2003-12-20 21:42:52 +00:00
< ? php
/*
$Id $
This code is part of LDAP Account Manager ( http :// www . sourceforge . net / projects / lam )
Copyright ( C ) 2003 Tilo Lutz
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation ; either version 2 of the License , or
( at your option ) any later version .
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
You should have received a copy of the GNU General Public License
along with this program ; if not , write to the Free Software
Foundation , Inc . , 59 Temple Place , Suite 330 , Boston , MA 02111 - 1307 USA
*/
/* Session variables which are used :
* $_SESSION [ 'cacheAttributes' ] : This variable contains a list of attributes and their scope which should be cached
*
* Coockie variables which are used :
* $_COOKIE [ " IV " ], $_COOKIE [ " Key " ] : Needed to en / decrypt passwords .
*
* Variables in basearray which are no objects :
* type : Type of account . Can be user , group , host
* attributes : List of all attributes , how to get them and are theiy required or optional
* dn : current DN without uid = or cn =
* dn_orig : old DN if account was loaded with uid = or cn =
* External functions which are used
* account . inc : findgroups , incache , get_cache , array_delete , getshells
* ldap . inc : pwd_is_enabled , pwd_hash
*/
/* This class contains all sambaSamAccount LDAP attributes
* and funtioncs required to deal with sambaSamAccount
* sambaSamAccount can only be created when it should be added
* to an array .
* basearray is the same array sambaSamAccount should be added
* to . If basearray is not given the constructor tries to
* create an array with sambaSamAccount and all other required
* objects .
* Example : $user [] = new sambaSamAccount ( $user );
*
* In container array the following things have to exist :
* account or inetOrgPerson object
* type : 'user' or 'host'
* 'attributes' : this is a list of arrays with all ldap attributes wich are allowed for this account
*/
2004-06-08 18:54:37 +00:00
class sambaSamAccount extends baseModule {
2004-07-05 19:45:19 +00:00
/**
* Creates a new sambaSamAccount object .
*
* @ param string $scope account type ( user , group , host )
*/
function sambaSamAccount ( $scope ) {
// error messages for input checks
$this -> messages [ 'homedir' ] = array ( 'ERROR' , _ ( 'Home path' ), _ ( 'Home path is invalid.' ));
$this -> messages [ 'profilePath' ] = array ( 'ERROR' , _ ( 'Profile path' ), _ ( 'Profile path is invalid!' ));
$this -> messages [ 'logonScript' ] = array ( 'ERROR' , _ ( 'Script path' ), _ ( 'Script path is invalid!' ));
$this -> messages [ 'workstations' ] = array ( 'ERROR' , _ ( 'Samba workstations' ), _ ( 'Please enter a comma separated list of host names!' ));
// call parent constructor
parent :: baseModule ( $scope );
}
2004-06-08 18:54:37 +00:00
/**
* Returns meta data that is interpreted by parent class
*
* @ return array array with meta data
*/
function get_metaData () {
$return = array ();
2004-06-13 19:58:58 +00:00
// manages user and host accounts
$return [ " account_types " ] = array ( " user " , " host " );
2004-06-08 18:54:37 +00:00
if ( $this -> get_scope () == " host " ) {
2004-06-11 15:44:49 +00:00
// this is a base module
2004-06-08 18:54:37 +00:00
$return [ " is_base " ] = true ;
2004-06-11 15:44:49 +00:00
// LDAP filter
$return [ " ldap_filter " ] = array ( 'and' => '(uid=*$)' , 'or' => " (objectClass=posixAccount) " );
2004-06-08 18:54:37 +00:00
}
2004-06-14 16:05:36 +00:00
// alias name
$return [ " alias " ] = _ ( 'Samba 3' );
2004-06-20 17:32:02 +00:00
// module dependencies
$return [ 'dependencies' ] = array ( 'depends' => array ( 'posixAccount' ), 'conflicts' => array ());
2004-07-05 19:45:19 +00:00
// profile checks
$return [ 'profile_checks' ][ 'sambaSamAccount_smbhome' ] = array ( 'type' => 'regex_i' , 'regex' => $this -> regex_homedir ,
'error_message' => $this -> messages [ 'homedir' ]);
$return [ 'profile_checks' ][ 'sambaSamAccount_profilePath' ] = array ( 'type' => 'regex_i' , 'regex' => $this -> regex_profilePath ,
'error_message' => $this -> messages [ 'profilePath' ]);
$return [ 'profile_checks' ][ 'sambaSamAccount_logonScript' ] = array ( 'type' => 'regex_i' , 'regex' => $this -> regex_logonScript ,
'error_message' => $this -> messages [ 'logonScript' ]);
$return [ 'profile_checks' ][ 'sambaSamAccount_userWorkstations' ] = array ( 'type' => 'regex_i' , 'regex' => $this -> regex_workstations ,
'error_message' => $this -> messages [ 'workstations' ]);
2004-08-17 15:16:17 +00:00
// available PDF fields
$return [ 'PDF_fields' ] = array ( 'displayName' ,
'uid' ,
'sambaHomePath' ,
'sambaHomeDrive' ,
'sambaLogonScript' ,
'sambaProfilePath' ,
'sambaUserWorkstations' ,
'sambaDomainName' ,
'description' ,
'sambaPrimaryGroupSID' );
2004-06-08 18:54:37 +00:00
return $return ;
}
2003-12-20 21:42:52 +00:00
// Constructor
2004-06-08 18:54:37 +00:00
function init ( $base ) {
2003-12-20 21:42:52 +00:00
/* Return an error if sambaSamAccount should be created without
* base container
*/
if ( ! $base ) trigger_error ( _ ( 'Please create a base object with $var = new accountContainer();' ), E_USER_ERROR );
2004-02-12 12:09:41 +00:00
if ( ! is_string ( $base )) trigger_error ( _ ( 'Please create a new module object in an accountContainer object first.' ), E_USER_ERROR );
2003-12-20 21:42:52 +00:00
$this -> base = $base ;
// sambaSamAccount is only a valid objectClass for user and host
if ( ! ( $_SESSION [ $this -> base ] -> get_type () == 'user' ) && ! ( $_SESSION [ $this -> base ] -> get_type () == 'host' )) trigger_error ( _ ( 'sambaSamAccount can only be used for users or hosts.' ), E_USER_WARNING );
/* Check if ldap conatiner is in array and set type
* users are using inetOrgPerson - , hosts account - container
*/
2004-02-12 12:09:41 +00:00
if ( ! isset ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ])) $_SESSION [ $this -> base ] -> modules [ 'posixAccount' ] = new posixAccount ( $this -> base );
2003-12-20 21:42:52 +00:00
// Add Array with all attributes and type
$this -> attributes = $_SESSION [ $this -> base ] -> get_module_attributes ( 'sambaSamAccount' );
$_SESSION [ $this -> base ] -> add_attributes ( 'sambaSamAccount' );
// Make references to attributes which already esists in ldap
$newattributes = array_keys ( $this -> attributes );
$module = array_keys ( $_SESSION [ $this -> base ] -> module );
for ( $i = 0 ; $i < count ( $module ); $i ++ ) {
foreach ( $newattributes as $attribute )
if ( isset ( $_SESSION [ $this -> base ] -> module [ $module [ $i ]] -> attributes [ $attribute ])) $this -> attributes [ $attribute ] =& $_SESSION [ $this -> base ] -> module [ $module [ $i ]] -> attributes [ $attribute ];
}
$this -> orig = $this -> attributes ;
$this -> attributes [ 'objectClass' ][ 0 ] = 'sambaSamAccount' ;
$this -> useunixpwd = false ;
// List of well known rids
$this -> rids = array ( _ ( 'Domain Admins' ) => 512 , _ ( 'Domain Users' ) => 513 , _ ( 'Domain Guests' ) => 514 , _ ( 'Domain Computers' ) => 515 , _ ( 'Domain Controllers' ) => 516 ,
_ ( 'Domain Certificate Admins' ) => 517 , _ ( 'Domain Schema Admins' ) => 518 , _ ( 'Domain Enterprise Admins' ) => 519 , _ ( 'Domain Policy Admins' ) => 520 );
}
// Variables
// name of accountContainer so we can read other classes in accuontArray
var $base ;
// This variable contains all inetOrgPerson attributes
var $attributes ;
/* If an account was loaded all attributes are kept in this array
* to compare it with new changed attributes
*/
var $orig ;
// use unix password as samba password?
var $useunixpwd ;
// Array of well known rids
var $rids ;
2004-06-14 16:05:36 +00:00
2004-07-05 19:45:19 +00:00
/** regular expression for home directory */
var $regex_homedir = '^[\][\]([a-z0-9\\.%-])+([\]([a-z0-9\\.%<25> <> <EFBFBD> <EFBFBD> \\$-])+)+$' ;
/** regular expression for profile path */
var $regex_profilePath = '^([\][\]([a-zA-Z0-9\\.%-])+([\]([a-z0-9\\.%-])+)+)|([/][a-z]([a-z0-9\\._%-])*([/][a-z]([a-z0-9\\._%-])*)*)$' ;
/** regular expression for logon script */
var $regex_logonScript = '^([/])*([a-z0-9\\._%<25> <> <EFBFBD> <EFBFBD> -])+([/]([a-z0-9\\._%<25> <> <EFBFBD> <EFBFBD> -])+)*((\\.bat)|(\\.cmd))$' ;
/** regular expression for allowed workstations */
var $regex_workstations = '^([a-z0-9\\._-])+(,[a-z0-9\\._-])*$' ;
/** list of possible error messages */
var $messages = array ();
2003-12-20 21:42:52 +00:00
/* $attribute [ 'sambaLMPassword' ] and sambaNTPassword can 't accessed directly because it' s enrcypted
* To read / write password function userPassword is needed
* This function will return the unencrypted password when
* called without a variable
* If it ' s called with a new password , the
* new password will be stored encrypted
*/
function sambaLMPassword ( $newpassword = false ) {
if ( is_string ( $newpassword )) {
// Write new password
2004-01-14 20:33:25 +00:00
$this -> attributes [ 'sambaLMPassword' ][ 0 ] = base64_encode ( $_SESSION [ $_SESSION [ $this -> base ] -> ldap ] -> encrypt ( $newpassword ));
2003-12-20 21:42:52 +00:00
return 0 ;
}
else {
2003-12-21 14:52:23 +00:00
if ( $this -> useunixpwd ) return $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> userPassword ();
2003-12-20 21:42:52 +00:00
if ( $this -> attributes [ 'sambaLMPassword' ][ 0 ] != '' ) {
// Read existing password if set
2004-01-14 20:33:25 +00:00
return $_SESSION [ $_SESSION [ $this -> base ] -> ldap ] -> decrypt ( base64_decode ( $this -> attributes [ 'sambaLMPassword' ][ 0 ]));
2003-12-20 21:42:52 +00:00
}
else return '' ;
}
}
2003-12-30 15:36:30 +00:00
function module_ready () {
if ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'gidNumber' ][ 0 ] == '' ) return false ;
if ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'uidNumber' ][ 0 ] == '' ) return false ;
if ( $this -> attributes [ 'uid' ][ 0 ] == '' ) return false ;
return true ;
}
2004-02-09 18:11:01 +00:00
/* This functions return true
* if all needed settings are done
*/
function module_complete () {
if ( ! $this -> module_ready ()) return false ;
if ( $this -> attributes [ 'sambaSID' ][ 0 ] == '' ) return false ;
return true ;
}
2003-12-30 15:36:30 +00:00
/* This function returns a list of all html - pages in module
* This is usefull for mass upload and pdf - files
* because lam can walk trough all pages itself and do some
* error checkings
*/
function pages () {
return array ( 'attributes' , 'sambaUserWorkstations' );
}
2004-01-27 19:07:31 +00:00
/*
*/
function get_help ( $id ) {
switch ( $id ) {
case " description " :
return array ( " ext " => " FALSE " , " Headline " => _ ( " Description " ),
" Text " => _ ( " Host Description. " ));
break ;
}
return false ;
}
2003-12-30 15:36:30 +00:00
/* This function returns all ldap attributes
* which are part of posixAccount and returns
* also their values .
*/
function get_attributes () {
$return = $this -> attributes ;
$return [ 'sambaLMPassword' ] = $this -> sambaLMPassword ();
return $return ;
}
/* This function loads all attributes into the object
* $attr is an array as it ' s retured from ldap_get_attributes
*/
function load_attributes ( $attr ) {
// Load attributes which are displayed
// unset count entries
unset ( $attr [ 'count' ]);
$attributes = array_keys ( $attr );
foreach ( $attributes as $attribute ) unset ( $attr [ $attribute ][ 'count' ]);
// unset double entries
for ( $i = 0 ; $i < count ( $attr ); $i ++ )
if ( isset ( $attr [ $i ])) unset ( $attr [ $i ]);
foreach ( $attributes as $attribute ) {
if ( isset ( $this -> attributes [ $attribute ])) {
// decode as unicode
$this -> attributes [ $attribute ] = $attr [ $attribute ];
2003-12-30 17:09:15 +00:00
for ( $i = 0 ; $i < count ( $this -> attributes [ $attribute ]); $i ++ ) {
$this -> attributes [ $attribute ][ $i ] = utf8_decode ( $this -> attributes [ $attribute ][ $i ]);
$this -> orig [ $attribute ][ $i ] = utf8_decode ( $this -> attributes [ $attribute ][ $i ]);
}
2003-12-30 15:36:30 +00:00
}
}
// Values are kept as copy so we can compare old attributes with new attributes
$this -> attributes [ 'objectClass' ][ 0 ] = 'sambaSamAccount' ;
return 0 ;
}
/* This function returns an array with 3 entries :
* array ( DN1 ( 'add' => array ( $attr ), 'remove' => array ( $attr ), 'modify' => array ( $attr )), DN2 .... )
* DN is the DN to change . It may be possible to change several DNs ,
* e . g . create a new user and add him to some groups via attribute memberUid
* add are attributes which have to be added to ldap entry
* remove are attributes which have to be removed from ldap entry
* modify are attributes which have to been modified in ldap entry
*/
function save_attributes () {
/* Create sambaSID . Can ' t create it while loading attributes because
* it ' s psssible uidNumber has changed
*/
// Get Domain SID from name
$sambaDomains = $_SESSION [ $_SESSION [ $this -> base ] -> ldap ] -> search_domains ( $_SESSION [ $_SESSION [ $this -> base ] -> config ] -> get_domainSuffix ());
for ( $i = 0 ; $i < count ( $sambaDomains ); $i ++ )
if ( $this -> attributes [ 'sambaDomainName' ][ 0 ] == $sambaDomains [ $i ] -> name ) {
$SID = $sambaDomains [ $i ] -> SID ;
$RIDbase = $sambaDomain [ $i ] -> RIDbase ;
}
$special = false ;
if ( $this -> attributes [ 'sambaSID' ][ 0 ] == $SID . " -500 " ) $special = true ;
if ( $this -> attributes [ 'sambaSID' ][ 0 ] == $SID . " -501 " ) $special = true ;
if ( ! $special ) $this -> attributes [ 'sambaSID' ][ 0 ] == $SID . " - " . ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'uidNumber' ][ 0 ] * 2 + $RIDbase );
$rids = array_keys ( $this -> rids );
$wrid = false ;
for ( $i = 0 ; $i < count ( $rids ); $i ++ )
if ( $this -> attributes [ 'sambaPrimaryGroupSID' ][ 0 ] == $SID . " - " . $rids [ $i ])
$wrid = true ;
if ( ! $wrid ) $this -> attributes [ 'sambaPrimaryGroupSID' ][ 0 ] = $SID . " - " . ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'gidNumber' ][ 0 ] * 2 ) + $RIDbase + 1 ;
$return = $_SESSION [ $this -> base ] -> save_module_attributes ( $this -> attributes , $this -> orig );
// Set password
if ( isset ( $return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'sambaLMPassword' ]))
unset ( $return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'sambaLMPassword' ]);
if ( isset ( $return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'sambaNTPassword' ]))
unset ( $return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'sambaNTPassword' ]);
if ( ! isset ( $this -> orig [ 'sambaLMPassword' ][ 0 ])) {
2004-06-22 13:36:38 +00:00
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'sambaLMPassword' ][ 0 ] = lmPassword ( $this -> sambaLMPassword ());
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'sambaNTPassword' ][ 0 ] = ntPassword ( $this -> sambaLMPassword ());
2003-12-30 15:36:30 +00:00
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'sambaPwdLastSet' ][ 0 ] = time ();
}
if ( $this -> sambaLMPassword () != '' ) {
2004-06-22 13:36:38 +00:00
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'sambaLMPassword' ][ 0 ] = lmPassword ( $this -> sambaLMPassword ());
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'sambaNTPassword' ][ 0 ] = ntPassword ( $this -> sambaLMPassword ());
2003-12-30 15:36:30 +00:00
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'sambaPwdLastSet' ][ 0 ] = time ();
}
return $return ;
}
2003-12-20 21:42:52 +00:00
2003-12-30 15:36:30 +00:00
function delete_attributes ( $post ) {
2004-01-10 11:47:48 +00:00
return 0 ;
2003-12-30 15:36:30 +00:00
}
2003-12-20 21:42:52 +00:00
/* Write variables into object and do some regexp checks
*/
2004-01-27 19:07:31 +00:00
function proccess_attributes ( $post , $profile = false ) {
2003-12-20 21:42:52 +00:00
// Load attributes
2003-12-30 15:36:30 +00:00
$this -> attributes [ 'sambaDomainName' ][ 0 ] = $post [ 'sambaDomainName' ];
2003-12-20 21:42:52 +00:00
// Get Domain SID from name
$sambaDomains = $_SESSION [ $_SESSION [ $this -> base ] -> ldap ] -> search_domains ( $_SESSION [ $_SESSION [ $this -> base ] -> config ] -> get_domainSuffix ());
for ( $i = 0 ; $i < count ( $sambaDomains ); $i ++ )
if ( $this -> attributes [ 'sambaDomainName' ][ 0 ] == $sambaDomains [ $i ] -> name ) {
$SID = $sambaDomains [ $i ] -> SID ;
}
$flag = " [ " ;
2003-12-30 15:36:30 +00:00
if ( $post [ 'sambaAcctFlagsD' ]) $flag .= " D " ;
if ( $post [ 'sambaAcctFlagsX' ]) $flag .= " X " ;
if ( $post [ 'sambaAcctFlagsN' ]) $flag .= " N " ;
if ( $post [ 'sambaAcctFlagsS' ]) $flag .= " S " ;
if ( $post [ 'sambaAcctFlagsH' ]) $flag .= " H " ;
if ( $post [ 'sambaAcctFlagsW' ]) $flag .= " W " ;
if ( $post [ 'sambaAcctFlagsU' ]) $flag .= " U " ;
2003-12-20 21:42:52 +00:00
// Expand string to fixed length
$flag = str_pad ( $flag , 12 );
// End character
$flag = $flag . " ] " ;
$this -> attributes [ 'sambaAcctFlags' ][ 0 ] = $flag ;
2003-12-21 14:52:23 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'host' ) {
$this -> attributes [ 'sambaPrimaryGroupSID' ][ 0 ] = $SID . " - " . $this -> rids [ _ ( 'Domain Computers' )];
2003-12-30 15:36:30 +00:00
if ( $post [ 'ResetSambaPassword' ]) {
2003-12-21 14:52:23 +00:00
// *** fixme. What is the default password?
$this -> sambaLMPassword ( '' );
$_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> userPassword ( '' );
}
}
2003-12-20 21:42:52 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'user' ) {
2003-12-30 15:36:30 +00:00
$this -> attributes [ 'sambaPwdCanChange' ][ 0 ] = mktime ( $post [ 'sambaPwdCanChange_h' ], $post [ 'sambaPwdCanChange_m' ], $post [ 'sambaPwdCanChange_s' ],
$post [ 'sambaPwdCanChange_mon' ], $post [ 'sambaPwdCanChange_day' ], $post [ 'sambaPwdCanChange_yea' ]);
$this -> attributes [ 'sambaPwdMustChange' ][ 0 ] = mktime ( $post [ 'sambaPwdMustChange_h' ], $post [ 'sambaPwdMustChange_m' ], $post [ 'sambaPwdMustChange_s' ],
$post [ 'sambaPwdMustChange_mon' ], $post [ 'sambaPwdMustChange_day' ], $post [ 'sambaPwdMustChange_yea' ]);
$this -> attributes [ 'sambaHomePath' ][ 0 ] = stripslashes ( $post [ 'sambaHomePath' ]);
$this -> attributes [ 'sambaHomeDrive' ][ 0 ] = $post [ 'sambaHomeDrive' ];
$this -> attributes [ 'sambaLogonScript' ][ 0 ] = stripslashes ( $post [ 'sambaLogonScript' ]);
$this -> attributes [ 'sambaProfilePath' ][ 0 ] = stripslashes ( $post [ 'sambaProfilePath' ]);
2003-12-20 21:42:52 +00:00
$rids = array_keys ( $this -> rids );
$wrid = false ;
for ( $i = 0 ; $i < count ( $rids ); $i ++ ) {
2003-12-30 15:36:30 +00:00
if ( $post [ 'sambaPrimaryGroupSID' ] == $rids [ $i ]) {
2003-12-20 21:42:52 +00:00
$wrid = true ;
// Get Domain SID
$this -> attributes [ 'sambaPrimaryGroupSID' ][ 0 ] = $SID . " - " . $this -> rids [ $rids [ $i ]];
}
}
if ( ! $wrid ) $this -> attributes [ 'sambaPrimaryGroupSID' ][ 0 ] = $SID . " - " . ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'gidNumber' ][ 0 ] * 2 ) + $RIDbase + 1 ;
2004-01-27 19:07:31 +00:00
if ( isset ( $post [ 'sambaLMPassword' ]) && ! $profile ) {
2003-12-30 15:36:30 +00:00
if ( $post [ 'sambaLMPassword' ] != $post [ 'sambaLMPassword2' ]) {
$errors [] = array ( 'ERROR' , _ ( 'Password' ), _ ( 'Please enter the same password in both password-fields.' ), 'sambaLMPassword' );
unset ( $post [ 'sambaLMPassword2' ]);
2003-12-20 21:42:52 +00:00
}
2003-12-30 15:36:30 +00:00
else $this -> sambaLMPassword ( $post [ 'sambaLMPassword' ]);
2003-12-20 21:42:52 +00:00
}
2003-12-30 15:36:30 +00:00
if ( $post [ 'useunixpwd' ]) $this -> useunixpwd = true ;
2003-12-20 21:42:52 +00:00
else $this -> useunixpwd = false ;
2004-01-27 19:07:31 +00:00
if ( ! $profile ) {
if ( $post [ 'sambaSID' ] == _ ( 'Administrator' )) {
$this -> attributes [ 'sambaSID' ][ 0 ] = $SID . " -500 " ;
// Do a check if an administrator already exists
if ( $_SESSION [ $_SESSION [ $this -> base ] -> cache ] -> in_cache ( $SID . " -500 " , 'sambaSID' , 'user' ) != $_SESSION [ $this -> base ] -> dn_orig )
$errors [ 'sambaSID' ][] = array ( 'ERROR' , _ ( 'Special user' ), _ ( 'There can be only one administrator per domain.' ));
}
if ( $post [ 'sambaSID' ] == _ ( 'Guest' )) {
$this -> attributes [ 'sambaSID' ][ 0 ] = $SID . " -501 " ;
// Do a check if an administrator already exists
if ( $_SESSION [ $_SESSION [ $this -> base ] -> cache ] -> in_cache ( $SID . " -501 " , 'sambaSID' , 'user' ) != $_SESSION [ $this -> base ] -> dn_orig )
$errors [ 'sambaSID' ][] = array ( 'ERROR' , _ ( 'Special user' ), _ ( 'There can be only one guest per domain.' ));
}
// Check values
$this -> attributes [ 'sambaHomePath' ][ 0 ] = str_replace ( '$user' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'uid' ][ 0 ], $this -> attributes [ 'sambaHomePath' ][ 0 ]);
$this -> attributes [ 'sambaHomePath' ][ 0 ] = str_replace ( '$group' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'gid' ][ 0 ], $this -> attributes [ 'sambaHomePath' ][ 0 ]);
if ( $this -> attributes [ 'sambaHomePath' ][ 0 ] != stripslashes ( $post [ 'sambaHomePath' ])) $errors [ 'sambaHomePath' ][] = array ( 'INFO' , _ ( 'Home path' ), _ ( 'Inserted user- or groupname in HomePath.' ));
$this -> attributes [ 'sambaLogonScript' ][ 0 ] = str_replace ( '$user' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'uid' ][ 0 ], $this -> attributes [ 'sambaLogonScript' ][ 0 ]);
$this -> attributes [ 'sambaLogonScript' ][ 0 ] = str_replace ( '$group' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'gid' ][ 0 ], $this -> attributes [ 'sambaLogonScript' ][ 0 ]);
if ( $this -> attributes [ 'sambaLogonScript' ][ 0 ] != stripslashes ( $post [ 'sambaLogonScript' ])) $errors [ 'sambaLogonScript' ][] = array ( 'INFO' , _ ( 'Logon script' ), _ ( 'Inserted user- or groupname in logon script.' ));
$this -> attributes [ 'sambaProfilePath' ][ 0 ] = str_replace ( '$user' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'uid' ][ 0 ], $this -> attributes [ 'sambaProfilePath' ][ 0 ]);
$this -> attributes [ 'sambaProfilePath' ][ 0 ] = str_replace ( '$group' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'gid' ][ 0 ], $this -> attributes [ 'sambaProfilePath' ][ 0 ]);
if ( $this -> attributes [ 'sambaProfiletPath' ][ 0 ] != stripslashes ( $post [ 'sambaProfilePath' ])) $errors [ 'sambaProfilePath' ][] = array ( 'INFO' , _ ( 'Profile path' ), _ ( 'Inserted user- or groupname in profilepath.' ));
2004-07-05 19:45:19 +00:00
if ( ( ! $this -> attributes [ 'sambaHomePath' ][ 0 ] == '' ) && ( ! ereg ( $this -> regex_homedir , $this -> attributes [ 'sambaHomePath' ][ 0 ])))
$errors [ 'sambaHomePath' ][] = $this -> messages [ 'homedir' ];
2004-01-27 19:07:31 +00:00
if ( ! ereg ( '^([a-z]|[A-Z]|[0-9]|[\|]|[\#]|[\*]|[\,]|[\.]|[\;]|[\:]|[\_]|[\-]|[\+]|[\!]|[\%]|[\&]|[\/]|[\?]|[\{]|[\[]|[\(]|[\)]|[\]]|[\}])*$' ,
$this -> sambaLMPassword ())) $errors [ 'sambaLMPassword' ][] = array ( 'ERROR' , _ ( 'Password' ), _ ( 'Password contains invalid characters. Valid characters are: a-z, A-Z, 0-9 and #*,.;:_-+!$%&/|?{[()]}= !' ));
2004-07-05 19:45:19 +00:00
if ( ( ! $this -> attributes [ 'sambaLogonScript' ][ 0 ] == '' ) && ( ! ereg ( $this -> regex_logonScript , $this -> attributes [ 'sambaLogonScript' ][ 0 ])))
$errors [ 'sambaScriptPath' ][] = $this -> messages [ 'logonScript' ];
if ( ! ( $this -> attributes [ 'sambaProfilePath' ][ 0 ] == '' ) && ! ereg ( $this -> regex_profilePath , $this -> attributes [ 'sambaProfilePath' ][ 0 ]))
$errors [ 'sambaProfilePath' ][] = $this -> messages [ 'profilePath' ];
2003-12-21 14:52:23 +00:00
}
2004-01-27 19:07:31 +00:00
else {
$sambaHomePath = str_replace ( '$user' , 'user' , $this -> attributes [ 'sambaHomePath' ][ 0 ]);
$sambaHomePath = str_replace ( '$group' , 'group' , $sambaHomePath );
$sambaLogonScript = str_replace ( '$user' , 'user' , $this -> attributes [ 'sambaLogonScript' ][ 0 ]);
$sambaLogonScript = str_replace ( '$group' , 'group' , $sambaLogonScript );
$sambaProfilePath = str_replace ( '$user' , 'user' , $this -> attributes [ 'sambaProfilePath' ][ 0 ]);
$sambaProfilePath = str_replace ( '$group' , 'group' , $sambaProfilePath );
if ( ( ! $this -> attributes [ 'sambaHomePath' ][ 0 ] == '' ) && ( ! ereg ( '^[\][\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%])+([\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%]|[?]|[?]|[?]|[?]|[?]|[?]|[?])+)+$' , $this -> attributes [ 'sambaHomePath' ][ 0 ])))
$errors [] = array ( 'ERROR' , _ ( 'Home path' ), _ ( 'Home path is invalid.' ), 'sambaHomePath' );
if ( ! ereg ( '^([a-z]|[A-Z]|[0-9]|[\|]|[\#]|[\*]|[\,]|[\.]|[\;]|[\:]|[\_]|[\-]|[\+]|[\!]|[\%]|[\&]|[\/]|[\?]|[\{]|[\[]|[\(]|[\)]|[\]]|[\}])*$' ,
$this -> sambaLMPassword ())) $errors [] = array ( 'ERROR' , _ ( 'Password' ), _ ( 'Password contains invalid characters. Valid characters are: a-z, A-Z, 0-9 and #*,.;:_-+!$%&/|?{[()]}= !' ), 'sambaLMPassword' );
if ( ( ! $this -> attributes [ 'sambaLogonScript' ][ 0 ] == '' ) && ( ! ereg ( '^([/])*([a-z]|[0-9]|[.]|[-]|[_]|[%]|[?]|[?]|[?]|[?]|[?]|[?]|[?])+([a-z]|[0-9]|[.]|[-]|[_]|[%]|[?]|[?]|[?]|[?]|[?]|[?]|[?])*' .
'([/]([a-z]|[0-9]|[.]|[-]|[_]|[%]|[?]|[?]|[?]|[?]|[?]|[?]|[?])+([a-z]|[0-9]|[.]|[-]|[_]|[%]|[?]|[?]|[?]|[?]|[?]|[?]|[?])*)*(([.][b][a][t])|([.][c][m][d]))$' , $this -> attributes [ 'sambaLogonScript' ][ 0 ])))
$errors [] = array ( 'ERROR' , _ ( 'Script path' ), _ ( 'Script path is invalid!' ), 'sambaScriptPath' );
if ( ( ! $this -> attributes [ 'sambaProfilePath' ][ 0 ] == '' ) && ( ! ereg ( '^[/][a-z]([a-z]|[0-9]|[.]|[-]|[_]|[%])*([/][a-z]([a-z]|[0-9]|[.]|[-]|[_]|[%])*)*$' , $this -> attributes [ 'sambaProfilePath' ][ 0 ]))
&& ( ! ereg ( '^[\][\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%])+([\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%])+)+$' , $this -> attributes [ 'sambaProfilePath' ][ 0 ])))
$errors [] = array ( 'ERROR' , _ ( 'Profile path' ), _ ( 'Profile path is invalid!' ), 'sambaProfilePath' );
2003-12-21 14:52:23 +00:00
}
2003-12-20 21:42:52 +00:00
}
if ( is_array ( $errors )) return $errors ;
2003-12-30 15:36:30 +00:00
if ( $post [ 'sambaUserWorkstations' ]) return 'sambaUserWorkstations' ;
2003-12-20 21:42:52 +00:00
return 0 ;
}
/* Write variables into object and do some regexp checks
*/
2004-01-27 19:07:31 +00:00
function proccess_sambaUserWorkstations ( $post , $profile = false ) {
2003-12-20 21:42:52 +00:00
// Load attributes
2004-01-27 19:07:31 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'user' ) {
do { // X-Or, only one if() can be true
if ( isset ( $post [ 'availableSambaUserWorkstations' ]) && isset ( $post [ 'sambaUserWorkstations_add' ])) { // Add workstations to list
$temp = str_replace ( ' ' , '' , $this -> attributes [ 'sambaUserWorkstations' ][ 0 ]);
$workstations = explode ( ',' , $temp );
for ( $i = 0 ; $i < count ( $workstations ); $i ++ )
if ( $workstations [ $i ] == '' ) unset ( $workstations [ $i ]);
$workstations = array_values ( $workstations );
// Add new // Add workstations
$workstations = array_merge ( $workstations , $post [ 'availableSambaUserWorkstations' ]);
// remove doubles
$workstations = array_flip ( $workstations );
array_unique ( $workstations );
$workstations = array_flip ( $workstations );
// sort workstations
sort ( $workstations );
// Recreate workstation string
$this -> attributes [ 'sambaUserWorkstations' ][ 0 ] = $workstations [ 0 ];
for ( $i = 1 ; $i < count ( $workstations ); $i ++ ) {
$this -> attributes [ 'sambaUserWorkstations' ][ 0 ] = $this -> attributes [ 'sambaUserWorkstations' ][ 0 ] . " , " . $workstations [ $i ];
}
break ;
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
if ( isset ( $post [ 'sambaUserWorkstations' ]) && isset ( $post [ 'sambaUserWorkstations_remove' ])) { // remove // Add workstations from list
// Put all workstations in array
$temp = str_replace ( ' ' , '' , $this -> attributes [ 'sambaUserWorkstations' ][ 0 ]);
$workstations = explode ( ',' , $temp );
for ( $i = 0 ; $i < count ( $workstations ); $i ++ )
if ( $workstations [ $i ] == '' ) unset ( $workstations [ $i ]);
$workstations = array_values ( $workstations );
// Remove unwanted workstations from array
$workstations = array_delete ( $post [ 'sambaUserWorkstations' ], $workstations );
// Recreate workstation string
$this -> attributes [ 'sambaUserWorkstations' ][ 0 ] = $workstations [ 0 ];
for ( $i = 1 ; $i < count ( $workstations ); $i ++ ) {
$this -> attributes [ 'sambaUserWorkstations' ][ 0 ] = $this -> attributes [ 'sambaUserWorkstations' ][ 0 ] . " , " . $workstations [ $i ];
}
break ;
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
} while ( 0 );
if ( $post [ 'attributes' ]) return 'attributes' ;
}
2003-12-20 21:42:52 +00:00
return 0 ;
}
/* This function will create the html - page
* to show a page with all attributes .
* It will output a complete html - table
*/
2004-01-27 19:07:31 +00:00
function display_html_attributes ( $post , $profile = false ) {
2003-12-21 14:52:23 +00:00
// Get Domain SID from name
$sambaDomains = $_SESSION [ $_SESSION [ $this -> base ] -> ldap ] -> search_domains ( $_SESSION [ $_SESSION [ $this -> base ] -> config ] -> get_domainSuffix ());
for ( $i = 0 ; $i < count ( $sambaDomains ); $i ++ ) {
$sambaDomainNames [] = $sambaDomains [ $i ] -> name ;
if ( $this -> attributes [ 'sambaDomainName' ][ 0 ] == $sambaDomains [ $i ] -> name )
$SID = $sambaDomains [ $i ] -> SID ;
}
2004-01-27 19:07:31 +00:00
$canchangedate = getdate ( $this -> attributes [ 'sambaPwdCanChange' ][ 0 ]);
$mustchangedate = getdate ( $this -> attributes [ 'sambaPwdMustChange' ][ 0 ]);
2003-12-20 21:42:52 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'user' ) {
2004-01-27 19:07:31 +00:00
$return [] = array ( 0 => array ( 'kind' => 'input' , 'name' => 'sambaPwdCanChange_h' , 'type' => 'hidden' , 'value' => $canchangedate [ 'hours' ]),
1 => array ( 'kind' => 'input' , 'name' => 'sambaPwdCanChange_m' , 'type' => 'hidden' , 'value' => $canchangedate [ 'minutes' ]),
2 => array ( 'kind' => 'input' , 'name' => 'sambaPwdCanChange_s' , 'type' => 'hidden' , 'value' => $canchangedate [ 'seconds' ]),
3 => array ( 'kind' => 'input' , 'name' => 'sambaPwdMustChange_h' , 'type' => 'hidden' , 'value' => $mustchangedate [ 'hours' ]),
4 => array ( 'kind' => 'input' , 'name' => 'sambaPwdMustChange_m' , 'type' => 'hidden' , 'value' => $mustchangedate [ 'minutes' ]),
5 => array ( 'kind' => 'input' , 'name' => 'sambaPwdMustChange_s' , 'type' => 'hidden' , 'value' => $mustchangedate [ 'seconds' ]),
6 => array ( 'kind' => 'input' , 'name' => 'sambaAcctFlagsU' , 'type' => 'hidden' , 'value' => 'true' ));
if ( ! $profile ) {
if ( $this -> attributes [ 'lmPassword' ][ 0 ] != $this -> orig [ 'lmPassword' ][ 0 ]) $password = $this -> sambaLMPassword ();
else $password = '' ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Samba password' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'sambaLMPassword' , 'type' => 'password' , 'size' => '20' , 'maxlength' => '255' , 'value' => $password ));
if ( $post [ 'sambaLMPassword2' ] != '' ) $password2 = $post [ 'sambaLMPassword2' ];
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Repeat password' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'sambaLMPassword2' , 'type' => 'password' , 'size' => '20' , 'maxlength' => '255' , 'value' => $password2 ),
2 => array ( 'kind' => 'help' , 'value' => 'sambaLMPassword' ));
}
2003-12-21 14:52:23 +00:00
if ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> orig [ 'userPassword' ][ 0 ] != $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'userPassword' ][ 0 ]) {
2004-01-27 19:07:31 +00:00
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Use unix password' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'useunixpwd' , 'type' => 'checkbox' , 'checked' => $this -> useunixpwd ),
2 => array ( 'kind' => 'help' , 'value' => 'useunixpwd' ));
2003-12-21 14:52:23 +00:00
}
2004-01-27 19:07:31 +00:00
$checked = false ;
if ( strpos ( $this -> attributes [ 'sambaAcctFlags' ][ 0 ], " N " )) $checked = true ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Use no password' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'sambaAcctFlagsN' , 'type' => 'checkbox' , 'checked' => $checked ),
2 => array ( 'kind' => 'help' , 'value' => 'sambaAcctFlagsN' ));
$checked = false ;
if ( strpos ( $this -> attributes [ 'sambaAcctFlags' ][ 0 ], " X " )) $checked = true ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Password does not expire' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'sambaAcctFlagsX' , 'type' => 'checkbox' , 'checked' => $checked ),
2 => array ( 'kind' => 'help' , 'value' => 'sambaAcctFlagsX' ));
$checked = false ;
if ( strpos ( $this -> attributes [ 'sambaScctFlags' ][ 0 ], " D " )) $checked = true ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Account is deactivated' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'sambaAcctFlagsD' , 'type' => 'checkbox' , 'checked' => $checked ),
2 => array ( 'kind' => 'help' , 'value' => 'sambaAcctFlagsD' ));
for ( $i = 1 ; $i <= 31 ; $i ++ ) $mday [] = $i ;
for ( $i = 1 ; $i <= 12 ; $i ++ ) $mon [] = $i ;
for ( $i = 2003 ; $i <= 2030 ; $i ++ ) $year [] = $i ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'User can change password' ) ),
1 => array ( 'kind' => 'table' , 'value' => array ( 0 => array ( 0 => array ( 'kind' => 'select' , 'name' => 'sambaPwdCanChange_day' ,
'options' => $mday , 'options_selectd' => $canchangedate [ 'mday' ]),
1 => array ( 'kind' => 'select' , 'name' => 'sambaPwdCanChange_mon' ,
'options' => $mon , 'options_selectd' => $canchangedate [ 'mon' ]),
2 => array ( 'kind' => 'select' , 'name' => 'sambaPwdCanChange_yes' ,
'options' => $year , 'options_selectd' => $canchangedate [ 'year' ])))),
2 => array ( 'kind' => 'help' , 'value' => 'sambaPwdCanChange' ));
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'User must change password' ) ),
1 => array ( 'kind' => 'table' , 'value' => array ( 0 => array ( 0 => array ( 'kind' => 'select' , 'name' => 'sambaPwdMustChange_day' ,
'options' => $mday , 'options_selectd' => $mustchangedate [ 'mday' ]),
1 => array ( 'kind' => 'select' , 'name' => 'sambaPwdMustChange_mon' ,
'options' => $mon , 'options_selectd' => $mustchangedate [ 'mon' ]),
2 => array ( 'kind' => 'select' , 'name' => 'sambaPwdMustChange_yes' ,
'options' => $year , 'options_selectd' => $mustchangedate [ 'year' ])))),
2 => array ( 'kind' => 'help' , 'value' => 'sambaPwdMustChange' ));
for ( $i = 90 ; $i > 67 ; $i -- ) $drives [] = chr ( $i ) . ':' ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Home drive' ) ),
1 => array ( 'kind' => 'select' , 'name' => 'sambaHomeDrive' , 'options' => $drives , 'options_selected' => array ( $this -> attributes [ 'sambaHomeDrive' ][ 0 ])),
2 => array ( 'kind' => 'help' , 'value' => 'sambaHomeDrive' ));
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Home path' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'sambaHomePath' , 'size' => '20' , 'maxlength' => '255' , 'value' => $this -> attributes [ 'sambaHomePath' ][ 0 ]),
2 => array ( 'kind' => 'help' , 'value' => 'sambaHomePath' ));
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Profile path' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'sambaProfilePath' , 'size' => '20' , 'maxlength' => '255' , 'value' => $this -> attributes [ 'sambaProfilePath' ][ 0 ]),
2 => array ( 'kind' => 'help' , 'value' => 'sambaProfilePath' ));
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Logon script' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'sambaLogonScript' , 'size' => '20' , 'maxlength' => '255' , 'value' => $this -> attributes [ 'sambaLogonScript' ][ 0 ]),
2 => array ( 'kind' => 'help' , 'value' => 'sambaLogonScript' ));
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Samba workstations' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'submit' , 'name' => 'sambaUserWorkstations' , 'value' => _ ( 'Edit workstations' )),
2 => array ( 'kind' => 'help' , 'value' => 'sambaUserWorkstations' ));
if ( ! $profile ) {
2003-12-20 21:42:52 +00:00
$names = array_keys ( $this -> rids );
$wrid = false ;
for ( $i = 0 ; $i < count ( $names ); $i ++ ) {
if ( $this -> attributes [ 'sambaPrimaryGroupSID' ][ 0 ] == $SID . " - " . $this -> rids [ $names [ $i ]]) {
2004-01-27 19:07:31 +00:00
$selected [] = $names [ $i ];
2003-12-20 21:42:52 +00:00
$wrid = true ;
}
2004-01-27 19:07:31 +00:00
else $options [] = $names [ $i ];
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
if ( $wrid ) $options [] = $_SESSION [ $_SESSION [ $this -> base ] -> cache ] -> getgrnam ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'gidNumber' ][ 0 ]);
else $selected [] = $_SESSION [ $_SESSION [ $this -> base ] -> cache ] -> getgrnam ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'gidNumber' ][ 0 ]);
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Windows group' ) ),
1 => array ( 'kind' => 'select' , 'name' => 'sambaPrimaryGroupSID' , 'options' => $options , 'options_selected' => $selected ),
2 => array ( 'kind' => 'help' , 'value' => 'sambaPrimaryGroupSID' ));
2003-12-21 14:52:23 +00:00
// Display if group SID should be mapped to a well kown SID
$wrid = false ;
if ( $this -> attributes [ 'sambaSID' ][ 0 ] == $SID . " -500 " ) {
2004-01-27 19:07:31 +00:00
$selected [] = _ ( 'Administrator' );
2003-12-21 14:52:23 +00:00
$wrid = true ;
}
2004-01-27 19:07:31 +00:00
else $options [] = _ ( 'Administrator' );
if ( $this -> attributes [ 'sambaSID' ][ 0 ] == $SIM . " -501 " ) {
$selected [] = _ ( 'Guest' );
2003-12-21 14:52:23 +00:00
$wrid = true ;
}
2004-01-27 19:07:31 +00:00
else $options [] = _ ( 'Guest' );
if ( $wrid ) $options [] = _ ( 'Ordinary user' );
else $selected [] = _ ( 'Ordinary user' );
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Special user' ) ),
1 => array ( 'kind' => 'select' , 'name' => 'sambaSID' , 'options' => $options , 'options_selected' => $selected ),
2 => array ( 'kind' => 'help' , 'value' => 'sambaSID' ));
}
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Domain' ) ),
1 => array ( 'kind' => 'select' , 'name' => 'sambaDomainName' , 'options' => $sambaDomainNames , 'options_selected' => array ( $this -> attributes [ 'sambaDomainName' ][ 0 ])),
2 => array ( 'kind' => 'help' , 'value' => 'sambaDomainName' ));
2003-12-20 21:42:52 +00:00
}
2003-12-21 14:52:23 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'host' ) {
2004-01-27 19:07:31 +00:00
$return [] = array ( 0 => array ( 'kind' => 'input' , 'name' => 'sambaAcctFlagsW' , 'type' => 'hidden' , 'value' => 'true' ));
if ( ! $profile ) {
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Reset password' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'submit' , 'name' => 'ResetSambaPassword' ),
2 => array ( 'kind' => 'help' , 'value' => 'ResetSambaPassword' ));
}
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Domain' ) ),
1 => array ( 'kind' => 'select' , 'name' => 'sambaDomainName' , 'options' => $sambaDomainNames , 'options_selected' => $this -> attributes [ 'sambaDomainName' ][ 0 ]),
2 => array ( 'kind' => 'help' , 'value' => 'sambaDomainName' ));
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
return $return ;
2003-12-20 21:42:52 +00:00
}
2003-12-30 15:36:30 +00:00
function display_html_delete ( $post ) {
return 0 ;
}
2003-12-20 21:42:52 +00:00
/* This function will create the html - page
* to show a page with all attributes .
* It will output a complete html - table
*/
2004-01-27 19:07:31 +00:00
function display_html_sambaUserWorkstations ( $post , $profile = false ) {
if ( $_SESSION [ $this -> base ] -> type == 'user' ) {
// Get list of all hosts.
$result = $_SESSION [ $_SESSION [ $this -> base ] -> cache ] -> get_cache ( 'uid' , 'sambaSamAccount' , 'host' );
if ( is_array ( $result )) {
foreach ( $result as $host ) $availableUserWorkstations [] = str_replace ( " $ " , '' , $host [ 0 ]);
sort ( $availableUserWorkstations , SORT_STRING );
$result = str_replace ( ' ' , '' , $this -> attributes [ 'sambaUserWorkstations' ][ 0 ]);
$userWorkstations = explode ( ',' , $result );
$availableUserWorkstations = array_delete ( $userWorkstations , $availableUserWorkstations );
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
$return [] = array ( 0 => array ( 'kind' => 'fieldset' , 'legend' => _ ( " Allowed workstations " ), 'value' =>
array ( 0 => array ( 0 => array ( 'kind' => 'fieldset' , 'td' => array ( 'valign' => 'top' ), 'legend' => _ ( " Allowed workstations " ), 'value' =>
array ( 0 => array ( 0 => array ( 'kind' => 'select' , 'name' => 'sambaUserWorkstations[]' , 'size' => '15' , 'multiple' , 'options' => $userWorkstations )))),
1 => array ( 'kind' => 'table' , 'value' => array ( 0 => array ( 0 => array ( 'kind' => 'input' , 'type' => 'submit' , 'name' => 'sambaUserWorkstations_add' ,
'value' => '<=' )), 1 => array ( 0 => array ( 'kind' => 'input' , 'type' => 'submit' , 'name' => 'sambaUserWorkstations_remove' , 'value' => '=>' )),
2 => array ( 0 => array ( 'kind' => 'help' , 'value' => 'sambaUserWorkstations' )))),
2 => array ( 'kind' => 'fieldset' , 'td' => array ( 'valign' => 'top' ), 'legend' => _ ( " Available workstations " ), 'value' =>
array ( 0 => array ( 0 => array ( 'kind' => 'select' , 'name' => 'availableSambaUserWorkstations[]' , 'size' => '15' , 'multiple' , 'options' => $availableUserWorkstations ))))
))));
$return [] = array ( 0 => array ( 'kind' => 'input' , 'type' => 'submit' , 'value' => _ ( 'Back' ) ),
1 => array ( 'kind' => 'text' ),
2 => array ( 'kind' => 'text' ));
}
return $return ;
2003-12-20 21:42:52 +00:00
}
2004-04-03 14:47:33 +00:00
function get_profileOptions () {
2004-03-09 12:03:39 +00:00
$return = array ();
2004-04-11 13:07:24 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'user' ) {
// use Unix password as Samba password
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Use unix password' ) . ': ' ),
1 => array ( 'kind' => 'input' , 'name' => 'sambaSamAccount_useunixpwd' , 'type' => 'checkbox' , 'checked' => true ),
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
// use no password at all
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Use no password' ) . ': ' ),
1 => array ( 'kind' => 'input' , 'name' => 'sambaSamAccount_sambaAcctFlagsN' , 'type' => 'checkbox' , 'checked' => false ),
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
// password never expires
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Password does not expire' ) . ': ' ),
1 => array ( 'kind' => 'input' , 'name' => 'sambaSamAccount_sambaAcctFlagsX' , 'type' => 'checkbox' , 'checked' => true ),
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
// account deactivation
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Account is deactivated' ) . ': ' ),
1 => array ( 'kind' => 'input' , 'name' => 'sambaSamAccount_sambaAcctFlagsD' , 'type' => 'checkbox' , 'checked' => false ),
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
// letter of home drive
$drives = array ();
for ( $i = 90 ; $i > 67 ; $i -- ) $drives [] = chr ( $i ) . ':' ;
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Home drive' ) . ': ' ),
1 => array ( 'kind' => 'select' , 'name' => 'sambaSamAccount_sambaHomeDrive' , 'options' => $drives , 'options_selected' => array ( 'Z:' )),
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
// path to home directory
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Home path' ) . ': ' ),
2004-07-05 19:45:19 +00:00
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'sambaSamAccount_smbhome' , 'size' => '20' , 'maxlength' => '255' , 'value' => '' ),
2004-04-11 13:07:24 +00:00
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
// profile path
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Profile path' ) . ': ' ),
2004-07-05 19:45:19 +00:00
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'sambaSamAccount_profilePath' , 'size' => '20' , 'maxlength' => '255' , 'value' => '' ),
2004-04-11 13:07:24 +00:00
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
// logon script
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Logon script' ) . ': ' ),
2004-07-05 19:45:19 +00:00
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'sambaSamAccount_logonScript' , 'size' => '20' , 'maxlength' => '255' , 'value' => '' ),
2004-04-11 13:07:24 +00:00
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
// allowed workstations
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Samba workstations' ) . ': ' ),
2004-07-05 19:45:19 +00:00
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'sambaSamAccount_userWorkstations' , 'value' => '' ),
2004-04-11 13:07:24 +00:00
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
// domains
$sambaDomains = $_SESSION [ 'ldap' ] -> search_domains ( $_SESSION [ 'config' ] -> get_domainSuffix ());
$sambaDomainNames = array ();
for ( $i = 0 ; $i < count ( $sambaDomains ); $i ++ ) {
$sambaDomainNames [] = $sambaDomains [ $i ] -> name ;
}
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Domain' ) . ': ' ),
1 => array ( 'kind' => 'select' , 'name' => 'sambaSamAccount_sambaDomainName' , 'options' => $sambaDomainNames , 'options_selected' => array ()),
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
}
elseif ( $_SESSION [ $this -> base ] -> type == 'host' ) {
// domains
$sambaDomains = $_SESSION [ 'ldap' ] -> search_domains ( $_SESSION [ 'config' ] -> get_domainSuffix ());
$sambaDomainNames = array ();
for ( $i = 0 ; $i < count ( $sambaDomains ); $i ++ ) {
$sambaDomainNames [] = $sambaDomains [ $i ] -> name ;
}
$return [] = array (
0 => array ( 'kind' => 'text' , 'text' => _ ( 'Domain' ) . ': ' ),
1 => array ( 'kind' => 'select' , 'name' => 'sambaSamAccount_sambaDomainName' , 'options' => $sambaDomainNames , 'options_selected' => array ()),
2 => array ( 'kind' => 'help' , 'value' => 'TODO' )
);
2004-04-10 15:23:45 +00:00
}
2004-03-09 12:03:39 +00:00
return $return ;
2003-12-20 21:42:52 +00:00
}
2004-06-03 14:26:48 +00:00
2004-08-17 15:16:17 +00:00
/*
* ( non - PHPDoc )
* @ see baseModule #get_pdfEntries
*/
2004-05-30 13:43:42 +00:00
function get_pdfEntries ( $account_type = " user " ) {
return array ( 'sambaSamAccount_displayName' => array ( '<block><key>' . _ ( 'Display name' ) . '</key><value' . $this -> attributes [ 'displayName' ][ 0 ] . '</value></block>' ),
'sambaSamAccount_uid' => array ( '<block><key>' . _ ( 'Username' ) . '</key><value>' . $this -> attributes [ 'uid' ][ 0 ] . '</value></block>' ),
'sambaSamAccount_sambaHomePath' => array ( '<block><key>' . _ ( 'Home path' ) . '</key><value>' . $this -> attributes [ 'sambaHomeDrive' ][ 0 ] . '</value></block>' ),
'sambaSamAccount_sambaHomeDrive' => array ( '<block><key>' . _ ( 'Home drive' ) . '</key><value>' . $this -> attributes [ 'sambaHomePath' ][ 0 ] . '</value></block>' ),
'sambaSamAccount_sambaLogonScript' => array ( '<block><key>' . _ ( 'Logon script' ) . '</key><value>' . $this -> attributes [ 'sambaLogonScript' ][ 0 ] . '</value></block>' ),
'sambaSamAccount_sambaProfilePath' => array ( '<block><key>' . _ ( 'Profile path' ) . '</key><value>' . $this -> attributes [ 'sambaProfilePath' ][ 0 ] . '</value></block>' ),
'sambaSamAccount_sambaUserWorkstations' => array ( '<block><key>' . _ ( 'Samba workstations' ) . '</key><value>' . $this -> attributes [ 'sambaUserWorkstations' ][ 0 ] . '</value></block>' ),
'sambaSamAccount_sambaDomainName' => array ( '<block><key>' . _ ( 'Domain' ) . '</key><value>' . $this -> attributes [ 'sambaDomainName' ][ 0 ] . '</value></block>' ),
'sambaSamAccount_description' => array ( '<block><key>' . _ ( 'Description' ) . '</key><value>' . $this -> attributes [ 'description' ][ 0 ] . '</value></block>' ),
'sambaSamAccount_sambaPrimaryGroupSID' => array ( '<block><key>' . _ ( 'Windows group' ) . '</key><value>' . $this -> attributes [ 'sambaPrimaryGroupSID' ][ 0 ] . '</value></block>' ));
2004-05-24 21:39:57 +00:00
}
2004-03-14 17:33:05 +00:00
2004-03-09 12:03:39 +00:00
}
2003-12-20 21:42:52 +00:00
?>
