$block',". | 
|---|
| 192 | "'$custid','$type','$city','$desc','$notes',".$block->masklen.")"); | 
|---|
| 193 | $sth->execute; | 
|---|
| 194 |  | 
|---|
| 195 | $ip_dbh->commit; | 
|---|
| 196 | }; # end eval | 
|---|
| 197 | if ($@) { | 
|---|
| 198 | carp "Transaction aborted because $@"; | 
|---|
| 199 | eval { $ip_dbh->rollback; }; | 
|---|
| 200 | syslog "err", "Allocation of '$block' to '$custid' as ". | 
|---|
| 201 | "'$type' by $authuser failed: '$@'"; | 
|---|
| 202 | print "Allocation of $block as $full_alloc_types{$type} failed.\n"; | 
|---|
| 203 | } else { | 
|---|
| 204 | syslog "notice", "$authuser allocated '$block' to '$custid'". | 
|---|
| 205 | " as '$type'"; | 
|---|
| 206 | print "OK!<br>\n"; | 
|---|
| 207 | } | 
|---|
| 208 |  | 
|---|
| 209 | } | 
|---|
| 210 | # need to get /24 that block is part of | 
|---|
| 211 | my @bits = split /\./, $webvar{block}; | 
|---|
| 212 | $bits[3] = "0/24"; | 
|---|
| 213 | showAllocs((join ".", @bits)); | 
|---|
| 214 | } | 
|---|
| 215 |  | 
|---|
| 216 | # List free blocks in a /24 for arbitrary manual allocation | 
|---|
| 217 | sub showfree($) { | 
|---|
| 218 | my $cidr = new NetAddr::IP $_[0]; | 
|---|
| 219 | print "Showing free blocks in $cidr<br>\n". | 
|---|
| 220 | "<table border=1>\n"; | 
|---|
| 221 | $sth = $ip_dbh->prepare("select * from freeblocks where cidr <<= '$cidr' order by cidr"); | 
|---|
| 222 | $sth->execute; | 
|---|
| 223 | while (my @data = $sth->fetchrow_array) { | 
|---|
| 224 | my $temp = new NetAddr::IP $data[0]; | 
|---|
| 225 | print "<tr><form action=admin.cgi method=POST><input type=hidden name=action value=assign>\n". | 
|---|
| 226 | qq(<td>$temp<input type=hidden name=allocfrom value="$temp"></td>\n). | 
|---|
| 227 | "<td>". | 
|---|
| 228 | (($temp->masklen == 30) ? '<input type=hidden name=masklen value=30>30' | 
|---|
| 229 | : "<select name=masklen><option>30</option>\n<option>29</option>\n") . | 
|---|
| 230 | (($temp->masklen < 29) ? "<option>28</option>\n" : '') . | 
|---|
| 231 | (($temp->masklen < 28) ? "<option>27</option>\n" : '') . | 
|---|
| 232 | (($temp->masklen < 27) ? "<option>26</option>\n" : '') . | 
|---|
| 233 | (($temp->masklen < 26) ? "<option>25</option>\n" : '') . | 
|---|
| 234 | (($temp->masklen < 25) ? "<option>24</option>\n" : '') . | 
|---|
| 235 | "</td>". | 
|---|
| 236 | qq(<td>$data[2]</td><td><input type=submit value="Allocate from here"></td>). | 
|---|
| 237 | "\n</form></tr>\n"; | 
|---|
| 238 | } | 
|---|
| 239 | print "</table>\n"; | 
|---|
| 240 | } | 
|---|
| 241 |  | 
|---|
| 242 |  | 
|---|
| 243 | # Show allocations to allow editing. | 
|---|
| 244 | sub showAllocs($) { | 
|---|
| 245 | my $cidr = new NetAddr::IP $_[0]; | 
|---|
| 246 | print "Edit custID, allocation type, city for allocations in ". | 
|---|
| 247 | "$cidr:\n<table border=1>"; | 
|---|
| 248 | $sth = $ip_dbh->prepare("select * from allocations where cidr <<= '$cidr' order by cidr"); | 
|---|
| 249 | $sth->execute; | 
|---|
| 250 | while (my @data = $sth->fetchrow_array) { | 
|---|
| 251 | print "<tr><form action=admin.cgi method=POST><input type=hidden name=action value=update>\n". | 
|---|
| 252 | qq(<td>$data[0]<input type=hidden value="$data[0]" name=block></td>\n). | 
|---|
| 253 | qq(<td><input name=custid value="$data[1]"></td>\n); | 
|---|
| 254 |  | 
|---|
| 255 | print "<td><select name=alloctype><option". | 
|---|
| 256 | (($data[2] eq 'cn') ? ' selected' : '') ." value='cn'>Customer netblock</option>\n<option". | 
|---|
| 257 | (($data[2] eq 'si') ? ' selected' : '') ." value='si'>Static IP - Server pool</option>\n<option". | 
|---|
| 258 | (($data[2] eq 'ci') ? ' selected' : '') ." value='ci'>Static IP - Cable</option>\n<option". | 
|---|
| 259 | (($data[2] eq 'di') ? ' selected' : '') ." value='di'>Static IP - DSL</option>\n<option". | 
|---|
| 260 | (($data[2] eq 'mi') ? ' selected' : '') ." value='mi'>Static IP - Dialup</option>\n<option". | 
|---|
| 261 | (($data[2] eq 'wi') ? ' selected' : '') ." value='wi'>Static IP - Wireless</option>\n<option". | 
|---|
| 262 | (($data[2] eq 'sp') ? ' selected' : '') ." value='sp'>Static Pool - Server pool</option>\n<option". | 
|---|
| 263 | (($data[2] eq 'cp') ? ' selected' : '') ." value='cp'>Static Pool - Cable</option>\n<option". | 
|---|
| 264 | (($data[2] eq 'dp') ? ' selected' : '') ." value='dp'>Static Pool - DSL</option>\n<option". | 
|---|
| 265 | (($data[2] eq 'mp') ? ' selected' : '') ." value='mp'>Static Pool - Dialup</option>\n<option". | 
|---|
| 266 | (($data[2] eq 'wp') ? ' selected' : '') ." value='wp'>Static Pool - Wireless</option>\n<option". | 
|---|
| 267 | (($data[2] eq 'ee') ? ' selected' : '') ." value='ee'>End-use netblock</option>\n<option". | 
|---|
| 268 | (($data[2] eq 'dn') ? ' selected' : '') ." value='dn'>Dialup netblock</option>\n<option". | 
|---|
| 269 | (($data[2] eq 'dy') ? ' selected' : '') ." value='dy'>Dynamic DSL netblock</option>\n<option". | 
|---|
| 270 | (($data[2] eq 'dc') ? ' selected' : '') ." value='dc'>Dynamic cable netblock</option>\n<option". | 
|---|
| 271 | (($data[2] eq 'ii') ? ' selected' : '') ." value='ii'>Internal netblock</option>\n". | 
|---|
| 272 | "</select></td>\n"; | 
|---|
| 273 | print qq(<td><input name=city value="$data[3]"></td>\n). | 
|---|
| 274 | "<td>$data[4]</td><td>$data[5]</td>". | 
|---|
| 275 | qq(<td><input type=submit value="Update"></td></form></tr>\n); | 
|---|
| 276 | } | 
|---|
| 277 | print "</table>\n"; | 
|---|
| 278 |  | 
|---|
| 279 | # notes | 
|---|
| 280 | print "<hr><b>Notes:</b>\n". | 
|---|
| 281 | "<ul>\n<li>Use the main interface to update description and notes fields\n". | 
|---|
| 282 | "<li>Changing the allocation type here will NOT affect IP pool data.\n". | 
|---|
| 283 | "</ul>\n"; | 
|---|
| 284 | } | 
|---|
| 285 |  | 
|---|
| 286 |  | 
|---|
| 287 | # Stuff updates into DB | 
|---|
| 288 | sub update { | 
|---|
| 289 | eval { | 
|---|
| 290 | # Relatively simple SQL transaction here.  Note that we're deliberately NOT | 
|---|
| 291 | # updating notes/desc here as it's available through the main interface. | 
|---|
| 292 | $sth = $ip_dbh->prepare("update allocations set custid='$webvar{custid}',". | 
|---|
| 293 | "city='$webvar{city}',type='$webvar{alloctype}' where cidr='$webvar{block}'"); | 
|---|
| 294 | $sth->execute; | 
|---|
| 295 | $ip_dbh->commit; | 
|---|
| 296 | }; | 
|---|
| 297 | if ($@) { | 
|---|
| 298 | carp "Transaction aborted because $@"; | 
|---|
| 299 | eval { $ip_dbh->rollback; }; | 
|---|
| 300 | syslog "err", "$authuser could not update block/IP '$webvar{block}': '$@'"; | 
|---|
| 301 | } else { | 
|---|
| 302 | # If we get here, the operation succeeded. | 
|---|
| 303 | syslog "notice", "$authuser updated $webvar{block}"; | 
|---|
| 304 | print "Allocation $webvar{block} updated<hr>\n"; | 
|---|
| 305 | } | 
|---|
| 306 | # need to get /24 that block is part of | 
|---|
| 307 | my @bits = split /\./, $webvar{block}; | 
|---|
| 308 | $bits[3] = "0/24"; | 
|---|
| 309 | showAllocs((join ".", @bits)); | 
|---|
| 310 | } | 
|---|