mirror of
https://github.com/OpenVPN/openvpn.git
synced 2026-05-28 04:03:29 -04:00
f7ef7522f5
A simple plug-in with a corresponding HTTP server and client which can authenticate
an HTTP user based on the authentication already done via an established OpenVPN
connection
[DS: Renamed the module at commit time from sso to keyingmaterialexporter to
avoid confusion with other Single-Sign-On solutions. Updated documentation
and commits accordingly. Added --pull to the client config]
Signed-off-by: Daniel Kubec <niel@rtfm.cz>
Signed-off-by: David Sommerseth <davids@redhat.com>
Acked-by: David Sommerseth <davids@redhat.com>
41 lines
1.1 KiB
Python
Executable file
41 lines
1.1 KiB
Python
Executable file
#!/usr/bin/python
|
|
from BaseHTTPServer import BaseHTTPRequestHandler, HTTPServer
|
|
import os
|
|
|
|
class ExampleHTTPRequestHandler(BaseHTTPRequestHandler):
|
|
|
|
def do_GET(self):
|
|
session_key = os.path.basename(self.path)
|
|
file = '/tmp/openvpn_sso_' + session_key
|
|
print 'session file: ' + file
|
|
try:
|
|
f = open(file)
|
|
#send code 200 response
|
|
self.send_response(200)
|
|
#send header first
|
|
self.send_header('Content-type','text-html')
|
|
self.end_headers()
|
|
#send file content to client
|
|
user = f.read().rstrip()
|
|
print 'session user: ' + user
|
|
print 'session key: ' + session_key
|
|
self.wfile.write('<html><body><h1>Greetings ' + user \
|
|
+ '. You are authorized' \
|
|
'</h1>' \
|
|
'</body></html>')
|
|
f.close()
|
|
return
|
|
except IOError:
|
|
self.send_error(404, 'authentication failed')
|
|
|
|
def run():
|
|
#ip and port of servr
|
|
#by default http server port is 80
|
|
server_address = ('0.0.0.0', 8080)
|
|
httpd = HTTPServer(server_address, ExampleHTTPRequestHandler)
|
|
print('http server started')
|
|
httpd.serve_forever()
|
|
print('http server stopped')
|
|
|
|
if __name__ == '__main__':
|
|
run()
|