2003-12-20 21:42:52 +00:00
< ? php
/*
$Id $
This code is part of LDAP Account Manager ( http :// www . sourceforge . net / projects / lam )
Copyright ( C ) 2003 Tilo Lutz
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation ; either version 2 of the License , or
( at your option ) any later version .
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
You should have received a copy of the GNU General Public License
along with this program ; if not , write to the Free Software
Foundation , Inc . , 59 Temple Place , Suite 330 , Boston , MA 02111 - 1307 USA
*/
/* Session variables which are used :
* $_SESSION [ 'cacheAttributes' ] : This variable contains a list of attributes and their scope which should be cached
*
* Coockie variables which are used :
* $_COOKIE [ " IV " ], $_COOKIE [ " Key " ] : Needed to en / decrypt passwords .
*
* Variables in basearray which are no objects :
* type : Type of account . Can be user , group , host
* attributes : List of all attributes , how to get them and are theiy required or optional
* dn : current DN without uid = or cn =
* dn_orig : old DN if account was loaded with uid = or cn =
* External functions which are used
* account . inc : findgroups , incache , get_cache , array_delete , getshells
* ldap . inc : pwd_is_enabled , pwd_hash
*/
/* This class contains all sambaAccount LDAP attributes
* and funtioncs required to deal with sambaAccount
* sambaAccount can only be created when it should be added
* to an array .
* basearray is the same array sambaAccount should be added
* to . If basearray is not given the constructor tries to
* create an array with sambaAccount and all other required
* objects .
* Example : $user [] = new sambaAccount ( $user );
*
* In container array the following things have to exist :
* account or inetOrgPerson object
* type : 'user' or 'host'
* 'attributes' : this is a list of arrays with all ldap attributes wich are allowed for this account
*/
class sambaAccount {
// Constructor
function sambaAccount ( $base ) {
/* Return an error if sambaAccount should be created without
* base container
*/
if ( ! $base ) trigger_error ( _ ( 'Please create a base object with $var = new accountContainer();' ), E_USER_ERROR );
2004-02-12 12:09:41 +00:00
if ( ! is_string ( $base )) trigger_error ( _ ( 'Please create a new module object in an accountContainer object first.' ), E_USER_ERROR );
2003-12-20 21:42:52 +00:00
$this -> base = $base ;
// sambaAccount is only a valid objectClass for user and host
if ( ! ( $_SESSION [ $this -> base ] -> get_type () == 'user' ) && ! ( $_SESSION [ $this -> base ] -> get_type () == 'host' )) trigger_error ( _ ( 'sambaAccount can only be used for users or hosts.' ), E_USER_WARNING );
/* Check if ldap conatiner is in array and set type
* users are using inetOrgPerson - , hosts account - container
*/
2004-02-12 12:09:41 +00:00
if ( ! isset ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ])) $_SESSION [ $this -> base ] -> modules [ 'posixAccount' ] = new posixAccount ( $this -> base );
2003-12-20 21:42:52 +00:00
// Add Array with all attributes and type
$this -> attributes = $_SESSION [ $this -> base ] -> get_module_attributes ( 'sambaAccount' );
$_SESSION [ $this -> base ] -> add_attributes ( 'sambaAccount' );
// Make references to attributes which already esists in ldap
$newattributes = array_keys ( $this -> attributes );
$module = array_keys ( $_SESSION [ $this -> base ] -> module );
for ( $i = 0 ; $i < count ( $module ); $i ++ ) {
foreach ( $newattributes as $attribute )
if ( isset ( $_SESSION [ $this -> base ] -> module [ $module [ $i ]] -> attributes [ $attribute ])) $this -> attributes [ $attribute ] =& $_SESSION [ $this -> base ] -> module [ $module [ $i ]] -> attributes [ $attribute ];
}
$this -> orig = $this -> attributes ;
$this -> attributes [ 'objectClass' ][ 0 ] = 'sambaAccount' ;
$this -> useunixpwd = false ;
// List of well known rids
$this -> rids = array ( _ ( 'Domain Admins' ) => 512 , _ ( 'Domain Users' ) => 513 , _ ( 'Domain Guests' ) => 514 , _ ( 'Domain Computers' ) => 515 , _ ( 'Domain Controllers' ) => 516 ,
_ ( 'Domain Certificate Admins' ) => 517 , _ ( 'Domain Schema Admins' ) => 518 , _ ( 'Domain Enterprise Admins' ) => 519 , _ ( 'Domain Policy Admins' ) => 520 );
}
// Variables
// name of accountContainer so we can read other classes in accuontArray
var $base ;
// This variable contains all inetOrgPerson attributes
var $attributes ;
/* If an account was loaded all attributes are kept in this array
* to compare it with new changed attributes
*/
var $orig ;
// use unix password as samba password?
var $useunixpwd ;
// Array of well known rids
var $rids ;
/* $attribute [ 'lmPassword' ] and ntPassword can 't accessed directly because it' s enrcypted
* To read / write password function userPassword is needed
* This function will return the unencrypted password when
* called without a variable
* If it ' s called with a new password , the
* new password will be stored encrypted
*/
function lmPassword ( $newpassword = false ) {
if ( is_string ( $newpassword )) {
// Write new password
2004-01-14 20:33:25 +00:00
$this -> attributes [ 'lmPassword' ][ 0 ] = base64_encode ( $_SESSION [ $_SESSION [ $this -> base ] -> ldap ] -> encrypt ( $newpassword ));
2003-12-20 21:42:52 +00:00
return 0 ;
}
else {
2003-12-21 14:52:23 +00:00
if ( $this -> useunixpwd ) return $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> userPassword ();
2003-12-20 21:42:52 +00:00
if ( $this -> attributes [ 'lmPassword' ][ 0 ] != '' ) {
// Read existing password if set
2004-01-14 20:33:25 +00:00
return $_SESSION [ $_SESSION [ $this -> base ] -> ldap ] -> decrypt ( base64_decode ( $this -> attributes [ 'lmPassword' ][ 0 ]));
2003-12-20 21:42:52 +00:00
}
else return '' ;
}
}
2004-02-23 15:59:56 +00:00
function get_alias ( $scope ) {
2003-12-30 15:36:30 +00:00
return _ ( 'sambaAccount' );
}
2004-03-02 19:54:31 +00:00
function can_manage ( $scope ) {
if ( $scope == " host " ) return true ;
elseif ( $scope == " user " ) return true ;
else return false ;
}
2004-02-23 16:56:53 +00:00
function is_base_module ( $scope ) {
2004-02-21 17:35:16 +00:00
return false ;
}
2003-12-30 15:36:30 +00:00
/* This function returns a list with all required modules
*/
function get_dependencies ( $scope ) {
if ( $scope == 'host' ) return array ( 'require' => array ( 'account' ), 'conflict' => array () );
if ( $scope == 'user' ) return array ( 'require' => array ( 'inetOrgPerson' ), 'conflict' => array () );
return - 1 ;
}
function module_ready () {
if ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'gidNumber' ][ 0 ] == '' ) return false ;
if ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'uidNumber' ][ 0 ] == '' ) return false ;
if ( $this -> attributes [ 'uid' ][ 0 ] == '' ) return false ;
return true ;
}
2004-02-09 18:11:01 +00:00
/* This functions return true
* if all needed settings are done
*/
function module_complete () {
if ( ! $this -> module_ready ()) return false ;
if ( $this -> attributes [ 'rid' ][ 0 ] == '' ) return false ;
return true ;
}
2003-12-30 15:36:30 +00:00
/* This function returns a list of all html - pages in module
* This is usefull for mass upload and pdf - files
* because lam can walk trough all pages itself and do some
* error checkings
*/
function pages () {
return array ( 'attributes' , 'userWorkstations' );
}
2004-01-27 19:07:31 +00:00
/*
*/
function get_help ( $id ) {
switch ( $id ) {
case " description " :
return array ( " ext " => " FALSE " , " Headline " => _ ( " Description " ),
" Text " => _ ( " Host Description. " ));
break ;
}
return false ;
}
2003-12-30 15:36:30 +00:00
/* This function returns all ldap attributes
* which are part of sambaAccount and returns
* also their values .
*/
function get_attributes () {
$return [ 'lmPassword' ] = $this -> lmPassword ();
return $this -> attributes ;
}
/* This function loads all attributes into the object
* $attr is an array as it ' s retured from ldap_get_attributes
*/
function load_attributes ( $attr ) {
// Load attributes which are displayed
// unset count entries
unset ( $attr [ 'count' ]);
$attributes = array_keys ( $attr );
foreach ( $attributes as $attribute ) unset ( $attr [ $attribute ][ 'count' ]);
// unset double entries
for ( $i = 0 ; $i < count ( $attr ); $i ++ )
if ( isset ( $attr [ $i ])) unset ( $attr [ $i ]);
foreach ( $attributes as $attribute ) {
if ( isset ( $this -> attributes [ $attribute ])) {
// decode as unicode
$this -> attributes [ $attribute ] = $attr [ $attribute ];
2003-12-30 17:09:15 +00:00
for ( $i = 0 ; $i < count ( $this -> attributes [ $attribute ]); $i ++ ) {
$this -> attributes [ $attribute ][ $i ] = utf8_decode ( $this -> attributes [ $attribute ][ $i ]);
$this -> orig [ $attribute ][ $i ] = utf8_decode ( $this -> attributes [ $attribute ][ $i ]);
}
2003-12-30 15:36:30 +00:00
}
}
// Values are kept as copy so we can compare old attributes with new attributes
$this -> attributes [ 'objectClass' ][ 0 ] = 'sambaAccount' ;
return 0 ;
}
/* This function returns an array with 3 entries :
* array ( DN1 ( 'add' => array ( $attr ), 'remove' => array ( $attr ), 'modify' => array ( $attr )), DN2 .... )
* DN is the DN to change . It may be possible to change several DNs ,
* e . g . create a new user and add him to some groups via attribute memberUid
* add are attributes which have to be added to ldap entry
* remove are attributes which have to be removed from ldap entry
* modify are attributes which have to been modified in ldap entry
*/
function save_attributes () {
/* Create sambaSID . Can ' t create it while loading attributes because
* it ' s psssible uidNumber has changed
*/
$special = false ;
if ( $this -> attributes [ 'rid' ][ 0 ] == " 500 " ) $special = true ;
if ( $this -> attributes [ 'rid' ][ 0 ] == " 501 " ) $special = true ;
if ( $this -> attributes [ 'rid' ][ 0 ] == " 515 " ) $special = true ;
if ( ! $special ) $this -> attributes [ 'rid' ][ 0 ] == $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'uidNumber' ][ 0 ] * 2 + 1000 ;
$rids = array_keys ( $this -> rids );
$wrid = false ;
for ( $i = 0 ; $i < count ( $rids ); $i ++ )
if ( $this -> attributes [ 'primaryGroupID' ][ 0 ] == $rids [ $i ])
$wrid = true ;
if ( ! $wrid ) $this -> attributes [ 'primaryGroupID' ][ 0 ] = ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'gidNumber' ][ 0 ] * 2 ) + 1001 ;
2003-12-20 21:42:52 +00:00
2003-12-30 15:36:30 +00:00
$return = $_SESSION [ $this -> base ] -> save_module_attributes ( $this -> attributes , $this -> orig );
// Set password
if ( isset ( $return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'lmPassword' ]))
unset ( $return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'lmPassword' ]);
if ( isset ( $return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'ntPassword' ]))
unset ( $return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'ntPassword' ]);
if ( ! isset ( $this -> orig [ 'lmPassword' ][ 0 ])) {
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'lmPassword' ][ 0 ] = exec ( escapeshellarg ( $_SESSION [ 'lampath' ] . 'lib/createntlm.pl' ) . " lm " . escapeshellarg ( $this -> lmPassword ()));
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'ntPassword' ][ 0 ] = exec ( escapeshellarg ( $_SESSION [ 'lampath' ] . 'lib/createntlm.pl' ) . " nt " . escapeshellarg ( $this -> lmPassword ()));
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'pwdLastSet' ][ 0 ] = time ();
}
if ( $this -> lmPassword () != '' ) {
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'lmPassword' ][ 0 ] = exec ( escapeshellarg ( $_SESSION [ 'lampath' ] . 'lib/createntlm.pl' ) . " lm " . escapeshellarg ( $this -> lmPassword ()));
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'ntPassword' ][ 0 ] = exec ( escapeshellarg ( $_SESSION [ 'lampath' ] . 'lib/createntlm.pl' ) . " nt " . escapeshellarg ( $this -> lmPassword ()));
$return [ $_SESSION [ $this -> base ] -> dn ][ 'modify' ][ 'pwdLastSet' ][ 0 ] = time ();
}
return $return ;
}
function delete_attributes ( $post ) {
2004-01-10 11:47:48 +00:00
return 0 ;
2003-12-30 15:36:30 +00:00
}
2003-12-20 21:42:52 +00:00
/* Write variables into object and do some regexp checks
*/
2004-01-27 19:07:31 +00:00
function proccess_attributes ( $post , $profile = false ) {
2003-12-30 15:36:30 +00:00
$this -> attributes [ 'domain' ][ 0 ] = $post [ 'domain' ];
2003-12-21 14:52:23 +00:00
// Start character
$flag = " [ " ;
2003-12-30 15:36:30 +00:00
if ( $post [ 'acctFlagsD' ]) $flag .= " D " ;
if ( $post [ 'acctFlagsX' ]) $flag .= " X " ;
if ( $post [ 'acctFlagsN' ]) $flag .= " N " ;
if ( $post [ 'acctFlagsS' ]) $flag .= " S " ;
if ( $post [ 'acctFlagsH' ]) $flag .= " H " ;
if ( $post [ 'acctFlagsW' ]) $flag .= " W " ;
if ( $post [ 'acctFlagsU' ]) $flag .= " U " ;
2003-12-21 14:52:23 +00:00
// Expand string to fixed length
$flag = str_pad ( $flag , 12 );
// End character
$flag = $flag . " ] " ;
$this -> attributes [ 'acctFlags' ][ 0 ] = $flag ;
2004-01-27 19:07:31 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'host' && ! $profile ) {
2003-12-21 14:52:23 +00:00
$this -> attributes [ 'primaryGroupID' ][ 0 ] = $this -> rids [ _ ( 'Domain Computers' )];
2003-12-30 15:36:30 +00:00
if ( $post [ 'ResetSambaPassword' ]) {
2003-12-21 14:52:23 +00:00
// *** fixme. What is the default password?
$this -> lmPassword ( '' );
$_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> userPassword ( '' );
}
}
// Check values
2003-12-20 21:42:52 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'user' ) {
2003-12-30 15:36:30 +00:00
$this -> attributes [ 'pwdCanChange' ][ 0 ] = mktime ( $post [ 'pwdCanChange_h' ], $post [ 'pwdCanChange_m' ], $post [ 'pwdCanChange_s' ],
$post [ 'pwdCanChange_mon' ], $post [ 'pwdCanChange_day' ], $post [ 'pwdCanChange_yea' ]);
$this -> attributes [ 'pwdMustChange' ][ 0 ] = mktime ( $post [ 'pwdMustChange_h' ], $post [ 'pwdMustChange_m' ], $post [ 'pwdMustChange_s' ],
$post [ 'pwdMustChange_mon' ], $post [ 'pwdMustChange_day' ], $post [ 'pwdMustChange_yea' ]);
$this -> attributes [ 'smbHome' ][ 0 ] = stripslashes ( $post [ 'smbHome' ]);
$this -> attributes [ 'homeDrive' ][ 0 ] = $post [ 'homeDrive' ];
$this -> attributes [ 'scriptPath' ][ 0 ] = stripslashes ( $post [ 'scriptPath' ]);
$this -> attributes [ 'profilePath' ][ 0 ] = stripslashes ( $post [ 'profilePath' ]);
2004-01-27 19:07:31 +00:00
if ( ! $profile ) {
$rids = array_keys ( $this -> rids );
$wrid = false ;
for ( $i = 0 ; $i < count ( $rids ); $i ++ ) {
if ( $post [ 'primaryGroupID' ] == $rids [ $i ]) {
$wrid = true ;
$this -> attributes [ 'primaryGroupID' ][ 0 ] = $this -> rids [ $rids [ $i ]];
}
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
if ( ! $wrid ) $this -> attributes [ 'primaryGroupID' ][ 0 ] = ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'gidNumber' ][ 0 ] * 2 ) + 1001 ;
2003-12-20 21:42:52 +00:00
2004-01-27 19:07:31 +00:00
if ( isset ( $post [ 'lmPassword' ])) {
if ( $post [ 'lmPassword' ] != $post [ 'lmPassword2' ]) {
$errors [ 'lmPassword' ][] = array ( 'ERROR' , _ ( 'Password' ), _ ( 'Please enter the same password in both password-fields.' ));
unset ( $post [ 'lmPassword2' ]);
}
else $this -> lmPassword ( $post [ 'lmPassword' ]);
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
if ( $post [ 'rid' ] == _ ( 'Administrator' )) {
$this -> attributes [ 'rid' ][ 0 ] = " 500 " ;
// Do a check if an administrator already exists
if ( $_SESSION [ $_SESSION [ $this -> base ] -> cache ] -> in_cache ( " 500 " , 'rid' , 'user' ) != $_SESSION [ $this -> base ] -> dn_orig )
$errors [ 'rid' ][] = array ( 'ERROR' , _ ( 'Special user' ), _ ( 'There can be only one administrator per domain.' ));
}
if ( $post [ 'rid' ] == _ ( 'Guest' )) {
$this -> attributes [ 'rid' ][ 0 ] = " 501 " ;
// Do a check if an administrator already exists
if ( $_SESSION [ $_SESSION [ $this -> base ] -> cache ] -> in_cache ( " 501 " , 'rid' , 'user' ) != $_SESSION [ $this -> base ] -> dn_orig )
$errors [ 'rid' ][] = array ( 'ERROR' , _ ( 'Special user' ), _ ( 'There can be only one guest per domain.' ));
}
$this -> attributes [ 'smbHome' ][ 0 ] = str_replace ( '$user' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'uid' ][ 0 ], $this -> attributes [ 'smbHome' ][ 0 ]);
$this -> attributes [ 'smbHome' ][ 0 ] = str_replace ( '$group' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'gid' ][ 0 ], $this -> attributes [ 'smbHome' ][ 0 ]);
if ( $this -> attributes [ 'smbHome' ][ 0 ] != stripslashes ( $post [ 'smbHome' ])) $errors [ 'smbHome' ][] = array ( 'INFO' , _ ( 'Home path' ), _ ( 'Inserted user- or groupname in HomePath.' ));
$this -> attributes [ 'scriptPath' ][ 0 ] = str_replace ( '$user' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'uid' ][ 0 ], $this -> attributes [ 'scriptPath' ][ 0 ]);
$this -> attributes [ 'scriptPath' ][ 0 ] = str_replace ( '$group' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'gid' ][ 0 ], $this -> attributes [ 'scriptPath' ][ 0 ]);
if ( $this -> attributes [ 'scriptPath' ][ 0 ] != stripslashes ( $post [ 'scriptPath' ])) $errors [ 'scriptPath' ][] = array ( 'INFO' , _ ( 'Script path' ), _ ( 'Inserted user- or groupname in scriptpath.' ));
$this -> attributes [ 'profilePath' ][ 0 ] = str_replace ( '$user' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'uid' ][ 0 ], $this -> attributes [ 'profilePath' ][ 0 ]);
$this -> attributes [ 'profilePath' ][ 0 ] = str_replace ( '$group' , $_SESSION [ $this -> base ] -> module [ 'inetOrgPerson' ] -> attributes [ 'gid' ][ 0 ], $this -> attributes [ 'profilePath' ][ 0 ]);
if ( $this -> attributes [ 'profiletPath' ][ 0 ] != stripslashes ( $post [ 'profilePath' ])) $errors [ 'profilePath' ][] = array ( 'INFO' , _ ( 'Profile path' ), _ ( 'Inserted user- or groupname in profilepath.' ));
if ( ! ereg ( '^([a-z]|[A-Z]|[0-9]|[\|]|[\#]|[\*]|[\,]|[\.]|[\;]|[\:]|[\_]|[\-]|[\+]|[\!]|[\%]|[\&]|[\/]|[\?]|[\{]|[\[]|[\(]|[\)]|[\]]|[\}])*$' ,
$this -> lmPassword ())) $errors [ 'lmPassword' ][] = array ( 'ERROR' , _ ( 'Password' ), _ ( 'Password contains invalid characters. Valid characters are: a-z, A-Z, 0-9 and #*,.;:_-+!$%&/|?{[()]}= !' ));
if ( ( ! $this -> attributes [ 'smbHome' ][ 0 ] == '' ) && ( ! ereg ( '^[\][\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%])+([\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ])+)+$' , $this -> attributes [ 'smbHome' ][ 0 ])))
$errors [ 'smbHome' ][] = array ( 'ERROR' , _ ( 'Home path' ), _ ( 'Home path is invalid.' ));
if ( ( ! $this -> attributes [ 'scriptPath' ][ 0 ] == '' ) && ( ! ereg ( '^([/])*([a-z]|[0-9]|[.]|[-]|[_]|[%]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ])+([a-z]|[0-9]|[.]|[-]|[_]|[%]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ])*' .
'([/]([a-z]|[0-9]|[.]|[-]|[_]|[%]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ])+([a-z]|[0-9]|[.]|[-]|[_]|[%]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ])*)*(([.][b][a][t])|([.][c][m][d]))$' , $this -> attributes [ 'scriptPath' ][ 0 ])))
$errors [ 'scriptPath' ][] = array ( 'ERROR' , _ ( 'Script path' ), _ ( 'Script path is invalid!' ));
if ( ( ! $this -> attributes [ 'profilePath' ][ 0 ] == '' ) && ( ! ereg ( '^[/][a-z]([a-z]|[0-9]|[.]|[-]|[_]|[%])*([/][a-z]([a-z]|[0-9]|[.]|[-]|[_]|[%])*)*$' , $this -> attributes [ 'profilePath' ][ 0 ]))
&& ( ! ereg ( '^[\][\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%])+([\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%])+)+$' , $this -> attributes [ 'profilePath' ][ 0 ])))
$errors [ 'profilePath' ][] = array ( 'ERROR' , _ ( 'Profile path' ), _ ( 'Profile path is invalid!' ));
}
else {
$smbHome = str_replace ( '$user' , 'user' , $this -> attributes [ 'smbHome' ][ 0 ]);
$smbHome = str_replace ( '$group' , 'group' , $smbHome );
$scriptPath = str_replace ( '$user' , 'user' , $this -> attributes [ 'scriptPath' ][ 0 ]);
$scriptPath = str_replace ( '$group' , 'group' , $scriptPath );
$profilePath = str_replace ( '$user' , 'user' , $this -> attributes [ 'profilePath' ][ 0 ]);
$profilePath = str_replace ( '$group' , 'group' , $profilePath );
if ( ( ! $smbHome == '' ) && ( ! ereg ( '^[\][\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%])+([\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ])+)+$' , $smbHome )))
$errors [ 'smbHome' ][] = array ( 'ERROR' , _ ( 'Home path' ), _ ( 'Home path is invalid.' ));
if ( ( ! $scriptPath == '' ) && ( ! ereg ( '^([/])*([a-z]|[0-9]|[.]|[-]|[_]|[%]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ])+([a-z]|[0-9]|[.]|[-]|[_]|[%]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ])*' .
'([/]([a-z]|[0-9]|[.]|[-]|[_]|[%]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ])+([a-z]|[0-9]|[.]|[-]|[_]|[%]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ]|[<5B> ])*)*(([.][b][a][t])|([.][c][m][d]))$' , $scriptPath )))
$errors [ 'scriptPath' ][] = array ( 'ERROR' , _ ( 'Script path' ), _ ( 'Script path is invalid!' ));
if ( ( ! $profilePath == '' ) && ( ! ereg ( '^[/][a-z]([a-z]|[0-9]|[.]|[-]|[_]|[%])*([/][a-z]([a-z]|[0-9]|[.]|[-]|[_]|[%])*)*$' , $profilePath ))
&& ( ! ereg ( '^[\][\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%])+([\]([a-z]|[A-Z]|[0-9]|[.]|[-]|[%])+)+$' , $profilePath )))
$errors [ 'profilePath' ][] = array ( 'ERROR' , _ ( 'Profile path' ), _ ( 'Profile path is invalid!' ));
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
2003-12-30 15:36:30 +00:00
if ( $post [ 'useunixpwd' ]) $this -> useunixpwd = true ;
2003-12-20 21:42:52 +00:00
else $this -> useunixpwd = false ;
}
if (( ! $this -> attributes [ 'domain' ][ 0 ] == '' ) && ! ereg ( '^([a-z]|[A-Z]|[0-9]|[-])+$' , $this -> attributes [ 'domain' ][ 0 ]))
2004-01-27 19:07:31 +00:00
$errors [ 'domain' ][] = array ( 'ERROR' , _ ( 'Domain name' ), _ ( 'Domain name contains invalid characters. Valid characters are: a-z, A-Z, 0-9 and -.' ));
2003-12-20 21:42:52 +00:00
if ( is_array ( $errors )) return $errors ;
2003-12-30 15:36:30 +00:00
if ( $post [ 'userWorkstations' ]) return 'userWorkstations' ;
2003-12-20 21:42:52 +00:00
return 0 ;
}
/* Write variables into object and do some regexp checks
*/
2004-01-27 19:07:31 +00:00
function proccess_userWorkstations ( $post , $profile = false ) {
2003-12-20 21:42:52 +00:00
// Load attributes
2004-01-27 19:07:31 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'user' ) {
do { // X-Or, only one if() can be true
if ( isset ( $post [ 'availableUserWorkstations' ]) && isset ( $post [ 'userWorkstations_add' ])) { // Add workstations to list
$temp = str_replace ( ' ' , '' , $this -> attributes [ 'userWorkstations' ][ 0 ]);
$workstations = explode ( ',' , $temp );
for ( $i = 0 ; $i < count ( $workstations ); $i ++ )
if ( $workstations [ $i ] == '' ) unset ( $workstations [ $i ]);
$workstations = array_values ( $workstations );
// Add new // Add workstations
$workstations = array_merge ( $workstations , $post [ 'availableUserWorkstations' ]);
// remove doubles
$workstations = array_flip ( $workstations );
array_unique ( $workstations );
$workstations = array_flip ( $workstations );
// sort workstations
sort ( $workstations );
// Recreate workstation string
$this -> attributes [ 'userWorkstations' ][ 0 ] = $workstations [ 0 ];
for ( $i = 1 ; $i < count ( $workstations ); $i ++ ) {
$this -> attributes [ 'userWorkstations' ][ 0 ] = $this -> attributes [ 'userWorkstations' ][ 0 ] . " , " . $workstations [ $i ];
}
break ;
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
if ( isset ( $post [ 'userWorkstations' ]) && isset ( $post [ 'userWorkstations_remove' ])) { // remove // Add workstations from list
// Put all workstations in array
$temp = str_replace ( ' ' , '' , $this -> attributes [ 'userWorkstations' ][ 0 ]);
$workstations = explode ( ',' , $temp );
for ( $i = 0 ; $i < count ( $workstations ); $i ++ )
if ( $workstations [ $i ] == '' ) unset ( $workstations [ $i ]);
$workstations = array_values ( $workstations );
// Remove unwanted workstations from array
$workstations = array_delete ( $post [ 'userWorkstations' ], $workstations );
// Recreate workstation string
$this -> attributes [ 'userWorkstations' ][ 0 ] = $workstations [ 0 ];
for ( $i = 1 ; $i < count ( $workstations ); $i ++ ) {
$this -> attributes [ 'userWorkstations' ][ 0 ] = $this -> attributes [ 'userWorkstations' ][ 0 ] . " , " . $workstations [ $i ];
}
break ;
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
} while ( 0 );
if ( $post [ 'attributes' ]) return 'attributes' ;
}
2003-12-20 21:42:52 +00:00
return 0 ;
}
/* This function will create the html - page
* to show a page with all attributes .
* It will output a complete html - table
*/
2004-01-27 19:07:31 +00:00
function display_html_attributes ( $post , $profile = false ) {
2003-12-20 21:42:52 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'user' ) {
$canchangedate = getdate ( $this -> attributes [ 'pwdCanChange' ][ 0 ]);
$mustchangedate = getdate ( $this -> attributes [ 'pwdMustChange' ][ 0 ]);
2004-01-27 19:07:31 +00:00
$return [] = array ( 0 => array ( 'kind' => 'input' , 'name' => 'pwdCanChange_h' , 'type' => 'hidden' , 'value' => $canchangedate [ 'hours' ]),
1 => array ( 'kind' => 'input' , 'name' => 'pwdCanChange_m' , 'type' => 'hidden' , 'value' => $canchangedate [ 'minutes' ]),
2 => array ( 'kind' => 'input' , 'name' => 'pwdCanChange_s' , 'type' => 'hidden' , 'value' => $canchangedate [ 'seconds' ]),
3 => array ( 'kind' => 'input' , 'name' => 'pwdMustChange_h' , 'type' => 'hidden' , 'value' => $mustchangedate [ 'hours' ]),
4 => array ( 'kind' => 'input' , 'name' => 'pwdMustChange_m' , 'type' => 'hidden' , 'value' => $mustchangedate [ 'minutes' ]),
5 => array ( 'kind' => 'input' , 'name' => 'pwdMustChange_s' , 'type' => 'hidden' , 'value' => $mustchangedate [ 'seconds' ]),
6 => array ( 'kind' => 'input' , 'name' => 'acctFlagsU' , 'type' => 'hidden' , 'value' => 'true' ));
if ( ! $profile ) {
if ( $this -> attributes [ 'lmPassword' ][ 0 ] != $this -> orig [ 'lmPassword' ][ 0 ]) $password = $this -> lmPassword ();
else $password = '' ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Samba password' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'lmPassword' , 'type' => 'password' , 'size' => '20' , 'maxlength' => '255' , 'value' => $password ));
if ( $post [ 'lmPassword2' ] != '' ) $password2 = $post [ 'lmPassword2' ];
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Repeat password' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'lmPassword2' , 'type' => 'password' , 'size' => '20' , 'maxlength' => '255' , 'value' => $password2 ),
2 => array ( 'kind' => 'help' , 'value' => 'lmPassword' ));
}
2003-12-21 14:52:23 +00:00
if ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> orig [ 'userPassword' ][ 0 ] != $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'userPassword' ][ 0 ]) {
2004-01-27 19:07:31 +00:00
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Use unix password' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'useunixpwd' , 'type' => 'checkbox' , 'checked' => $this -> useunixpwd ),
2 => array ( 'kind' => 'help' , 'value' => 'useunixpwd' ));
2003-12-21 14:52:23 +00:00
}
2004-01-27 19:07:31 +00:00
$checked = false ;
if ( strpos ( $this -> attributes [ 'acctFlags' ][ 0 ], " N " )) $checked = true ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Use no password' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'acctFlagsN' , 'type' => 'checkbox' , 'checked' => $checked ),
2 => array ( 'kind' => 'help' , 'value' => 'acctFlagsN' ));
$checked = false ;
if ( strpos ( $this -> attributes [ 'acctFlags' ][ 0 ], " X " )) $checked = true ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Password does not expire' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'acctFlagsX' , 'type' => 'checkbox' , 'checked' => $checked ),
2 => array ( 'kind' => 'help' , 'value' => 'acctFlagsX' ));
$checked = false ;
if ( strpos ( $this -> attributes [ 'acctFlags' ][ 0 ], " D " )) $checked = true ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Account is deactivated' ) ),
1 => array ( 'kind' => 'input' , 'name' => 'acctFlagsD' , 'type' => 'checkbox' , 'checked' => $checked ),
2 => array ( 'kind' => 'help' , 'value' => 'acctFlagsD' ));
for ( $i = 1 ; $i <= 31 ; $i ++ ) $mday [] = $i ;
for ( $i = 1 ; $i <= 12 ; $i ++ ) $mon [] = $i ;
for ( $i = 2003 ; $i <= 2030 ; $i ++ ) $year [] = $i ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'User can change password' ) ),
1 => array ( 'kind' => 'table' , 'value' => array ( 0 => array ( 0 => array ( 'kind' => 'select' , 'name' => 'pwdCanChange_day' ,
'options' => $mday , 'options_selectd' => $canchangedate [ 'mday' ]),
1 => array ( 'kind' => 'select' , 'name' => 'pwdCanChange_mon' ,
'options' => $mon , 'options_selectd' => $canchangedate [ 'mon' ]),
2 => array ( 'kind' => 'select' , 'name' => 'pwdCanChange_yes' ,
'options' => $year , 'options_selectd' => $canchangedate [ 'year' ])))),
2 => array ( 'kind' => 'help' , 'value' => 'pwdCanChange' ));
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'User must change password' ) ),
1 => array ( 'kind' => 'table' , 'value' => array ( 0 => array ( 0 => array ( 'kind' => 'select' , 'name' => 'pwdMustChange_day' ,
'options' => $mday , 'options_selectd' => $mustchangedate [ 'mday' ]),
1 => array ( 'kind' => 'select' , 'name' => 'pwdMustChange_mon' ,
'options' => $mon , 'options_selectd' => $mustchangedate [ 'mon' ]),
2 => array ( 'kind' => 'select' , 'name' => 'pwdMustChange_yes' ,
'options' => $year , 'options_selectd' => $mustchangedate [ 'year' ])))),
2 => array ( 'kind' => 'help' , 'value' => 'pwdMustChange' ));
for ( $i = 90 ; $i > 67 ; $i -- ) $drives [] = chr ( $i ) . ':' ;
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Home drive' ) ),
1 => array ( 'kind' => 'select' , 'name' => 'homeDrive' , 'options' => $drives , 'options_selected' => array ( $this -> attributes [ 'homeDrive' ][ 0 ])),
2 => array ( 'kind' => 'help' , 'value' => 'homeDrive' ));
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Home path' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'smbHome' , 'size' => '20' , 'maxlength' => '255' , 'value' => $this -> attributes [ 'smbHome' ][ 0 ]),
2 => array ( 'kind' => 'help' , 'value' => 'smbHome' ));
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Profile path' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'profilePath' , 'size' => '20' , 'maxlength' => '255' , 'value' => $this -> attributes [ 'profilePath' ][ 0 ]),
2 => array ( 'kind' => 'help' , 'value' => 'profilePath' ));
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Script path' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'scriptPath' , 'size' => '20' , 'maxlength' => '255' , 'value' => $this -> attributes [ 'scriptPath' ][ 0 ]),
2 => array ( 'kind' => 'help' , 'value' => 'scriptPath' ));
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Samba workstations' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'submit' , 'name' => 'userWorkstations' , 'value' => _ ( 'Edit workstations' )),
2 => array ( 'kind' => 'help' , 'value' => 'userWorkstations' ));
if ( ! $profile ) {
2003-12-20 21:42:52 +00:00
$names = array_keys ( $this -> rids );
$wrid = false ;
for ( $i = 0 ; $i < count ( $names ); $i ++ ) {
if ( $this -> attributes [ 'primaryGroupID' ][ 0 ] == $this -> rids [ $names [ $i ]]) {
2004-01-27 19:07:31 +00:00
$selected [] = $names [ $i ];
2003-12-20 21:42:52 +00:00
$wrid = true ;
}
2004-01-27 19:07:31 +00:00
else $options [] = $names [ $i ];
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
if ( $wrid ) $options [] = $_SESSION [ $_SESSION [ $this -> base ] -> cache ] -> getgrnam ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'gidNumber' ][ 0 ]);
else $selected [] = $_SESSION [ $_SESSION [ $this -> base ] -> cache ] -> getgrnam ( $_SESSION [ $this -> base ] -> module [ 'posixAccount' ] -> attributes [ 'gidNumber' ][ 0 ]);
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Windows group' ) ),
1 => array ( 'kind' => 'select' , 'name' => 'primaryGroupID' , 'options' => $options , 'options_selected' => $selected ),
2 => array ( 'kind' => 'help' , 'value' => 'primaryGroupID' ));
2003-12-21 14:52:23 +00:00
// Display if group SID should be mapped to a well kown SID
$wrid = false ;
if ( $this -> attributes [ 'rid' ][ 0 ] == " 500 " ) {
2004-01-27 19:07:31 +00:00
$selected [] = _ ( 'Administrator' );
2003-12-21 14:52:23 +00:00
$wrid = true ;
}
2004-01-27 19:07:31 +00:00
else $options [] = _ ( 'Administrator' );
2003-12-21 14:52:23 +00:00
if ( $this -> attributes [ 'rid' ][ 0 ] == " 501 " ) {
2004-01-27 19:07:31 +00:00
$selected [] = _ ( 'Guest' );
2003-12-21 14:52:23 +00:00
$wrid = true ;
}
2004-01-27 19:07:31 +00:00
else $options [] = _ ( 'Guest' );
if ( $wrid ) $options [] = _ ( 'Ordinary user' );
else $selected [] = _ ( 'Ordinary user' );
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Special user' ) ),
1 => array ( 'kind' => 'select' , 'name' => 'rid' , 'options' => $options , 'options_selected' => $selected ),
2 => array ( 'kind' => 'help' , 'value' => 'rid' ));
}
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Domain' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'domain' , 'size' => '20' , 'maxlength' => '255' , 'value' => $this -> attributes [ 'domain' ][ 0 ]),
2 => array ( 'kind' => 'help' , 'value' => 'domain' ));
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
2003-12-21 14:52:23 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'host' ) {
2004-01-27 19:07:31 +00:00
$return [] = array ( 0 => array ( 'kind' => 'input' , 'name' => 'acctFlagsW' , 'type' => 'hidden' , 'value' => 'true' ));
if ( ! $profile ) {
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Reset password' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'submit' , 'name' => 'ResetSambaPassword' ),
2 => array ( 'kind' => 'help' , 'value' => 'ResetSambaPassword' ));
}
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Domain' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'domain' , 'size' => '20' , 'maxlength' => '255' , 'value' => $this -> attributes [ 'domain' ][ 0 ]),
2 => array ( 'kind' => 'help' , 'value' => 'domain' ));
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
return $return ;
2003-12-20 21:42:52 +00:00
}
2003-12-30 15:36:30 +00:00
function display_html_delete ( $post ) {
return 0 ;
}
2003-12-20 21:42:52 +00:00
/* This function will create the html - page
* to show a page with all attributes .
* It will output a complete html - table
*/
function display_html_userWorkstations ( $post ) {
2004-01-27 19:07:31 +00:00
if ( $_SESSION [ $this -> base ] -> type == 'user' ) {
// Get list of all hosts.
$result = $_SESSION [ $_SESSION [ $this -> base ] -> cache ] -> get_cache ( 'uid' , 'sambaAccount' , 'host' );
if ( is_array ( $result )) {
foreach ( $result as $host ) $availableUserWorkstations [] = str_replace ( " $ " , '' , $host [ 0 ]);
sort ( $availableUserWorkstations , SORT_STRING );
$result = str_replace ( ' ' , '' , $this -> attributes [ 'userWorkstations' ][ 0 ]);
$userWorkstations = explode ( ',' , $result );
$availableUserWorkstations = array_delete ( $userWorkstations , $availableUserWorkstations );
2003-12-20 21:42:52 +00:00
}
2004-01-27 19:07:31 +00:00
$return [] = array ( 0 => array ( 'kind' => 'fieldset' , 'legend' => _ ( " Allowed workstations " ), 'value' =>
array ( 0 => array ( 0 => array ( 'kind' => 'fieldset' , 'td' => array ( 'valign' => 'top' ), 'legend' => _ ( " Allowed workstations " ), 'value' =>
array ( 0 => array ( 0 => array ( 'kind' => 'select' , 'name' => 'userWorkstations[]' , 'size' => '15' , 'multiple' , 'options' => $userWorkstations )))),
1 => array ( 'kind' => 'table' , 'value' => array ( 0 => array ( 0 => array ( 'kind' => 'input' , 'type' => 'submit' , 'name' => 'userWorkstations_add' ,
'value' => '<=' )), 1 => array ( 0 => array ( 'kind' => 'input' , 'type' => 'submit' , 'name' => 'userWorkstations_remove' , 'value' => '=>' )),
2 => array ( 0 => array ( 'kind' => 'help' , 'value' => 'userWorkstations' )))),
2 => array ( 'kind' => 'fieldset' , 'td' => array ( 'valign' => 'top' ), 'legend' => _ ( " Available workstations " ), 'value' =>
array ( 0 => array ( 0 => array ( 'kind' => 'select' , 'name' => 'availableUserWorkstations[]' , 'size' => '15' , 'multiple' , 'options' => $availableUserWorkstations ))))
))));
$return [] = array ( 0 => array ( 'kind' => 'input' , 'type' => 'submit' , 'value' => _ ( 'Back' ) ),
1 => array ( 'kind' => 'text' ),
2 => array ( 'kind' => 'text' ));
}
return $return ;
2003-12-20 21:42:52 +00:00
}
2004-04-03 14:47:33 +00:00
function get_profileOptions () {
2004-03-09 12:03:39 +00:00
$return = array ();
$return [] = array ( 0 => array ( 'kind' => 'text' , 'text' => _ ( 'Domain' ) ),
1 => array ( 'kind' => 'input' , 'type' => 'text' , 'name' => 'domain' , 'size' => '20' , 'maxlength' => '255' , 'value' => $this -> attributes [ 'domain' ][ 0 ]),
2 => array ( 'kind' => 'help' , 'value' => 'domain' ));
return $return ;
2003-12-20 21:42:52 +00:00
}
2004-03-14 17:33:05 +00:00
// checks if the values of a new or modified profile are valid
// $scope: the account type (user, group, host, ...)
// $options: a hash array (name => value) containing the options
function check_profileOptions ( $scope , $options ) {
return array ();
}
2004-03-09 12:03:39 +00:00
}
2003-12-20 21:42:52 +00:00
?>
