Hi
As various people have asked for this, I thought I'd best post it to
the list.
The script is intended to be run with basic or integrated
Windows authentication set via ISM, so it knows who has invoked it.
That's
so support staff here can use it to look up anyone's reports, while
individuals are restricted to their own ones. Also if invoked without
SSL it
redirects to an SSL version right at the start, to protect passwords.
Finally there are some site-specific items: the Const statements at the
start, and the function "Footer" at the end. You might need to change
these
to get it to work.
Oh, and I've had to change the extension from "asp" to "txt" to keep
Outlook
quiet!
Regards
Max Caines
IT Services, University of Wolverhampton
Wolverhampton, West Midlands WV1 1SB
Tel: 01902 322245 Fax: 01902 322777
<%
Const SearchBase = "<LDAP://ou=2kusers,dc=unv,dc=wlv,dc=ac,dc=uk>"
Const WirelessSupportGroup = "LDAP://cn=Student Wireless,ou=groups,ou=2kusers,dc=unv,dc=wlv,dc=ac,dc=uk"
Const ListUserURL = "https://register.wlv.ac.uk/ListAccounts.asp?nametofind="
Const GetReportURL = "https://cam.unv.wlv.ac.uk/admin/cisco_api.jsp"
Dim strQuery, strTitle, strAddress, strFilter, strFooter, strGif, arrReports, strWho, strType, strUser, strWhat
Dim objXMLHTTP, strURL, re, oMatches, oMatch, strErrText, strParams,
i, iCount, strText, strFunction, strNumber
SetLocale("en-gb")
strURL = "https://" & Request.ServerVariables("SERVER_NAME") & Request.ServerVariables("SCRIPT_NAME")
strTitle = "Lookup Clean Access reports"
strFooter = Footer
strWho = Request.ServerVariables("LOGON_USER")
if strWho = "" then Reply "Access to this script must be authenticated. Please report this error to the Service Desk.", false
strWho = replace(strWho, "UNV\", "")
if Request.QueryString.Count = 0 then
strFunction = ""
strUser = ""
strAddress = ""
strNumber = ""
else
strFunction = Request.QueryString("function")
strUser = Request.QueryString("user")
strAddress = ucase(Request.QueryString("address"))
strNumber = Request.QueryString("number")
end if
' Most people can only look themselves up
if not IsAdmin() and strFunction <> "report" then
strFunction = "find"
strUser = strWho
strAddress = ""
strNumber = ""
end if
if strFunction = "" then
%>
<html>
<head>
<title><% = strTitle %></title>
<LINK REL="stylesheet" TYPE="text/css" HREF="style.css">
<script language='JavaScript'>
<!--
function changeType(n) {
document.forms[0].querytype[n].click();
}
function findUser() {
var url = '<% = ListUserURL %>' +
escape(document.forms[0].user.value) + '&staff=y&students=y&listaction=' +
escape('window.opener.setUser(val1, val2);');
window.open(url, 'directory', 'width=600,height=350,scrollbars=yes,resizable=yes');
}
function setUser(cn, name) {
document.forms[0].user.value = cn;
}
function checkMAC(f) {
var re, m;
re = /^([0-9a-fA-F]{2})[ -.:]?([0-9a-fA-F]{2})[ -.:]?([0-9a-fA-F]{2})[ -.:]?([0-9a-fA-F]{2})[ -.:]?([0-9a-fA-F]{2})[ -.:]?([0-9a-fA-F]{2})$/;
m = re.exec(f.value);
if (!m) {
alert("The MAC address must be 12 hex digits, with optional hyphens");
f.select();
f.focus();
return(false);
}
f.value = m[1] + ":" + m[2] + ":" + m[3] + ":" + m[4] + ":" +
m[5] + ":" + m[6];
return(true)
}
function checkData() {
with (document.forms[0]) {
if (querytype[0].checked)
return(checkMAC(address));
else if (querytype[1].checked)
if (user.value == "") {
alert("You have not supplied a usercode or student number");
user.focus();
return(false);
}
}
return(true);
}
//-->
</script>
</head>
<body bgcolor="white"><IMG SRC="banner.gif" ALT="University of Wolverhampton">
<h1><% = strTitle %></h1>
<hr>
<FORM ACTION='<% = strURL %>' METHOD='GET' onsubmit='return(checkData())'>
Which MAC addresses are you interested in?
<TABLE BORDER=0 WIDTH=60%>
<TR><TD><input type='radio' name='querytype' value='address' checked></td><td>A specific MAC address - enter it here:</td>
<td><input name='address' size=17 maxsize=17 onfocus='changeType(0)'></td></tr>
<tr><td><input type='radio' name='querytype' value='user'></td><td>All addresses registered to a user -
enter the usercode or student number, or enter the name or mail address and click <i>Search</i>:</td>
<td><input name='user' size=17 maxsize=17 onfocus='changeType(1)'> <input type='button' value='Search' onClick='findUser()'></td></tr>
</table>
<p>
Then press <i>Continue</i> to get the information for the required system.
<p><input type="submit" value="Continue">
<input type='hidden' name='function' value='find'>
</form>
<P>
<% = strFooter %>
</body>
</html>
<%
elseif strFunction = "find" then
Set objXMLHTTP = Server.CreateObject("MSXML2.ServerXMLHTTP") 'create the xmlhttp object
objXMLHTTP.Open "POST", GetReportURL, false
objXMLHTTP.setRequestHeader "Content-Type", "application/x-www-form-urlencoded"
if strAddress <> "" then
strFilter = "mac=" & strAddress
strWhat = "the system with this address"
elseif strUser <> "" then
strFilter = "user=" & strUser
if strUser = strWho then
strWhat = "systems owned by you"
else
strWhat = "systems owned by this user"
end if
else
Reply "You must supply either a username or a MAC address", false
end if
strParams = "admin=admin&passwd=xO94p%3BZk&op=getreports&"
& strFilter & "&timeRange=-168,now&showText=true"
objXMLHTTP.Send strParams
if objXMLHTTP.status = 200 then
set re = new Regexp
re.Pattern = "<!--error=(.*)-->"
On Error Resume Next
Set oMatches = re.Execute(objXMLHTTP.responseText)
Set oMatch = oMatches(0)
strErrText = oMatch.SubMatches(0)
On Error Goto 0
if Err <> 0 then Reply "Server error: " &
objXMLHTTP.responseText, false
else
Reply "The server returned status code " & objXMLHTTP.status, false
end if
if strErrText = "0" then
re.Pattern = "<!--count=(.*)-->"
On Error Resume Next
Set oMatches = re.Execute(objXMLHTTP.responseText)
Set oMatch = oMatches(0)
iCount = cint(oMatch.SubMatches(0))
On Error Goto 0
if Err <> 0 then Reply "Server error: " &
objXMLHTTP.responseText, false
else
Reply "The server returned status code " & objXMLHTTP.status, false
end if
if iCount = 0 then Reply "There are no check reports from the
last week for " & strWhat, false
re.Pattern = "<!--
status=([^,]*),user=([^,]*),agentType=[^,]*,ip=([^,]*),mac=([^,]*),os=([^,]*),time=([^,]*),text=(.*?)-->"
re.Global = true
strText = replace(objXMLHTTP.responseText, vbLf, "")
On Error Resume Next
Set oMatches = re.Execute(strText)
On Error Goto 0
if Err <> 0 then Reply "Server error: " & objXMLHTTP.responseText, false
%>
<html>
<head>
<title><% = strTitle %></title>
<style type="text/css">
div.tableContainer {
width: 55%; /* table width will be 99% of this*/
height: 348px; /* must be greater than tbody*/
overflow: auto;
}
</style>
<LINK REL="stylesheet" TYPE="text/css" HREF="scrolltable.css">
<LINK REL="stylesheet" TYPE="text/css" HREF="scrolltable-print.css" MEDIA="print">
</head>
<body bgcolor="white"><IMG SRC="banner.gif" ALT="University of Wolverhampton">
<h1><% = strTitle %></h1>
<hr>
This table shows all check reports from the last week for <% =
strWhat %>.
Click on the tick or cross in the result field to get the report details.
<p>
<form action='<% = strURL %>' method='post'>
<div class="tableContainer" id="data">
<table cellspacing="0">
<thead>
<tr><td width=20%>MAC</td><td width=20%>IP</td><td width=20%>OS</td><td width=20%>Time</td><td width=20%>Result</td></tr>
</thead>
<tbody>
<%
ReDim arrReports(iCount)
i = 1
for each oMatch in oMatches
if oMatch.SubMatches(0) = "success" then
strGif = "img/tick.gif"
else
strGif = "img/cross.gif"
end if
arrReports(i) = oMatch.SubMatches(6)
Response.Write "<tr><td>" & LCase(oMatch.SubMatches(3)) & _
"</td><td class='centered'>" & oMatch.SubMatches(2) & "</
td><td class='centered'>" & _
oMatch.SubMatches(4) & "</td><td class='centered'>" & oMatch.SubMatches(5) & _
"</td><td class='centered'><input type='image' src='" & strGif & "' height=15 width=15 border=0 " & _
"onClick=""javascript:window.open('" & strURL & "?function=report&number=" & i & "', " & _
"'report', 'toolbar=no, width=600, height=400, scrollbars=yes, resizable=yes'); return false;""></td></tr>" & vbCrLf
i = i + 1
next
Session("arrReports") = arrReports
%>
</tbody>
</table>
</div>
<p>
<input type='button' value='Start again' onClick='location="<%= strURL %>"'>
</form>
<P>
<% = strFooter %>
</body>
</html>
<%
elseif strFunction = "report" then
arrReports = Session("arrReports")
if not IsNumeric(strNumber) then Reply "Missing report number", false
Response.Write arrReports(strNumber) & vbCrLf
%>
<P>
<form><input type='button' value="Close" onclick="self.close()"></form>
</body>
</html>
<%
end if
sub Reply(strText, boolClose)
Dim strAction, strButton
if boolClose then
strAction = "self.close()"
strButton = "Close"
else
strAction = "location='" & strURL & "'"
strButton = "Start again"
end if
%>
<html>
<head>
<title><%= strTitle %></title>
<LINK REL="stylesheet" TYPE="text/css" HREF="style.css">
</head>
<body bgcolor="white"><IMG SRC="banner.gif" ALT="University of Wolverhampton">
<h1><%= strTitle %></h1>
<hr>
<% = strText %>.
<p>
<form><input type='button' value="<%= strButton %>" onClick="<%= strAction %>"></form>
<P>
<% = strFooter %>
</body>
</html>
<%
Response.End
end sub
function Footer
Dim f, fso
set fso = Server.CreateObject("Scripting.FileSystemObject")
set f = fso.GetFile(Server.MapPath(Request.ServerVariables("PATH_INFO")))
Footer = "<table width=100% bgcolor='#ffffdc' cellpadding=5 cellspacing=0><tr><td>" & vbCrLf
Footer = Footer & "<a href='http://www.wlv.ac.uk/'>University
of Wolverhampton</a><br>" & vbCrLf
Footer = Footer & "<a href='http://asp.wlv.ac.uk/Level2.asp?
UserType=6&Subsection=25'>IT Services</a><br>" & vbCrLf
Footer = Footer & "<a href='http://www.wlv.ac.uk/university/disclaimer/official.html'>" & vbCrLf
Footer = Footer & "Disclaimer and copyright statement</a></td><td align='right'>Page created: " & vbCrLf
Footer = Footer & FormatDateTime(f.DateCreated, vbLongDate) & "<br>Last changed: " & vbCrLf
Footer = Footer & FormatDateTime(f.DateLastModified, vbLongDate)
& vbCrLf
Footer = Footer & "<br> </td></tr></table><!-- Author: Max Caines; Reviser: Max Caines -->"
set f = Nothing
set fso = Nothing
end function
function IsAdmin
Dim adsGroup, adoConnection, adoResultSet
set adsGroup = GetObject(WirelessSupportGroup)
set adoConnection = Server.CreateObject("ADODB.Connection")
adoConnection.Provider = "ADSDSOObject"
adoConnection.Open "", vbNullString, vbNullString
set adoResultSet = adoConnection.Execute(SearchBase & ";(cn=" & strWho & ");ADsPath;SubTree")
IsAdmin = adsGroup.IsMember(adoResultSet("ADsPath"))
end function
%>
|
