mirror of
https://github.com/webmin/webmin.git
synced 2025-07-20 16:48:46 +00:00
380 lines
10 KiB
Perl
Executable File
380 lines
10 KiB
Perl
Executable File
#!/usr/local/bin/perl
|
|
# save_bifc.cgi
|
|
# Create, save or delete a boot-time interface
|
|
|
|
require './net-lib.pl';
|
|
&ReadParse();
|
|
@boot = &boot_interfaces();
|
|
|
|
if ($in{'delete'} || $in{'unapply'}) {
|
|
# Delete interface
|
|
&error_setup($text{'bifc_err1'});
|
|
$b = $boot[$in{'idx'}];
|
|
&can_iface($b) || &error($text{'ifcs_ecannot_this'});
|
|
|
|
if ($in{'unapply'}) {
|
|
# Shut down this interface active (if active)
|
|
&error_setup($text{'bifc_err4'});
|
|
@active = &active_interfaces();
|
|
($act) = grep { $_->{'fullname'} eq $b->{'fullname'} } @active;
|
|
if ($act) {
|
|
if (defined(&unapply_interface)) {
|
|
$err = &unapply_interface($act);
|
|
$err && &error("<pre>$err</pre>");
|
|
}
|
|
else {
|
|
&deactivate_interface($act);
|
|
}
|
|
}
|
|
|
|
}
|
|
&delete_interface($b);
|
|
&webmin_log("delete", "bifc", $b->{'fullname'}, $b);
|
|
}
|
|
else {
|
|
# Save or create interface
|
|
&error_setup($text{'bifc_err2'});
|
|
if (!$in{'new'}) {
|
|
# Modifying an interface
|
|
$oldb = $boot[$in{'idx'}];
|
|
&can_iface($oldb) || &error($text{'ifcs_ecannot_this'});
|
|
$b = { %$oldb };
|
|
}
|
|
elsif (defined($in{'virtual'})) {
|
|
# creating a virtual interface
|
|
$in{'virtual'} =~ /^\d+$/ ||
|
|
&error($text{'bifc_evirt'});
|
|
$in{'virtual'} >= $min_virtual_number ||
|
|
&error(&text('aifc_evirtmin', &html_escape($min_virtual_number)));
|
|
foreach $eb (@boot) {
|
|
if ($eb->{'name'} eq $in{'name'} &&
|
|
$eb->{'virtual'} eq $in{'virtual'}) {
|
|
&error(&text('bifc_evirtdup',
|
|
&html_escape("$in{'name'}:$in{'virtual'}")));
|
|
}
|
|
}
|
|
$b->{'name'} = $in{'name'};
|
|
$b->{'virtual'} = $in{'virtual'};
|
|
$b->{'fullname'} = $b->{'name'}.":".$b->{'virtual'};
|
|
&can_create_iface() || &error($text{'ifcs_ecannot'});
|
|
&can_iface($b) || &error($text{'ifcs_ecannot'});
|
|
}
|
|
elsif ($in{'name'} =~ /^([a-z]+\d*(s\d*)?(\.\d+)?):(\d+)$/ ||
|
|
$in{'name'} =~ /^(en[0-9a-z]+(s\d*)?(\.\d+)?):(\d+)$/) {
|
|
# also creating a virtual interface
|
|
foreach $eb (@boot) {
|
|
if ($eb->{'name'} eq $2 &&
|
|
$eb->{'virtual'} eq $4) {
|
|
&error(&text('bifc_evirtdup', &html_escape($in{'name'})));
|
|
}
|
|
}
|
|
$4 >= $min_virtual_number ||
|
|
&error(&text('aifc_evirtmin', &html_escape($min_virtual_number)));
|
|
$b->{'name'} = $1;
|
|
$b->{'virtual'} = $4;
|
|
$b->{'fullname'} = $b->{'name'}.":".$b->{'virtual'};
|
|
}
|
|
elsif ($in{'bridge'}) {
|
|
# Creating a bridge interface
|
|
$in{'name'} =~ /^\d+$/ || &error($text{'bifc_ebridge'});
|
|
$b->{'name'} = $b->{'fullname'} = "br".$in{'name'};
|
|
$b->{'bridge'} = 1;
|
|
}
|
|
elsif ($in{'bond'}) {
|
|
# Creating a bond interface
|
|
$in{'name'} =~ /^\d+$/ || &error($text{'bifc_ebond'});
|
|
$b->{'name'} = $b->{'fullname'} = "bond".$in{'name'};
|
|
$b->{'bond'} = 1;
|
|
}
|
|
elsif ($in{'name'} =~ /^[a-z]+\d*(s\d*)?(\.\d+)?$/ ||
|
|
$in{'name'} =~ /^en[0-9a-z]+(s\d*)?(\.\d+)?$/) {
|
|
# creating a real interface
|
|
$b->{'name'} = $in{'name'};
|
|
$b->{'fullname'} = $in{'name'};
|
|
}
|
|
elsif ($in{'name'} eq 'auto') {
|
|
# creating a vlan interface
|
|
$b->{'name'} = $in{'name'};
|
|
$b->{'fullname'} = $in{'name'};
|
|
}
|
|
else {
|
|
&error($text{'bifc_ename'});
|
|
}
|
|
|
|
if ($in{'new'}) {
|
|
# Check permissions
|
|
&can_create_iface() || &error($text{'ifcs_ecannot'});
|
|
&can_iface($b) || &error($text{'ifcs_ecannot'});
|
|
|
|
# Check for clash
|
|
foreach $eb (@boot) {
|
|
if ($eb->{'fullname'} eq $b->{'fullname'}) {
|
|
&error(&text('bifc_edup', &html_escape($in{'name'})));
|
|
}
|
|
}
|
|
}
|
|
|
|
# Check for address clash
|
|
$allow_clash = defined(&allow_interface_clash) ?
|
|
&allow_interface_clash($b, 1) : 1;
|
|
if (!$allow_clash && $in{'mode'} eq 'address' &&
|
|
($in{'new'} || $oldb->{'address'} ne $in{'address'})) {
|
|
($clash) = grep { $_->{'address'} eq $in{'address'} &&
|
|
$_->{'up'} } @boot;
|
|
$clash && &error(&text('aifc_eclash', &html_escape($clash->{'fullname'})));
|
|
}
|
|
|
|
# Validate and store inputs
|
|
delete($b->{'dhcp'});
|
|
delete($b->{'bootp'});
|
|
delete($b->{'address'});
|
|
if ($in{'mode'} eq 'dhcp' || $in{'mode'} eq 'bootp') {
|
|
$in{'activate'} && !defined(&apply_interface) &&
|
|
&error($text{'bifc_eapply'});
|
|
$b->{$in{'mode'}}++;
|
|
$auto++;
|
|
}
|
|
elsif ($in{'mode'} eq 'none') {
|
|
delete($b->{'address'});
|
|
}
|
|
else {
|
|
&valid_boot_address($in{'address'}) ||
|
|
&error(&text('bifc_eip', &html_escape($in{'address'})));
|
|
$b->{'address'} = $in{'address'};
|
|
}
|
|
|
|
# Set description if possible
|
|
if (defined($in{'desc'})) {
|
|
$b->{'desc'} = $in{'desc'};
|
|
}
|
|
else {
|
|
delete($b->{'desc'});
|
|
}
|
|
|
|
if ($in{'mode'} eq 'none') {
|
|
# No netmask needed
|
|
delete($b->{'netmask'});
|
|
}
|
|
elsif ($virtual_netmask && $b->{'virtual'} ne "") {
|
|
# Always use this netmask for virtuals
|
|
$b->{'netmask'} = $virtual_netmask;
|
|
}
|
|
elsif (!$access{'netmask'}) {
|
|
# Use default netmask
|
|
if ($in{'new'}) {
|
|
$b->{'netmask'} = $config{'def_netmask'} ||
|
|
"255.255.255.0";
|
|
}
|
|
}
|
|
elsif (&can_edit("netmask", $b) && $access{'netmask'}) {
|
|
$auto && !$in{'netmask'} ||
|
|
&check_netmask($in{'netmask'}, $in{'address'}) ||
|
|
&error(&text('bifc_emask', &html_escape($in{'netmask'})));
|
|
$b->{'netmask'} = $in{'netmask'};
|
|
}
|
|
|
|
if ($in{'mode'} eq 'none') {
|
|
# No broadcast needed
|
|
delete($b->{'broadcast'});
|
|
}
|
|
elsif (!$access{'broadcast'} && $in{'new'}) {
|
|
# Work out broadcast if user isn't allowed to set it
|
|
$b->{'broadcast'} = &compute_broadcast(
|
|
$b->{'address'}, $b->{'netmask'});
|
|
}
|
|
elsif ($in{'broadcast_def'}) {
|
|
# If system needs broadcast to be computed, do it here
|
|
if (!&can_broadcast_def()) {
|
|
$b->{'broadcast'} = &compute_broadcast(
|
|
$b->{'address'}, $b->{'netmask'});
|
|
}
|
|
else {
|
|
$b->{'broadcast'} = undef;
|
|
}
|
|
}
|
|
elsif (&can_edit("broadcast", $b)) {
|
|
# Manually entered broadcast
|
|
($auto && !$in{'broadcast'}) ||
|
|
&check_ipaddress($in{'broadcast'}) ||
|
|
&error(&text('bifc_ebroad', &html_escape($in{'broadcast'})));
|
|
$b->{'broadcast'} = $in{'broadcast'};
|
|
}
|
|
|
|
if (!$access{'mtu'}) {
|
|
# Use default MTU or leave unchanged
|
|
if ($in{'new'}) {
|
|
$b->{'mtu'} = $config{'def_mtu'};
|
|
}
|
|
}
|
|
elsif (&can_edit("mtu", $b) && $access{'mtu'}) {
|
|
$auto && !$in{'mtu'} ||
|
|
$in{'mtu_def'} ||
|
|
$in{'mtu'} =~ /^\d+$/ ||
|
|
&error(&text('bifc_emtu', &html_escape($in{'mtu'})));
|
|
$b->{'mtu'} = $in{'mtu_def'} ? undef : $in{'mtu'};
|
|
}
|
|
|
|
# MAC address
|
|
if (defined($in{'ether'}) && !$in{'ether_def'}) {
|
|
$in{'ether'} =~ /^[A-Fa-f0-9:]+$/ ||
|
|
&error(&text('aifc_ehard', &html_escape($in{'ether'})));
|
|
$b->{'ether'} = $in{'ether'};
|
|
}
|
|
else {
|
|
delete($b->{'ether'});
|
|
}
|
|
|
|
# Activate at boot flag
|
|
if ($in{'new'} && !$access{'up'}) {
|
|
# If cannot edit up flag, assume enabled for new interfaces
|
|
$b->{'up'} = 1;
|
|
}
|
|
elsif (&can_edit("up", $b) && $access{'up'}) {
|
|
# If can edit, respect the user
|
|
$b->{'up'} = $in{'up'};
|
|
}
|
|
|
|
# Save IPv6 addresses
|
|
if (&supports_address6($b)) {
|
|
delete($b->{'address6'});
|
|
delete($b->{'netmask6'});
|
|
delete($b->{'auto6'});
|
|
if ($in{'mode6'} eq 'auto') {
|
|
# Dynamic configuration
|
|
$b->{'auto6'} = 1;
|
|
}
|
|
elsif ($in{'mode6'} eq 'address') {
|
|
# Static addresses
|
|
@address6 = ( );
|
|
@netmask6 = ( );
|
|
%clash6 = ( );
|
|
foreach $eb (@boot) {
|
|
if ($eb->{'fullname'} ne $b->{'fullname'}) {
|
|
foreach $a6 (@{$eb->{'address6'}}) {
|
|
$clash6{$a6} = $eb;
|
|
}
|
|
}
|
|
}
|
|
for($i=0; defined($in{'address6_'.$i}); $i++) {
|
|
next if ($in{'address6_'.$i} !~ /\S/);
|
|
&check_ip6address($in{'address6_'.$i}) ||
|
|
&error(&text('aifc_eaddress6', $i+1));
|
|
$c = $clash6{$in{'address6_'.$i}};
|
|
$c && &error(&text('aifc_eclash6', $i+1, &html_escape($c->{'name'})));
|
|
push(@address6, $in{'address6_'.$i});
|
|
$in{'netmask6_'.$i} =~ /^\d+$/ &&
|
|
$in{'netmask6_'.$i} > 0 &&
|
|
$in{'netmask6_'.$i} <= 128 ||
|
|
&error(&text('aifc_enetmask6', $i+1));
|
|
push(@netmask6, $in{'netmask6_'.$i});
|
|
$clash6{$in{'address6_'.$i}} = $b;
|
|
}
|
|
@address6 || &error($text{'aifc_eaddresses6'});
|
|
delete($b->{'auto6'});
|
|
$b->{'address6'} = \@address6;
|
|
$b->{'netmask6'} = \@netmask6;
|
|
}
|
|
}
|
|
|
|
# Save bonding settings
|
|
if ($in{'bond'}) {
|
|
$b->{'bond'} = 1;
|
|
$b->{'partner'} = $in{'partner'};
|
|
$b->{'mode'} = $in{'bondmode'};
|
|
$b->{'primary'} = $in{'primary'};
|
|
$b->{'miimon'} = $in{'miimon'};
|
|
$b->{'updelay'} = $in{'updelay'};
|
|
$b->{'downdelay'} = $in{'downdelay'};
|
|
}
|
|
else {
|
|
delete($b->{'bond'});
|
|
}
|
|
|
|
# Save VLAN settings
|
|
if ($in{'vlan'}) {
|
|
$b->{'vlan'} = 1;
|
|
if ($in{'physical'}) {
|
|
$b->{'physical'} = $in{'physical'};
|
|
}
|
|
if ($in{'vlanid'}) {
|
|
$b->{'vlanid'} = $in{'vlanid'};
|
|
}
|
|
}
|
|
else {
|
|
delete($b->{'vlan'});
|
|
}
|
|
|
|
# Save bridge settings
|
|
if ($b->{'bridge'}) {
|
|
if ($in{'bridgeto'}) {
|
|
&iface_type($in{'bridgeto'}) =~ /Ethernet|Bonded/ ||
|
|
&error($text{'bifc_ebridgeto'});
|
|
($bt) = grep { $_->{'fullname'} eq $in{'bridgeto'} }
|
|
@boot;
|
|
$bt || &error($text{'bifc_ebridgeto'});
|
|
}
|
|
($bt->{'address'} || $bt->{'dhcp'} || $bt->{'bootp'}) &&
|
|
&error($text{'bifc_ebridgeto2'});
|
|
$b->{'bridgeto'} = $in{'bridgeto'};
|
|
if (&can_edit("bridgestp")) {
|
|
$b->{'bridgestp'} = $in{'bridgestp'};
|
|
}
|
|
if (&can_edit("bridgefd")) {
|
|
$b->{'bridgefd'} = $in{'bridgefd'};
|
|
}
|
|
if (&can_edit("bridgewait")) {
|
|
$b->{'bridgewait'} = $in{'bridgewait'};
|
|
}
|
|
}
|
|
else {
|
|
delete($b->{'bridgeto'});
|
|
delete($b->{'bridgestp'});
|
|
delete($b->{'bridgefd'});
|
|
delete($b->{'bridgewait'});
|
|
}
|
|
|
|
# Save the interface with its final name
|
|
if ($b->{'vlan'}) {
|
|
$b->{'fullname'} = $in{'physical'}.".".$in{'vlanid'};
|
|
}
|
|
else {
|
|
$b->{'fullname'} = $b->{'name'}.
|
|
( $b->{'virtual'} eq '' ? '' : ':'.$b->{'virtual'});
|
|
}
|
|
&save_interface($b, \@boot);
|
|
|
|
# If switching from DHCP to static and there is no default gateway
|
|
# set, copy the active one
|
|
if ($oldb{'dhcp'} && !$b{'dhcp'} && $b{'virtual'} eq '' &&
|
|
defined(&get_default_gateway) && defined(&list_routes)) {
|
|
my $oldgw = &get_default_gateway();
|
|
my ($dr) = grep { $_->{'dest'} eq '0.0.0.0' } &list_routes();
|
|
if (!$oldgw && $dr) {
|
|
&set_default_gateway($dr->{'gateway'}, $b{'name'});
|
|
}
|
|
}
|
|
|
|
if ($in{'activate'}) {
|
|
# Make this interface active (if possible)
|
|
&error_setup($text{'bifc_err3'});
|
|
$b->{'up'}++;
|
|
$b->{'address'} = &to_ipaddress($b->{'address'});
|
|
if (defined(&apply_interface)) {
|
|
$err = &apply_interface($b);
|
|
$err && &error("<pre>$err</pre>");
|
|
}
|
|
else {
|
|
if ($in{'bond'}) {
|
|
if (($gconfig{'os_type'} eq 'debian-linux') &&
|
|
($gconfig{'os_version'} >= 5)) {}
|
|
else {&load_module($b);}
|
|
}
|
|
&activate_interface($b);
|
|
}
|
|
}
|
|
&webmin_log($in{'new'} ? 'create' : 'modify',
|
|
"bifc", $b->{'fullname'}, $b);
|
|
}
|
|
&redirect("list_ifcs.cgi?mode=boot");
|
|
|