Drop TopDrop Top

<%@ page import=”org.jivesoftware.admin.AdminConsole,

org.jivesoftware.openfire.admin.AdminManager”
errorPage=”error.jsp”
%>
<%@ page

import=”org.jivesoftware.openfire.clearspace.Clearspa

ceManager”%>
<%@ page

import=”org.jivesoftware.openfire.cluster.ClusterMana

ger”%>
<%@ page

import=”org.jivesoftware.openfire.container.AdminCons

olePlugin”%>
<%@ page import=”org.xmpp.packet.JID”%>
<%@ page import=”org.jivesoftware.openfire.auth.*”%>
<%@ page import=”java.util.HashMap”%>
<%@ page import=”java.util.Map”%>
<%@ page import=”org.jivesoftware.util.*”%>

<%@ taglib uri=”http://java.sun.com/jstl/core_rt”

prefix=”c”%>
<%@ taglib uri=”http://java.sun.com/jstl/fmt_rt”

prefix=”fmt”%>

<%–Define Administration Bean –%>
<jsp:useBean id=”admin”

class=”org.jivesoftware.util.WebManager”  />
<% admin.init(request,response,session,

application,out );%>

<%!
static String go(String url){
if (url == null){
return “index.jsp”;
}
else{
return url;
}
}
%>

<%–Check if in setup mode –%>
<%
if (admin.isSetupMode()){
response.sendRedirect(“setup/index.jsp”);
return;
}
%>

<% // get parameters
String username = ParamUtils.getParameter

(request,“username”);
if (username != null){
username = JID.escapeNode(username);
}
// Escape HTML tags in username to prevent

cross-site scripting attacks. This
// is necessary because we display the username

in the page below.
username =

org.jivesoftware.util.StringUtils.escapeHTMLTags

(username);

String password = ParamUtils.getParameter

(request,“password”);
String url = ParamUtils.getParameter(request,

“url”);

// SSO between cluster nodes
String secret = ParamUtils.getParameter(request,

“secret”);
String nodeID = ParamUtils.getParameter(request,

“nodeID”);
String nonce = ParamUtils.getParameter(request,

“nonce”);

// The user auth token:
AuthToken authToken;

// Check the request/response for a login token

Map<String,String>errors = new HashMap<String,

String>();

if (ParamUtils.getBooleanParameter(request,

“login”)){
try{
if (!AdminManager.getInstance

().isUserAdmin(username,true)){
throw new UnauthorizedException(“User

‘”+ username + “‘not allowed to login.”);
}
if (secret != null &&nodeID != null){
if (StringUtils.hash

(AdminConsolePlugin.secret).equals(secret) &&

ClusterManager.isClusterMember(Base64.decode(nodeID,

Base64.URL_SAFE))){
authToken = new AuthToken

(username);
}
else if (“clearspace”.equals(nodeID)

&&ClearspaceManager.isEnabled()){
ClearspaceManager csmanager =

ClearspaceManager.getInstance();
String sharedSecret =

csmanager.getSharedSecret();
if (nonce == null || sharedSecret

== null || !csmanager.isValidNonce(nonce) ||
!StringUtils.hash

(username + “:”+ sharedSecret + “:”+ nonce).equals

(secret)){
throw new

UnauthorizedException(“SSO failed. Invalid secret was

provided”);
}
authToken = new AuthToken

(username);
}
else{
throw new UnauthorizedException

(“SSO failed. Invalid secret or node ID was

provided”);
}
}
else{
authToken = AuthFactory.authenticate

(username,password);
}
session.setAttribute

(“jive.admin.authToken”,authToken);
response.sendRedirect(go(url));
return;
}
catch (ConnectionException ue){
Log.debug(ue);
if (ClearspaceManager.isEnabled()){
if (session.getAttribute

(“prelogin.setup.error.firstTime.connection”) !=

null){
session.removeAttribute

(“prelogin.setup.error.firstTime.connection”);
session.setAttribute

(“prelogin.setup.error”,

“prelogin.setup.error.clearspace.connection”);
session.setAttribute

(“prelogin.setup.sidebar”,“true”);
session.setAttribute

(“prelogin.setup.sidebar.title”,

“prelogin.setup.sidebar.title.clearspace”);
session.setAttribute

(“prelogin.setup.sidebar.link”,“clearspace-

integration-prelogin.jsp”);
response.sendRedirect(go

(“setup/clearspace-integration-prelogin.jsp”));
} else{
session.setAttribute

(“prelogin.setup.error.firstTime.connection”,true);
errors.put(“connection”,

LocaleUtils.getLocalizedString

(“login.failed.connection.clearspace”));
}
} else{
errors.put(“connection”,

LocaleUtils.getLocalizedString

(“login.failed.connection”));
}
}
catch (InternalUnauthenticatedException ue){
Log.debug(ue);
if (ClearspaceManager.isEnabled()){
if (session.getAttribute

(“prelogin.setup.error.firstTime.sharedsecret”) !=

null){
session.removeAttribute

(“prelogin.setup.error.firstTime.sharedsecret”);
session.setAttribute

(“prelogin.setup.error”,

“prelogin.setup.error.clearspace.sharedsecret”);
session.setAttribute

(“prelogin.setup.sidebar”,“true”);
session.setAttribute

(“prelogin.setup.sidebar.title”,

“prelogin.setup.sidebar.title.clearspace”);
session.setAttribute

(“prelogin.setup.sidebar.link”,“clearspace-

integration-prelogin.jsp”);
response.sendRedirect(go

(“setup/clearspace-integration-prelogin.jsp”));
} else{
session.setAttribute

(“prelogin.setup.error.firstTime.sharedsecret”,

true);
errors.put(“authentication”,

LocaleUtils.getLocalizedString

(“login.failed.authentication.clearspace”));
}
} else{
errors.put(“authentication”,

LocaleUtils.getLocalizedString

(“login.failed.authentication”));
}
}
catch (UnauthorizedException ue){
Log.debug(ue);
errors.put(“unauthorized”,

LocaleUtils.getLocalizedString

(“login.failed.unauthorized”));
}
}
%>

<!DOCTYPE HTML PUBLIC “-//W3C//DTD HTML 4.01

Transitional//EN”>

<html>
<head>
<title><%= AdminConsole.getAppName() %>

<fmt:message key=”login.title”/></title>
<script language=”JavaScript”

type=”text/javascript”>
<!–
// break out of frames
if (self.parent.frames.length != 0){

self.parent.location=document.location;
}
function updateFields(el){
if (el.checked){
document.loginForm.username.disabled

= true;
document.loginForm.password.disabled

= true;
}
else{
document.loginForm.username.disabled

= false;
document.loginForm.password.disabled

= false;
document.loginForm.username.focus();
}
}
//–>
</script>
<link rel=”stylesheet”href=”style/global.css”

type=”text/css”>
<link rel=”stylesheet”href=”style/login.css”

type=”text/css”>
</head>

<body>

<form action=”login.jsp”name=”loginForm”

method=”post”>

<%  if (url != null){try{%>

<input type=”hidden”name=”url”value=”<%= url

%>”>

<%  } catch (Exception e){Log.error(e);} } %>

<input type=”hidden”name=”login”value=”true”>

<div align=”center”>
<!–BEGIN login box –>
<div id=”jive-loginBox”>

<div align=”center”id=”jive-loginTable”>

<span id=”jive-login-header”

style=”background:transparent url

(images/login_logo.gif) no-repeat left;padding:29px

0 10px 205px;”>
<fmt:message key=”admin.console”/>
</span>

<div style=”text-align:center;width:

380px;”>
<table cellpadding=”0″cellspacing=”0″

border=”0″align=”center”>
<tr>
<td align=”right”

class=”loginFormTable”>

<table cellpadding=”2″

cellspacing=”0″border=”0″>
<noscript>
<tr>
<td colspan=”3″>
<table

cellpadding=”0″cellspacing=”0″border=”0″>
<tr valign=”top”>
<td><img

src=”images/error-16×16.gif”width=”16″height=”16″

border=”0″alt=”" vspace=”2″></td>
<td><div

class=”jive-error-text”style=”padding-left:5px;

color:#cc0000;”><fmt:message key=”login.error”

/></div></td>
</tr>
</table>
</td>
</tr>
</noscript>
<%  if (errors.size() >0){

%>
<tr>
<td colspan=”3″>
<table

cellpadding=”0″cellspacing=”0″border=”0″>
<% for

(String error:errors.values()){%>
<tr valign=”top”>
<td><img

src=”images/error-16×16.gif”width=”16″height=”16″

border=”0″alt=”" vspace=”2″></td>
<td><div

class=”jive-error-text”style=”padding-left:5px;

color:#cc0000;”><%= error%></div></td>
</tr>
<% } %>
</table>
</td>
</tr>
<%  } %>
<tr>
<td><input type=”text”

name=”username”size=”15″maxlength=”50″id=”u01″

value=”<%= (username != null ? username:“”)

%>”></td>
<td><input

type=”password”name=”password”size=”15″

maxlength=”50″id=”p01″></td>
<td align=”center”><input

type=”submit”value=”&nbsp;<fmt:message

key=”login.login”/>&nbsp;”></td>
</tr>
<tr valign=”top”>
<td class=”jive-login-

label”><label for=”u01″><fmt:message

key=”login.username”/></label></td>
<td class=”jive-login-

label”><label for=”p01″><fmt:message

key=”login.password”/></label></td>
<td>&nbsp;</td>
</tr>
</table>
</td>
</tr>
<tr>
<td align=”right”>
<div align=”right”id=”jive-

loginVersion”>
<%= AdminConsole.getAppName()

%>,<fmt:message key=”login.version”/>:<%=

AdminConsole.getVersionString() %>
</div>
</td>
</tr>
</table>
</div>
</div>

</div>
<!–END login box –>
</div>

</form>

<script language=”JavaScript”type=”text/javascript”>
<!–
if (document.loginForm.username.value == ”) {
document.loginForm.username.focus();
} else{
document.loginForm.password.focus();
}
//–>
</script>

</body>
</html>